Function at 0x1400160e8
Capabilities:
Check os version

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rsi, rcx
mov eax, dword [0x14002c0ac]
mov ecx, dword [0x14002c0a8]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 7]
cmp ecx, 0xa
setl byte [rbp + 6]
mov eax, 0x3651f685
mov r14, qword [sym.imp.ntoskrnl.exe_RtlGetVersion]
mov r12d, 0x88c84da4
mov r13d, 0xaea9556d
mov ebx, 0x730f6538
mov r15d, 0x178a572f
cmp eax, 0x3651f684
jle 0x140016170
cmp eax, 0x6fa52d25
jg 0x14001619b
cmp eax, 0x4dd92aa6
jg 0x140016201
cmp eax, 0x3651f685
je 0x14001631f
cmp eax, 0x36799ac8
jne 0x14001613e
mov eax, 0x88c84da4
jmp 0x14001613e
cmp eax, 0xcd31483b
jle 0x1400161c2
cmp eax, 0x171c29f1
jg 0x140016250
cmp eax, 0xcd31483c
je 0x14001633a
cmp eax, 0xdc849575
jne 0x14001613e
mov eax, 0x4dd92aa7
jmp 0x14001613e
cmp eax, 0x79d30182
jg 0x1400162b8
cmp eax, 0x6fa52d26
je 0x140016358
cmp eax, 0x730f6538
jne 0x14001613e
mov eax, 0x7a563942
jmp 0x14001613e
cmp eax, 0xaea9556c
jg 0x1400162f6
cmp eax, 0x80b828d3
je 0x140016391
cmp eax, 0x88c84da4
jne 0x14001613e
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x36799ac8
mov ecx, 0xc3476d29
jmp 0x1400163ed
cmp eax, 0x4dd92aa7
je 0x1400163ac
cmp eax, 0x635b14c6
jne 0x14001613e
mov eax, 0x120
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdi, rsp
mov dword [rdi], 0x114
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
xor ecx, ecx
test eax, eax
js 0x140016244
mov ecx, dword [rdi + 0xc]
mov dword [rsi], ecx
mov eax, 0x79d30183
jmp 0x14001613e
cmp eax, 0x171c29f2
je 0x1400163d4
cmp eax, 0x178a572f
jne 0x14001613e
mov eax, 0x120
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdi, rsp
mov dword [rdi], 0x114
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
mov dword [rbp], eax
xor eax, eax
cmp dword [rbp], 0
js 0x140016298
mov eax, dword [rdi + 0xc]
mov dword [rsi], eax
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6fa52d26
mov ecx, 0x80b828d3
jmp 0x1400163ed
cmp eax, 0x79d30183
je 0x1400163ff
cmp eax, 0x7a563942
jne 0x14001613e
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6fa52d26
cmove eax, r15d
cmp dword [0x14002c0a8], 0xa
cmovl eax, r15d
jmp 0x14001613e
cmp eax, 0xc3476d29
jne 0x140016454
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcd31483c
mov ecx, 0x7a563942
jmp 0x1400163ed
mov cl, byte [rbp + 7]
cmp byte [rbp + 6], 0
mov eax, 0x36799ac8
cmovne eax, r12d
test cl, cl
cmovne eax, r12d
jmp 0x14001613e
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x635b14c6
mov ecx, 0x79d30183
jmp 0x1400163ed
mov eax, 0x120
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdi, rsp
mov dword [rdi], 0x114
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
xor ecx, ecx
test eax, eax
js 0x140016385
mov ecx, dword [rdi + 0xc]
mov dword [rsi], ecx
mov eax, 0x178a572f
jmp 0x14001613e
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcd31483c
mov ecx, 0x171c29f2
jmp 0x1400163ed
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdc849575
cmove eax, r13d
cmp dword [0x14002c0a8], 0xa
cmovl eax, r13d
jmp 0x14001613e
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdc849575
mov ecx, 0x4dd92aa7
cmove eax, ecx
cmp dword [0x14002c0a8], 0xa
cmovl eax, ecx
jmp 0x14001613e
mov eax, 0x120
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rdi, rsp
mov dword [rdi], 0x114
sub rsp, 0x20
mov rcx, rdi
call r14
add rsp, 0x20
xor ecx, ecx
test eax, eax
js 0x14001642c
mov ecx, dword [rdi + 0xc]
mov dword [rsi], ecx
mov eax, dword [0x14002c0ac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x635b14c6
cmove eax, ebx
cmp dword [0x14002c0a8], 0xa
cmovl eax, ebx
jmp 0x14001613e
cmp eax, 0xaea9556d
jne 0x14001613e
mov eax, dword [rbp]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret