Function at 0x14011df30
Capabilities:
Check os version

Disassembly:
test rcx, rcx
je 0x14011e2c7
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x670
mov rax, qword [0x140197680]
xor rax, rsp
mov qword [rsp + CDumpContext::operator<<], rax
mov rdi, rcx
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x14011df82
call fcn.14011cbd0
test eax, eax
je 0x14011df82
call fcn.14011cb60
test eax, eax
jne 0x14011e2e7
call fcn.14011cb60
test eax, eax
je 0x14011e2e7
call fcn.14011cbd0
test eax, eax
je 0x14011e2e7
mov r9d, SerializeElements<ATL::CStringT<wchar_t,StrTraitMFC_DLL<wchar_t,ATL::ChTraitsCRT<wchar_t>
mov dword [rsp + 0x28], SerializeElements<ATL::CStringT<wchar_t,StrTraitMFC_DLL<wchar_t,ATL::ChTraitsCRT<wchar_t>
lea rax, [rsp + 0x450]
mov edx, r9d
lea r8, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x240]
call fcn.14011ba10
test eax, eax
jne 0x14011e17d
mov edx, SerializeElements<ATL::CStringT<wchar_t,StrTraitMFC_DLL<wchar_t,ATL::ChTraitsCRT<wchar_t>
lea rcx, [rsp + 0x240]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcslwr_s]
test eax, eax
lea rcx, [rsp + 0x240]
lea rdx, str.luna.msstyles
cmovne rcx, rsi
call sub.VCRUNTIME140.dll_wcsstr
test rax, rax
je 0x14011e17d
mov edx, SerializeElements<ATL::CStringT<wchar_t,StrTraitMFC_DLL<wchar_t,ATL::ChTraitsCRT<wchar_t>
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcslwr_s]
lea rdx, [rsp + 0x30]
mov rcx, rsi
test eax, eax
lea r8, str.normalcolor
cmovne rdx, rsi
nop
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
jne 0x14011e071
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x14011e071
add rcx, 2
cmp rcx, 0xc
jne 0x14011e030
mov r10d, 0xe4ae88
mov r9d, 0xfeebdc
mov dword [0x1401a28c8], r10d
mov dword [0x1401a28cc], r9d
jmp 0x14011e1a9
mov edx, SerializeElements<ATL::CStringT<wchar_t,StrTraitMFC_DLL<wchar_t,ATL::ChTraitsCRT<wchar_t>
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcslwr_s]
lea rdx, [rsp + 0x30]
mov rcx, rsi
test eax, eax
lea r8, str.homestead
cmovne rdx, rsi
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
jne 0x14011e0e1
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x14011e0e1
add rcx, 2
cmp rcx, 0xa
jne 0x14011e0a0
mov r10d, 0x95cabb
mov r9d, 0xcaede6
mov dword [0x1401a28c8], r10d
mov dword [0x1401a28cc], r9d
jmp 0x14011e1a9
mov edx, SerializeElements<ATL::CStringT<wchar_t,StrTraitMFC_DLL<wchar_t,ATL::ChTraitsCRT<wchar_t>
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcslwr_s]
lea rdx, [rsp + 0x30]
mov rcx, 0xffffffffffffffff
test eax, eax
lea r8, str.metallic
cmovne rdx, rsi
nop word [rax + rax]
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x14011e136
add rcx, 2
cmp rcx, 9
je 0x14011e2c8
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x14011e110
mov dword [0x1401a28c8], 0xe4ae88
mov dword [0x1401a28cc], 0xfeebdc
mov dword [0x1401a28d0], 0xf5be9e
mov dword [0x1401a28d4], 0x5fb4ff
mov dword [0x1401a28d8], 0x89af7
mov dword [0x1401a28dc], 0xbdf0ff
mov qword [0x1401a28e0], 0xc66931
mov ecx, 0x1c
call qword [sym.imp.USER32.dll_GetSysColor]
mov ecx, 0x13
mov dword [0x1401a28c8], eax
call qword [sym.imp.USER32.dll_GetSysColor]
mov r10d, dword [0x1401a28c8]
mov r9d, eax
mov dword [0x1401a28cc], eax
movzx ecx, r9w
mov eax, r9d
shr eax, 0x10
movzx edx, al
mov eax, r10d
shr eax, 0x10
movzx eax, al
add edx, eax
shr ecx, 8
shl edx, 0xf
and edx, 0xffff0000
movzx r8d, r10w
shr r8d, 8
add r8d, ecx
movzx eax, r9b
shr r8d, 1
mov rcx, rdi
shl r8d, 8
or r8d, edx
movzx edx, r10b
add edx, eax
shr edx, 1
or r8d, edx
lea rdx, str.TASKBAND
mov dword [0x1401a28d0], r8d
call fcn.14011cda0
mov rbx, rax
test rax, rax
je 0x14011e2e7
xor r8d, r8d
lea rax, [0x1401a28d4]
mov r9d, CFrameImpl::DeactivateMenu
mov qword [rsp + 0x20], rax
mov rcx, rbx
lea edx, [r8 + 2]
call fcn.14011bdb0
mov ecx, dword [0x1401a28d4]
mov edx, ecx
movsd xmm2, qword [0x14015fb48]
call fcn.14011d3f0
xor r8d, r8d
mov dword [0x1401a28d8], eax
lea rax, [0x1401a28e0]
mov dword [0x1401a28dc], 0xbdf0ff
mov r9d, DDX_Text
mov qword [rsp + 0x20], rax
mov rcx, rbx
lea edx, [r8 + 2]
call fcn.14011bdb0
xor r8d, r8d
lea rax, [0x1401a28e4]
mov r9d, DDX_Text
mov qword [rsp + 0x20], rax
mov rcx, rbx
lea edx, [r8 + 2]
call fcn.14011bdb0
mov rcx, rbx
call fcn.14011b5b0
mov rcx, qword [rsp + 0x660]
xor rcx, rsp
call fcn.14003c6a0
lea r11, [rsp + 0x670]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
mov r10d, 0xbfa5a6
mov r9d, 0xf6efee
mov dword [0x1401a28c8], r10d
mov dword [0x1401a28cc], r9d
jmp 0x14011e1a9
mov dword [0x1401a28c8], 0xe4ae88
mov dword [0x1401a28cc], 0xfeebdc
mov dword [0x1401a28d0], 0xf5be9e
mov dword [0x1401a28d4], 0x5fb4ff
mov dword [0x1401a28d8], 0x89af7
mov dword [0x1401a28dc], 0xbdf0ff
mov qword [0x1401a28e0], 0xc66931
jmp 0x14011e2a3