Function at 0x180036520
Capabilities:
Check os version

Disassembly:
mov byte [rsp + 8], cl
sub rsp, 0x1d8
mov rax, qword [0x1800891a0]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
cmp dword [0x18008dc4c], 0
jne 0x18003655e
movzx eax, byte [rsp + 0x1e0]
test eax, eax
jne 0x18003655e
lea rax, [0x1800d4db0]
jmp 0x180036dba
mov r8d, VarUI4FromDisp
xor edx, edx
lea rcx, [0x1800d4db0]
call fcn.18004e380
mov dword [0x1800d4db0], 0x11c
cmp qword [0x1800d3110], 0
je 0x180036599
lea rcx, [0x1800d4db0]
call qword [0x1800d3110]
mov dword [rsp + 0x50], eax
jmp 0x1800365a1
mov dword [rsp + 0x50], 0
cmp dword [rsp + 0x50], 0
je 0x180036c8c
cmp dword [0x1800d4db4], 6
ja 0x1800365cf
cmp dword [0x1800d4db4], 6
jne 0x180036c87
cmp dword [0x1800d4db8], 2
jb 0x180036c87
cmp qword [0x1800d3ab0], 0
je 0x1800365f0
mov r8b, 3
mov edx, 2
xor ecx, ecx
call qword [0x1800d3ab0]
mov qword [rsp + 0x70], rax
jmp 0x1800365f9
mov qword [rsp + 0x70], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x24], 1
xor eax, eax
mov word [rsp + 0x20], ax
mov eax, 6
mov word [rsp + 0x20], ax
jmp 0x18003662b
movzx eax, word [rsp + 0x20]
inc ax
mov word [rsp + 0x20], ax
movzx eax, word [rsp + 0x20]
cmp eax, 0x14
jge 0x180036783
mov r8d, 0x11c
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.18004e380
mov dword [rsp + 0xa0], 0x11c
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x6c], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
movsxd rdx, dword [rsp + 0x6c]
lea r8, [0x180088dc0]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180088dc0]
mov dword [rdx + rcx], eax
movzx eax, word [rsp + 0x20]
mov dword [rsp + 0xa4], eax
mov dword [rsp + 0xa8], 0
xor eax, eax
mov word [rsp + 0x1b4], ax
xor eax, eax
mov word [rsp + 0x1b6], ax
cmp qword [0x1800d2c60], 0
je 0x18003671b
mov r8, qword [rsp + 0x38]
mov edx, 2
lea rcx, [rsp + 0xa0]
call qword [0x1800d2c60]
mov dword [rsp + 0x4c], eax
jmp 0x180036723
mov dword [rsp + 0x4c], 0
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jne 0x180036734
jmp 0x180036783
mov eax, SafeArrayGetDim
mov word [rsp + 0x2c], ax
movsx rax, word [rsp + 0x2c]
lea rcx, [0x180088dc0]
cmp dword [rcx + rax*4], 1
jne 0x180036773
movsx rax, word [rsp + 0x2c]
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x2c]
lea rdx, [0x180088dc0]
mov dword [rdx + rcx*4], eax
movzx eax, word [rsp + 0x20]
mov dword [0x1800d4db4], eax
jmp 0x18003661e
cmp dword [rsp + 0x24], 0
je 0x1800367a3
movzx eax, word [rsp + 0x20]
mov r8d, eax
lea rdx, [0x18008dc50]
mov ecx, 3
call fcn.180041480
cmp qword [0x1800d3ab0], 0
je 0x1800367c7
mov r8b, 1
mov edx, 2
xor ecx, ecx
call qword [0x1800d3ab0]
mov qword [rsp + 0x98], rax
jmp 0x1800367d3
mov qword [rsp + 0x98], 0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x54], 1
mov eax, dword [rsp + 0x54]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x18003680f
xor r9d, r9d
lea r8, [0x18008b394]
lea rdx, [0x18008b39c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp qword [0x1800d3ab0], 0
je 0x180036836
mov r8b, 3
mov edx, 1
mov rcx, qword [rsp + 0x38]
call qword [0x1800d3ab0]
mov qword [rsp + 0x88], rax
jmp 0x180036842
mov qword [rsp + 0x88], 0
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x38], rax
xor eax, eax
mov word [rsp + 0x20], ax
jmp 0x180036865
movzx eax, word [rsp + 0x20]
inc ax
mov word [rsp + 0x20], ax
movzx eax, word [rsp + 0x20]
cmp eax, 0xa
jge 0x180036a2e
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x68], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
movsxd rdx, dword [rsp + 0x68]
lea r8, [0x180088dc0]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180088dc0]
mov dword [rdx + rcx], eax
mov r8d, 0x11c
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.18004e380
mov dword [rsp + 0xa0], 0x11c
mov eax, 8
mov word [rsp + 0x30], ax
movsx rax, word [rsp + 0x30]
lea rcx, [0x180088dc0]
cmp dword [rcx + rax*4], 1
jne 0x180036941
movsx rax, word [rsp + 0x30]
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x30]
lea rdx, [0x180088dc0]
mov dword [rdx + rcx*4], eax
mov eax, dword [0x1800d4db4]
mov dword [rsp + 0xa4], eax
movzx eax, word [rsp + 0x20]
mov dword [rsp + 0xa8], eax
xor eax, eax
mov word [rsp + 0x1b4], ax
xor eax, eax
mov word [rsp + 0x1b6], ax
cmp qword [0x1800d2c60], 0
je 0x180036996
mov r8, qword [rsp + 0x38]
mov edx, 3
lea rcx, [rsp + 0xa0]
call qword [0x1800d2c60]
mov dword [rsp + 0x44], eax
jmp 0x18003699e
mov dword [rsp + 0x44], 0
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jne 0x1800369af
jmp 0x180036a2e
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x60], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
movsxd rdx, dword [rsp + 0x60]
lea r8, [0x180088dc0]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180088dc0]
mov dword [rdx + rcx], eax
movzx eax, word [rsp + 0x20]
mov dword [0x1800d4db8], eax
jmp 0x180036858
cmp dword [rsp + 0x24], 0
je 0x180036a4e
movzx eax, word [rsp + 0x20]
mov r8d, eax
lea rdx, [0x18008dc90]
mov ecx, 3
call fcn.180041480
cmp qword [0x1800d3ab0], 0
je 0x180036a6f
mov r8b, 1
mov edx, 2
xor ecx, ecx
call qword [0x1800d3ab0]
mov qword [rsp + 0x78], rax
jmp 0x180036a78
mov qword [rsp + 0x78], 0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x38], rax
cmp qword [0x1800d3ab0], 0
je 0x180036aa9
mov r8b, 1
mov edx, 1
mov rcx, qword [rsp + 0x38]
call qword [0x1800d3ab0]
mov qword [rsp + 0x80], rax
jmp 0x180036ab5
mov qword [rsp + 0x80], 0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x38], rax
cmp qword [0x1800d3ab0], 0
je 0x180036ae9
mov r8b, 3
mov edx, 0x20
mov rcx, qword [rsp + 0x38]
call qword [0x1800d3ab0]
mov qword [rsp + 0x90], rax
jmp 0x180036af5
mov qword [rsp + 0x90], 0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x38], rax
xor eax, eax
mov word [rsp + 0x20], ax
jmp 0x180036b18
movzx eax, word [rsp + 0x20]
inc ax
mov word [rsp + 0x20], ax
movzx eax, word [rsp + 0x20]
cmp eax, 0xa
jge 0x180036c67
mov r8d, 0x11c
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.18004e380
mov dword [rsp + 0xa0], 0x11c
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
xor edx, edx
mov ecx, SafeArrayGetElement
div rcx
mov rax, rdx
mov dword [rsp + 0x58], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
movsxd rdx, dword [rsp + 0x58]
lea r8, [0x180088dc0]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx*4], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x180088dc0]
mov dword [rdx + rcx], eax
mov eax, dword [0x1800d4db4]
mov dword [rsp + 0xa4], eax
mov eax, dword [0x1800d4db8]
mov dword [rsp + 0xa8], eax
movzx eax, word [rsp + 0x20]
mov word [rsp + 0x1b4], ax
xor eax, eax
mov word [rsp + 0x1b6], ax
mov dword [rsp + 0x5c], 1
mov eax, dword [rsp + 0x5c]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x180036c15
xor r9d, r9d
lea r8, [0x18008b394]
lea rdx, [0x18008b39c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp qword [0x1800d2c60], 0
je 0x180036c3d
mov r8, qword [rsp + 0x38]
mov edx, 0x23
lea rcx, [rsp + 0xa0]
call qword [0x1800d2c60]
mov dword [rsp + 0x48], eax
jmp 0x180036c45
mov dword [rsp + 0x48], 0
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jne 0x180036c56
jmp 0x180036c67
movzx eax, word [rsp + 0x20]
mov word [0x1800d4ec4], ax
jmp 0x180036b0b
cmp dword [rsp + 0x24], 0
je 0x180036c87
movzx eax, word [rsp + 0x20]
mov r8d, eax
lea rdx, [0x18008dcc8]
mov ecx, 3
call fcn.180041480
jmp 0x180036da9
mov eax, SafeArrayGetDim
mov word [rsp + 0x34], ax
movsx rax, word [rsp + 0x34]
lea rcx, [0x180088dc0]
cmp dword [rcx + rax*4], 1
jne 0x180036ccb
movsx rax, word [rsp + 0x34]
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x34]
lea rdx, [0x180088dc0]
mov dword [rdx + rcx*4], eax
call qword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
and rax, 0xffff
movzx eax, ax
and rax, 0xff
movzx eax, al
mov dword [0x1800d4db4], eax
mov eax, dword [rsp + 0x40]
and rax, 0xffff
movzx eax, ax
shr rax, 8
and rax, 0xff
movzx eax, al
mov dword [0x1800d4db8], eax
mov eax, reloc.OLEAUT32.dll_SafeArrayDestroy
mov word [rsp + 0x28], ax
movsx rax, word [rsp + 0x28]
lea rcx, [0x180088dc0]
cmp dword [rcx + rax*4], 1
jne 0x180036d50
movsx rax, word [rsp + 0x28]
lea rcx, [0x180088dc0]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x28]
lea rdx, [0x180088dc0]
mov dword [rdx + rcx*4], eax
mov dword [rsp + 0x64], 1
mov eax, dword [rsp + 0x64]
cdq
sub eax, edx
sar eax, 1
cmp eax, 0x32
jle 0x180036d7f
xor r9d, r9d
lea r8, [0x18008b394]
lea rdx, [0x18008b39c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [rsp + 0x40], 0x80000000
jae 0x180036da0
mov eax, dword [rsp + 0x40]
shr rax, 0x10
and rax, 0xffff
movzx eax, ax
mov dword [0x1800d4dbc], eax
xor eax, eax
mov word [0x1800d4ec4], ax
mov dword [0x18008dc4c], 0
lea rax, [0x1800d4db0]
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.18004e350
add rsp, 0x1d8
ret