Function at 0x14000987b
Capabilities:
Check os version

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x28
lea rbp, [rsp + 0x20]
mov rax, qword [0x1400160c0]
xor rax, rbp
mov qword [rbp], rax
mov eax, dword [0x1400161e4]
mov ecx, dword [0x1400161e0]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 1]
cmp ecx, 0xa
setl byte [rbp - 2]
mov eax, 0xa4a065f7
mov r15, qword [sym.imp.ntoskrnl.exe_RtlGetVersion]
mov r12d, 0xa0867c02
mov ebx, 0x4d838ea3
mov edi, 0x375e827c
mov r13d, 0x6cfc1461
mov r14d, 0xdfc01083
cmp eax, 0x160a63a1
jg 0x14000991c
cmp eax, 0xdfc01082
jg 0x14000998b
cmp eax, 0xa0867c02
je 0x1400099f6
cmp eax, 0xa4a065f7
je 0x140009a7e
cmp eax, 0xa5e84459
jne 0x1400098e6
mov eax, 0x375e827c
jmp 0x1400098e6
cmp eax, 0x4c13a662
jg 0x1400099d6
cmp eax, 0x160a63a2
je 0x140009a99
cmp eax, 0x375e827c
je 0x140009aaf
cmp eax, 0x45b65712
jne 0x1400098e6
mov eax, 0x120
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rsi, rsp
lea rcx, [rsi + 4]
sub rsp, 0x20
mov r8d, 0x110
xor edx, edx
call fcn.140014140
add rsp, 0x20
mov dword [rsi], 0x114
sub rsp, 0x20
mov rcx, rsi
call r15
add rsp, 0x20
mov eax, 0xa0867c02
jmp 0x1400098e6
cmp eax, 0xdfc01083
je 0x140009ad7
cmp eax, 0xed095bc0
je 0x140009b0e
cmp eax, 0x3161a49
jne 0x1400098e6
mov rax, qword [rbp - 0x20]
mov eax, dword [0x1400161e4]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa5e84459
cmove eax, edi
cmp dword [0x1400161e0], 0xa
cmovl eax, edi
jmp 0x1400098e6
cmp eax, 0x4c13a663
je 0x140009b29
cmp eax, 0x4d838ea3
jne 0x140009b51
mov eax, 0x3161a49
jmp 0x1400098e6
mov eax, 0x120
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x20], rax
mov rax, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x20]
sub rsp, 0x20
mov r8d, 0x114
xor edx, edx
call fcn.140014140
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov dword [rax], 0x114
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
call r15
add rsp, 0x20
mov dword [rbp - 0x14], eax
cmp dword [rbp - 0x14], 0
setns byte [rbp - 3]
mov eax, dword [0x1400161e4]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x45b65712
mov ecx, 0x160a63a2
cmove eax, ecx
cmp dword [0x1400161e0], 0xa
cmovl eax, ecx
jmp 0x1400098e6
mov cl, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov eax, 0x45b65712
cmovne eax, r12d
test cl, cl
cmovne eax, r12d
jmp 0x1400098e6
cmp byte [rbp - 3], 0
mov eax, 0x3161a49
mov ecx, 0x4c13a663
cmovne eax, ecx
jmp 0x1400098e6
mov eax, dword [0x1400161e4]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa5e84459
cmove eax, r13d
cmp dword [0x1400161e0], 0xa
cmovl eax, r13d
jmp 0x1400098e6
mov rax, qword [rbp - 0x10]
mov eax, dword [rax + 0xc]
mov rcx, qword [0x1400160d0]
mov qword [rcx], rax
mov eax, dword [0x1400161e4]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xed095bc0
cmove eax, ebx
cmp dword [0x1400161e0], 0xa
cmovl eax, ebx
jmp 0x1400098e6
mov rax, qword [rbp - 0x10]
mov eax, dword [rax + 0xc]
mov rcx, qword [0x1400160d0]
mov qword [rcx], rax
mov eax, 0xdfc01083
jmp 0x1400098e6
mov eax, dword [0x1400161e4]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xed095bc0
cmove eax, r14d
cmp dword [0x1400161e0], 0xa
cmovl eax, r14d
jmp 0x1400098e6
cmp eax, 0x6cfc1461
jne 0x1400098e6
mov esi, dword [rbp - 0x14]
mov rcx, qword [rbp]
xor rcx, rbp
sub rsp, 0x20
call fcn.140013f90
add rsp, 0x20
mov eax, esi
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret