Function at 0x140097e80
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x160
mov rax, qword [0x14012a4f8]
xor rax, rsp
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x170]
mov dword [rax], 0xffffffff
mov rax, qword [rsp + 0x178]
mov dword [rax], 0xffffffff
lea rdi, [rsp + 0x30]
xor eax, eax
mov ecx, 0x11c
rep stosb byte [rdi], al
mov dword [rsp + 0x30], 0x11c
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x140097f03
mov dword [rsp + 0x30], 0x114
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x140097f03
xor al, al
jmp 0x14009811b
movzx ecx, word [rsp + 0x144]
mov rax, qword [rsp + 0x178]
mov dword [rax], ecx
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x150], eax
cmp dword [rsp + 0x150], 0
je 0x14009810b
cmp dword [rsp + 0x150], 1
je 0x1400980b1
cmp dword [rsp + 0x150], 2
je 0x140097f4b
jmp 0x140098119
cmp dword [rsp + 0x34], 4
ja 0x140097f65
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x68
jmp 0x1400980af
cmp dword [rsp + 0x34], 5
jne 0x140097f86
cmp dword [rsp + 0x38], 0
jne 0x140097f86
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x69
jmp 0x1400980af
cmp dword [rsp + 0x34], 5
jne 0x140097fa7
cmp dword [rsp + 0x38], 1
jne 0x140097fa7
mov rax, qword [rsp + 0x170]
mov dword [rax], 0xc8
jmp 0x1400980af
cmp dword [rsp + 0x34], 5
jne 0x140097fc8
cmp dword [rsp + 0x38], 2
jne 0x140097fc8
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x12c
jmp 0x1400980af
cmp dword [rsp + 0x34], 6
jne 0x140098006
cmp dword [rsp + 0x38], 0
jne 0x140098006
movzx eax, byte [rsp + 0x14a]
cmp eax, 1
jne 0x140097ff3
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x190
jmp 0x140098001
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x1f4
jmp 0x1400980af
cmp dword [rsp + 0x34], 6
jne 0x140098041
cmp dword [rsp + 0x38], 1
jne 0x140098041
movzx eax, byte [rsp + 0x14a]
cmp eax, 1
jne 0x140098031
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x258
jmp 0x14009803f
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x2bc
jmp 0x1400980af
cmp dword [rsp + 0x34], 6
jne 0x14009807c
cmp dword [rsp + 0x38], 2
jne 0x14009807c
movzx eax, byte [rsp + 0x14a]
cmp eax, 1
jne 0x14009806c
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x384
jmp 0x14009807a
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x320
jmp 0x1400980af
cmp dword [rsp + 0x34], 6
ja 0x140098091
cmp dword [rsp + 0x34], 6
jne 0x1400980a1
cmp dword [rsp + 0x38], 2
jbe 0x1400980a1
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x258
jmp 0x1400980af
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x258
jmp 0x140098119
cmp dword [rsp + 0x34], 4
jne 0x1400980cf
cmp dword [rsp + 0x38], 0
jne 0x1400980cf
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x65
jmp 0x140098109
cmp dword [rsp + 0x34], 4
jne 0x1400980ed
cmp dword [rsp + 0x38], 0xa
jne 0x1400980ed
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x66
jmp 0x140098109
cmp dword [rsp + 0x34], 4
jne 0x140098109
cmp dword [rsp + 0x38], 0x5a
jne 0x140098109
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x67
jmp 0x140098119
mov rax, qword [rsp + 0x170]
mov dword [rax], 0x64
mov al, 1
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.1400ad2c0
add rsp, 0x160
pop rdi
ret