Function at 0x1800362a0
Capabilities:
Check os version

Disassembly:
sub rsp, 0x188
mov rax, qword [0x1800c34c8]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov word [rsp + 0x2c], ax
cmp dword [0x1800c57e0], 0
je 0x1800362d7
mov eax, dword [0x1800c57e0]
jmp 0x180036603
mov dword [0x1800c57e0], 0
mov cl, 1
call fcn.180036620
movzx eax, al
test eax, eax
je 0x1800362f9
mov eax, 0x40
mov word [rsp + 0x2c], ax
mov dword [rsp + 0x24], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
je 0x180036382
lea rdx, str.RtlGetNtVersionNumbers
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x18003636a
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x24]
call qword [rsp + gethostname]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x180036380
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x1800c57e0]
jmp 0x180036603
jmp 0x18003638d
mov eax, dword [0x1800c57e0]
jmp 0x180036603
cmp dword [rsp + 0x24], 4
jne 0x1800363b8
cmp dword [rsp + 0x28], 0
je 0x1800363a9
cmp dword [rsp + 0x28], 0xa
je 0x1800363a9
cmp dword [rsp + 0x28], 0x5a
jne 0x1800363b3
mov dword [0x1800c57e0], 1
jmp 0x1800365fd
cmp dword [rsp + 0x24], 5
jne 0x18003643b
cmp dword [rsp + 0x28], 0
jne 0x1800363d2
mov dword [0x1800c57e0], 2
jmp 0x180036436
cmp dword [rsp + 0x28], 1
jne 0x180036405
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x1800363ef
mov dword [0x1800c57e0], 4
jmp 0x180036403
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x180036403
mov dword [0x1800c57e0], 8
jmp 0x180036436
cmp dword [rsp + 0x28], 2
jne 0x180036436
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x180036422
mov dword [0x1800c57e0], 0x10
jmp 0x180036436
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x180036436
mov dword [0x1800c57e0], 0x20
jmp 0x1800365fd
cmp dword [rsp + 0x24], 6
jne 0x1800364de
cmp dword [rsp + 0x28], 0
jne 0x1800364de
mov r8d, 0x11c
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.18003bb80
mov dword [rsp + 0x50], 0x11c
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
movzx eax, byte [rsp + 0x16a]
cmp eax, 3
jne 0x1800364af
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x180036499
mov dword [0x1800c57e0], 0x100
jmp 0x1800364ad
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x1800364ad
mov dword [0x1800c57e0], 0x200
jmp 0x1800364d9
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x1800364c5
mov dword [0x1800c57e0], 0x40
jmp 0x1800364d9
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x1800364d9
mov dword [0x1800c57e0], 0x80
jmp 0x1800365fd
cmp dword [rsp + 0x24], 6
jne 0x18003651b
cmp dword [rsp + 0x28], 1
jne 0x18003651b
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x180036502
mov dword [0x1800c57e0], 0x400
jmp 0x180036516
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x180036516
mov dword [0x1800c57e0], 0x800
jmp 0x1800365fd
cmp dword [rsp + 0x24], 6
jne 0x180036558
cmp dword [rsp + 0x28], 2
jne 0x180036558
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x18003653f
mov dword [0x1800c57e0], 0x1000
jmp 0x180036553
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x180036553
mov dword [0x1800c57e0], 0x2000
jmp 0x1800365fd
cmp dword [rsp + 0x24], 6
jne 0x180036592
cmp dword [rsp + 0x28], 3
jne 0x180036592
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x18003657c
mov dword [0x1800c57e0], 0x4000
jmp 0x180036590
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x180036590
mov dword [0x1800c57e0], 0x8000
jmp 0x1800365fd
cmp dword [rsp + 0x24], 6
jne 0x1800365cc
cmp dword [rsp + 0x28], 4
jb 0x1800365cc
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x1800365b6
mov dword [0x1800c57e0], 0x10000
jmp 0x1800365ca
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x1800365ca
mov dword [0x1800c57e0], 0x20000
jmp 0x1800365fd
cmp dword [rsp + 0x24], 6
jbe 0x1800365fd
movzx eax, word [rsp + 0x2c]
cmp eax, 0x20
jne 0x1800365e9
mov dword [0x1800c57e0], 0x10000
jmp 0x1800365fd
movzx eax, word [rsp + 0x2c]
cmp eax, 0x40
jne 0x1800365fd
mov dword [0x1800c57e0], 0x20000
mov eax, dword [0x1800c57e0]
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.18003c690
add rsp, 0x188
ret