Function at 0x14027d5a0
Capabilities:
Check os version

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x188
mov rax, qword [0x140353a28]
xor rax, rsp
mov qword [rsp + 0x180], rax
movzx ebp, cx
movzx esi, dx
mov eax, 0xc837bba6
mov r14, qword [sym.imp.ntdll.dll_VerSetConditionMask]
lea rdi, [rsp + 0x60]
mov r15d, 0x57eba857
mov r13d, 0x97f2a0ac
mov ebx, 0xe45ca5db
jmp 0x14027d620
mov eax, dword [0x140354e90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x718372c8
mov ecx, 0x87b56579
cmove eax, ecx
cmp dword [0x140354e94], 0xa
cmovl eax, ecx
nop word cs:[rax + rax]
nop
cmp eax, 0xd629d33d
jg 0x14027d670
cmp eax, 0x9bdcafd1
jle 0x14027d6b0
cmp eax, 0xc837bba5
jle 0x14027d729
cmp eax, 0xd4b1cdb5
jg 0x14027d84f
cmp eax, 0xc837bba6
je 0x14027d8fa
cmp eax, 0xce39aa75
jne 0x14027d620
mov rax, qword [rsp + 0x50]
mov qword [0x140368010], rax
mov eax, 0x79f72bd
jmp 0x14027d620
cmp eax, 0x57eba856
jg 0x14027d6f0
cmp eax, 0x31941b3a
jg 0x14027d762
cmp eax, 0x87d74
jle 0x14027d8d8
cmp eax, 0x87d75
je 0x14027d910
cmp eax, 0x79f72bd
jne 0x14027d620
mov eax, 0x31941b3b
jmp 0x14027d620
cmp eax, 0x91c80f03
jg 0x14027d7db
cmp eax, 0x8098b3a0
je 0x14027d93d
cmp eax, 0x8464929a
je 0x14027d952
cmp eax, 0x87b56579
jne 0x14027d620
mov eax, 0x990e3435
jmp 0x14027d620
cmp eax, 0x718372c7
jg 0x14027d812
cmp eax, 0x57eba857
je 0x14027d975
cmp eax, 0x5a40ba64
je 0x14027d99b
cmp eax, 0x632475d1
jne 0x14027d620
mov eax, 0x87d75
xor r12d, r12d
jmp 0x14027d620
cmp eax, 0x9bdcafd2
je 0x14027d9aa
cmp eax, 0xaa0a3cc9
je 0x14027d9c1
cmp eax, 0xb798ea57
jne 0x14027d620
cmp qword [rsp + 0x48], 0
mov eax, 0x990e3435
mov ecx, 0x7c2f0d22
cmove eax, ecx
jmp 0x14027d620
cmp eax, 0x31941b3b
je 0x14027d9d6
cmp eax, 0x439aa053
je 0x14027d9fe
cmp eax, 0x5567a510
jne 0x14027d620
mov rcx, qword [rsp + 0x30]
mov r8d, 0x11c
xor edx, edx
call fcn.1402e3cb0
mov dword [rsp + 0x60], 0x11c
mov dword [rsp + 0x64], ebp
mov dword [rsp + 0x68], esi
xor ecx, ecx
mov edx, 2
mov r8b, 3
call r14
mov rcx, rax
mov edx, 1
mov r8b, 3
call r14
mov rcx, rdi
mov edx, 3
mov r8, rax
call qword [0x140368010]
mov eax, 0xd5869121
jmp 0x14027d620
cmp eax, 0x91c80f04
je 0x14027da08
cmp eax, 0x97f2a0ac
je 0x14027d5ef
cmp eax, 0x990e3435
jne 0x14027d620
mov rax, qword [0x140368010]
mov qword [rsp + 0x58], rax
mov eax, 0xaa0a3cc9
jmp 0x14027d620
cmp eax, 0x718372c8
je 0x14027da29
cmp eax, 0x7a1e8d5a
je 0x14027da33
cmp eax, 0x7c2f0d22
jne 0x14027d620
lea rcx, [0x14032e337]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x40], rax
mov eax, 0x7a1e8d5a
jmp 0x14027d620
cmp eax, 0xd4b1cdb6
je 0x14027da48
cmp eax, 0xd5869121
jne 0x14027d620
mov rcx, qword [rsp + 0x30]
mov r8d, 0x11c
xor edx, edx
call fcn.1402e3cb0
mov dword [rsp + 0x60], 0x11c
mov dword [rsp + 0x64], ebp
mov dword [rsp + 0x68], esi
xor ecx, ecx
mov edx, 2
mov r8b, 3
call r14
mov rcx, rax
mov edx, 1
mov r8b, 3
call r14
mov rcx, rdi
mov edx, 3
mov r8, rax
call qword [0x140368010]
test eax, eax
sete byte [rsp + 0x2f]
mov eax, dword [0x140354e90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5567a510
mov ecx, 0x439aa053
jmp 0x14027d608
cmp eax, 0xd629d33e
jne 0x14027da52
cmp byte [rsp + 0x2d], 0
mov eax, 0x31941b3b
mov ecx, 0x91c80f04
cmovne eax, ecx
jmp 0x14027d620
mov rax, qword [0x140368010]
mov qword [rsp + 0x48], rax
mov eax, 0xb798ea57
jmp 0x14027d620
mov dword [rsp + 0x3c], r12d
mov eax, dword [0x140354e90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd4b1cdb6
cmove eax, r15d
cmp dword [0x140354e94], 0xa
cmovl eax, r15d
jmp 0x14027d620
movzx r12d, byte [rsp + 0x2f]
mov rax, qword [rsp + 0x30]
mov eax, 0x87d75
jmp 0x14027d620
mov rax, qword [rsp + 0x30]
mov eax, dword [0x140354e90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5567a510
mov ecx, 0xd5869121
jmp 0x14027d608
mov eax, dword [0x140354e90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd4b1cdb6
cmove eax, ebx
cmp dword [0x140354e94], 0xa
cmovl eax, ebx
jmp 0x14027d620
mov qword [rsp + 0x30], rdi
mov eax, 0x8464929a
jmp 0x14027d620
cmp byte [rsp + 0x2e], 0
mov eax, 0x5a40ba64
mov ecx, 0x632475d1
cmovne eax, ecx
jmp 0x14027d620
cmp qword [rsp + 0x58], 0
sete byte [rsp + 0x2e]
mov eax, 0x9bdcafd2
jmp 0x14027d620
mov eax, dword [0x140354e90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x718372c8
cmove eax, r13d
cmp dword [0x140354e94], 0xa
cmovl eax, r13d
jmp 0x14027d620
mov eax, 0x8098b3a0
jmp 0x14027d620
mov rcx, qword [rsp + 0x40]
lea rdx, str.RtlVerifyVersionInfo
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x50], rax
mov eax, 0xce39aa75
jmp 0x14027d620
mov eax, 0x97f2a0ac
jmp 0x14027d620
cmp qword [rsp + 0x40], 0
setne byte [rsp + 0x2d]
mov eax, 0xd629d33e
jmp 0x14027d620
mov eax, 0x57eba857
jmp 0x14027d620
cmp eax, 0xe45ca5db
jne 0x14027d620
mov esi, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.1402de620
mov eax, esi
add rsp, 0x188
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret