Function at 0x1b9b0
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 8], rbx
push rsi
sub rsp, 0x30
xor eax, eax
xor esi, esi
lea rcx, [0x0006a780]
xor edx, edx
mov r8d, 0x234
mov ebx, esi
mov word [rsp + 0x20], si
mov qword [rsp + 0x22], rax
mov dword [rsp + 0x2a], eax
mov word [rsp + 0x2e], ax
call fcn.000407c0
lea r8, [0x0006a780]
lea rdx, [0x0006a788]
lea rcx, [0x0006a784]
xor r9d, r9d
call qword [sym.imp.ntoskrnl.exe_PsGetVersion]
mov r11d, dword [0x0006a784]
cmp r11d, 5
ja 0x1ba22
jne 0x1bd06
mov eax, dword [0x0006a788]
cmp eax, esi
jbe 0x1ba80
lea rdx, [0x00041360]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
cmp rax, rsi
jne 0x1ba4e
mov eax, 0xc0000001
jmp 0x1bdd1
lea rcx, [0x0006a790]
mov dword [0x0006a790], 0x11c
call rax
cmp eax, esi
mov ebx, eax
jl 0x1bdd1
cmp dword [0x0006a784], 5
jne 0x1bd06
mov eax, dword [0x0006a788]
cmp eax, esi
jne 0x1bd06
mov ecx, dword [0x0006a78c]
mov eax, 0xa8
mov r11d, 0xc
lea edx, [r11 + 4]
lea r9d, [rax - 0x68]
lea r10d, [r11 - 4]
mov dword [0x0006a8e0], eax
mov dword [0x0006a8f8], eax
lea eax, [rdx + 0x28]
mov r8d, 0x1b0
mov dword [0x0006a920], eax
mov dword [0x0006a974], eax
lea eax, [rdx + 0xc]
mov dword [0x0006a908], edx
mov dword [0x0006a970], edx
lea edx, [rax + 8]
or ecx, 1
mov dword [0x0006a8ac], 0x1d2
mov dword [0x0006a8b0], 0x1bc
mov dword [0x0006a8b4], 0x1cb
mov dword [0x0006a8b8], 0x1cc
mov dword [0x0006a984], edx
mov dword [0x0006a9b0], edx
mov dword [0x0006a78c], ecx
mov dword [0x0006a8bc], 0x135
mov dword [0x0006a8c0], 0x1f5
mov dword [0x0006a8c4], 0x1e8
mov dword [0x0006a8c8], 0xb10
mov dword [0x0006a8cc], 0x9f0
mov dword [0x0006a8d0], 0x248
mov dword [0x0006a8d4], r8d
mov dword [0x0006a8d8], 0x288
mov dword [0x0006a8dc], 0x6c
mov dword [0x0006a8e4], 0x18
mov dword [0x0006a8e8], r11d
mov dword [0x0006a8ec], 0x1dc
mov dword [0x0006a8f0], 0xae
mov dword [0x0006a8f4], 0xac
mov dword [0x0006a8fc], 0xa4
mov dword [0x0006a900], 2
mov dword [0x0006a904], r10d
mov dword [0x0006a90c], 0x64
mov dword [0x0006a910], 0x68
mov dword [0x0006a914], 0x30
mov dword [0x0006a918], r9d
mov dword [0x0006a91c], 0x70
mov dword [0x0006a924], 0x34
mov dword [0x0006a928], 0x134
mov dword [0x0006a92c], 0x218
mov dword [0x0006a930], r8d
mov dword [0x0006a934], esi
mov dword [0x0006a938], 0x9c
mov dword [0x0006a93c], 0x120
mov dword [0x0006a940], 0x128
mov dword [0x0006a944], 0xa0
mov dword [0x0006a948], 0x214
mov dword [0x0006a94c], 0x22c
mov dword [0x0006a950], 0x1ac
mov dword [0x0006a954], esi
mov dword [0x0006a958], 0x211
mov dword [0x0006a95c], 0x1fc
mov dword [0x0006a960], 0x270
mov dword [0x0006a964], 0x1c8
mov dword [0x0006a968], 0x1c4
mov dword [0x0006a96c], 0x1b4
mov dword [0x0006a978], 0x3c
mov dword [0x0006a97c], r9d
mov dword [0x0006a980], eax
mov dword [0x0006a988], 0x20
mov dword [0x0006a98c], r10d
mov dword [0x0006a990], r11d
mov dword [0x0006a994], 4
mov dword [0x0006a998], eax
mov dword [0x0006a99c], r10d
mov dword [0x0006a9a0], r9d
mov dword [0x0006a9a4], 0x60
mov dword [0x0006a9a8], 0x14
mov dword [0x0006a9ac], 0x18
jmp 0x1bdc0
mov eax, dword [0x0006a794]
sub eax, 5
je 0x1bd8c
sub eax, 1
je 0x1bd3b
cmp eax, 4
je 0x1bd25
mov ebx, 0xc0000001
jmp 0x1bdcf
cmp dword [0x0006a798], esi
jne 0x1bd1b
mov ecx, dword [0x0006a78c]
or ecx, 0x80000080
jmp 0x1bdba
mov eax, dword [0x0006a798]
cmp eax, esi
je 0x1bd7e
sub eax, 1
je 0x1bd70
sub eax, 1
je 0x1bd62
cmp eax, 1
jne 0x1bd1b
mov ecx, dword [0x0006a78c]
or ecx, 0x80000040
jmp 0x1bdba
mov ecx, dword [0x0006a78c]
or ecx, 0x80000020
jmp 0x1bdba
mov ecx, dword [0x0006a78c]
or ecx, 0x80000010
jmp 0x1bdba
mov ecx, dword [0x0006a78c]
or ecx, 0x80000008
jmp 0x1bdba
mov eax, dword [0x0006a798]
sub eax, 1
je 0x1bdae
cmp eax, 1
jne 0x1bd1b
mov ecx, dword [0x0006a78c]
or ecx, 0x80000004
jmp 0x1bdba
mov ecx, dword [0x0006a78c]
or ecx, 0x80000002
mov dword [0x0006a78c], ecx
cmp ebx, esi
jl 0x1bdcf
btr ecx, 0x1f
call fcn.0001b630
mov ebx, eax
mov eax, ebx
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rsi
ret