Function at 0x1004b99
Capabilities:
Check os version

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1b8
mov eax, dword [0x100c2c4]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
lea eax, [ebp - 0x19c]
xor edi, edi
push eax
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1a0], edi
mov dword [ebp - 0x19c], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x1004bfc
mov dword [ebp - 0x1a0], 0x4b4
push edi
push 0x10
push edi
push edi
push dword [ebp - 0x1a0]
push edi
call fcn.010037c2
jmp 0x1004eb7
mov eax, dword [ebp - 0x18c]
dec eax
mov edx, dword [ebp - 0x198]
je 0x1004c6a
dec eax
je 0x1004c1a
mov dword [ebp - 0x1a0], 0x4ca
jmp 0x1004be6
push 2
pop eax
xor ecx, ecx
push 3
inc ecx
mov word [0x100d0cc], ax
pop eax
mov dword [0x100c2bc], ecx
mov dword [0x100c2c0], ecx
cmp edx, eax
ja 0x1004c5d
mov word [0x100d0cc], cx
jb 0x1004c4f
cmp edx, eax
jne 0x1004c7d
cmp dword [ebp - 0x194], 0x33
jae 0x1004c7d
mov dword [0x100c2bc], edi
mov dword [0x100c2c0], edi
jmp 0x1004c7d
cmp edx, 5
jb 0x1004c7d
mov word [0x100d0cc], ax
jmp 0x1004c7d
xor eax, eax
mov word [0x100d0cc], ax
inc eax
mov dword [0x100c2bc], eax
mov dword [0x100c2c0], eax
cmp dword [0x100def4], edi
jne 0x1004eb7
cmp esi, edi
je 0x1004eb7
cmp word [0x100d0cc], di
jne 0x1004c9f
add esi, 0x40
jmp 0x1004ca2
add esi, 4
xor ecx, ecx
push ebx
movzx ebx, word [ebp - 0x190]
mov dword [ebp - 0x1a8], ecx
imul ecx, ecx, 0x18
lea eax, [ecx + esi]
push dword [eax + 4]
push dword [eax]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
call fcn.01001e82
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + ecx*4 - 0x1b0], eax
imul ecx, ecx, 0x18
lea eax, [ecx + esi]
push dword [eax + 0x10]
push dword [eax + 0xc]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
call fcn.01001e82
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp + ecx*4 - 0x1b0]
mov edi, 0x54d
test edx, edx
jl 0x1004e46
test eax, eax
jg 0x1004e46
test edx, edx
jne 0x1004e19
test eax, eax
jne 0x1004d41
mov eax, ecx
imul eax, eax, 0x18
movzx edx, bx
add eax, esi
cmp edx, dword [eax + 8]
jb 0x1004e33
cmp edx, dword [eax + 0x14]
jmp 0x1004e2d
test edx, edx
jne 0x1004e19
mov eax, ecx
imul eax, eax, 0x18
movzx edx, bx
cmp edx, dword [eax + esi + 8]
jb 0x1004e33
mov eax, dword [ebp - 0x1a4]
cmp dword [eax + 0x7c], 0
je 0x1004eb6
lea ecx, [ebp - 0x1a8]
push ecx
push 0x104
lea ecx, [ebp - 0x108]
push ecx
push eax
call fcn.01002788
test eax, eax
jne 0x1004eb6
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1a0], edi
mov eax, dword [ebp - 0x1a4]
xor ebx, ebx
cmp dword [ebp - 0x1a0], edi
jne 0x1004dc0
mov edx, dword [eax + 0x80]
imul ecx, ecx, 0x3c
add edx, ecx
lea esi, [edx + eax + 0x84]
lea ebx, [ebp - 0x108]
mov ecx, dword [esi + 0x34]
push dword [esi + 0x30]
lea edi, [ecx + eax + 0x84]
call fcn.01001e58
test byte [0x100def8], 1
mov dword [ebp - 0x1a4], eax
jne 0x1004e9f
cmp byte [edi], 0
je 0x1004e9f
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
call fcn.01007661
test eax, eax
je 0x1004e60
push 1
push 0x10
push dword [0x100db04]
call fcn.0100760c
test eax, eax
je 0x1004e60
mov eax, 0x180000
jmp 0x1004e62
test eax, eax
jne 0x1004d5b
mov eax, ecx
imul eax, eax, 0x18
movzx edx, bx
cmp edx, dword [eax + esi + 0x14]
jbe 0x1004d5b
test ecx, ecx
je 0x1004e4b
mov dword [ebp - 0x1a0], 0x54c
jmp 0x1004d98
cmp ecx, 1
je 0x1004e37
inc ecx
cmp ecx, 2
mov dword [ebp - 0x1a8], ecx
jl 0x1004cb2
jmp 0x1004d5b
xor eax, eax
or eax, dword [ebp - 0x1a4]
or eax, 0x30
push eax
push 0x100d214
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
test byte [ebp - 0x1a4], 4
je 0x1004e88
cmp eax, 6
jmp 0x1004e94
test byte [ebp - 0x1a4], 1
je 0x1004eb6
cmp eax, 1
jne 0x1004eb6
and dword [ebp - 0x1a0], 0
jmp 0x1004eb6
push 0
push 0x30
push ebx
push 0x100d214
push dword [ebp - 0x1a0]
push 0
call fcn.010037c2
pop ebx
mov ecx, dword [ebp - 4]
xor eax, eax
cmp dword [ebp - 0x1a0], eax
pop edi
sete al
xor ecx, ebp
pop esi
call fcn.01006b07
leave
ret 4