Function at 0x1006470
Capabilities:
Check os version

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov rax, qword [0x01023178]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
lea rax, [rsp + 0x40]
mov qword [r11 - 0xf0], rax
lea r13, [0x01001a10]
mov qword [rsp + 0x40], r13
lea r14, [0x01001a00]
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0x80
mov dword [rsp + 0x54], 0x200
xor r12d, r12d
mov dword [rsp + 0x58], r12d
mov word [r11 - 0x128], r12w
mov byte [r11 - 0x126], r12b
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [r11 - 0x158], r12
mov qword [r11 - 0x150], r12
mov qword [r11 - 0x148], r12
mov qword [r11 - 0x140], r12
mov qword [r11 - 0x138], r12
mov qword [r11 - 0x130], r12
lea rax, [rsp + 0x40]
mov qword [r11 - 0x120], rax
mov dword [r11 - 0x118], r12d
lea r15, [0x010019c0]
mov qword [r11 - 0x110], r15
mov rax, qword [rsp + 0x48]
mov qword [r11 - 0x108], rax
mov r8d, dword [rsp + 0x50]
mov dword [r11 - 0x100], r8d
mov ebp, dword [rsp + 0x54]
mov dword [rsp + 0xdc], ebp
mov esi, dword [rsp + 0x58]
mov dword [rsp + 0xe0], esi
cmp dword [0x010237e0], r12d
je 0x10065e6
cmp dword [0x01023800], r12d
je 0x10065e6
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebp
mov r9d, esi
mov rdx, qword [rsp + 0x40]
lea rcx, [0x010237e0]
call fcn.0100f6a0
lea rdx, [0x01001570]
lea rcx, [0x010237e0]
call fcn.0100f420
mov edx, esi
lea rcx, [0x010237e0]
call fcn.0100f900
nop
cmp byte [rsp + 0xb3], 0
je 0x100661b
lea rbx, [rsp + 0x60]
mov edi, 0xa
nop
nop
mov rcx, qword [rbx]
test rcx, rcx
je 0x1006611
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov qword [rbx], r12
add rbx, 8
sub rdi, 1
jne 0x1006600
lea rcx, [0x010019a8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x010231d8], rax
test rax, rax
jne 0x1006749
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0x89
mov dword [rsp + 0x54], 0x200
mov dword [rsp + 0x58], r12d
mov word [rsp + 0xb0], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
mov r9d, eax
lea r8, [0x01001950]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.010062d0
nop
cmp dword [0x010237e0], 0
je 0x1006742
cmp dword [0x01023800], 0
je 0x1006742
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebp
mov r9d, esi
xor r8d, r8d
lea rdx, [0x01001570]
lea rcx, [0x010237e0]
call fcn.0100f6a0
xor r8d, r8d
lea rdx, [0x01001578]
lea rcx, [0x010237e0]
call fcn.0100f420
mov edx, esi
lea rcx, [0x010237e0]
call fcn.0100f900
xor eax, eax
jmp 0x1006ed0
lea rdx, [0x01001930]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x010231e8], rax
test rax, rax
jne 0x10068b2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0x93
mov dword [rsp + 0x54], 0x200
mov dword [rsp + 0x58], r12d
mov word [rsp + 0xb0], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
mov r9d, eax
lea r8, [0x010018a0]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.010062d0
mov qword [0x010231e8], r12
mov rcx, qword [0x010231d8]
test rcx, rcx
je 0x1006835
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x010231d8], r12
mov rcx, qword [0x010231e0]
test rcx, rcx
je 0x100684e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x010231e0], r12
cmp dword [0x010237e0], 0
je 0x10068ab
cmp dword [0x01023800], 0
je 0x10068ab
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebp
mov r9d, esi
xor r8d, r8d
lea rdx, [0x01001570]
lea rcx, [0x010237e0]
call fcn.0100f6a0
xor r8d, r8d
lea rdx, [0x01001578]
lea rcx, [0x010237e0]
call fcn.0100f420
mov edx, esi
lea rcx, [0x010237e0]
call fcn.0100f900
xor eax, eax
jmp 0x1006ed0
mov dword [rsp + 0x100], 0x94
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x1006a1c
lea rax, [rsp + 0x40]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0xa1
mov dword [rsp + 0x54], 0x200
mov dword [rsp + 0x58], r12d
mov word [rsp + 0xb0], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r8, [0x01001840]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.010062d0
mov qword [0x010231e8], r12
