Function at 0x140001000
Capabilities:
Check os version
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
mov rax, qword [0x140004040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
test rax, rax
je 0x1400012b8
cmp dword [rax + 0x118], 0xa
jne 0x1400012b8
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov eax, 0x5a4d
mov rdi, qword [rcx]
mov rcx, qword [rdi + 0x20]
cmp word [rcx], ax
jne 0x1400012b8
movsxd rax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jne 0x1400012b8
mov ebx, dword [rax + rcx + 0x88]
add rbx, rcx
je 0x1400012b8
xorps xmm0, xmm0
lea r8, [rbp - 0x49]
movabs rax, 0xf5bd373480a6b89b
mov rdx, rbx
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x41], rax
movups xmmword [rbp - 0x39], xmm0
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
call fcn.1400012e0
test eax, eax
je 0x1400012b8
mov rcx, qword [rdi + 0x20]
lea r8, [rbp - 0x19]
movabs rax, 0x64dc7db288c5015f
mov rdx, rbx
mov qword [rbp - 0x11], rax
call fcn.1400012e0
test eax, eax
je 0x1400012b8
mov rcx, qword [rdi + 0x20]
lea r8, [rbp - 0x31]
movabs rax, 0x858bcb1046fb6a37
mov rdx, rbx
mov qword [rbp - 0x29], rax
call fcn.1400012e0
test eax, eax
je 0x1400012b8
mov rcx, qword [rdi + 0x20]
lea r8, [rbp - 1]
movabs rax, 0xc6a2fa174e551bcb
mov rdx, rbx
mov qword [rbp + 7], rax
call fcn.1400012e0
test eax, eax
je 0x1400012b8
movsd xmm0, qword [0x140003240]
xor edi, edi
movzx ebx, word [0x140003248]
movzx ecx, word [rbp - 0x39]
movsd qword [rbp + 0x3f], xmm0
mov word [rbp + 0x47], bx
mov qword [rbp + 0x17], rdi
mov qword [rbp + 0x2f], 0xa
call fcn.140001440
lea r9, [rbp + 0x2f]
mov dword [rsp + 0x28], 4
xor r8d, r8d
mov dword [rsp + 0x20], 0x1000
lea rdx, [rbp + 0x17]
lea rcx, [rdi - 1]
call fcn.140001451
mov rcx, qword [rbp + 0x17]
lea rax, [rbp + 0x3f]
mov byte [rcx + 8], bl
cmp rcx, rax
jae 0x1400011d8
movzx eax, byte [rbp + 0x3f]
mov byte [rcx], al
movzx eax, byte [rbp + 0x40]
mov byte [rcx + 1], al
movzx eax, byte [rbp + 0x41]
mov byte [rcx + 2], al
movzx eax, byte [rbp + 0x42]
mov byte [rcx + 3], al
movzx eax, byte [rbp + 0x43]
mov byte [rcx + 4], al
movzx eax, byte [rbp + 0x44]
mov byte [rcx + 5], al
movzx eax, byte [rbp + 0x45]
mov byte [rcx + 6], al
movzx eax, byte [rbp + 0x46]
mov byte [rcx + 7], al
movzx eax, byte [rbp + 0x48]
mov byte [rcx + 9], al
jmp 0x140001216
movzx eax, byte [rbp + 0x48]
mov byte [rcx + 9], al
movzx eax, byte [rbp + 0x46]
mov byte [rcx + 7], al
movzx eax, byte [rbp + 0x45]
mov byte [rcx + 6], al
movzx eax, byte [rbp + 0x44]
mov byte [rcx + 5], al
movzx eax, byte [rbp + 0x43]
mov byte [rcx + 4], al
movzx eax, byte [rbp + 0x42]
mov byte [rcx + 3], al
movzx eax, byte [rbp + 0x41]
mov byte [rcx + 2], al
movzx eax, byte [rbp + 0x40]
mov byte [rcx + 1], al
movzx eax, byte [rbp + 0x3f]
mov byte [rcx], al
movzx ecx, word [rbp - 0x21]
mov dword [rbp + 0x27], edi
call fcn.140001440
lea rax, [rbp + 0x27]
mov r9d, 0x20
lea r8, [rbp + 0x2f]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x17]
mov rcx, 0xffffffffffffffff
call fcn.140001451
movzx ecx, word [rbp - 9]
mov qword [rbp + 0x1f], 0xffffffffffffffff
call fcn.140001440
mov rax, qword [rbp + 0x17]
lea rcx, [rbp + 0x1f]
mov qword [rsp + 0x50], rdi
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x48], rdi
xor r8d, r8d
mov qword [rsp + 0x40], rdi
mov edx, 0x1fffff
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.140001451
movzx ecx, word [rbp + 0xf]
mov qword [rbp + 0x37], 0xffffffffff676980
call fcn.140001440
mov rcx, qword [rbp + 0x1f]
lea r8, [rbp + 0x37]
xor edx, edx
call fcn.140001451
xor eax, eax
jmp 0x1400012bd
mov eax, 1
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140001470
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret