Function at 0x140003d30
Capabilities:
Check os version

Disassembly:
jmp 0x140003d40
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x140035040]
xor rax, rsp
mov qword [rbp - 8], rax
xor edi, edi
mov ecx, dword [0x140036020]
test ecx, ecx
jne 0x140003ddb
mov r8, qword gs:[0x60]
mov ecx, dword [r8 + 0x118]
mov edx, dword [r8 + 0x11c]
cmp edx, 0xa
jb 0x140003d9f
nop dword [rax + rax]
mov eax, 0xcccccccd
mul edx
shr edx, 3
cmp edx, 0xa
jae 0x140003d90
lea eax, [rcx + rcx*4]
lea ecx, [rdx + rax*2]
mov dword [0x140036020], ecx
mov eax, dword [r8 + 0x118]
mov dword [0x140036024], eax
mov eax, dword [r8 + 0x11c]
mov dword [0x140036028], eax
movzx eax, word [r8 + 0x120]
mov dword [0x14003602c], eax
test ecx, ecx
je 0x140003fcf
mov cl, 0x4b
mov word [rbp - 0x38], 0x4b
movsx r9d, cl
movzx eax, r9w
xor ax, 0x19
mov word [rbp - 0x36], ax
movzx ecx, r9w
xor cx, 0x24
mov word [rbp - 0x34], cx
movzx eax, r9w
xor ax, 0x29
mov word [rbp - 0x32], ax
movzx edx, r9w
xor dx, 0x27
mov word [rbp - 0x30], dx
mov word [rbp - 0x2e], cx
movzx r8d, r9w
xor r8w, 0x33
mov word [rbp - 0x2c], r8w
movzx eax, r9w
xor ax, 0x1b
mov word [rbp - 0x2a], ax
mov word [rbp - 0x28], dx
movzx edx, r9w
xor dx, 0x2a
mov word [rbp - 0x26], dx
movzx eax, r9w
xor ax, 0x32
mov word [rbp - 0x24], ax
movzx ecx, r9w
xor cx, 0x2e
mov word [rbp - 0x22], cx
movzx eax, r9w
xor ax, 0x39
mov word [rbp - 0x20], ax
movzx eax, r9w
xor ax, 9
mov word [rbp - 0x1e], ax
mov word [rbp - 0x1c], cx
movzx eax, r9w
xor ax, 0x3f
mov word [rbp - 0x1a], ax
mov word [rbp - 0x18], dx
xor r9w, 0x65
mov word [rbp - 0x16], r9w
mov word [rbp - 0x14], cx
mov word [rbp - 0x12], r8w
mov word [rbp - 0x10], cx
mov word [rbp - 0xe], di
mov ecx, 0xc8
call fcn.140012d48
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140003ec8
lea rdx, [rbp - 0x36]
mov rcx, rax
call fcn.140002060
mov rbx, rax
jmp 0x140003ecb
mov rbx, rdi
mov qword [rbp - 0x58], rbx
mov rcx, rbx
call fcn.140006e00
call fcn.140010430
mov rcx, rax
call fcn.140010420
test al, al
jne 0x140003f10
mov dword [0x140036030], 0x800001
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x140036034], eax
mov dword [0x140036038], edi
lea rcx, [0x140036030]
call fcn.1400078a0
mov rcx, rbx
call fcn.140004b70
mov r8b, 1
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.140004ef0
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140003f76
lea r8, [rbp - 0x50]
mov rdx, qword [rbp - 0x48]
call fcn.1400012c0
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x50]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003ff5
call fcn.140012d84
mov dl, 1
mov rcx, rbx
call fcn.140007210
mov rcx, rbx
call fcn.140004a00
mov rcx, rax
call fcn.140008460
mov rcx, rbx
call fcn.140004a10
mov rcx, rax
call fcn.140011c30
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140002cc0
mov rcx, rbx
call fcn.140007520
mov rcx, rbx
call fcn.140004a00
mov rcx, qword [rax + 0x18]
cmp byte [rcx], 3
jne 0x140003fb4
mov rcx, rbx
call fcn.140004e20
jmp 0x140003fb4
mov eax, 0xffffffff
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140012ea0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
call fcn.140018ca4
nop
int3