Function at 0x1800af850
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x180135928]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov ebx, dword [rsp + 0x40]
lea eax, [rcx + 0x5dc]
mov qword [rsp + 0x48], r9
mov r13, rdx
mov dword [rsp + 0x38], ecx
mov r11, r9
lea rdx, [0x180000000]
mov r12, r8
mov r15d, ecx
mov esi, ecx
cmp ecx, eax
jae 0x1800afe1e
mov rax, qword [rsp + 0x48]
mov r14, qword [rsp + 0x48]
mov qword [rsp + 0x30], rax
lea eax, [rcx + 0x5dc]
lea rcx, [0x1801141bc]
cmp esi, 0x15c
ja 0x1800afa63
je 0x1800afa10
lea eax, [rsi - 0xc]
cmp eax, 0xfa
ja case.default.0x1800af8fe
movzx eax, byte [rdx + rax + 0xaffe0]
mov ecx, dword [rdx + rax*4 + 0xaffc4]
add rcx, rdx
jmp rcx
mov ecx, dword [r12]
cmp ecx, 3
jge 0x1800af95b
mov eax, 0xfc
nop
cmp eax, 0xfc
je 0x1800af94a
cmp eax, 0x1ac
jne 0x1800af94f
mov eax, ebx
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.180106610
mov rbx, qword [rsp + 0x1f0]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, 0xffffffe8
add eax, 0xb0
cmp eax, 0x25c
jb 0x1800af910
mov r9, qword [r13 + 0x60]
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], ecx
mov r8d, 4
mov rcx, r11
call fcn.180037590
mov r10, qword [rsp + 0x30]
lea eax, [r15 + 0x5dc]
mov r11, qword [rsp + 0x48]
lea rdx, [0x180000000]
add esi, 0x7d
cmp esi, eax
jae 0x1800afe28
jmp 0x1800af8c5
mov eax, dword [r13 + 0x1c]
mov dword [r12], eax
jmp case.0x1800af8fe.18
lea r14, str._sFar_plane_at__f
jmp case.0x1800af8fe.18
mov qword [rsp + 0x68], r11
test r13, r13
je 0x1800af9cf
test r12, r12
je 0x1800af9cf
test r11, r11
je case.0x1800af8fe.18
mov eax, dword [r13 + 0x1c]
cmp dword [r12], eax
jae case.0x1800af8fe.18
mov ecx, 0x49
mov eax, ecx
sub eax, 0x48
je case.0x1800afe6e.0
cmp eax, 1
jne 0x1800af9e7
lea ebx, [rax - 2]
dec ecx
cmp ecx, 0x47
ja 0x1800af9d4
jmp case.0x1800af8fe.18
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je case.0x1800af8fe.18
mov r8d, dword [r13 + 0x1c]
mov rdx, qword [r13 + 0x20]
call sub.VCRUNTIME140.dll_memcpy
jmp case.0x1800af8fe.18
cmp dword [r11], 0
mov qword [rsp + 0x58], rcx
jle 0x1800afe14
mov r8, qword [r12]
xor edx, edx
lea ecx, [rdx + 0x30]
call fcn.180054480
test eax, eax
je case.0x1800af8fe.18
mov rax, qword [r12]
xor r9d, r9d
mov qword [rsp + 0x28], 0
xor r8d, r8d
mov edx, 0xe0
mov qword [rsp + 0x20], rax
xor ecx, ecx
call fcn.1800a3a80
mov qword [rsp + 0x58], rax
jmp case.0x1800af8fe.18
mov eax, esi
sub eax, 0x183
je 0x1800afe06
sub eax, 0x56
je 0x1800afdfa
sub eax, 0x7d
je 0x1800afc14
sub eax, 0x7d
je 0x1800afab7
cmp eax, 0x7d
jne case.0x1800af8fe.18
mov eax, 0x33
cmp eax, 0x33
je 0x1800afc40
add eax, 0x2046
cmp eax, 0x2046
jbe 0x1800afa95
mov r10, r12
mov qword [rsp + 0x30], r12
jmp 0x1800af97b
mov rax, qword [rsp + 0x58]
movsx ecx, byte [rax]
sub ecx, 0x6d
je 0x1800afb8b
sub ecx, 1
je 0x1800afb60
sub ecx, 4
je 0x1800afaf0
sub ecx, 1
je 0x1800afb18
cmp ecx, 3
jne 0x1800afbce
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rbp - 0x74]
lea rdx, str._bprovidence_b
mov r9d, dword [rbp - 0x78]
mov rcx, r13
mov r8d, dword [rbp - 0x7c]
mov dword [rsp + 0x20], eax
call fcn.180105df0
mov esi, 0x2d3
jmp case.0x1800af8fe.18
mov edi, 0x4b
nop dword [rax]
mov eax, edi
sub eax, 0x4a
je 0x1800afc0a
cmp eax, 1
jne 0x1800afb4d
mov r9, r14
mov dword [rsp + 0x40], 0xffffffff
mov r8, r13
lea rdx, [rsp + 0x40]
mov ecx, 0xcd
call fcn.1800612d0
dec edi
cmp edi, 0x49
ja 0x1800afb20
nop dword [rax]
nop dword [rax + rax]
lea r9, str.localhost
mov dword [rsp + 0x40], 9
mov r8, r13
lea rdx, [rsp + 0x40]
mov ecx, 0xcd
call fcn.1800612d0
mov esi, 0x2d3
jmp case.0x1800af8fe.18
mov edi, 0x64
cmp edi, 0x64
je 0x1800afb9f
cmp edi, 0x2774
je 0x1800afc0a
jmp 0x1800afbc0
lea r9, [0x1801141e0]
mov dword [rsp + 0x40], 3
mov r8, r13
lea rdx, [rsp + 0x40]
mov ecx, 0xcd
call fcn.1800612d0
add edi, 0x2710
cmp edi, 0x4e20
jbe 0x1800afb90
mov edi, 0x52
mov eax, edi
sub eax, 0x51
je 0x1800afc0a
cmp eax, 1
jne 0x1800afc03
mov eax, dword [rbp - 0x74]
lea rdx, str.permission:contentFilterPrivate
mov r9d, dword [rbp - 0x7c]
mov r8, r14
mov dword [rsp + 0x28], eax
mov rcx, r13
mov eax, dword [rbp - 0x78]
mov dword [rsp + 0x20], eax
call fcn.180105df0
dec edi
cmp edi, 0x50
ja 0x1800afbd3
mov esi, 0x2d3
jmp case.0x1800af8fe.18
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp eax, 1
je 0x1800afc6e
mov edi, 0x94
nop dword [rax + rax]
mov eax, edi
sub eax, 0x94
je 0x1800afc47
cmp eax, 1
jne 0x1800afc64
nop
xor eax, eax
jmp 0x1800af920
mov r9, r14
mov dword [rsp + 0x40], 0xffffffff
mov r8, r13
lea rdx, [rsp + 0x40]
mov ecx, 0xcd
call fcn.1800612d0
inc edi
cmp edi, 0x96
jb 0x1800afc30
cmp dword [rbp - 0x70], 2
jne case.0x1800af8fe.18
cmp dword [rbp - 0x7c], 4
ja 0x1800afc8a
lea r14, str.primitive_ctessinner
jmp case.0x1800af8fe.18
cmp dword [rbp - 0x7c], 5
jne 0x1800afd4d
mov eax, 0x61
nop dword [rax]
cmp eax, 0x61
je 0x1800afcba
cmp eax, 0x4557
jne 0x1800afd38
mov esi, 0x256
jmp 0x1800afd38
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x1800afccd
sub eax, 1
je 0x1800afcf3
cmp eax, 1
je 0x1800afd0b
jmp 0x1800afd33
mov ecx, 0xd2
mov eax, ecx
sub eax, 0xd2
je 0x1800afce2
cmp eax, 1
je 0x1800afd33
jmp 0x1800afce9
lea r14, str.GetUserDataByKeyPrefix
inc ecx
cmp ecx, 0xd4
jb 0x1800afcd2
mov eax, 0x9e
cmp eax, 0x9e
je 0x1800afd2c
add eax, 0x6674
cmp eax, 0x6674
jbe 0x1800afcf8
mov eax, 0x2c
cmp eax, 0x2c
je 0x1800afd23
add eax, 0xdc
cmp eax, 0xdc
jbe 0x1800afd10
jmp 0x1800afd33
lea r14, str.WsStartWriterCanonicalization
jmp 0x1800afd33
lea r14, str.UpdateEncryptionKeys
mov eax, 0x61
add eax, 0x44f6
cmp eax, 0x89ec
jbe 0x1800afca0
jmp case.0x1800af8fe.18
cmp dword [rbp - 0x7c], 6
jne case.0x1800af8fe.18
mov ecx, 0x70
nop dword [rax]
mov eax, ecx
sub eax, 0x70
je 0x1800afd6e
cmp eax, 1
