Function at 0x140097c50
Capabilities:
Check os version

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x190
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x14025e510]
xor rax, rsp
mov qword [rsp + 0x180], rax
mov r15d, edx
mov rbp, rcx
lea rdi, vtable.CMenu.0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 0
call qword [sym.imp.USER32.dll_CreatePopupMenu]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14001885c
test eax, eax
jne 0x140097cd2
mov qword [rsp + 0x38], rdi
lea rcx, [rsp + 0x38]
call fcn.1400188dc
xor eax, eax
jmp 0x140098176
mov dword [rsp + 0x60], 0x114
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [rsp + 0x70], 2
jne 0x140097cf8
cmp dword [rsp + 0x64], 5
jae 0x140097cf8
mov r13b, 1
jmp 0x140097cfb
xor r13b, r13b
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x370]
mov r14d, eax
xor r12d, r12d
test eax, eax
jle 0x140098150
lea rdi, [0x1401dd700]
nop dword [rax]
mov edx, r12d
mov rcx, rbp
call fcn.1400818f0
mov rsi, rax
mov ecx, dword [rax + 0xc]
cmp ecx, 0xffffffff
jne 0x140097f6f
mov rcx, rax
call fcn.14007d7e0
mov rbx, rax
call fcn.140008c24
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
je 0x14009813a
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x20], rax
test rbx, rbx
je 0x140097daf
test rbx, 0xffffffffffff0000
jne 0x140097d9b
movzx edi, bx
mov ecx, edi
call fcn.14001b4a8
test rax, rax
je 0x140097dc2
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.1400060a0
jmp 0x140097dc2
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
jmp 0x140097db1
xor ecx, ecx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140005080
nop
call fcn.140008c24
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
je 0x14009812f
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
lea rdx, [0x1401dd700]
test rdx, 0xffffffffffff0000
jne 0x140097e1f
movzx edi, dx
mov ecx, edi
call fcn.14001b4a8
test rax, rax
je 0x140097e41
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400060a0
mov rbx, qword [rsp + 0x30]
jmp 0x140097e41
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x30]
call fcn.140005080
mov rbx, qword [rsp + 0x30]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x338]
bt eax, 0x1d
jb 0x140097e8c
mov rcx, rsi
call fcn.14007d800
mov rdx, rax
test rax, rax
jne 0x140097e68
xor ecx, ecx
jmp 0x140097e7a
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
lea rcx, [rsp + 0x30]
call fcn.140005080
mov rbx, qword [rsp + 0x30]
cmp dword [rbx - 0x10], 0
je 0x140097ecb
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, reloc.OLEAUT32.dll_VariantCopy
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, reloc.OLEAUT32.dll_VariantCopy
lea rcx, [rsp + 0x20]
call fcn.140004560
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140004560
mov rcx, qword [rsi]
test r15d, r15d
je 0x140097ee6
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x350]
mov rdi, rax
jmp 0x140097eef
call qword [sym.imp.USER32.dll_CreatePopupMenu]
mov rdi, rax
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsMenu]
test eax, eax
je 0x140097f14
mov r9, qword [rsp + 0x20]
mov r8, rdi
mov edx, 0x10
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_AppendMenuW]
test r13b, r13b
je 0x140097f23
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyMenu]
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140097f3f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140098112
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdi, [0x1401dd700]
jmp 0x140098122
test ecx, ecx
sete al
test al, al
je 0x140097f93
xor r9d, r9d
xor r8d, r8d
mov edx, 0x800
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_AppendMenuW]
jmp 0x140098122
mov rcx, rsi
call fcn.14007d7e0
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1400062b0
nop
call fcn.140008c24
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
je 0x140098145
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
test rdi, 0xffffffffffff0000
jne 0x140097fff
movzx edi, di
mov ecx, edi
call fcn.14001b4a8
test rax, rax
je 0x140098025
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.1400060a0
mov rbx, qword [rsp + 0x28]
jmp 0x140098025
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, [0x1401dd700]
lea rcx, [rsp + 0x28]
call fcn.140005080
mov rbx, qword [rsp + 0x28]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x338]
bt eax, 0x1d
jb 0x140098070
mov rcx, rsi
call fcn.14007d800
mov rdx, rax
test rax, rax
jne 0x14009804c
xor ecx, ecx
jmp 0x14009805e
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
lea rcx, [rsp + 0x28]
call fcn.140005080
mov rbx, qword [rsp + 0x28]
cmp dword [rbx - 0x10], 0
je 0x1400980af
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, reloc.OLEAUT32.dll_VariantCopy
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rdx, reloc.OLEAUT32.dll_VariantCopy
lea rcx, [rsp + 0x48]
call fcn.140004560
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140004560
mov rcx, rsi
call fcn.140078bf0
mov r8d, eax
mov r9, qword [rsp + 0x48]
xor edx, edx
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.USER32.dll_AppendMenuW]
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400980e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14009811b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdi, [0x1401dd700]
jmp 0x140098122
lea rdi, [0x1401dd700]
jmp 0x140098122
lea rdi, [0x1401dd700]
inc r12d
cmp r12d, r14d
jge 0x140098150
jmp 0x140097d20
mov ecx, 0x80004005
call fcn.1400052e0
nop
mov ecx, 0x80004005
call fcn.1400052e0
nop
mov ecx, 0x80004005
call fcn.1400052e0
nop
lea rcx, [rsp + 0x38]
call fcn.140018898
mov rdi, rax
lea rax, vtable.CMenu.0
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x38]
call fcn.1400188dc
mov rax, rdi
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.14002f990
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret