Function at 0x1400c1640
Capabilities:
Check os version
Get geographical location

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x238
mov qword [rsp + 0xa8], 0xfffffffffffffffe
mov rax, qword [0x1401f3f10]
xor rax, rsp
mov qword [rsp + 0x220], rax
mov dword [rsp + 0x40], 0
lea rdx, str.MU::USI:BSI
lea rcx, [rsp + 0xc8]
call fcn.140033bc0
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov rax, qword [rsp + 0x240]
add rax, 0x78
xor edx, edx
mov rcx, rax
call fcn.1400c38d0
mov rax, qword [rax]
mov qword [rsp + 0xa0], rax
lea r8, str._HWID_
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0xa0]
call fcn.1400439a0
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
call fcn.140030730
mov rdx, rax
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc120u.dll_Ordinal_286]
nop
lea rcx, [rsp + 0xb0]
call fcn.140030070
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov edx, 0xff
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_4855]
mov r9d, 0xff
mov r8, rax
mov edx, VarDateFromDisp
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov dword [rsp + 0x88], eax
mov edx, 0xffffffff
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_12110]
mov rdx, qword [0x1401f1008]
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_286]
nop
mov edx, 0xbb8
mov rcx, qword [rsp + 0x240]
call fcn.1400c1f20
mov rax, qword [rsp + 0x240]
movzx eax, byte [rax + 0x91]
test eax, eax
je 0x1400c17a6
mov rdx, qword [0x1401f1010]
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_1498]
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_296]
nop
mov dword [rsp + 0x100], Ordinal_285
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x1400c1811
cmp dword [rsp + 0x104], 5
jb 0x1400c1811
mov eax, dword [rsp + 0x110]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + reloc.mfc120u.dll_Ordinal_268]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x108]
mov r8d, dword [rsp + 0x104]
lea rdx, str._d._d._d._d
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
lea rcx, [rsp + 0x90]
call fcn.1400aa690
nop
mov rax, qword [rsp + 0x240]
mov rcx, qword [rax + 0x28]
call fcn.140037740
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400aaea0
lea rcx, [rsp + 0x90]
call fcn.1400aac60
mov rcx, qword [rsp + 0x240]
mov byte [rcx + 0x20], al
mov rax, qword [rsp + 0x240]
movzx eax, byte [rax + 0x20]
test eax, eax
je 0x1400c1876
lea rax, [0x14016a8c8]
mov qword [rsp + 0x70], rax
jmp 0x1400c1882
lea rax, [0x14016a8d8]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
lea rdx, str._systeminfo_version_1__online__s__os_version__s__hwfpid__s__countrycode__s__autoupdate__s_____n
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_4612]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x248]
call qword [sym.imp.mfc120u.dll_Ordinal_280]
mov eax, dword [rsp + 0x40]
or eax, 1
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x90]
call fcn.1400aa6c0
nop
lea rcx, [rsp + 0x50]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x58]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x68]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.mfc120u.dll_Ordinal_1030]
nop
lea rcx, [rsp + 0xc8]
call fcn.140033c20
mov rax, qword [rsp + 0x248]
mov rcx, qword [rsp + 0x220]
xor rcx, rsp
call fcn.14010f170
add rsp, 0x238
ret