Function at 0x14000bd10
Capabilities:
Get system information on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x188
mov rsi, rcx
lea rcx, [0x1400b5ce0]
call sub.kernel32.dll_GetModuleHandleA
test rax, rax
je 0x14000bdcd
lea rdx, str.RtlGetVersion
mov rcx, rax
call sub.kernel32.dll_GetProcAddress
mov rdi, rax
lea rcx, [rsp + 0x64]
mov r8d, 0x118
xor edx, edx
call fcn.140091ad0
mov dword [rsp + 0x60], 0x11c
lea rcx, [rsp + 0x60]
mov rax, rdi
call qword [0x1400b23b8]
test eax, eax
jne 0x14000be7d
mov r13d, dword [rsp + 0x64]
mov r12d, dword [rsp + 0x68]
mov r15d, dword [rsp + 0x6c]
movzx ebx, byte [rsp + 0x17a]
mov ebp, 1
cmp r13, 5
je 0x14000beb9
cmp r13d, 6
je 0x14000bee7
cmp r13d, 0xa
jne 0x14000bf2c
test r12d, r12d
je 0x14000bf33
mov r13d, 0xa
xor ebx, ebx
jmp 0x14000be81
mov rax, qword [0x14010ab88]
mov rax, qword [rax]
test rax, rax
je 0x14000be7d
lea rdx, [0x1400b5ce0]
lea rdi, [rsp + 0x40]
mov r8d, 6
mov rcx, rdi
call fcn.140088620
mov qword [rsp + 0x30], rdi
lea rax, [0x14000c1b0]
mov qword [rsp + 0x38], rax
lea rax, str.S_v_
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x30]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea r8, str.os_info::imp::winapi
lea rcx, [rsp + 0x60]
mov edx, 1
xor r9d, r9d
call fcn.140050d50
cmp qword [rsp + 0x40], 0
je 0x14000be7d
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x14000be7d
mov rcx, qword [rsp + 0x50]
mov r8d, 1
call fcn.140009860
xor ebx, ebx
xor ebp, ebp
mov word [rsi + 0x38], 0x216
mov qword [rsi], rbp
mov qword [rsi + 8], r13
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r15
mov qword [rsi + 0x20], rdi
mov qword [rsi + 0x28], rbx
mov qword [rsi + 0x30], rdi
mov rax, rsi
add rsp, 0x188
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp r12d, 2
je 0x14000bf57
cmp r12d, 1
je 0x14000bf84
test r12d, r12d
jne 0x14000bf77
lea r14, [0x1400b5d3d]
mov edi, 0xc
jmp 0x14000c07c
cmp r12d, 3
ja case.default.0x14000bf02
mov eax, r12d
lea rcx, [0x14000c0b8]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
cmp bl, 1
mov eax, 0xd
mov edi, 0x13
cmove rdi, rax
lea rax, [0x1400b5d66]
lea r14, [0x1400b5d53]
cmove r14, rax
jmp 0x14000c07c
xor ebx, ebx
jmp 0x14000be81
xor eax, eax
cmp bl, 1
setne al
lea rdi, [rax + rax*8 + 0xa]
lea rax, [0x1400b5de2]
lea r14, [0x1400b5dcf]
cmove r14, rax
jmp 0x14000c07c
movzx edi, word [rsp + 0x178]
mov ecx, 0x59
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x14000c017
mov r12d, 2
xor ebx, ebx
mov r13d, 5
jmp 0x14000be81
lea r14, [0x1400b5d49]
mov edi, 0xa
jmp 0x14000c07c
mov r13d, 6
xor ebx, ebx
jmp 0x14000be81
cmp bl, 1
mov eax, 9
mov edi, 0x16
cmove rdi, rax
lea rax, [0x1400b5d89]
lea r14, [0x1400b5d73]
cmove r14, rax
jmp 0x14000c07c
cmp bl, 1
mov eax, 9
mov edi, 0x13
cmove rdi, rax
lea rax, [0x1400b5da5]
lea r14, [0x1400b5d92]
cmove r14, rax
jmp 0x14000c07c
cmp bl, 1
mov eax, 0xb
mov edi, 0x16
cmove rdi, rax
lea rax, [0x1400b5dc4]
lea r14, [0x1400b5dae]
cmove r14, rax
jmp 0x14000c07c
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call sub.kernel32.dll_GetSystemInfo
test di, di
js 0x14000c070
cmp bl, 1
sete al
cmp word [rsp + 0x60], 9
sete cl
and cl, al
movzx eax, cl
mov rdi, rax
shl rdi, 4
add rdi, 0x13
lea rcx, [0x1400b5d07]
lea r14, [0x1400b5d2a]
test al, al
cmovne r14, rcx
jmp 0x14000c07c
lea r14, str.Windows_Home_ServerWindows_XP_Professional_x64_EditionWindows_Server_2003Windows_2000Windows_XPWindows_Server_2008Windows_VistaWindows_Server_2008_R2Windows_7Windows_Server_2012Windows_8Windows_Server_2012_R2Windows_8.1Windows_Server_2016Windows_10C:Users_agent.cargo_registry_srcindex.crates.io_6f17d22bba15001fos_info_2.0.8_srcwindowswinapi.rsGetModuleHandleA___failed
mov edi, 0x13
mov ebp, 1
mov edx, 1
mov rcx, rdi
call fcn.140009850
test rax, rax
je 0x14000c0a9
mov rbx, rax
mov rcx, rax
mov rdx, r14
mov r8, rdi
call fcn.140091340
jmp 0x14000be81
mov edx, 1
mov rcx, rdi
call fcn.1400b0b10
ud2