Function at 0x100316c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b0
push ebx
push esi
push edi
lea eax, [ebp - 0xac]
xor edi, edi
push eax
mov dword [ebp - 4], edi
mov dword [ebp - 0xac], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x1003277
mov dword [ebp - 4], 0x4b4
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edx, 0x54d
cmp eax, edx
je 0x10031d2
cmp eax, 0x54c
je 0x10031d2
xor ecx, ecx
cmp eax, ecx
je 0x1003268
push ecx
push 0x10
push ecx
push ecx
push eax
push ecx
jmp 0x1003263
and dword [ebp - 0xc], 0
cmp eax, edx
jne 0x10031f8
imul ecx, ecx, 0x3c
mov eax, dword [ebp + 8]
add ecx, dword [eax + 0x80]
lea esi, [ecx + eax + 0x84]
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0xc], ecx
jmp 0x10031fb
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 0x34]
push dword [esi + 0x30]
lea edi, [ecx + eax + 0x84]
call fcn.01002627
test byte [0x100aab8], 1
mov ebx, eax
jne 0x1003252
cmp byte [edi], 0
je 0x1003252
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
mov eax, ebx
or al, 0x30
push eax
push 0x100adf4
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
test bl, 4
je 0x1003242
cmp eax, 6
jmp 0x100324a
test bl, 1
je 0x1003268
cmp eax, 1
jne 0x1003268
and dword [ebp - 4], 0
jmp 0x1003268
push 0
push 0x30
push dword [ebp - 0xc]
push 0x100adf4
push dword [ebp - 4]
push 0
call fcn.01003ce8
xor eax, eax
pop edi
cmp dword [ebp - 4], eax
pop esi
pop ebx
sete al
leave
ret 4
mov eax, dword [ebp - 0x9c]
dec eax
je 0x10032d9
dec eax
je 0x100328f
mov dword [ebp - 4], 0x4ca
jmp 0x10031a3
cmp dword [ebp - 0xa8], 3
push 1
pop ebx
mov word [0x100bc04], 2
mov dword [0x100a2f8], ebx
mov dword [0x100a2fc], ebx
ja 0x10032ef
cmp dword [ebp - 0xa8], 3
mov word [0x100bc04], bx
jb 0x10032cb
jne 0x10032ef
cmp dword [ebp - 0xa4], 0x33
jae 0x10032ef
mov dword [0x100a2f8], edi
mov dword [0x100a2fc], edi
jmp 0x10032ef
push 1
mov word [0x100bc04], di
pop eax
push eax
mov dword [0x100a2f8], eax
mov dword [0x100a2fc], eax
pop ebx
cmp dword [0x100aab4], edi
jne 0x10031a3
mov esi, dword [ebp + 8]
cmp esi, edi
je 0x10031a3
cmp word [0x100bc04], di
jne 0x1003314
add esi, 0x40
jmp 0x1003317
add esi, 4
mov edi, dword [ebp - 0xa0]
xor ecx, ecx
mov dword [ebp - 8], ecx
lea eax, [ecx + ecx*2]
push dword [esi + eax*8 + 4]
lea eax, [esi + eax*8]
push dword [eax]
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
call fcn.01002644
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x10], eax
lea eax, [ecx + ecx*2]
push dword [esi + eax*8 + 0x10]
lea eax, [esi + eax*8]
push dword [eax + 0xc]
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
call fcn.01002644
mov ecx, dword [ebp - 8]
mov edx, dword [ebp + ecx*4 - 0x10]
mov dword [ebp + ecx*4 - 0x18], eax
test edx, edx
jl 0x10033bb
test eax, eax
jg 0x10033bb
test edx, edx
jne 0x10033a5
test eax, eax
jne 0x1003393
lea eax, [ecx + ecx*2]
movzx edx, di
cmp edx, dword [esi + eax*8 + 8]
lea eax, [esi + eax*8]
jb 0x10033b5
cmp edx, dword [eax + 0x14]
jmp 0x10033b3
test edx, edx
jne 0x10033a5
movzx edx, di
lea eax, [ecx + ecx*2]
cmp edx, dword [esi + eax*8 + 8]
jae 0x10033d5
jmp 0x10033b5
test eax, eax
jne 0x10033d5
movzx edx, di
lea eax, [ecx + ecx*2]
cmp edx, dword [esi + eax*8 + 0x14]
jbe 0x10033d5
test ecx, ecx
jne 0x10033ce
jmp 0x10033bf
cmp ecx, ebx
je 0x10033ce
inc ecx
cmp ecx, 2
mov dword [ebp - 8], ecx
jl 0x1003322
jmp 0x10033d5
mov dword [ebp - 4], 0x54c
cmp dword [ebp - 4], 0
jne 0x10031a9
mov eax, dword [ebp + 8]
cmp dword [eax + 0x7c], 0
je 0x10031a9
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x1b0]
push 0x104
push eax
push dword [ebp + 8]
call fcn.010024a7
test eax, eax
jne 0x10031a6
mov dword [ebp - 4], 0x54d
jmp 0x10031a6