Function at 0xc7315c
Capabilities:
Check os version

Disassembly:
push 0x164
mov eax, 0xbce5bf
call fcn.00bc132b
mov esi, 0x11c
lea eax, [ebp - 0x130]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.00bc259b
add esp, 0xc
mov dword [ebp - 0x130], esi
lea eax, [ebp - 0x130]
mov dword [ebp - 0x12c], 8
mov dword [ebp - 0x128], ebx
push eax
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetVersionExW]
lea eax, [ebp - 0x144]
push eax
push ebx
push ebx
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
call dword [sym.imp.api_ms_win_core_sysinfo_l1_2_0.dll_GetProductInfo]
test eax, eax
je 0xc73387
cmp dword [ebp - 0x144], 0xabcdabcd
je 0xc73387
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcessId]
lea edx, [ebp - 0x138]
mov ecx, eax
call fcn.00c73b9f
test eax, eax
js 0xc73387
mov dword [ebp - 0x13c], ebx
lea ecx, [ebp - 0x13c]
mov dword [ebp - 4], ebx
call fcn.00b8ba6f
mov ecx, dword [ebp - 0x138]
lea eax, [ebp - 0x13c]
push eax
call fcn.00c7376c
test eax, eax
js 0xc732c1
call fcn.00c74286
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x170]
push eax
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetSystemTimeAsFileTime]
mov dword [ebp - 0x140], ebx
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x13c]
call fcn.00c72f80
test eax, eax
js 0xc732b3
mov edx, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x144]
xor esi, esi
lea edi, [edx + 1]
inc esi
cmp edi, 0x46
je 0xc7327d
mov eax, dword [ecx + 0xb1d3ec]
cmp eax, dword [ecx + 0xb1d320]
je 0xc7327f
xor esi, esi
cmp dword [ecx + 0xb1d320], ebx
jne 0xc732a1
mov eax, dword [ebp - 0x134]
cmp eax, dword [ecx + 0xb1d324]
je 0xc7338d
test esi, esi
je 0xc7338d
add ecx, 0xcc
mov edx, edi
cmp ecx, 0x37c8
jb 0xc73264
xor ebx, ebx
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], bl
call fcn.00b8ba6f
mov ecx, dword [ebp - 0x138]
lea edx, [ebp - 0x148]
call fcn.00c737f3
test eax, eax
js 0xc7334e
mov edi, dword [ebp - 0x148]
lea eax, [ebp - 0x14c]
push eax
push 0xb4429c
lea eax, [ebp - 0x168]
mov esi, dword [edi]
push eax
push edi
mov ecx, dword [esi + 0x10]
call dword [0xd0cffc]
call dword [esi + 0x10]
test eax, eax
js 0xc7333e
mov eax, dword [edi]
push 1
push edi
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0xd0cffc]
call esi
test eax, eax
js 0xc73328
mov eax, dword [edi]
push edi
mov esi, dword [eax + 0x20]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov eax, dword [ebp - 0x14c]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov eax, dword [edi]
push edi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov ecx, dword [ebp - 0x138]
call fcn.00c744f0
test eax, eax
jns 0xc73370
mov ecx, dword [ebp + 4]
mov edx, 0x579
push eax
push 0xb30060
call fcn.00b913f8
push dword [ebp - 0x138]
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
lea ecx, [ebp - 0x13c]
call fcn.00b8ba6f
call fcn.00bc12da
ret
imul eax, edx, 0xcc
xor ebx, ebx
mov dword [ebp - 0x160], ebx
mov esi, ebx
mov dword [ebp - fcn.00c74380], 0xb17c08
mov dword [ebp - 0x158], 0x10
mov dword [ebp - 0x154], ebx
add eax, 0xb1d328
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x15c], eax
lea ecx, [ebp - 0x164]
call fcn.00c74380
mov edi, eax
test edi, edi
je 0xc73435
lea eax, [ebp - 0x170]
push eax
push 0xa
pop ecx
sub ecx, esi
mov dword [ebp - 0x134], ecx
fild dword [ebp - 0x134]
jns 0xc733f9
fadd dword [0xb4cfbc]
fstp dword [ebp - 0x134]
fld dword [ebp - 0x134]
mov edx, edi
fmul qword [0xb4cf28]
push ecx
mov ecx, dword [ebp - 0x140]
fadd qword [0xb32418]
fstp dword [ebp - 0x134]
fld dword [ebp - 0x134]
fstp dword [esp]
call fcn.00c74fd7
push edi
call dword [sym.imp.api_ms_win_shell_namespace_l1_1_0.dll_ILFree]
inc esi
cmp esi, 0xa
jb 0xc733c8
jmp 0xc732b3