Function at 0x140153a28
Capabilities:
Check os version

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
sub rsp, 0x2f0
mov qword [rsp + 0x1b0], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov rax, qword [0x14024f530]
xor rax, rsp
mov qword [rsp + 0x2e0], rax
mov rdi, rdx
mov rdx, qword [rcx]
lea rcx, [rsp + 0x30]
call fcn.140151ac4
nop
call fcn.140011920
mov r11, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x140153a87
mov ecx, 0x80004005
call fcn.140001f40
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea r8, [rsp + 0x28]
mov rdx, qword [str.FACENAME]
lea rcx, [rsp + 0x30]
call fcn.140151b38
test eax, eax
je 0x140153adb
mov rdx, qword [rsp + 0x28]
mov ecx, dword [rdx - 0x10]
test ecx, ecx
je 0x140153adb
mov eax, 0x20
cmp ecx, eax
cmovl eax, ecx
movsxd r8, eax
add r8, r8
lea rcx, [rdi + 0x1c]
call fcn.140184df0
and dword [rsp + 0x20], 0
mov rdx, qword [str.HEIGHT]
lea rcx, [rsp + 0x48]
call fcn.140006480
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x30]
call fcn.1401536e8
mov ebx, eax
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
or ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140153b29
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
test ebx, ebx
je 0x140153b33
mov eax, dword [rsp + 0x20]
mov dword [rdi], eax
cmp dword [rdi], 0
jle 0x140153b8c
mov rdx, qword [str.WIDTH]
lea rcx, [rsp + 0x40]
call fcn.140006480
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1401536e8
mov ebx, eax
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
or ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140153b81
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
test ebx, ebx
je 0x140153b8c
mov eax, dword [rsp + 0x20]
mov dword [rdi + 4], eax
xor r9d, r9d
lea r8, [rsp + 0x28]
mov rdx, qword [str.WEIGHT]
lea rcx, [rsp + 0x30]
call fcn.140151b38
test eax, eax
je 0x140153d79
lea rax, str.DONTCARE
mov qword [rsp + 0xc0], rax
and dword [rsp + 0xc8], 0
lea rax, str.THIN
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0xd8], 0x64
lea rax, str.EXTRALIGHT
mov qword [rsp + 0xe0], rax
mov r10d, 0xc8
mov dword [rsp + 0xe8], r10d
lea rax, str.LIGHT
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0xf8], 0x12c
lea rax, str.NORMAL
mov qword [rsp + 0x100], rax
mov r9d, 0x190
mov dword [rsp + 0x108], r9d
lea rax, str.MEDIUM
mov qword [rsp + 0x110], rax
mov dword [rsp + 0x118], 0x1f4
lea rax, str.SEMIBOLD
mov qword [rsp + 0x120], rax
mov r8d, 0x258
mov dword [rsp + 0x128], r8d
lea rax, str.BOLD
mov qword [rsp + 0x130], rax
mov dword [rsp + 0x138], 0x2bc
lea rax, str.EXTRABOLD
mov qword [rsp + 0x140], rax
mov edx, 0x320
mov dword [rsp + 0x148], edx
lea rax, str.HEAVY
mov qword [rsp + 0x150], rax
lea ecx, [rdx + 0x64]
mov dword [rsp + 0x158], ecx
lea rax, str.ULTRALIGHT
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x168], r10d
lea rax, str.REGULAR
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x178], r9d
lea rax, str.DEMIBOLD
mov qword [rsp + 0x180], rax
mov dword [rsp + 0x188], r8d
lea rax, str.ULTRABOLD
mov qword [rsp + 0x190], rax
mov dword [rsp + 0x198], edx
lea rax, str.BLACK
mov qword [rsp + 0x1a0], rax
mov dword [rsp + 0x1a8], ecx
xor ebx, ebx
lea rsi, [rsp + 0xc0]
mov rdx, qword [rsi]
xor eax, eax
test rdx, rdx
setne al
test eax, eax
je 0x140153d6e
mov rcx, qword [rsp + 0x28]
call fcn.140182e68
test eax, eax
je 0x140153d5c
inc ebx
add rsi, 0x10
cmp ebx, 0xf
jb 0x140153d32
jmp 0x140153d79
movsxd rax, ebx
add rax, rax
mov eax, dword [rsp + rax*8 + 0xc8]
mov dword [rdi + 0x10], eax
jmp 0x140153d79
mov ecx, 0x80004005
call fcn.140001f40
int3
xor r9d, r9d
lea r8, [rsp + 0x28]
mov rdx, qword [str.QUALITY]
lea rcx, [rsp + 0x30]
call fcn.140151b38
mov rbx, qword [rsp + 0x28]
test eax, eax
je 0x140153eb3
lea rax, str.DEFAULT
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x58], 0
lea rax, str.DRAFT
mov qword [rsp + 0x60], rax
mov byte [rsp + 0x68], 1
lea rax, str.PROOF
mov qword [rsp + 0x70], rax
mov byte [rsp + 0x78], 2
lea rax, str.NONANTIALIASED
mov qword [rsp + 0x80], rax
mov byte [rsp + 0x88], 3
lea rax, str.ANTIALIASED
mov qword [rsp + 0x90], rax
mov byte [rsp + 0x98], 4
lea rax, str.CLEARTYPE
mov qword [rsp + 0xa0], rax
mov byte [rsp + 0xa8], 5
lea rax, str.CLEARTYPE_NATURAL
mov qword [rsp + 0xb0], rax
mov byte [rsp + 0xb8], 6
xor esi, esi
lea rbp, [rsp + 0x50]
mov rdx, qword [rbp]
xor eax, eax
test rdx, rdx
setne al
test eax, eax
je 0x140153ea8
mov rcx, rbx
call fcn.140182e68
test eax, eax
je 0x140153e5e
inc esi
add rbp, 0x10
cmp esi, 7
jb 0x140153e35
jmp 0x140153eb3
movsxd rax, esi
add rax, rax
mov sil, byte [rsp + rax*8 + 0x58]
cmp sil, 4
ja 0x140153e75
mov byte [rdi + 0x1a], sil
jmp 0x140153eb3
mov dword [rsp + 0x1c0], 0x114
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [rsp + 0x1d0], 2
jne 0x140153eb3
cmp dword [rsp + 0x1c4], 5
jb 0x140153eb3
mov byte [rdi + 0x1a], sil
jmp 0x140153eb3
mov ecx, 0x80004005
call fcn.140001f40
nop
lea rdx, [rbx - 0x18]
or ecx, 0xffffffff
lock xadd dword [rdx + 0x10], ecx
dec ecx
test ecx, ecx
jg 0x140153ed0
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
nop
lea rcx, [rsp + 0x30]
call fcn.140151610
mov eax, 1
mov rcx, qword [rsp + 0x2e0]
xor rcx, rsp
call fcn.140182850
mov rbx, qword [rsp + 0x320]
add rsp, 0x2f0
pop rdi
pop rsi
pop rbp
ret