mov rcx, qword [0x010231d8]
test rcx, rcx
je 0x100699f
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x010231d8], r12
mov rcx, qword [0x010231e0]
test rcx, rcx
je 0x10069b8
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x010231e0], r12
cmp dword [0x010237e0], 0
je 0x1006a15
cmp dword [0x01023800], 0
je 0x1006a15
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebp
mov r9d, esi
xor r8d, r8d
lea rdx, [0x01001570]
lea rcx, [0x010237e0]
call fcn.0100f6a0
xor r8d, r8d
lea rdx, [0x01001578]
lea rcx, [0x010237e0]
call fcn.0100f420
mov edx, esi
lea rcx, [0x010237e0]
call fcn.0100f900
xor eax, eax
jmp 0x1006ed0
mov eax, dword [rsp + 0x104]
cmp eax, 5
jb 0x1006e38
cmp eax, 5
jne 0x1006a6b
mov eax, dword [rsp + 0x108]
cmp eax, 1
jb 0x1006e38
cmp eax, 1
jne 0x1006a6b
lea rax, [0x01001500]
lea rbx, [0x01001528]
cmp dword [0x01023218], 0
cmovne rbx, rax
mov dword [0x01023214], 1
jmp 0x1006a84
lea rax, [0x010014f0]
lea rbx, [0x01001518]
cmp dword [0x01023218], 0
cmovne rbx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x010231e0], rax
test rax, rax
jne 0x1006b67
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0xcc
mov dword [rsp + 0x54], 0x200
mov dword [rsp + 0x58], r12d
mov word [rsp + 0xb0], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
mov dword [rsp + 0x20], eax
mov r9, rbx
lea r8, [0x010017f0]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.010062d0
call fcn.01006180
nop
lea rcx, [rsp + 0xc0]
call fcn.01006100
xor eax, eax
jmp 0x1006ed0
lea rdx, [0x010017c8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x010231f0], rax
test rax, rax
jne 0x1006c4d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0xd8
mov dword [rsp + 0x54], 0x200
mov dword [rsp + 0x58], r12d
mov word [rsp + 0xb0], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
mov r9d, eax
lea r8, [0x01001730]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.010062d0
call fcn.01006180
nop
lea rcx, [rsp + 0xc0]
call fcn.01006100
xor eax, eax
jmp 0x1006ed0
lea rdx, [0x01001718]
mov rcx, qword [0x010231e0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x010231f8], rax
test rax, rax
jne 0x1006d37
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0xe6
mov dword [rsp + 0x54], 0x200
mov dword [rsp + 0x58], r12d
mov word [rsp + 0xb0], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
mov r9d, eax
lea r8, [0x01001690]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.010062d0
call fcn.01006180
nop
lea rcx, [rsp + 0xc0]
call fcn.01006100
xor eax, eax
jmp 0x1006ed0
lea rdx, [0x01001678]
mov rcx, qword [0x010231e0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x01023200], rax
test rax, rax
jne 0x1006e21
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x50], 0xf4
mov dword [rsp + 0x54], 0x200
mov dword [rsp + 0x58], r12d
mov word [rsp + 0xb0], 0
mov byte [rsp + 0xb2], 0
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
mov r9d, eax
lea r8, [0x010015f0]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xc0]
call fcn.010062d0
call fcn.01006180
nop
lea rcx, [rsp + 0xc0]
call fcn.01006100
xor eax, eax
jmp 0x1006ed0
lea rcx, [rsp + 0xc0]
call fcn.01006100
mov eax, 1
jmp 0x1006ed0
mov qword [0x010231e8], r12
mov rcx, qword [0x010231d8]
test rcx, rcx
je 0x1006e58
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x010231d8], r12
mov rcx, qword [0x010231e0]
test rcx, rcx
je 0x1006e71
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x010231e0], r12
cmp dword [0x010237e0], 0
je 0x1006ece
cmp dword [0x01023800], 0
je 0x1006ece
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebp
mov r9d, esi
xor r8d, r8d
lea rdx, [0x01001570]
lea rcx, [0x010237e0]
call fcn.0100f6a0
xor r8d, r8d
lea rdx, [0x01001578]
lea rcx, [0x010237e0]
call fcn.0100f420
mov edx, esi
lea rcx, [0x010237e0]
call fcn.0100f900
xor eax, eax
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.0100db20
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret