Function at 0x19e705f7
Capabilities:
Check os version

Disassembly:
push 0x124
mov eax, 0x19f17978
call fcn.19e70fdc
cmp dword [ebp + 0xc], 1
jne 0x19e70833
push 0x19e619a8
call fcn.19e70304
test eax, eax
jne 0x19e70625
xor eax, eax
jmp 0x19e70935
mov eax, dword [0x19f20ef0]
or eax, dword [0x19f20ef4]
push 0
pop ebx
jne 0x19e70736
cmp byte [0x19f20ee0], bl
jne 0x19e706d5
lea eax, [ebp - 0x124]
push eax
mov dword [ebp - 0x124], 0x114
call dword [sym.imp.API_MS_Win_Core_SysInfo_L1_1_0.dll_GetVersionExW]
cmp eax, ebx
je 0x19e70673
cmp dword [ebp - 0x120], 6
setb al
mov byte [0x19f20ee1], al
cmp al, bl
jne 0x19e706ce
push 0x19e6193c
call dword [sym.imp.API_MS_Win_Core_LibraryLoader_L1_1_0.dll_GetModuleHandleW]
mov edi, eax
cmp edi, ebx
je 0x19e706c7
mov esi, dword [sym.imp.API_MS_Win_Core_LibraryLoader_L1_1_0.dll_GetProcAddress]
push 0x19e61930
push edi
call esi
mov dword [0x19f20ee4], eax
cmp eax, ebx
je 0x19e706c7
push 0x19e61920
push edi
call esi
mov dword [section..data], eax
cmp eax, ebx
je 0x19e706bd
push 0x19e61910
push edi
call esi
mov dword [0x19f20ee8], eax
cmp eax, ebx
jne 0x19e706ce
mov dword [section..data], 0x19e70489
mov byte [0x19f20ee1], 1
mov byte [0x19f20ee0], 1
cmp byte [0x19f20ee1], bl
jne 0x19e706f9
push 0x19f20ef0
push 0x19f20ef8
push 0x19e70227
push 0x19e6146c
call dword [section..data]
jmp 0x19e70736
mov ecx, 0x19f20ef8
push ecx
push ebx
mov eax, ecx
cdq
push ebx
mov dword [0x19f20ef4], edx
lea edx, [ebp - 0x12c]
push edx
push 1
mov dword [0x19f20ef0], eax
mov eax, 0x19e6146c
push eax
push ecx
push 0x19e701b5
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], ebx
call dword [sym.imp.ntdll.dll_EtwRegisterTraceGuidsW]
mov esi, 0x321
mov edi, 0x19e6145c
cmp dword [0x19f20f1c], ebx
je 0x19e7076d
mov al, byte [0x19f20f20]
cmp al, 4
jae 0x19e70755
cmp al, bl
jne 0x19e7076d
push esi
push edi
push 0x19e617f0
push dword [0x19f20ef4]
push dword [0x19f20ef0]
call fcn.19e7027e
mov eax, dword [ebp + 8]
push 4
mov dword [0x19f2131c], eax
mov dword [0x19f21320], eax
call fcn.19e70a71
pop ecx
cmp eax, ebx
je 0x19e7078e
mov dword [eax], fcn.19f0785a
jmp 0x19e70790
xor eax, eax
push 0x1c
mov dword [0x19f21318], eax
call fcn.19e70a71
pop ecx
mov ecx, eax
mov dword [ebp - 0x130], ecx
mov dword [ebp - 4], ebx
cmp ecx, ebx
je 0x19e707b3
call fcn.19e75e57
jmp 0x19e707b5
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [0x19f21314], eax
cmp dword [0x19f21318], ebx
je 0x19e7061e
cmp eax, ebx
je 0x19e7061e
call fcn.19e71720
test eax, eax
je 0x19e7061e
call fcn.19e7add5
test eax, eax
je 0x19e7061e
call fcn.19e7347f
test eax, eax
je 0x19e7061e
cmp dword [0x19f20f1c], ebx
je 0x19e70932
mov al, byte [0x19f20f20]
cmp al, 4
jae 0x19e70816
cmp al, bl
jne 0x19e70932
push esi
push edi
push 0x19e61800
push dword [0x19f20ef4]
push dword [0x19f20ef0]
call fcn.19e7027e
jmp 0x19e70932
xor ebx, ebx
cmp dword [ebp + 0xc], ebx
jne 0x19e70932
mov edi, 0x19e6145c
mov esi, 0x322
cmp dword [0x19f20f1c], ebx
je 0x19e70875
mov al, byte [0x19f20f20]
cmp al, 4
jae 0x19e7085d
cmp al, bl
jne 0x19e70875
push esi
push edi
push 0x19e61810
push dword [0x19f20ef4]
push dword [0x19f20ef0]
call fcn.19e7027e
mov ecx, dword [0x19f21318]
cmp ecx, ebx
je 0x19e70886
push 1
call fcn.19e7043c
mov ecx, dword [0x19f21314]
mov dword [0x19f21318], ebx
cmp ecx, ebx
je 0x19e7089d
push 1
call fcn.19e70463
mov dword [0x19f21314], ebx
call fcn.19e71c03
call fcn.19e7175c
call fcn.19e7b0a1
cmp dword [0x19f20f1c], ebx
je 0x19e708df
mov al, byte [0x19f20f20]
cmp al, 4
jae 0x19e708c7
cmp al, bl
jne 0x19e708df
push esi
push edi
push 0x19e61820
push dword [0x19f20ef4]
push dword [0x19f20ef0]
call fcn.19e7027e
cmp byte [0x19f20ee0], bl
je 0x19e70932
mov esi, dword [0x19f20ef0]
mov eax, dword [0x19f20ef4]
mov ecx, esi
or ecx, eax
je 0x19e70932
cmp byte [0x19f20ee1], bl
jne 0x19e7090a
push eax
push esi
call dword [0x19f20ee8]
jmp 0x19e70926
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.ntdll.dll_EtwUnregisterTraceGuids]
mov dword [esi + 0x20], ebx
mov byte [esi + 0x28], bl
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [0x19f20ef0], ebx
mov dword [0x19f20ef4], ebx
xor eax, eax
inc eax
call fcn.19e7106e
ret 0xc