Function at 0x14004ba90
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x140193440]
xor rax, rsp
mov qword [rbp + 0x90], rax
xor r12d, r12d
mov r15, rcx
mov ebx, r12d
mov dword [rsp + 0x44], r12d
cmp qword [0x1401e2c20], rbx
mov esi, r12d
mov edi, r12d
mov word [rsp + 0x48], r12w
mov word [rsp + 0x40], r12w
jne 0x14004bb0e
lea rcx, str.Kernel32
call fcn.14004a560
mov rcx, rax
lea rdx, str.IsWow64Process2
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e2c20], rax
xorps xmm0, xmm0
lea r13, [r15 + 0x1a]
movups xmmword [r15], xmm0
xor eax, eax
mov r8d, 0x12
movups xmmword [r15 + 0x10], xmm0
lea rdx, str.Windows_Undefined
mov rcx, r13
movups xmmword [r15 + 0x20], xmm0
movups xmmword [r15 + 0x30], xmm0
movups xmmword [r15 + 0x40], xmm0
movups xmmword [r15 + 0x50], xmm0
movups xmmword [r15 + 0x60], xmm0
movups xmmword [r15 + 0x70], xmm0
movups xmmword [r15 + 0x80], xmm0
mov qword [r15 + 0x90], rax
mov dword [r15 + 0x98], eax
call fcn.140135ea0
xorps xmm0, xmm0
mov byte [r13 + 0x11], bl
xor eax, eax
mov dword [rsp + 0x50], 0x9c
lea rcx, [rsp + 0x50]
mov qword [rbp - 0x1c], rax
movups xmmword [rsp + 0x54], xmm0
movups xmmword [rsp + 0x64], xmm0
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rbp - 0x7c], xmm0
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x14004bbff
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x94
xor eax, eax
lea rcx, [rsp + 0x50]
movups xmmword [rsp + 0x54], xmm0
mov qword [rbp - 0x1c], rax
movups xmmword [rsp + 0x64], xmm0
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rbp - 0x7c], xmm0
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x14004c7a9
cmp dword [rsp + 0x60], 2
lea r9, [0x140000000]
mov qword [rsp + 0x1d8], r14
jne 0x14004beba
cmp dword [rsp + 0x54], 6
ja 0x14004bc31
jne 0x14004bd4a
cmp dword [rsp + 0x58], 2
jb 0x14004bd55
mov r8b, 1
mov edx, 2
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov ebx, dword [rsp + 0x54]
mov r14, rax
cmp ebx, 9
ja 0x14004bd43
xorps xmm0, xmm0
mov dword [rbp - 0x10], 0x9c
xor eax, eax
mov dword [rbp - 0xc], ebx
mov r8, r14
mov dword [rbp + 0x88], eax
mov edx, 2
lea rcx, [rbp - 0x10]
movups xmmword [rbp - 8], xmm0
movups xmmword [rbp + 8], xmm0
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp + 0x28], xmm0
movups xmmword [rbp + 0x38], xmm0
movups xmmword [rbp + 0x48], xmm0
movups xmmword [rbp + 0x58], xmm0
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rbp + 0x78], xmm0
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x14004bcac
inc ebx
cmp ebx, 9
jbe 0x14004bc51
jmp 0x14004bd43
cmp dword [rsp + 0x54], ebx
jae 0x14004bcbb
mov dword [rsp + 0x54], ebx
mov dword [rsp + 0x58], r12d
mov r8b, 1
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov edi, dword [rsp + 0x58]
mov r14, rax
cmp edi, 9
ja 0x14004bd43
nop word [rax + rax]
xorps xmm0, xmm0
lea rcx, [rbp - 0x10]
xor eax, eax
mov r8, r14
movups xmmword [rbp - 0x10], xmm0
mov edx, 1
mov dword [rbp - 0x10], 0x9c
mov dword [rbp - 8], edi
movups xmmword [rbp], xmm0
mov qword [rbp + 0x80], rax
movups xmmword [rbp + 0x10], xmm0
mov dword [rbp + 0x88], eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoA]
test eax, eax
jne 0x14004bd3f
inc edi
cmp edi, 9
jbe 0x14004bce0
jmp 0x14004bd43
mov dword [rsp + 0x58], edi
lea r9, [0x140000000]
cmp dword [rsp + 0x54], 0xf
ja 0x14004beba
mov eax, dword [rsp + 0x58]
cmp eax, 0xf
ja 0x14004beba
cmp byte [rbp - 0x16], 1
mov edx, r12d
mov r8d, dword [rsp + 0x54]
setbe dl
shl r8d, 4
or r8d, eax
mov dword [r15], r8d
lea eax, [r8 - 0x51]
cmp eax, 0x5f
ja case.0x14004bd9c.90
movzx eax, byte [r9 + rax + 0x4c7fc]
mov ecx, dword [r9 + rax*4 + 0x4c7d4]
add rcx, r9
jmp rcx
lea rsi, [0x1401653cc]
jmp 0x14004beba
test edx, edx
je 0x14004bdba
lea rsi, str.XP_64
jmp 0x14004beba
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
lea rcx, str.Server_2003
lea rsi, str.Server_2003_R2
cmove rsi, rcx
jmp 0x14004beba
test edx, edx
lea rax, str.Vista
lea rsi, str.Server_2008
cmovne rsi, rax
jmp 0x14004beba
test edx, edx
lea rax, [0x14016540c]
lea rsi, str.Server_2008_R2
cmovne rsi, rax
jmp 0x14004beba
test edx, edx
lea rax, [0x140165420]
lea rsi, str.Server_2012
cmovne rsi, rax
jmp 0x14004beba
test edx, edx
lea rax, [0x140165434]
lea rsi, str.Server_2012_R2
cmovne rsi, rax
jmp 0x14004beba
test edx, edx
lea rax, str.10__Preview_1_
lea rsi, str.Server_10__Preview_1_
cmovne rsi, rax
jmp 0x14004beba
mov eax, dword [rsp + 0x5c]
cmp eax, 0x4e20
jae 0x14004be86
test edx, edx
je 0x14004be6d
lea rsi, [0x140165470]
jmp 0x14004beba
cmp eax, 0x4563
lea rcx, str.Server_2016
lea rsi, str.Server_2019
cmovb rsi, rcx
jmp 0x14004beba
mov dword [r15], 0xb0
mov ebx, 0xb
test edx, edx
lea rax, [0x140165494]
lea rsi, str.Server_2022
cmovne rsi, rax
jmp 0x14004beba
cmp r8d, 0x51
jae 0x14004beb3
mov dword [r15], r12d
jmp 0x14004beba
lea rsi, str.12_or_later
cmp qword [0x1401e2c20], r12
mov dword [r15 + 4], ebx
mov dword [r15 + 8], edi
je 0x14004bef4
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x48]
call qword [0x1401e2c20]
test eax, eax
je 0x14004bef4
movzx eax, word [rsp + 0x40]
mov word [r15 + 0x18], ax
jmp 0x14004bf07
lea rcx, str.Note:_Underlying_Windows_architecture_was_guessed_and_may_be_incorrect...
mov word [r15 + 0x18], 0x8664
call fcn.14004f2f0
movzx ecx, word [r15 + 0x18]
sub ecx, 0x14c
je 0x14004bf4d
sub ecx, 0x74
je 0x14004bf44
sub ecx, 0x84a4
je 0x14004bf3b
cmp ecx, 0x2400
je 0x14004bf32
lea rdi, str.unknown
jmp 0x14004bf54
lea rdi, str.arm64
jmp 0x14004bf54
lea rdi, [0x14015e714]
jmp 0x14004bf54
lea rdi, [0x14015e724]
jmp 0x14004bf54
lea rdi, [0x14015e718]
movzx r9d, word [rbp - 0x1a]
lea rax, [rsp + 0x44]
movzx r8d, word [rbp - 0x1c]
mov edx, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x54]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetProductInfo]
test rsi, rsi
jne 0x14004bfb8
cmp dword [rsp + 0x60], 2
lea rax, [0x14016551c]
mov qword [rsp + 0x38], rdi
lea rcx, [0x140165520]
cmove rcx, rax
lea r9, str._s__u._u__s
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
jmp 0x14004c56d
movzx eax, word [rbp - 0x1a]
test ax, ax
je 0x14004bfde
movzx ecx, word [rbp - 0x1c]
lea r9, str._s_SP_u._u__s
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
jmp 0x14004c568
movzx eax, word [rbp - 0x1c]
test ax, ax
je 0x14004c016
mov qword [rsp + 0x30], rdi
lea r9, str._s_SP_u__s
mov dword [rsp + 0x28], eax
lea rcx, [r15 + 0x22]
mov edx, 0x76
mov qword [rsp + 0x20], rsi
mov r8, 0xffffffffffffffff
call fcn.140004fd0
jmp 0x14004c582
mov edx, dword [rsp + 0x44]
lea r8, [0x1401564ce]
cmp edx, 0x67
ja 0x14004c2c2
je 0x14004c2b6
cmp edx, 0x65
ja case.default.0x14004c504
lea r9, [0x140000000]
movzx eax, byte [r9 + rdx + 0x4c930]
mov ecx, dword [r9 + rax*4 + 0x4c85c]
add rcx, r9
jmp rcx
mov rbx, r8
jmp 0x14004c545
lea rbx, str.Ultimate
jmp 0x14004c545
lea rbx, str.Home_Basic
jmp 0x14004c545
lea rbx, str.Home_Premium
jmp 0x14004c545
lea rbx, str.Enterprise
jmp 0x14004c545
lea rbx, str.Home_Basic_N
jmp 0x14004c545
lea rbx, str.Business
jmp 0x14004c545
lea rbx, str.Server_Standard
jmp 0x14004c545
lea rbx, str.Server_Datacenter
jmp 0x14004c545
lea rbx, str.Smallbusiness_Server
jmp 0x14004c545
lea rbx, str.Server_Enterprise
jmp 0x14004c545
lea rbx, str.Starter
jmp 0x14004c545
lea rbx, str.Server_Datacenter__Core_
jmp 0x14004c545
lea rbx, str.Server_Standard__Core_
jmp 0x14004c545
lea rbx, str.Server_Enterprise__Core_
jmp 0x14004c545
lea rbx, str.Business_N
jmp 0x14004c545
lea rbx, str.Web_Server
jmp 0x14004c545
lea rbx, str.HPC_Edition
jmp 0x14004c545
lea rbx, str.Storage_Server__Essentials_
jmp 0x14004c545
lea rbx, str.Home_Premium_N
jmp 0x14004c545
lea rbx, str.Enterprise_N
jmp 0x14004c545
lea rbx, str.Ultimate_N
jmp 0x14004c545
lea rbx, str.Home_Server
jmp 0x14004c545
lea rbx, str.Server_Standard_without_Hyper_V
jmp 0x14004c545
lea rbx, str.Server_Datacenter_without_Hyper_V
jmp 0x14004c545
lea rbx, str.Server_Enterprise_without_Hyper_V
jmp 0x14004c545
lea rbx, str.Server_Datacenter_without_Hyper_V__Core_
jmp 0x14004c545
lea rbx, str.Server_Standard_without_Hyper_V__Core_
jmp 0x14004c545
lea rbx, str.Server_Enterprise_without_Hyper_V__Core_
jmp 0x14004c545
lea rbx, str.Hyper_V_Server
jmp 0x14004c545
lea rbx, str.Starter_N
jmp 0x14004c545
lea rbx, [0x140164ee4]
jmp 0x14004c545
lea rbx, str.Pro_N
jmp 0x14004c545
lea rbx, str.Server_Solutions_Premium
jmp 0x14004c545
lea rbx, str.Server_Solutions_Premium__Core_
jmp 0x14004c545
lea rbx, str.Server_Hyper_Core_V
jmp 0x14004c545
lea rbx, str.Starter_E
jmp 0x14004c545
lea rbx, str.Home_Basic_E
jmp 0x14004c545
lea rbx, str.Premium_E
jmp 0x14004c545
lea rbx, str.Pro_E
jmp 0x14004c545
lea rbx, str.Enterprise_E
jmp 0x14004c545
lea rbx, str.Ultimate_E
jmp 0x14004c545
lea rbx, str.Enterprise__Eval_
jmp 0x14004c545
lea rbx, str.Server_Standard__Eval_
jmp 0x14004c545
lea rbx, str.Server_Datacenter__Eval_
jmp 0x14004c545
lea rbx, str.Enterprise_N__Eval_
jmp 0x14004c545
lea rbx, str.Thin_PC
jmp 0x14004c545
lea rbx, str.Home_N
jmp 0x14004c545
lea rbx, str.Home_China
jmp 0x14004c545
lea rbx, str.Home_Single_Language
jmp 0x14004c545
lea rbx, str.Home
jmp 0x14004c545
lea rbx, str.Pro_with_Media_Center
jmp 0x14004c545
cmp edx, 0xa4
ja 0x14004c429
je 0x14004c41d
lea eax, [rdx - 0x69]
cmp eax, 0x39
ja case.default.0x14004c504
lea r9, [0x140000000]
movzx eax, byte [r9 + rax + 0x4c9fc]
mov ecx, dword [r9 + rax*4 + 0x4c998]
add rcx, r9
jmp rcx
lea rbx, str.Embedded
jmp 0x14004c545
lea rbx, str.Home_Connected
jmp 0x14004c545
lea rbx, str.Pro_Student
jmp 0x14004c545
lea rbx, str.Home_Connected_N
jmp 0x14004c545
lea rbx, str.Pro_Student_N
jmp 0x14004c545
lea rbx, str.Home_Connected_Single_Language
jmp 0x14004c545
lea rbx, str.Home_Connected_China
jmp 0x14004c545
lea rbx, str.Education
jmp 0x14004c545
lea rbx, str.Education_N
jmp 0x14004c545
lea rbx, str.Enterprise_LTSB
jmp 0x14004c545
lea rbx, str.Enterprise_LTSB_N
jmp 0x14004c545
lea rbx, str.Pro_S
jmp 0x14004c545
lea rbx, str.Pro_S_N
jmp 0x14004c545
lea rbx, str.Enterprise_LTSB__Eval_
jmp 0x14004c545
lea rbx, str.Enterprise_LTSB_N__Eval_
jmp 0x14004c545
lea rbx, str.Pro_Single_Language
jmp 0x14004c545
lea rbx, str.Pro_China
jmp 0x14004c545
lea rbx, str.Enterprise_Subscription
jmp 0x14004c545
lea rbx, str.Enterprise_Subscription_N
jmp 0x14004c545
lea rbx, str.Server_Datacenter_SA__Core_
jmp 0x14004c545
lea rbx, str.Server_Standard_SA__Core_
jmp 0x14004c545
lea rbx, str.Utility_VM
jmp 0x14004c545
lea rbx, str.Pro_for_Workstations
jmp 0x14004c545
lea rbx, str.Pro_for_Workstations_N
jmp 0x14004c545
lea rbx, str.Pro_for_Education
jmp 0x14004c545
cmp edx, 0xc0
ja 0x14004c4d9
je case.0x14004c504.194
lea eax, [rdx - 0xa5]
cmp eax, 0x1a
ja case.default.0x14004c504
lea r9, [0x140000000]
mov ecx, dword [r9 + rax*4 + 0x4ca38]
add rcx, r9
jmp rcx
lea rbx, str.Pro_for_Education_N
jmp 0x14004c545
lea rbx, str.Enterprise_G
jmp 0x14004c545
lea rbx, str.Enterprise_G_N
jmp 0x14004c545
lea rbx, str.Cloud
jmp 0x14004c545
lea rbx, str.Cloud_N
jmp 0x14004c545
lea rbx, str.Home_OS
jmp 0x14004c545
lea rbx, str.IoT_OS
jmp 0x14004c545
lea rbx, str.IoT_Edge_OS
jmp 0x14004c545
lea rbx, str.IoT_Enterprise
jmp 0x14004c545
lea rbx, str.Lite
jmp 0x14004c545
lea rbx, str.IoT_Enterprise_S
jmp 0x14004c545
cmp edx, 0xc8
ja 0x14004c50f
je case.0x14004c504.199
lea eax, [rdx - 0xc2]
cmp eax, 5
ja case.default.0x14004c504
lea r9, [0x140000000]
mov ecx, dword [r9 + rax*4 + 0x4caa4]
add rcx, r9
jmp rcx
lea rbx, str.XBox
jmp 0x14004c545
cmp edx, 0x197
ja 0x14004c5f2
je case.0x14004c504.199
mov eax, edx
sub eax, 0xca
je case.0x14004c45c.186
sub eax, 1
je case.0x14004c45c.183
cmp eax, 0xcb
jne case.default.0x14004c504
lea rbx, str.Azure_Server
mov qword [rsp + 0x38], rdi
lea rax, [0x14015f754]
test edx, edx
