Function at 0x140003bf4
Capabilities:
Check os version

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x200
mov rax, qword [0x14000c008]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov r13, rcx
mov dword [rsp + 0x40], 0x94
xor ebx, ebx
lea rcx, [rsp + 0x40]
mov edi, ebx
call qword [sym.imp.KERNEL32.DLL_GetVersionExA]
nop dword [rax + rax]
test eax, eax
jne 0x140003c59
mov edi, 0x4b4
jmp 0x140003e7f
mov eax, dword [rsp + 0x50]
mov ecx, 2
mov r14d, dword [rsp + 0x48]
mov edx, dword [rsp + 0x44]
sub eax, 1
je 0x140003cd3
cmp eax, 1
je 0x140003c7f
mov edi, 0x4ca
jmp 0x140003e7f
mov esi, 1
mov word [0x14000de78], cx
movzx eax, cx
mov dword [0x14000c1ac], esi
mov dword [0x14000c1a8], esi
lea ecx, [rsi + 2]
cmp edx, ecx
ja 0x140003cc2
mov eax, esi
mov word [0x14000de78], ax
jb 0x140003cb4
jne 0x140003cee
cmp r14d, 0x33
jae 0x140003cee
mov dword [0x14000c1ac], ebx
mov dword [0x14000c1a8], ebx
jmp 0x140003cee
cmp edx, 5
jb 0x140003cee
movzx eax, cx
mov word [0x14000de78], cx
jmp 0x140003cee
mov esi, 1
mov word [0x14000de78], bx
mov dword [0x14000c1ac], esi
movzx eax, bx
mov dword [0x14000c1a8], esi
cmp dword [0x14000cd14], ebx
jne 0x140003f34
test r13, r13
je 0x140003f34
movzx r15d, word [rsp + 0x4c]
lea r12, [r13 + 0x40]
neg ax
mov dword [rsp + 0x30], ebx
mov r10d, ebx
mov r11d, ebx
sbb rax, rax
and rax, 0xffffffffffffffc4
add r12, rax
movsxd r9, r11d
or eax, 0xffffffff
lea r8, [r9 + r9*2]
cmp edx, dword [r12 + r8*8]
jae 0x140003d38
mov ecx, eax
jmp 0x140003d4a
jbe 0x140003d3e
mov ecx, esi
jmp 0x140003d4a
cmp r14d, dword [r12 + r8*8 + 4]
jb 0x140003d34
mov ecx, ebx
seta cl
cmp edx, dword [r12 + r8*8 + 0xc]
jb 0x140003d63
jbe 0x140003d57
mov eax, esi
jmp 0x140003d63
cmp r14d, dword [r12 + r8*8 + 0x10]
jb 0x140003d63
mov eax, ebx
seta al
test ecx, ecx
js 0x140003e17
test eax, eax
jg 0x140003e17
test ecx, ecx
jne 0x140003d99
test eax, eax
jne 0x140003d8c
mov eax, r15d
cmp r15d, dword [r12 + r8*8 + 8]
jb 0x140003dac
cmp eax, dword [r12 + r8*8 + 0x14]
jmp 0x140003da6
cmp r15d, dword [r12 + r8*8 + 8]
jae 0x140003e3c
jmp 0x140003dac
test eax, eax
jne 0x140003e3c
cmp r15d, dword [r12 + r8*8 + 0x14]
jbe 0x140003e3c
test r11d, r11d
je 0x140003e1c
mov edi, 0x54c
mov r9, rbx
mov r15, rbx
mov r14d, ebx
cmp edi, 0x54d
jne 0x140003de6
mov edx, dword [r13 + 0x80]
lea r9, [rbp - 0x20]
movsxd rax, r10d
add rdx, 0x84
imul r12, rax, 0x3c
add r12, r13
add r12, rdx
test r12, r12
je 0x140003ea4
mov eax, dword [r12 + 0x34]
lea r15, [r13 + 0x84]
add r15, rax
mov eax, dword [r12 + 0x30]
test sil, al
je 0x140003e96
mov r14d, 0x104
jmp 0x140003ea4
cmp r11d, esi
je 0x140003e33
lea r10d, [r11 + 1]
mov dword [rsp + 0x30], r10d
mov r11d, r10d
cmp r10d, 2
jge 0x140003e38
jmp 0x140003d24
mov edi, 0x54c
test edi, edi
jne 0x140003e69
cmp dword [r13 + 0x7c], ebx
je 0x140003f34
lea r9, [rsp + 0x30]
mov rcx, r13
lea rdx, [rbp - 0x20]
call fcn.140002834
test eax, eax
jne 0x140003f34
mov r10d, dword [rsp + 0x30]
mov edi, 0x54d
lea eax, [rdi - 0x54c]
cmp eax, esi
jbe 0x140003db6
test edi, edi
je 0x140003f36
xor r9d, r9d
mov dword [rsp + 0x28], ebx
xor r8d, r8d
mov dword [rsp + 0x20], FDIIsCabinet
jmp 0x140003f2b
and al, 2
neg al
sbb r14d, r14d
and r14d, 0x101
test byte [0x14000cd18], sil
jne 0x140003f17
test r15, r15
je 0x140003f17
cmp byte [r15], bl
je 0x140003f17
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBeep]
nop dword [rax + rax]
call fcn.140007f04
test eax, eax
je 0x140003edc
call fcn.140007e34
test eax, eax
mov eax, 0x180030
jne 0x140003ee1
mov eax, 0x30
or eax, r14d
lea r8, [0x14000d578]
mov r9d, eax
mov rdx, r15
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop dword [rax + rax]
test r14b, 4
je 0x140003f0a
cmp eax, 6
jmp 0x140003f11
test sil, r14b
je 0x140003f34
cmp eax, esi
jne 0x140003f34
mov edi, ebx
jmp 0x140003f34
mov eax, 0x30
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
lea r8, [0x14000d578]
mov edx, edi
xor ecx, ecx
call fcn.140004dcc
test edi, edi
sete bl
mov eax, ebx
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.140008470
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret