Function at 0x418664
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe24
push ebx
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x418ba8
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x669c28], 0
je 0x41869d
cmp dword [0x681c70], 0
jne 0x418b7c
mov byte [0x669c28], 1
call sub.KERNEL32.DLL_GetVersion_1
test eax, 0x80000000
jne 0x41871e
lea eax, [ebp - 0x1b4]
mov edx, 0x11c
call fcn.0040b1c4
mov dword [ebp - 0x1b4], 0x11c
push 0x418bb4
push 0x418bd0
call sub.KERNEL32.DLL_GetModuleHandleW_2
push eax
call fcn.0040a328
mov ebx, eax
test ebx, ebx
je 0x4186f6
lea eax, [ebp - 0x1b4]
push eax
call ebx
test eax, eax
je 0x418778
lea eax, [ebp - 0x1b4]
push eax
call sub.KERNEL32.DLL_GetVersionExW
test eax, eax
jne 0x418778
mov dword [ebp - 0x1b4], 0x114
lea eax, [ebp - 0x1b4]
push eax
call sub.KERNEL32.DLL_GetVersionExW
jmp 0x418778
lea eax, [ebp - 0x98]
mov edx, 0x94
call fcn.0040b1c4
mov dword [ebp - 0x98], 0x94
lea eax, [ebp - 0x98]
push eax
call sub.KERNEL32.DLL_GetVersionExA
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x98]
mov ecx, 0x94
call fcn.00403424
mov ecx, 0x80
lea eax, [ebp - 0x84]
lea edx, [ebp - 0x1a0]
movzx ebx, byte [eax]
mov word [edx], bx
add edx, 2
inc eax
dec ecx
jne 0x41876b
mov eax, dword [ebp - 0x1b0]
mov dword [0x681c54], eax
mov eax, dword [ebp - 0x1ac]
mov dword [0x681c58], eax
mov eax, 0x681c60
lea edx, [ebp - 0x1a0]
mov ecx, 0x80
call fcn.004070dc
mov eax, dword [ebp - 0x1a4]
cmp eax, 1
sete dl
mov byte [0x681c64], dl
cmp eax, 2
sete al
mov byte [0x681c66], al
cmp byte [0x681c64], 0
je 0x4187d7
movzx eax, word [ebp - 0x1a8]
mov dword [0x681c5c], eax
jmp 0x4187e2
mov eax, dword [ebp - 0x1a8]
mov dword [0x681c5c], eax
mov byte [0x681c68], 0
xor eax, eax
mov dword [0x681c6c], eax
cmp byte [0x681c64], 0
je 0x41889c
mov eax, dword [0x681c54]
sub eax, 4
jb 0x418884
je 0x41880b
jmp 0x41887d
mov eax, dword [0x681c58]
sub eax, 0xa
jb 0x41881f
je 0x41883d
dec eax
sub eax, 0x50
jb 0x41886b
jmp 0x418874
cmp dword [0x681c5c], 0x3e8
jbe 0x418834
mov byte [0x681c68], 2
jmp 0x418884
mov byte [0x681c68], 1
jmp 0x418884
mov eax, dword [0x681c5c]
cmp eax, 0xa8c
jbe 0x418852
mov byte [0x681c68], 5
jmp 0x418884
cmp eax, 0x7d0
jbe 0x418862
mov byte [0x681c68], 4
jmp 0x418884
mov byte [0x681c68], 3
jmp 0x418884
mov byte [0x681c68], 5
jmp 0x418884
mov byte [0x681c68], 6
jmp 0x418884
mov byte [0x681c68], 6
movzx eax, byte [0x681c68]
mov byte [0x681c65], al
mov byte [0x681c67], 0
jmp 0x418a8f
cmp byte [0x681c66], 0
je 0x418a8f
mov eax, dword [0x681c54]
cmp eax, 0xa
ja case.0x4188b7.7
jmp dword [eax*4 + 0x4188be]
mov byte [0x681c68], 7
jmp 0x4189e2
mov byte [0x681c68], 8
jmp 0x4189e2
mov eax, dword [0x681c58]
sub eax, 1
jb 0x418910
je 0x41891c
jmp 0x418928
mov byte [0x681c68], 9
jmp 0x4189e2
mov byte [0x681c68], 0xa
jmp 0x4189e2
cmp byte [ebp - 0x9a], 1
jne 0x41893d
mov byte [0x681c68], 0xa
jmp 0x4189e2
mov byte [0x681c68], 0xb
jmp 0x4189e2
mov eax, dword [0x681c58]
sub eax, 1
jb 0x41895d
je 0x418978
dec eax
je 0x418993
dec eax
je 0x4189ae
jmp 0x4189c9
cmp byte [ebp - 0x9a], 1
jne 0x41896f
mov byte [0x681c68], 0xc
jmp 0x4189e2
mov byte [0x681c68], 0xd
jmp 0x4189e2
cmp byte [ebp - 0x9a], 1
jne 0x41898a
mov byte [0x681c68], 0xe
jmp 0x4189e2
mov byte [0x681c68], 0xf
jmp 0x4189e2
cmp byte [ebp - 0x9a], 1
jne 0x4189a5
mov byte [0x681c68], 0x10
jmp 0x4189e2
mov byte [0x681c68], 0x11
jmp 0x4189e2
cmp byte [ebp - 0x9a], 1
jne 0x4189c0
mov byte [0x681c68], 0x12
jmp 0x4189e2
mov byte [0x681c68], 0x13
jmp 0x4189e2
mov byte [0x681c68], 0x15
jmp 0x4189e2
mov byte [0x681c68], 0x14
jmp 0x4189e2
mov byte [0x681c68], 0x15
mov byte [0x681c65], 0
movzx eax, byte [0x681c68]
mov byte [0x681c67], al
cmp dword [ebp - 0x1b4], 0x11c
jb 0x418a0f
movzx eax, word [ebp - 0xa0]
mov dword [0x681c6c], eax
jmp 0x418a4b
mov eax, dword [0x681c60]
call fcn.0040718c
cmp eax, 0xe
jl 0x418a4b
mov eax, dword [0x681c60]
call fcn.0040718c
sub eax, 0xd
push eax
mov eax, 0x681c60
call fcn.00407854
lea edx, [eax + 0x1a]
mov ebx, dword [0x67d350]
mov ebx, dword [ebx]
xor eax, eax
pop ecx
call ebx
mov dword [0x681c6c], eax
push 0x418be4
push 0x418c0c
call sub.KERNEL32.DLL_GetModuleHandleW_2
push eax
call fcn.0040a328
mov ebx, eax
test ebx, ebx
je 0x418a8f
lea eax, [ebp - 0x1d8]
mov edx, 0x24
call fcn.0040b1c4
lea eax, [ebp - 0x1d8]
push eax
call ebx
cmp word [ebp - 0x1d8], 9
sete al
mov byte [0x681c69], al
lea eax, [ebp - 0x1dc]
movzx edx, byte [0x681c68]
mov edx, dword [edx*4 + 0x669ba4]
mov ecx, 0
call fcn.00406124
mov edx, dword [ebp - 0x1dc]
mov eax, 0x681c70
call fcn.004070f8
cmp byte [0x681c66], 0
je 0x418b7c
push 0x59
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x418ae4
mov eax, 0x681c70
mov edx, 0x418c34
call fcn.00407230
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x418afe
mov eax, 0x681c70
mov edx, 0x418c48
call fcn.00407230
push 0x58
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x418b18
mov eax, 0x681c70
mov edx, 0x418c6c
call fcn.00407230
cmp byte [0x681c68], 0xc
jae 0x418b3b
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x418b3b
mov eax, 0x681c70
mov edx, 0x418c8c
call fcn.00407230
cmp byte [0x681c69], 0
je 0x418b53
mov eax, 0x681c70
mov edx, 0x418cb4
call fcn.00407230
cmp dword [0x681c60], 0
je 0x418b7c
push dword [0x681c70]
push 0x418ccc
push dword [0x681c60]
mov eax, 0x681c70
mov edx, 3
call fcn.00407380
mov eax, dword [ebp - 4]
mov edx, 0x681c54
mov ecx, dword [0x418504]
call fcn.00407c54
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x418baf
lea eax, [ebp - 0x1dc]
call fcn.00405e70
ret