Function at 0x14000a2c0
Capabilities:
Check os version

Disassembly:
jmp 0x14000a2c0
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x150
mov rax, qword [0x140058188]
xor rax, rsp
mov qword [rsp + 0x140], rax
xor ebp, ebp
lea r12, [0x14004bebc]
mov r14, rcx
mov qword [rcx], rbp
mov qword [rcx + 8], rbp
mov qword [rcx + 0x10], rbp
mov qword [rcx + 0x18], rbp
mov qword [rcx + 0x20], rbp
mov qword [rcx + 0x28], rbp
mov qword [rcx + 0x30], rbp
mov qword [rcx + 0x38], rbp
mov qword [rcx + 0x40], rbp
mov qword [rcx + 0x48], rbp
mov r13, r12
lea rbx, [rcx + 0xa70]
sub r13, rcx
mov dword [rcx + 0x50], ebp
mov dword [rcx + 0x54], 1
mov dword [rcx + 0x58], ebp
mov dword [rcx + 0x5c], ebp
mov dword [rcx + 0x60], ebp
lea r8, [r13 - 0x4d70]
lea r9, [r13 - 0x6c]
mov dword [rcx + 0x64], ebp
mov dword [rcx + 0x68], ebp
lea rdi, [rcx + 0x4cf0]
lea r10, [rcx + 0x4d70]
lea r11, [rcx + 0x6c]
lea esi, [rbp + 0x20]
nop word [rax + rax]
mov edx, 0x28
mov rcx, r11
nop dword [rax + rax]
lea rax, [rdx + 0x7fffffd6]
test rax, rax
je 0x14000a3a5
movzx eax, word [r9 + rcx]
test ax, ax
je 0x14000a3a5
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a380
jmp 0x14000a3aa
test rdx, rdx
jne 0x14000a3ae
sub rcx, 2
mov word [rcx], bp
mov edx, 0x104
lea rcx, [r10 - 0x4180]
nop dword [rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14000a3e9
movzx eax, word [r8 + rcx + 0x4180]
test ax, ax
je 0x14000a3e9
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a3c0
jmp 0x14000a3ee
test rdx, rdx
jne 0x14000a3f2
sub rcx, 2
mov word [rcx], bp
mov edx, 0x104
mov rcx, r10
nop dword [rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14000a425
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14000a425
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a400
jmp 0x14000a42a
test rdx, rdx
jne 0x14000a42e
sub rcx, 2
mov word [rcx], bp
mov dword [rdi], ebp
mov qword [rbx], rbp
add rbx, 8
add r11, 0x50
add r10, 0x208
sub r9, 0x50
sub r8, 0x208
add rdi, 4
sub rsi, 1
jne 0x14000a370
mov edi, 0x64
mov dword [r14 + 0x8ef0], ebp
lea r11, [r14 + 0x10bf4]
lea r10, [r14 + 0x110a8]
lea r9, [r14 + 0xcd74]
lea r8, [r13 - 0xcd74]
mov rbx, rdi
nop dword [rax]
mov edx, 0x50
lea rcx, [r9 - 0x3e80]
nop dword [rax]
lea rax, [rdx + 0x7fffffae]
test rax, rax
je 0x14000a4c9
movzx eax, word [r8 + rcx + 0x3e80]
test ax, ax
je 0x14000a4c9
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a4a0
jmp 0x14000a4ce
test rdx, rdx
jne 0x14000a4d2
sub rcx, 2
mov word [rcx], bp
mov edx, 0x50
mov rcx, r9
nop dword [rax]
lea rax, [rdx + 0x7fffffae]
test rax, rax
je 0x14000a505
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14000a505
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a4e0
jmp 0x14000a50a
test rdx, rdx
jne 0x14000a50e
sub rcx, 2
mov word [rcx], bp
mov qword [r10 - 0x320], rbp
mov qword [r10], rbp
mov dword [r11], ebp
add r11, 4
add r9, 0xa0
sub r8, 0xa0
add r10, 8
sub rbx, 1
jne 0x14000a490
lea rcx, [r14 + 0x113c8]
mov dword [r14 + 0x7fb70], ebp
mov dword [r14 + 0x7fb74], ebp
sub r12, rcx
mov edx, 0x104
nop dword [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14000a585
movzx eax, word [r12 + rcx]
test ax, ax
je 0x14000a585
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a560
jmp 0x14000a58a
test rdx, rdx
jne 0x14000a58e
sub rcx, 2
mov word [rcx], bp
lea r11, [r14 + 0x1e0f0]
lea r10, [r14 + 0x115d0]
lea r8, [r13 - 0x1e0f0]
lea r9, [r13 - 0x115d0]
nop dword [rax]
mov edx, 0x104
mov rcx, r10
nop dword [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14000a5e5
movzx eax, word [rcx + r9]
test ax, ax
je 0x14000a5e5
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a5c0
jmp 0x14000a5ea
test rdx, rdx
jne 0x14000a5ee
sub rcx, 2
mov word [rcx], bp
mov edx, 0x7d0
mov rcx, r11
nop dword [rax]
lea rax, [rdx + 0x7ffff82e]
test rax, rax
je 0x14000a625
movzx eax, word [rcx + r8]
test ax, ax
je 0x14000a625
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000a600
jmp 0x14000a62a
test rdx, rdx
jne 0x14000a62e
sub rcx, 2
add r10, 0x208
add r11, 0xfa0
sub r9, 0x208
sub r8, 0xfa0
sub rdi, 1
mov word [rcx], bp
jne 0x14000a5b0
cmp dword [r14 + 0x58], ebp
jne 0x14000a6d1
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x11c
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [rsp + 0x30], 2
jne 0x14000a6d1
mov eax, dword [rsp + 0x24]
cmp eax, 5
jne 0x14000a692
cmp dword [rsp + 0x28], ebp
mov eax, 2
cmova ebp, eax
mov dword [r14 + 0x58], ebp
jmp 0x14000a6d1
cmp eax, 6
jne 0x14000a6c7
mov eax, dword [rsp + 0x28]
test eax, eax
jne 0x14000a6a9
mov dword [r14 + 0x58], 4
jmp 0x14000a6d1
cmp eax, 1
jne 0x14000a6b8
mov dword [r14 + 0x58], 8
jmp 0x14000a6d1
cmp eax, 2
jne 0x14000a6c7
mov dword [r14 + 0x58], 0x10
jmp 0x14000a6d1
jbe 0x14000a6d1
mov dword [r14 + 0x58], 0x80
mov rax, r14
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.140017ca0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret