Function at 0x405890
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov eax, dword [0x4caef0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x6c], ecx
push 0
mov ecx, dword [ebp - 0x6c]
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 4
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 8
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0xc
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x10
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x14
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x18
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x1c
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x20
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x24
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x28
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x2c
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x30
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x34
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x38
call fcn.0041cbf0
push 0
mov ecx, dword [ebp - 0x6c]
add ecx, 0x3c
call fcn.0041cbf0
mov eax, dword [ebp - 0x6c]
mov dword [0x4d6db0], eax
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea ecx, [ebp - 0x68]
call fcn.00401d50
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xff
movzx ecx, al
cmp ecx, 5
jle 0x4059a5
mov dword [ebp - 0x70], 0x4bf814
jmp 0x4059ac
mov dword [ebp - 0x70], str.Tahoma
mov edx, dword [ebp - 0x70]
push edx
push 0x40
lea eax, [ebp - 0x4c]
push eax
call fcn.00402030
mov dword [ebp - 0x68], 0xfffffff5
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x6c]
call fcn.0040ab70
lea ecx, [ebp - 0x68]
call fcn.00401d70
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x6c]
add ecx, 4
call fcn.0040ab70
mov dword [ebp - 0x58], 0x190
mov dword [ebp - 0x68], 0xfffffff4
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x6c]
add ecx, 8
call fcn.0040ab70
lea ecx, [ebp - 0x68]
call fcn.00401d70
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x6c]
add ecx, 0xc
call fcn.0040ab70
mov dword [ebp - 0x58], 0x190
mov dword [ebp - 0x68], 0xfffffff3
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x10
call fcn.0040ab70
lea ecx, [ebp - 0x68]
call fcn.00401d70
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x6c]
add ecx, 0x14
call fcn.0040ab70
mov dword [ebp - 0x58], 0x190
mov dword [ebp - 0x68], 0xfffffff0
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x18
call fcn.0040ab70
lea ecx, [ebp - 0x68]
call fcn.00401d70
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x1c
call fcn.0040ab70
mov dword [ebp - 0x58], 0x190
mov dword [ebp - 0x68], 0xfffffff3
lea ecx, [ebp - 0x68]
call fcn.00401d70
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x6c]
add ecx, 0x20
call fcn.0040ab70
mov dword [ebp - 0x68], 0xfffffff5
mov dword [ebp - 0x58], 0x190
mov byte [ebp - 0x53], 1
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x24
call fcn.0040ab70
mov dword [ebp - 0x68], 0xfffffff2
mov dword [ebp - 0x58], 0x190
lea ecx, [ebp - 0x68]
call fcn.00401d70
mov byte [ebp - 0x53], 0
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x28
call fcn.0040ab70
mov dword [ebp - 0x68], 0xfffffff2
mov dword [ebp - 0x58], 0x190
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x6c]
add ecx, 0x2c
call fcn.0040ab70
mov dword [ebp - 0x68], 0xfffffff4
mov dword [ebp - 0x58], 0x258
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x30
call fcn.0040ab70
mov dword [ebp - 0x68], 0xffffffec
mov dword [ebp - 0x58], 0x190
lea ecx, [ebp - 0x68]
call fcn.00401d70
mov byte [ebp - 0x53], 0
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x34
call fcn.0040ab70
mov dword [ebp - 0x68], 0xfffffff4
mov dword [ebp - 0x58], 0x190
mov byte [ebp - 0x53], 1
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x6c]
add ecx, 0x38
call fcn.0040ab70
push 0x4bf814
push 0x40
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00402030
mov dword [ebp - 0x68], 0xffffffe4
mov dword [ebp - 0x58], 0x2bc
lea ecx, [ebp - 0x68]
call fcn.00401d70
mov byte [ebp - 0x54], 1
mov byte [ebp - 0x53], 0
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x6c]
add ecx, 0x3c
call fcn.0040ab70
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004948e6
mov esp, ebp
pop ebp
ret