Function at 0x1037ffa
Capabilities:
Check os version

Disassembly:
push 0x1a4
mov eax, 0x105881f
call fcn.0100f1d3
mov eax, dword [ebp + 8]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x128], eax
mov eax, dword [0x1061024]
mov esi, ecx
mov dword [ebp - 0x134], eax
and dword [ebp - 4], 0
lea eax, [ebp - 0x134]
push eax
push dword [ebp + 0xc]
call fcn.01037e0b
test eax, eax
jge 0x1038075
mov esi, eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call fcn.010061d0
mov eax, esi
call fcn.0100f265
ret 0x1c
mov ecx, dword [ebp + 0x18]
mov eax, ecx
and eax, 0xff00
and ecx, 0xf
jne 0x1038143
xor ebx, ebx
inc ebx
mov edi, ebx
lea eax, [ebp - 0x124]
push eax
mov dword [ebp - 0x124], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x120], 6
jb 0x10383af
push 0x5c
lea eax, [ebp - 0x1ac]
push 0
push eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1ac], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x1a8], eax
movzx eax, word [ebp + 0xc]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
mov dword [ebp - 0x184], ebx
mov ebx, dword [ebp + 0x18]
add esp, 0xc
mov dword [ebp - 0x1b0], 0x60
mov dword [ebp - 0x1a4], 9
mov dword [ebp - 0x1a0], edi
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x15c], 0x1037f66
mov dword [ebp - 0x158], esi
test bl, 0x10
je 0x103819d
mov dword [ebp - 0x198], 0xfffe
jmp 0x10381c1
cmp ecx, 1
jne 0x103815c
push 9
pop edi
push 0
test eax, 0x100
pop ebx
setne bl
inc ebx
jmp 0x103808d
cmp ecx, 4
jne 0x1038172
push 6
and eax, 0x100
or eax, 0x600
shr eax, 8
jmp 0x1038195
cmp ecx, 3
jne 0x103817b
push 0xe
jmp 0x1038163
cmp ecx, 5
jne 0x1038256
and eax, 0x100
neg eax
sbb eax, eax
and eax, 0xfffffffe
push 0x18
add eax, 4
pop edi
mov ebx, eax
jmp 0x103808d
mov eax, ebx
and eax, 0x30
cmp al, 0x30
jne 0x10381b2
mov dword [ebp - 0x198], 0xffff
jmp 0x10381c1
test bl, 0x40
je 0x10381c1
mov dword [ebp - 0x198], 0xfffd
cmp dword [esi + 0xc], 0xffffffff
je 0x10381e1
cmp byte [esi + 0x10], 0
movzx eax, word [esi + 0xc]
mov dword [ebp - 0x174], eax
je 0x10381e1
mov dword [ebp - 0x1a4], 0x109
mov eax, dword [0x1061024]
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 1
mov edi, dword [ebp - 0x128]
push 0x1001d98
push dword [edi]
call fcn.01013900
test eax, eax
je 0x10382a3
mov eax, dword [0x1061024]
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 2
push dword [edi]
lea eax, [ebp - 0x128]
push 0x1003884
push eax
call fcn.01008675
add esp, 0xc
test eax, eax
setne al
test al, al
jne 0x1038260
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.010061d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x130]
call fcn.010061d0
mov esi, 0x80004005
jmp 0x103805c
push 0x1003878
push dword [ebp - 0x128]
lea eax, [ebp - 0x130]
push 0xf75e
push eax
call fcn.0101756c
add esp, 0x10
test eax, eax
setne al
test al, al
je 0x1038238
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.010061d0
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x1b0]
push eax
call fcn.01037dc5
test eax, eax
jge 0x1038374
push 0x1002a50
lea ecx, [ebp - 0x128]
or ebx, 0x10000
call fcn.010133a5
mov byte [ebp - 4], 3
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x140]
lea eax, [ebp - 0x13c]
push eax
call fcn.01026852
mov byte [ebp - 4], 4
push dword [ebp - 0x148]
push eax
lea eax, [ebp - 0x14c]
push eax
call fcn.01026852
mov byte [ebp - 4], 5
mov eax, dword [eax]
push ebx
push dword [ebp - 0x134]
push eax
push dword [ebp - 0x138]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x144]
mov dword [ecx], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x14c]
call fcn.010061d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x13c]
call fcn.010061d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x128]
call fcn.010061d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x130]
call fcn.010061d0
xor esi, esi
jmp 0x103805c
cmp dword [ebp - 0x12c], 2
jne 0x103839c
test ebx, ebx
jne 0x103838d
mov dword [ebp - 0x12c], 1
jmp 0x103839c
test bl, 4
je 0x103839c
mov dword [ebp - 0x12c], 7
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x12c]
mov dword [eax], ecx
and dword [esi], 0
jmp 0x103835e
or dword [ebp + 0x18], 0x10000
push 0x1002a50
lea ecx, [ebp - 0x12c]
call fcn.010133a5
mov byte [ebp - 4], 6
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x140]
lea eax, [ebp - 0x14c]
push eax
call fcn.01026852
mov byte [ebp - 4], 7
push dword [ebp - 0x148]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.01026852
mov byte [ebp - 4], 8
push dword [ebp + 0x18]
mov eax, dword [eax]
push dword [ebp - 0x134]
push eax
push dword [ebp - 0x138]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x144]
mov dword [ecx], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x13c]
call fcn.010061d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x14c]
call fcn.010061d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12c]
jmp 0x1038368