Function at 0x14000dce0
Capabilities:
Check os version

Disassembly:
sub rsp, 0x158
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x140], rax
test byte [reloc.OLEAUT32.dll_SysReAllocString], 1
jne 0x14000dfe7
lock bts qword [reloc.OLEAUT32.dll_SysReAllocString], 0x1f
jae 0x14000dd25
lea rcx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.14000ab20
nop
jmp 0x14000dfe7
xor edx, edx
lea rcx, [rsp + 0x24]
mov r8d, 0x118
call fcn.14001ae80
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x11c
call qword [sym.imp.ntdll.dll_RtlGetVersion]
test eax, eax
js 0x14000df77
mov eax, dword [rsp + 0x24]
cmp eax, 5
jne 0x14000dd9f
mov eax, dword ds:[rsp + 0x28]
test eax, eax
jne 0x14000dd73
mov dword [0x14003d84c], 0x500
jmp 0x14000df77
cmp eax, 1
jne 0x14000dd87
mov dword [0x14003d84c], 0x501
jmp 0x14000df77
cmp eax, 2
jne 0x14000df6d
mov dword [0x14003d84c], 0x502
jmp 0x14000df77
nop
cmp eax, 6
jne 0x14000de18
mov eax, dword [rsp + 0x28]
test eax, eax
jne 0x14000ddbc
mov dword [0x14003d84c], 0x600
jmp 0x14000df77
nop dword [rax]
cmp eax, 1
jne 0x14000ddd4
mov dword [0x14003d84c], 0x601
jmp 0x14000df77
cmp eax, 2
jne 0x14000dde8
mov dword [0x14003d84c], 0x602
jmp 0x14000df77
cmp eax, 3
jne 0x14000ddfc
mov dword [0x14003d84c], 0x603
jmp 0x14000df77
nop dword [rax]
cmp eax, 4
jne 0x14000df6d
mov dword [0x14003d84c], 0xa00
jmp 0x14000df77
nop dword [rax + rax]
cmp eax, 0xa
jne 0x14000df6d
cmp dword [rsp + 0x28], 0
jne 0x14000df6d
mov eax, dword [rsp + 0x2c]
cmp eax, 0x55f0
jb 0x14000de4e
mov dword [0x14003d84c], 0xb00
jmp 0x14000df77
cmp eax, 0x4f7c
jb 0x14000de65
mov dword [0x14003d84c], 0xa0d
nop
jmp 0x14000df77
cmp eax, 0x4a64
jb 0x14000de7b
mov dword [0x14003d84c], 0xa0c
jmp 0x14000df77
nop dword [rax + rax]
cmp eax, 0x4a63
jb 0x14000de96
mov dword [0x14003d84c], 0xa0b
jmp 0x14000df77
cmp eax, 0x4a62
jb 0x14000deac
mov dword [0x14003d84c], 0xa0a
jmp 0x14000df77
cmp eax, 0x4a61
jb 0x14000dec5
mov dword [0x14003d84c], 0xa09
nop dword [rax]
jmp 0x14000df77
cmp eax, 0x47bb
jb 0x14000dedb
mov dword [0x14003d84c], 0xa08
jmp 0x14000df77
nop dword [rax + rax]
cmp eax, 0x47ba
jb 0x14000def6
mov dword [0x14003d84c], 0xa07
jmp 0x14000df77
cmp eax, 0x4563
jb 0x14000df09
mov dword [0x14003d84c], 0xa06
jmp 0x14000df77
cmp eax, 0x42ee
jb 0x14000df1c
mov dword [0x14003d84c], 0xa05
jmp 0x14000df77
nop dword [rax]
cmp eax, 0x3fab
jb 0x14000df33
mov dword [0x14003d84c], 0xa04
jmp 0x14000df77
cmp eax, 0x3ad7
jb 0x14000df46
mov dword [0x14003d84c], 0xa03
jmp 0x14000df77
cmp eax, 0x3839
jb 0x14000df59
mov dword [0x14003d84c], 0xa02
jmp 0x14000df77
cmp eax, 0x295a
sbb eax, eax
add eax, 0xa01
mov dword [0x14003d84c], eax
jmp 0x14000df77
mov dword [0x14003d84c], 0xffffffff
lock bts qword [reloc.OLEAUT32.dll_SysReAllocString], 0
jb 0x14000dfe7
mov qword [rsp + 0x150], rbx
mov rbx, qword [0x14003bb78]
test rbx, rbx
je 0x14000dfa6
xor edx, edx
mov rcx, rbx
call qword [sym.imp.ntdll.dll_NtSetEvent]
mov rax, 0xfffffffffffffffe
lock xadd qword [0x14003bb70], rax
shr rax, 1
and eax, 0x7fff
cmp rax, 1
jne 0x14000dfdf
test rbx, rbx
je 0x14000dfdf
mov rcx, rbx
call qword [sym.imp.ntdll.dll_NtClose]
mov qword [0x14003bb78], 0
mov rbx, qword [rsp + 0x150]
mov eax, dword [0x14003d84c]
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.140019f40
add rsp, 0x158
ret