Function at 0x424aa0
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [0x632a40]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x11c
lea eax, [ebp - 0x140]
push 0
push eax
call fcn.0057ff70
add esp, 0xc
mov dword [ebp - 0x140], 0x11c
lea eax, [ebp - 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x20
push str.63cfa3a725ff457b4a4fe8d101344adc
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], 0xf
mov dword [ebp - 0xc], 0
mov byte [ebp - 0x1c], 0
call fcn.00408580
cmp dword [ebp - 0xc], 0x100
mov eax, dword [ebp - 8]
jbe 0x424b4c
cmp eax, 0x10
jb 0x424b2f
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
pop eax
push edx
push edi
push esp
push ebp
pop ebp
pop eax
push eax
pop esi
push esi
pop eax
pop esp
push esi
push esi
push eax
push esp
push eax
push eax
pop ecx
push edx
pop esi
push edx
pop esp
pop eax
push esi
push ebp
push edx
jmp 0x424b5e
cmp eax, 0x10
jb 0x424b5e
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
push 0x20
push str.c32e6ab5c73d16ddf5444a6f28c9e536
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], 0xf
mov dword [ebp - 0xc], 0
mov byte [ebp - 0x1c], 0
call fcn.00408580
cmp dword [ebp - 0xc], 0x100
mov eax, dword [ebp - 8]
jbe 0x424bb7
cmp eax, 0x10
jb 0x424b9d
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
pop esp
push ebx
pop esp
pop esp
pop esp
pop edi
pop eax
pop eax
push esi
push esi
pop eax
push esi
push ebx
push eax
push ebp
push ebp
push ebp
push edi
pop edi
pop ebp
pop esp
push ebx
push ebp
pop ebx
jmp 0x424bc9
cmp eax, 0x10
jb 0x424bc9
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
mov eax, dword [ebp - 0x13c]
lea ecx, [ebp - 0x1c]
mov edi, dword [ebp - 0x138]
push 0x20
push str.63cfa3a725ff457b4a4fe8d101344adc
mov dword [ebp - 0x144], eax
mov dword [ebp - 8], 0xf
mov dword [ebp - 0xc], 0
mov byte [ebp - 0x1c], 0
call fcn.00408580
cmp dword [ebp - 0xc], 0x100
mov eax, dword [ebp - 8]
jbe 0x424c2e
cmp eax, 0x10
jb 0x424c1a
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
pop eax
push edx
push edi
pop esi
push edx
push esi
push edi
push esi
push eax
push eax
pop esp
pop ebp
push edi
pop ecx
push esp
pop esp
pop esi
push ebx
jmp 0x424c40
cmp eax, 0x10
jb 0x424c40
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
push 0x20
push str.458260d2290b89f72e5abff4127c2881
lea ecx, [ebp - 0x1c]
mov dword [ebp - 8], 0xf
mov dword [ebp - 0xc], 0
mov byte [ebp - 0x1c], 0
call fcn.00408580
cmp dword [ebp - 0xc], 0x100
mov eax, dword [ebp - 8]
jbe 0x424c91
cmp eax, 0x10
jb 0x424c7f
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
push ebx
pop esi
pop esi
push ebp
pop edx
push ecx
pop ebx
pop eax
pop ecx
pop esp
pop esi
pop ecx
pop edx
push ebp
pop edx
push edi
jmp 0x424ca3
cmp eax, 0x10
jb 0x424ca3
inc eax
lea ecx, [ebp - 0x1c]
push eax
push dword [ebp - 0x1c]
call fcn.00408a70
cmp dword [ebp - 0x144], 5
jg 0x424cc7
cmp edi, 2
jg 0x424cc7
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00579ec9
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00579ec9
mov esp, ebp
pop ebp
ret