je 0x1800afde0
jmp 0x1800afdea
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x1800afd8d
sub eax, 1
je 0x1800afda3
sub eax, 1
je 0x1800afdd0
cmp eax, 1
jne 0x1800afde0
lea r14, str.dom_storage__s_0x_X
jmp 0x1800afde0
mov eax, 0x7e
cmp eax, 0x7e
je 0x1800afdd9
add eax, 0xa7
cmp eax, 0x125
jb 0x1800afd92
mov ecx, 0xdb
nop dword [rax + rax]
mov eax, ecx
sub eax, 0xda
je 0x1800afde0
cmp eax, 1
jne 0x1800afdc5
lea r14, str.NewMessageToContact
dec ecx
cmp ecx, 0xd9
ja 0x1800afdb0
nop
lea r14, str.err_fe_unable_to_open_logfile
jmp 0x1800afde0
lea r14, str.com_yourkit_probes_This
mov ecx, 0x71
mov esi, 0x256
inc ecx
cmp ecx, 0x72
jb 0x1800afd60
jmp case.0x1800af8fe.18
mov dword [rbp - 0x80], SHRegGetIntW
jmp case.0x1800af8fe.18
xor ebx, ebx
jmp case.0x1800af8fe.18
lea eax, [r15 + 0x5dc]
mov r10, qword [rsp + 0x30]
jmp 0x1800af982
mov r10, qword [rsp + 0x48]
mov qword [rsp + 0x30], r10
lea esi, [r15 + 0xc]
cmp r15d, esi
jae case.0x1800afe6e.0
mov r12, qword [rsp + 0x48]
lea edi, [r15 - 0xc]
mov r15, qword [rsp + 0x48]
mov r14, qword [rsp + 0x48]
mov eax, dword [rsp + 0x38]
nop dword [rax]
cmp edi, 0x88
ja case.default.0x1800afe6e
movzx eax, byte [rdx + rdi + 0xb0104]
mov ecx, dword [rdx + rax*4 + 0xb00dc]
add rcx, rdx
jmp rcx
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x60]
xor r9d, r9d
mov qword [rsp + 0x20], r11
xor r8d, r8d
mov edx, 0xe0
call fcn.1800a3a80
mov r12, rax
mov r10, qword [rsp + 0x30]
jmp case.0x1800afe6e.9
xor ebx, ebx
jmp case.0x1800afe6e.9
xor edx, edx
mov r8, r13
lea ecx, [rdx + 0x30]
call fcn.180054480
test eax, eax
je 0x1800afc40
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor r8d, r8d
mov edx, 0xe0
call fcn.1800a3a80
mov r10, qword [rsp + 0x30]
mov r15, rax
jmp case.0x1800afe6e.9
mov eax, dword [rsp + 0x60]
lea r8, [rsp + 0x40]
mov dword [rsp + 0x68], eax
lea rdx, [rsp + 0x68]
mov eax, dword [rsp + 0x50]
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], eax
mov r9, r12
mov eax, dword [rsp + 0x70]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x20], 0x2f
call fcn.18007c830
mov r10, qword [rsp + 0x30]
jmp case.0x1800afe6e.9
cmp dword [rsp + 0x50], 1
jl 0x1800afc40
jmp case.0x1800afe6e.9
mov r9d, dword [rsp + 0x50]
lea rax, [rsp + 0x70]
mov edx, dword [r14 + 0x10]
mov r8, r15
mov rcx, qword [r14 + 8]
mov qword [rsp + 0x20], rax
call qword [r10 + 8]
test eax, eax
je 0x1800afe96
mov eax, 0x3a
cmp eax, 0x3a
je 0x1800aff79
cmp eax, 0x1a0e
je case.0x1800afe6e.0
jmp 0x1800aff7b
xor ebx, ebx
add eax, 0x19d4
cmp eax, 0x33a8
jbe 0x1800aff67
mov r10, qword [rsp + 0x30]
jmp case.0x1800afe6e.9
mov r15, qword [rsp + 0x48]
jmp case.0x1800afe6e.9
mov r12, qword [rsp + 0x48]
mov r14, qword [r10]
mov eax, dword [rsp + 0x38]
inc eax
inc edi
mov dword [rsp + 0x38], eax
cmp eax, esi
jae case.0x1800afe6e.0
mov r11, qword [rsp + 0x48]
lea rdx, [0x180000000]
jmp 0x1800afe50