Function at 0x7ff662983bf4
Capabilities:
Check os version

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x200
mov rax, qword [0x7ff66298c008]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov r13, rcx
mov dword [rsp + 0x40], 0x94
xor ebx, ebx
lea rcx, [rsp + 0x40]
mov edi, ebx
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
nop dword [rax + rax]
test eax, eax
jne 0x7ff662983c59
mov edi, 0x4b4
jmp 0x7ff662983e7f
mov eax, dword [rsp + 0x50]
mov ecx, 2
mov r14d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x44]
sub eax, 1
je 0x7ff662983cd3
cmp eax, 1
je 0x7ff662983c7f
mov edi, 0x4ca
jmp 0x7ff662983e7f
mov esi, 1
mov word [0x7ff66298de78], cx
movzx eax, cx
mov dword [0x7ff66298c1ac], esi
mov dword [0x7ff66298c1a8], esi
lea ecx, [rsi + 2]
cmp edx, ecx
ja 0x7ff662983cc2
mov eax, esi
mov word [0x7ff66298de78], ax
jb 0x7ff662983cb4
jne 0x7ff662983cee
cmp r14d, 0x33
jae 0x7ff662983cee
mov dword [0x7ff66298c1ac], ebx
mov dword [0x7ff66298c1a8], ebx
jmp 0x7ff662983cee
cmp edx, 5
jb 0x7ff662983cee
movzx eax, cx
mov word [0x7ff66298de78], cx
jmp 0x7ff662983cee
mov esi, 1
mov word [0x7ff66298de78], bx
mov dword [0x7ff66298c1ac], esi
movzx eax, bx
mov dword [0x7ff66298c1a8], esi
cmp dword [0x7ff66298cd14], ebx
jne 0x7ff662983f34
test r13, r13
je 0x7ff662983f34
movzx r15d, word [rsp + 0x4c]
lea r12, [r13 + 0x40]
neg ax
mov dword [rsp + 0x30], ebx
mov r10d, ebx
mov r11d, ebx
sbb rax, rax
and rax, 0xffffffffffffffc4
add r12, rax
movsxd r9, r11d
or eax, 0xffffffff
lea r8, [r9 + r9*2]
cmp edx, dword [r12 + r8*8]
jae 0x7ff662983d38
mov ecx, eax
jmp 0x7ff662983d4a
jbe 0x7ff662983d3e
mov ecx, esi
jmp 0x7ff662983d4a
cmp r14d, dword [r12 + r8*8 + 4]
jb 0x7ff662983d34
mov ecx, ebx
seta cl
cmp edx, dword [r12 + r8*8 + 0xc]
jb 0x7ff662983d63
jbe 0x7ff662983d57
mov eax, esi
jmp 0x7ff662983d63
cmp r14d, dword [r12 + r8*8 + 0x10]
jb 0x7ff662983d63
mov eax, ebx
seta al
test ecx, ecx
js 0x7ff662983e17
test eax, eax
jg 0x7ff662983e17
test ecx, ecx
jne 0x7ff662983d99
test eax, eax
jne 0x7ff662983d8c
mov eax, r15d
cmp r15d, dword [r12 + r8*8 + 8]
jb 0x7ff662983dac
cmp eax, dword [r12 + r8*8 + 0x14]
jmp 0x7ff662983da6
cmp r15d, dword [r12 + r8*8 + 8]
jae 0x7ff662983e3c
jmp 0x7ff662983dac
test eax, eax
jne 0x7ff662983e3c
cmp r15d, dword [r12 + r8*8 + 0x14]
jbe 0x7ff662983e3c
test r11d, r11d
je 0x7ff662983e1c
mov edi, 0x54c
mov r9, rbx
mov r15, rbx
mov r14d, ebx
cmp edi, 0x54d
jne 0x7ff662983de6
mov edx, dword [r13 + 0x80]
lea r9, [rbp - 0x20]
movsxd rax, r10d
add rdx, 0x84
imul r12, rax, 0x3c
add r12, r13
add r12, rdx
test r12, r12
je 0x7ff662983ea4
mov eax, dword [r12 + 0x34]
lea r15, [r13 + 0x84]
add r15, rax
mov eax, dword [r12 + 0x30]
test sil, al
je 0x7ff662983e96
mov r14d, 0x104
jmp 0x7ff662983ea4
cmp r11d, esi
je 0x7ff662983e33
lea r10d, [r11 + 1]
mov dword [rsp + 0x30], r10d
mov r11d, r10d
cmp r10d, 2
jge 0x7ff662983e38
jmp 0x7ff662983d24
mov edi, 0x54c
test edi, edi
jne 0x7ff662983e69
cmp dword [r13 + 0x7c], ebx
je 0x7ff662983f34
lea r9, [rsp + 0x30]
mov rcx, r13
lea rdx, [rbp - 0x20]
call fcn.7ff662982834
test eax, eax
jne 0x7ff662983f34
mov r10d, dword [rsp + 0x30]
mov edi, 0x54d
lea eax, [rdi - 0x54c]
cmp eax, esi
jbe 0x7ff662983db6
test edi, edi
je 0x7ff662983f36
xor r9d, r9d
mov dword [rsp + 0x28], ebx
xor r8d, r8d
mov dword [rsp + 0x20], 0x10
jmp 0x7ff662983f2b
and al, 2
neg al
sbb r14d, r14d
and r14d, 0x101
test byte [0x7ff66298cd18], sil
jne 0x7ff662983f17
test r15, r15
je 0x7ff662983f17
cmp byte [r15], bl
je 0x7ff662983f17
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
nop dword [rax + rax]
call fcn.7ff662987f04
test eax, eax
je 0x7ff662983edc
call fcn.7ff662987e34
test eax, eax
mov eax, 0x180030
jne 0x7ff662983ee1
mov eax, 0x30
or eax, r14d
lea r8, [0x7ff66298d578]
mov r9d, eax
mov rdx, r15
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop dword [rax + rax]
test r14b, 4
je 0x7ff662983f0a
cmp eax, 6
jmp 0x7ff662983f11
test sil, r14b
je 0x7ff662983f34
cmp eax, esi
jne 0x7ff662983f34
mov edi, ebx
jmp 0x7ff662983f34
mov eax, 0x30
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
lea r8, [0x7ff66298d578]
mov edx, edi
xor ecx, ecx
call fcn.7ff662984dcc
test edi, edi
sete bl
mov eax, ebx
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.7ff662988470
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret