Function at 0x14004c040
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x140193440]
xor rax, rsp
mov qword [rbp + 0x90], rax
xor r12d, r12d
mov r15, rcx
mov ebx, r12d
mov dword [rsp + 0x44], r12d
cmp qword [0x1401e2c70], rbx
mov esi, r12d
mov edi, r12d
mov word [rsp + 0x48], r12w
mov word [rsp + 0x40], r12w
jne 0x14004c0be
lea rcx, str.Kernel32
call fcn.14004ab10
mov rcx, rax
lea rdx, str.IsWow64Process2
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e2c70], rax
xorps xmm0, xmm0
lea r13, [r15 + 0x1a]
movups xmmword [r15], xmm0
xor eax, eax
lea rdx, str.Windows_Undefined
movups xmmword [r15 + 0x10], xmm0
mov rcx, r13
movups xmmword [r15 + 0x20], xmm0
lea r8d, [rax + 0x12]
movups xmmword [r15 + 0x30], xmm0
movups xmmword [r15 + 0x40], xmm0
movups xmmword [r15 + 0x50], xmm0
movups xmmword [r15 + 0x60], xmm0
movups xmmword [r15 + 0x70], xmm0
movups xmmword [r15 + 0x80], xmm0
mov qword [r15 + 0x90], rax
mov dword [r15 + 0x98], eax
call fcn.1401362c0
xorps xmm0, xmm0
mov byte [r13 + 0x11], bl
xor eax, eax
mov dword [rsp + 0x50], 0x9c
lea rcx, [rsp + 0x50]
mov qword [rbp - 0x1c], rax
movups xmmword [rsp + 0x54], xmm0
movups xmmword [rsp + 0x64], xmm0
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rbp - 0x7c], xmm0
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x14004c1ad
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x94
xor eax, eax
lea rcx, [rsp + 0x50]
movups xmmword [rsp + 0x54], xmm0
mov qword [rbp - 0x1c], rax
movups xmmword [rsp + 0x64], xmm0
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rbp - 0x7c], xmm0
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x14004cd59
cmp dword [rsp + 0x60], 2
lea r9, [0x140000000]
mov qword [rsp + 0x1d8], r14
jne 0x14004c468
cmp dword [rsp + 0x54], 6
ja 0x14004c1df
jne 0x14004c2f8
cmp dword [rsp + 0x58], 2
jb 0x14004c303
mov r8b, 1
mov edx, 2
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov ebx, dword [rsp + 0x54]
mov r14, rax
cmp ebx, 9
ja 0x14004c2f1
nop
xorps xmm0, xmm0
mov dword [rbp - 0x10], 0x9c
xor eax, eax
mov dword [rbp - 0xc], ebx
mov r8, r14
mov dword [rbp + 0x88], eax
lea rcx, [rbp - 0x10]
movups xmmword [rbp - 8], xmm0
lea edx, [rax + 2]
movups xmmword [rbp + 8], xmm0
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp + 0x28], xmm0
movups xmmword [rbp + 0x38], xmm0
movups xmmword [rbp + 0x48], xmm0
movups xmmword [rbp + 0x58], xmm0
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rbp + 0x78], xmm0
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x14004c259
inc ebx
cmp ebx, 9
jbe 0x14004c200
jmp 0x14004c2f1
cmp dword [rsp + 0x54], ebx
jae 0x14004c268
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0x58], r12d
mov r8b, 1
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov edi, dword [rsp + 0x58]
mov r14, rax
cmp edi, 9
ja 0x14004c2f1
nop dword [rax]
nop dword [rax + rax]
xorps xmm0, xmm0
lea rcx, [rbp - 0x10]
xor eax, eax
mov r8, r14
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp + 0x80], rax
movups xmmword [rbp], xmm0
lea edx, [rax + 1]
mov dword [rbp + 0x88], eax
movups xmmword [rbp + 0x10], xmm0
mov dword [rbp - 0x10], 0x9c
movups xmmword [rbp + 0x20], xmm0
mov dword [rbp - 8], edi
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x14004c2ed
inc edi
cmp edi, 9
jbe 0x14004c290
jmp 0x14004c2f1
mov dword [rsp + 0x58], edi
lea r9, [0x140000000]
cmp dword [rsp + 0x54], 0xf
ja 0x14004c468
mov eax, dword [rsp + 0x58]
cmp eax, 0xf
ja 0x14004c468
cmp byte [rbp - 0x16], 1
mov edx, r12d
mov r8d, dword [rsp + 0x54]
setbe dl
shl r8d, 4
or r8d, eax
mov dword [r15], r8d
lea eax, [r8 - 0x51]
cmp eax, 0x5f
ja case.0x14004c34a.90
movzx eax, byte [r9 + rax + 0x4cdac]
mov ecx, dword [r9 + rax*4 + 0x4cd84]
add rcx, r9
jmp rcx
lea rsi, [0x14016530c]
jmp 0x14004c468
test edx, edx
je 0x14004c368
lea rsi, str.XP_64
jmp 0x14004c468
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
lea rcx, str.Server_2003
lea rsi, str.Server_2003_R2
cmove rsi, rcx
jmp 0x14004c468
test edx, edx
lea rax, str.Vista
lea rsi, str.Server_2008
cmovne rsi, rax
jmp 0x14004c468
test edx, edx
lea rax, [0x14016534c]
lea rsi, str.Server_2008_R2
cmovne rsi, rax
jmp 0x14004c468
test edx, edx
lea rax, [0x140165360]
lea rsi, str.Server_2012
cmovne rsi, rax
jmp 0x14004c468
test edx, edx
lea rax, [0x140165374]
lea rsi, str.Server_2012_R2
cmovne rsi, rax
jmp 0x14004c468
test edx, edx
lea rax, str.10__Preview_1_
lea rsi, str.Server_10__Preview_1_
cmovne rsi, rax
jmp 0x14004c468
mov eax, dword [rsp + 0x5c]
cmp eax, 0x4e20
jae 0x14004c434
test edx, edx
je 0x14004c41b
lea rsi, [0x1401653b0]
jmp 0x14004c468
cmp eax, 0x4563
lea rcx, str.Server_2016
lea rsi, str.Server_2019
cmovb rsi, rcx
jmp 0x14004c468
mov dword [r15], 0xb0
mov ebx, 0xb
test edx, edx
lea rax, [0x1401653d4]
lea rsi, str.Server_2022
cmovne rsi, rax
jmp 0x14004c468
cmp r8d, 0x51
jae 0x14004c461
mov dword [r15], r12d
jmp 0x14004c468
lea rsi, str.12_or_later
cmp qword [0x1401e2c70], r12
mov dword [r15 + 4], ebx
mov dword [r15 + 8], edi
je 0x14004c4a2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x48]
call qword [0x1401e2c70]
test eax, eax
je 0x14004c4a2
movzx eax, word [rsp + 0x40]
mov word [r15 + 0x18], ax
jmp 0x14004c4b5
lea rcx, str.Note:_Underlying_Windows_architecture_was_guessed_and_may_be_incorrect...
mov word [r15 + 0x18], 0x8664
call fcn.14004f910
movzx ecx, word [r15 + 0x18]
sub ecx, 0x14c
je 0x14004c4fb
sub ecx, 0x74
je 0x14004c4f2
sub ecx, 0x84a4
je 0x14004c4e9
cmp ecx, 0x2400
je 0x14004c4e0
lea rdi, str.unknown
jmp 0x14004c502
lea rdi, str.arm64
jmp 0x14004c502
lea rdi, [0x14015e574]
jmp 0x14004c502
lea rdi, [0x14015e584]
jmp 0x14004c502
lea rdi, [0x14015e578]
movzx r9d, word [rbp - 0x1a]
lea rax, [rsp + 0x44]
movzx r8d, word [rbp - 0x1c]
mov edx, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x54]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetProductInfo]
test rsi, rsi
jne 0x14004c566
cmp dword [rsp + 0x60], 2
lea rax, [0x14016545c]
mov qword [rsp + 0x38], rdi
lea rcx, [0x140165460]
cmove rcx, rax
lea r9, str._s__u._u__s
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
jmp 0x14004cb18
movzx eax, word [rbp - 0x1a]
test ax, ax
je 0x14004c58c
movzx ecx, word [rbp - 0x1c]
lea r9, str._s_SP_u._u__s
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
jmp 0x14004cb13
movzx eax, word [rbp - 0x1c]
test ax, ax
je 0x14004c5c1
mov edx, 0x76
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
lea r9, str._s_SP_u__s
lea rcx, [r15 + 0x22]
mov qword [rsp + 0x20], rsi
lea r8, [rdx - 0x77]
call fcn.140004960
jmp 0x14004cb2c
mov edx, dword [rsp + 0x44]
lea r8, [0x14015644e]
cmp edx, 0x67
ja 0x14004c86d
je 0x14004c861
cmp edx, 0x65
ja case.default.0x14004caaf
lea r9, [0x140000000]
movzx eax, byte [r9 + rdx + 0x4cee0]
mov ecx, dword [r9 + rax*4 + 0x4ce0c]
add rcx, r9
jmp rcx
mov rbx, r8
jmp 0x14004caf0
lea rbx, str.Ultimate
jmp 0x14004caf0
lea rbx, str.Home_Basic
jmp 0x14004caf0
lea rbx, str.Home_Premium
jmp 0x14004caf0
lea rbx, str.Enterprise
jmp 0x14004caf0
lea rbx, str.Home_Basic_N
jmp 0x14004caf0
lea rbx, str.Business
jmp 0x14004caf0
lea rbx, str.Server_Standard
jmp 0x14004caf0
lea rbx, str.Server_Datacenter
jmp 0x14004caf0
lea rbx, str.Smallbusiness_Server
jmp 0x14004caf0
lea rbx, str.Server_Enterprise
jmp 0x14004caf0
lea rbx, str.Starter
jmp 0x14004caf0
lea rbx, str.Server_Datacenter__Core_
jmp 0x14004caf0
lea rbx, str.Server_Standard__Core_
jmp 0x14004caf0
lea rbx, str.Server_Enterprise__Core_
jmp 0x14004caf0
lea rbx, str.Business_N
jmp 0x14004caf0
lea rbx, str.Web_Server
jmp 0x14004caf0
lea rbx, str.HPC_Edition
jmp 0x14004caf0
lea rbx, str.Storage_Server__Essentials_
jmp 0x14004caf0
lea rbx, str.Home_Premium_N
jmp 0x14004caf0
lea rbx, str.Enterprise_N
jmp 0x14004caf0
lea rbx, str.Ultimate_N
jmp 0x14004caf0
lea rbx, str.Home_Server
jmp 0x14004caf0
lea rbx, str.Server_Standard_without_Hyper_V
jmp 0x14004caf0
lea rbx, str.Server_Datacenter_without_Hyper_V
jmp 0x14004caf0
lea rbx, str.Server_Enterprise_without_Hyper_V
jmp 0x14004caf0
lea rbx, str.Server_Datacenter_without_Hyper_V__Core_
jmp 0x14004caf0
lea rbx, str.Server_Standard_without_Hyper_V__Core_
jmp 0x14004caf0
lea rbx, str.Server_Enterprise_without_Hyper_V__Core_
jmp 0x14004caf0
lea rbx, str.Hyper_V_Server
jmp 0x14004caf0
lea rbx, str.Starter_N
jmp 0x14004caf0
lea rbx, [0x140164e24]
jmp 0x14004caf0
lea rbx, str.Pro_N
jmp 0x14004caf0
lea rbx, str.Server_Solutions_Premium
jmp 0x14004caf0
lea rbx, str.Server_Solutions_Premium__Core_
jmp 0x14004caf0
lea rbx, str.Server_Hyper_Core_V
jmp 0x14004caf0
lea rbx, str.Starter_E
jmp 0x14004caf0
lea rbx, str.Home_Basic_E
jmp 0x14004caf0
lea rbx, str.Premium_E
jmp 0x14004caf0
lea rbx, str.Pro_E
jmp 0x14004caf0
lea rbx, str.Enterprise_E
jmp 0x14004caf0
lea rbx, str.Ultimate_E
jmp 0x14004caf0
lea rbx, str.Enterprise__Eval_
jmp 0x14004caf0
lea rbx, str.Server_Standard__Eval_
jmp 0x14004caf0
lea rbx, str.Server_Datacenter__Eval_
jmp 0x14004caf0
lea rbx, str.Enterprise_N__Eval_
jmp 0x14004caf0
lea rbx, str.Thin_PC
jmp 0x14004caf0
lea rbx, str.Home_N
jmp 0x14004caf0
lea rbx, str.Home_China
jmp 0x14004caf0
lea rbx, str.Home_Single_Language
jmp 0x14004caf0
lea rbx, str.Home
jmp 0x14004caf0
lea rbx, str.Pro_with_Media_Center
jmp 0x14004caf0
cmp edx, 0xa4
ja 0x14004c9d4
je 0x14004c9c8
lea eax, [rdx - 0x69]
cmp eax, 0x39
ja case.default.0x14004caaf
lea r9, [0x140000000]
movzx eax, byte [r9 + rax + 0x4cfac]
mov ecx, dword [r9 + rax*4 + 0x4cf48]
add rcx, r9
jmp rcx
lea rbx, str.Embedded
jmp 0x14004caf0
lea rbx, str.Home_Connected
jmp 0x14004caf0
lea rbx, str.Pro_Student
jmp 0x14004caf0
lea rbx, str.Home_Connected_N
jmp 0x14004caf0
lea rbx, str.Pro_Student_N
jmp 0x14004caf0
lea rbx, str.Home_Connected_Single_Language
jmp 0x14004caf0
lea rbx, str.Home_Connected_China
jmp 0x14004caf0
lea rbx, str.Education
jmp 0x14004caf0
lea rbx, str.Education_N
jmp 0x14004caf0
lea rbx, str.Enterprise_LTSB
jmp 0x14004caf0
lea rbx, str.Enterprise_LTSB_N
jmp 0x14004caf0
lea rbx, str.Pro_S
jmp 0x14004caf0
lea rbx, str.Pro_S_N
jmp 0x14004caf0
lea rbx, str.Enterprise_LTSB__Eval_
jmp 0x14004caf0
lea rbx, str.Enterprise_LTSB_N__Eval_
jmp 0x14004caf0
lea rbx, str.Pro_Single_Language
jmp 0x14004caf0
lea rbx, str.Pro_China
jmp 0x14004caf0
lea rbx, str.Enterprise_Subscription
jmp 0x14004caf0
lea rbx, str.Enterprise_Subscription_N
jmp 0x14004caf0
lea rbx, str.Server_Datacenter_SA__Core_
jmp 0x14004caf0
lea rbx, str.Server_Standard_SA__Core_
jmp 0x14004caf0
lea rbx, str.Utility_VM
jmp 0x14004caf0
lea rbx, str.Pro_for_Workstations
jmp 0x14004caf0
lea rbx, str.Pro_for_Workstations_N
jmp 0x14004caf0
lea rbx, str.Pro_for_Education
jmp 0x14004caf0
cmp edx, 0xc0
ja 0x14004ca84
je case.0x14004caaf.194
lea eax, [rdx - 0xa5]
cmp eax, 0x1a
ja case.default.0x14004caaf
lea r9, [0x140000000]
mov ecx, dword [r9 + rax*4 + 0x4cfe8]
add rcx, r9
jmp rcx
lea rbx, str.Pro_for_Education_N
jmp 0x14004caf0
lea rbx, str.Enterprise_G
jmp 0x14004caf0
lea rbx, str.Enterprise_G_N
jmp 0x14004caf0
lea rbx, str.Cloud
jmp 0x14004caf0
lea rbx, str.Cloud_N
jmp 0x14004caf0
lea rbx, str.Home_OS
jmp 0x14004caf0
lea rbx, str.IoT_OS
jmp 0x14004caf0
lea rbx, str.IoT_Edge_OS
jmp 0x14004caf0
lea rbx, str.IoT_Enterprise
jmp 0x14004caf0
lea rbx, str.Lite
jmp 0x14004caf0
lea rbx, str.IoT_Enterprise_S
jmp 0x14004caf0
cmp edx, 0xc8
ja 0x14004caba
je case.0x14004caaf.199
lea eax, [rdx - 0xc2]
cmp eax, 5
ja case.default.0x14004caaf
lea r9, [0x140000000]
mov ecx, dword [r9 + rax*4 + 0x4d054]
add rcx, r9
jmp rcx
lea rbx, str.XBox
jmp 0x14004caf0
cmp edx, 0x197
ja 0x14004cb9c
je case.0x14004caaf.199
mov eax, edx
sub eax, 0xca
je case.0x14004ca07.186
sub eax, 1
je case.0x14004ca07.183
cmp eax, 0xcb
jne case.default.0x14004caaf
lea rbx, str.Azure_Server
mov qword [rsp + 0x38], rdi
lea rax, [0x14015f6a4]
test edx, edx
mov qword [rsp + 0x30], rbx
lea r9, str._s_s_s__s
cmovne r8, rax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rsi
mov r8, 0xffffffffffffffff
lea rcx, [r15 + 0x22]
lea edx, [r8 + 0x77]
call fcn.140004960
mov eax, dword [rsp + 0x44]
lea r9, [rsp + 0x4c]
mov byte [r15 + 0x97], r12b
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionUBR
mov dword [r15 + 0x14], eax
mov rcx, 0xffffffff80000002
mov eax, dword [rsp + 0x5c]
mov dword [r15 + 0xc], eax
call fcn.14004b080
mov r9d, dword [rsp + 0x4c]
mov r14, qword [rsp + 0x1d8]
mov dword [r15 + 0x10], r9d
test r13, r13
jne 0x14004cbf6
lea rcx, [r15 + 0x1a]
mov rax, r12
mov r8, rcx
jmp 0x14004cc29
lea rbx, str.Cloud_E
jmp 0x14004caf0
lea rbx, str.Cloud_E_N
jmp 0x14004caf0
cmp edx, 0x198
je case.0x14004caaf.199
cmp edx, 0xabcdabcd
je 0x14004cbea
mov dword [rsp + 0x20], edx
lea rbx, [0x1401e2c80]
mov edx, 0x40
lea r9, str._Unknown_Edition_0x_02X_
mov rcx, rbx
lea r8, [rdx - 0x41]
call fcn.140004960
mov edx, dword [rsp + 0x44]
lea r8, [0x14015644e]
mov byte [0x1401e2cbf], r12b
jmp 0x14004caf0
lea rbx, str._Unlicensed_
jmp 0x14004caf0
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rax + r13], r12b
jne 0x14004cc00
lea rcx, [r15 + 0x1a]
add rcx, rax
mov rax, 0xffffffffffffffff
mov r8, rcx
nop word [rax + rax]
inc rax
cmp byte [rax + r13], r12b
jne 0x14004cc20
mov ebx, 0x7f
mov edx, ebx
sub rdx, rax
mov eax, dword [r15 + 0xc]
lea rdi, [r8 + rdx]
lea r8, [rbx - 0x80]
test r9d, r9d
je 0x14004cc5b
mov dword [rsp + 0x28], r9d
lea r9, str.__Build__lu._lu_
mov dword [rsp + 0x20], eax
call fcn.140004960
jmp 0x14004cc6b
lea r9, str.__Build__lu_
mov dword [rsp + 0x20], eax
call fcn.140004960
mov byte [rdi - 1], r12b
test r13, r13
jne 0x14004cc7d
lea rdi, [r15 + 0x1a]
mov rax, r12
jmp 0x14004cca9
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], r12b
jne 0x14004cc84
lea rdi, [r15 + 0x1a]
add rdi, rax
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rax + r13], r12b
jne 0x14004cca0
sub rbx, rax
mov rax, qword [0x1401e2d30]
test rax, rax
jne 0x14004cd04
lea rcx, str.Wldp
call fcn.14004ab10
mov rcx, rax
lea rdx, str.WldpQueryWindowsLockdownMode
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e2d30], rax
test rax, rax
jne 0x14004cd04
call fcn.140050120
mov r9, rax
lea r8, str.Wldp
lea rdx, str.WldpQueryWindowsLockdownMode
lea rcx, str.Unable_to_locate__s___in__s.dll:__s
call fcn.14004f910
jmp 0x14004cd59
lea rcx, [rsp + 0x4c]
call rax
test eax, eax
je 0x14004cd2d
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
call fcn.140050120
mov rdx, rax
lea rcx, str.Could_not_detect_S_Mode:__s
call fcn.14004f910
jmp 0x14004cd59
cmp dword [rsp + 0x4c], r12d
setne r12b
test r12d, r12d
je 0x14004cd59
lea r9, str._in_S_Mode
mov r8, 0xffffffffffffffff
mov rdx, rbx
mov rcx, rdi
call fcn.140004960
mov byte [rbx + rdi - 1], 0
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.1400b1f80
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rbp
ret