mov qword [rsp + 0x30], rbx
lea r9, str._s_s_s__s
cmovne r8, rax
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rsi
mov r8, 0xffffffffffffffff
lea rcx, [r15 + 0x22]
mov edx, 0x76
call fcn.140004fd0
mov eax, dword [rsp + 0x44]
lea r9, [rsp + 0x4c]
mov byte [r15 + 0x97], r12b
lea rdx, str.SoftwareMicrosoftWindows_NTCurrentVersionUBR
mov dword [r15 + 0x14], eax
mov rcx, 0xffffffff80000002
mov eax, dword [rsp + 0x5c]
mov dword [r15 + 0xc], eax
call fcn.14004aad0
mov r9d, dword [rsp + 0x4c]
mov r14, qword [rsp + 0x1d8]
mov dword [r15 + 0x10], r9d
test r13, r13
jne 0x14004c64f
lea rcx, [r15 + 0x1a]
mov rax, r12
mov r8, rcx
jmp 0x14004c679
lea rbx, str.Cloud_E
jmp 0x14004c545
lea rbx, str.Cloud_E_N
jmp 0x14004c545
cmp edx, 0x198
je case.0x14004c504.199
cmp edx, 0xabcdabcd
je 0x14004c643
mov dword [rsp + 0x20], edx
lea rbx, [0x1401e2c30]
mov rcx, rbx
lea r9, str._Unknown_Edition_0x_02X_
mov edx, 0x40
mov r8, 0xffffffffffffffff
call fcn.140004fd0
mov edx, dword [rsp + 0x44]
lea r8, [0x1401564ce]
mov byte [0x1401e2c6f], r12b
jmp 0x14004c545
lea rbx, str._Unlicensed_
jmp 0x14004c545
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], r12b
jne 0x14004c656
lea rcx, [r15 + 0x1a]
add rcx, rax
mov rax, 0xffffffffffffffff
mov r8, rcx
inc rax
cmp byte [rax + r13], r12b
jne 0x14004c670
mov ebx, 0x7f
mov edx, ebx
sub rdx, rax
mov eax, dword [r15 + 0xc]
lea rdi, [r8 + rdx]
mov r8, 0xffffffffffffffff
test r9d, r9d
je 0x14004c6ae
mov dword [rsp + 0x28], r9d
lea r9, str.__Build__lu._lu_
mov dword [rsp + 0x20], eax
call fcn.140004fd0
jmp 0x14004c6be
lea r9, str.__Build__lu_
mov dword [rsp + 0x20], eax
call fcn.140004fd0
mov byte [rdi - 1], r12b
test r13, r13
jne 0x14004c6d0
lea rdi, [r15 + 0x1a]
mov rax, r12
jmp 0x14004c6f9
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], r12b
jne 0x14004c6d7
lea rdi, [r15 + 0x1a]
add rdi, rax
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rax + r13], r12b
jne 0x14004c6f0
sub rbx, rax
mov rax, qword [0x1401e2ce0]
test rax, rax
jne 0x14004c754
lea rcx, str.Wldp
call fcn.14004a560
mov rcx, rax
lea rdx, str.WldpQueryWindowsLockdownMode
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401e2ce0], rax
test rax, rax
jne 0x14004c754
call fcn.14004fba0
mov r9, rax
lea r8, str.Wldp
lea rdx, str.WldpQueryWindowsLockdownMode
lea rcx, str.Unable_to_locate__s___in__s.dll:__s
call fcn.14004f2f0
jmp 0x14004c7a9
lea rcx, [rsp + 0x4c]
call rax
test eax, eax
je 0x14004c77d
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
call fcn.14004fba0
mov rdx, rax
lea rcx, str.Could_not_detect_S_Mode:__s
call fcn.14004f2f0
jmp 0x14004c7a9
cmp dword [rsp + 0x4c], r12d
setne r12b
test r12d, r12d
je 0x14004c7a9
lea r9, str._in_S_Mode
mov r8, 0xffffffffffffffff
mov rdx, rbx
mov rcx, rdi
call fcn.140004fd0
mov byte [rbx + rdi - 1], 0
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.1400b2a30
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rbp
ret