Function at 0x140282170
Capabilities:
Check os version

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
mov rax, qword [0x14035bae8]
xor rax, rsp
mov qword [rsp + 0x190], rax
movzx eax, cx
mov dword [rsp + 0x3c], eax
movzx ebx, dx
mov eax, 0x4ae5c02d
mov r14, qword [sym.imp.ntdll.dll_VerSetConditionMask]
mov r15d, 0x9f9ccc4a
lea rsi, [rsp + 0x70]
mov r12d, 0x3ca94c5c
mov r13d, 0x483d63d7
mov edi, 0x80ee8834
jmp 0x1402821d0
mov eax, 0x3ca94c5c
nop
cmp eax, 0x24b8638d
jg 0x140282220
cmp eax, 0xb5b8a56d
jle 0x140282280
cmp eax, 0xc2399284
jle 0x140282312
cmp eax, 0xe92c175e
jg 0x140282415
cmp eax, 0xc2399285
je 0x140282486
cmp eax, 0xe0e07d49
jne 0x1402821d0
mov rax, qword [rsp + 0x40]
mov eax, 0xc1429943
jmp 0x1402821d0
cmp eax, 0x483d63d6
jg 0x1402822d0
cmp eax, 0x3e896caa
jg 0x140282366
cmp eax, 0x2dae31b5
jle 0x140282453
cmp eax, 0x2dae31b6
je 0x1402821c9
cmp eax, 0x3ca94c5c
jne 0x1402821d0
mov eax, dword [0x14035cf50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2dae31b6
cmove eax, edi
cmp dword [0x14035cf54], 0xa
cmovl eax, edi
jmp 0x1402821d0
cmp eax, 0x8d4226e6
jg 0x1402823b2
cmp eax, 0x80ee8834
je 0x1402824ac
cmp eax, 0x8a3c8b2b
je 0x1402824b8
cmp eax, 0x8d0b4a72
jne 0x1402821d0
mov rax, qword [rsp + 0x50]
mov qword [0x140370130], rax
mov eax, 0x6a71bc9b
jmp 0x1402821d0
cmp eax, 0x55ae632b
jg 0x1402823ea
cmp eax, 0x483d63d7
je 0x1402824ce
cmp eax, 0x4967b135
je 0x1402824d8
cmp eax, 0x4ae5c02d
jne 0x1402821d0
mov rax, qword [0x140370130]
mov qword [rsp + 0x40], rax
mov eax, 0x8d4226e7
jmp 0x1402821d0
cmp eax, 0xb5b8a56e
je 0x1402824ef
cmp eax, 0xbe332ac1
je 0x140282504
cmp eax, 0xc1429943
jne 0x1402821d0
cmp qword [rsp + 0x40], 0
sete byte [rsp + 0x2e]
mov eax, dword [0x14035cf50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe0e07d49
cmove eax, r15d
cmp dword [0x14035cf54], 0xa
cmovl eax, r15d
jmp 0x1402821d0
cmp eax, 0x3e896cab
je 0x14028254e
cmp eax, 0x3f13c4ff
je 0x140282566
cmp eax, 0x423603e8
jne 0x1402821d0
mov r8, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
mov rcx, rsi
mov edx, 3
call rax
xor ebp, ebp
test eax, eax
sete bpl
mov rax, qword [rsp + 0x30]
mov eax, 0x24b8638e
jmp 0x1402821d0
cmp eax, 0x8d4226e7
je 0x140282570
cmp eax, 0x97dd3643
je 0x14028258b
cmp eax, 0x9f9ccc4a
jne 0x1402821d0
cmp byte [rsp + 0x2e], 0
mov eax, 0x8a3c8b2b
mov ecx, 0xe92c175f
cmovne eax, ecx
jmp 0x1402821d0
cmp eax, 0x55ae632c
je 0x1402825b6
cmp eax, 0x5ad16299
je 0x1402825c0
cmp eax, 0x6a71bc9b
jne 0x1402821d0
mov eax, 0x3f13c4ff
jmp 0x1402821d0
cmp eax, 0xe92c175f
je 0x1402825e1
cmp eax, 0x10af8cdd
jne 0x1402821d0
mov eax, dword [0x14035cf50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2dae31b6
cmove eax, r12d
cmp dword [0x14035cf54], 0xa
cmovl eax, r12d
jmp 0x1402821d0
cmp eax, 0x28c64030
jne 0x1402825fd
mov eax, dword [0x14035cf50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x55ae632c
cmove eax, r13d
cmp dword [0x14035cf54], 0xa
cmovl eax, r13d
jmp 0x1402821d0
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x30]
mov r8d, 0x11c
xor edx, edx
call fcn.1402eb6e0
mov eax, 0xbe332ac1
jmp 0x1402821d0
mov eax, 0x24b8638e
xor ebp, ebp
jmp 0x1402821d0
mov rax, qword [0x140370130]
mov qword [rsp + 0x58], rax
mov eax, 0xb5b8a56e
jmp 0x1402821d0
mov eax, 0x3e896cab
jmp 0x1402821d0
cmp byte [rsp + 0x2f], 0
mov eax, 0xc2399285
mov ecx, 0x10af8cdd
cmovne eax, ecx
jmp 0x1402821d0
cmp qword [rsp + 0x58], 0
sete byte [rsp + 0x2f]
mov eax, 0x4967b135
jmp 0x1402821d0
mov dword [rsp + 0x70], 0x11c
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x78], ebx
xor ecx, ecx
mov edx, 2
mov r8b, 3
call r14
mov rcx, rax
mov edx, 1
mov r8b, 3
call r14
mov qword [rsp + 0x60], rax
mov rax, qword [0x140370130]
mov qword [rsp + 0x68], rax
mov eax, 0x423603e8
jmp 0x1402821d0
cmp qword [rsp + 0x48], 0
mov eax, 0x5ad16299
mov ecx, 0x3f13c4ff
cmove eax, ecx
jmp 0x1402821d0
mov eax, 0x8a3c8b2b
jmp 0x1402821d0
mov eax, dword [0x14035cf50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe0e07d49
mov ecx, 0xc1429943
jmp 0x1402825a4
mov eax, dword [0x14035cf50]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x55ae632c
mov ecx, 0x28c64030
cmove eax, ecx
cmp dword [0x14035cf54], 0xa
cmovl eax, ecx
jmp 0x1402821d0
mov eax, 0x28c64030
jmp 0x1402821d0
mov rcx, qword [rsp + 0x48]
lea rdx, str.RtlVerifyVersionInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x50], rax
mov eax, 0x8d0b4a72
jmp 0x1402821d0
lea rcx, [0x140336537]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x48], rax
mov eax, 0x97dd3643
jmp 0x1402821d0
cmp eax, 0x24b8638e
jne 0x1402821d0
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1402e6030
mov eax, ebp
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret