Function at 0x140006d80
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
lea rbp, [rsp - 0x440]
sub rsp, 0x540
xor ebx, ebx
mov r13, r9
mov edi, r8d
mov rsi, rdx
mov r12, rcx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x58], ebx
mov qword [rsp + 0x50], rbx
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jae 0x140006dda
lea eax, [rbx + 1]
jmp 0x140006fe3
cmp dword [0x14001e6e8], ebx
jne 0x140006de9
xor eax, eax
jmp 0x140006fe3
mov rax, qword [r12]
test rax, rax
je 0x140006de2
cmp qword [rax], rbx
je 0x140006de2
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x60]
mov edx, edi
mov rcx, rsi
mov dword [rsp + 0x20], 0x800d
call fcn.140007000
mov rdi, qword [rsp + 0x60]
test eax, eax
je 0x140006fa5
mov rcx, qword [str.Sx8axncKx6rb8P]
lea rdx, [rbp + 0x40]
call fcn.14000deb0
movzx eax, byte [rbp + 0x40]
lea r11, [rbp + 0x40]
lea rcx, [rsp + 0x70]
test al, al
je 0x140006e57
movsx eax, al
inc r11
add rcx, 2
mov word [rcx - 2], ax
movzx eax, byte [r11]
test al, al
jne 0x140006e41
mov word [rcx], bx
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
xor r9d, r9d
xor r8d, r8d
call qword [0x14001e740]
test eax, eax
js 0x140006fa5
mov rcx, qword [str.Sx86xcAlGap6Otdf]
lea rdx, [rbp + 0x40]
call fcn.14000deb0
movzx eax, byte [rbp + 0x40]
lea r11, [rbp + 0x40]
lea rcx, [rsp + 0x70]
test al, al
je 0x140006eb6
nop dword [rax]
movsx eax, al
inc r11
add rcx, 2
mov word [rcx - 2], ax
movzx eax, byte [r11]
test al, al
jne 0x140006ea0
mov word [rcx], bx
mov rcx, qword [r12]
mov dword [rsp + 0x30], ebx
mov eax, dword [rcx + 8]
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov rax, qword [rcx]
mov rcx, qword [rsp + 0x50]
xor edx, edx
mov qword [rsp + 0x20], rax
call qword [0x14001e718]
test eax, eax
js 0x140006fa5
mov eax, dword [rbp + 0x480]
test eax, eax
jne 0x140006f6e
mov rcx, qword [str.xhp1iJcn9LQpGTAH_YSg]
lea rdx, [rbp + 0x40]
call fcn.14000deb0
movzx eax, byte [rbp + 0x40]
lea r11, [rbp + 0x40]
lea rcx, [rsp + 0x70]
test al, al
je 0x140006f36
nop word [rax + rax]
movsx eax, al
inc r11
add rcx, 2
mov word [rcx - 2], ax
movzx eax, byte [r11]
test al, al
jne 0x140006f20
mov word [rcx], bx
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x58]
lea r8, [rbp + 0x480]
lea rdx, [rsp + 0x70]
mov r9d, 4
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
call qword [0x14001e700]
test eax, eax
js 0x140006fa5
mov eax, dword [rbp + 0x480]
mov r9d, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
mov r8, rdi
xor edx, edx
mov qword [rsp + 0x20], r13
call qword [0x14001e720]
mov r11d, eax
cmp eax, 0xc000a000
je 0x140006fa5
mov eax, 1
test r11d, r11d
cmovns ebx, eax
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140006fb5
call qword [0x14001e730]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140006fc7
xor edx, edx
call qword [0x14001e738]
test rdi, rdi
je 0x140006fe1
mov rcx, qword [0x14001e780]
mov r8, rdi
mov edx, 8
call qword [0x14001e798]
mov eax, ebx
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rbp
ret