Function at 0x14000fa30
Capabilities:
Check os version

Disassembly:
mov rax, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x170
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov rax, qword [0x14005af80]
xor rax, rsp
mov qword [rsp + 0x160], rax
mov rbp, rcx
mov qword [rsp + 0x20], rcx
xor r8d, r8d
lea edx, [r8 + 0x66]
call fcn.14001d3b4
nop
lea rax, [0x14004ccc8]
mov qword [rbp], rax
lea rax, [0x14004afe8]
mov qword [rbp + 0x110], rax
xor r14d, r14d
mov qword [rbp + 0x128], r14
lea rax, [0x140047e28]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x138], r14
mov qword [rbp + 0x130], rax
mov r12d, 1
mov dword [rbp + 0x118], r12d
mov word [rbp + 0x144], r14w
mov word [rbp + 0x11c], r14w
lea rsi, [rbp + 0x160]
mov rcx, rsi
call fcn.1400077a0
nop
lea rcx, [rbp + 0x1570]
xor edx, edx
call fcn.14000b7c0
nop
lea rcx, [rbp + 0x1db8]
xor edx, edx
call fcn.140001010
nop
lea rdi, [rbp + 0x2268]
mov qword [rsp + 0x28], rdi
mov rcx, rdi
call fcn.14001d278
mov qword [rdi + 0xe8], r14
lea rax, [0x14004b948]
mov qword [rdi], rax
lea rcx, [rdi + 0xf0]
call fcn.140016de8
lea r13, [0x140045c98]
mov qword [rdi + 0xf0], r13
lea rcx, [rdi + 0x198]
call fcn.140016de8
mov qword [rdi + 0x198], r13
lea rcx, [rdi + 0x240]
call fcn.140016de8
lea r11, [0x1400459d8]
mov qword [rdi + 0x240], r11
lea rcx, [rbp + 0x2550]
xor edx, edx
call fcn.140001cd0
nop
lea rcx, [rbp + 0x3928]
call fcn.140012ec0
nop
lea rcx, [rbp + 0x3a60]
call fcn.140016de8
mov qword [rbp + 0x3a60], r13
lea rcx, [rbp + 0x3b08]
call fcn.140016de8
mov qword [rbp + 0x3b08], r13
lea rcx, [rbp + 0x3bb0]
call fcn.140016de8
mov qword [rbp + 0x3bb0], r13
lea rcx, [rbp + 0x3c58]
call fcn.140016de8
lea r11, [0x140045f58]
mov qword [rbp + 0x3c58], r11
lea rcx, [rbp + 0x3d00]
call fcn.140016de8
lea r11, [0x140046fa8]
mov qword [rbp + 0x3d00], r11
lea edx, [r14 + 0xa]
lea rcx, [rbp + 0x3da8]
call fcn.140023f30
lea r11, [0x14004cf88]
mov qword [rbp + 0x3da8], r11
call fcn.14001f2e8
call fcn.14001f2e8
mov edx, 0x93
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x1568], r14
mov dword [rbp + 0xf4], r14d
mov dword [rbp + 0xe8], r14d
mov dword [rbp + 0xec], r14d
mov dword [rbp + 0xf8], r14d
mov dword [rbp + 0xfc], r14d
mov dword [rbp + 0xf0], r12d
mov dword [rbp + 0x158], r14d
mov dword [rbp + 0x3de0], r14d
mov dword [rbp + 0x100], r14d
mov qword [rbp + 0x1660], rsi
mov qword [rbp + 0x2260], rsi
mov qword [rbp + 0x2640], rsi
xor eax, eax
mov dword [rbp + 0x104], eax
mov dword [rbp + 0x108], eax
xor edx, edx
mov r8d, 0x11c
lea rcx, [rsp + 0x40]
call fcn.14002ac20
mov dword [rsp + 0x40], 0x114
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x14000fcfe
cmp dword [rsp + 0x50], 2
jne 0x14000fd15
mov eax, dword [rsp + 0x44]
cmp eax, 5
jb 0x14000fd09
xor edx, edx
mov r8d, 0x11c
lea rcx, [rsp + 0x40]
call fcn.14002ac20
mov dword [rsp + 0x40], 0x11c
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [rsp + 0x50], 2
jne 0x14000fd15
mov eax, dword [rsp + 0x44]
cmp eax, 5
jne 0x14000fd15
cmp dword [rsp + 0x48], 1
je 0x14000fd18
mov r12d, r14d
and dword [rbp + 0x104], 0xfffffffe
and r12d, 1
or dword [rbp + 0x104], r12d
mov rax, rbp
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140029b40
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret