Function at 0x433ba0
Capabilities:
Check os version

Disassembly:
push ebx
xor bl, bl
cmp dword [0x4dafb8], 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExW]
jne 0x433bd8
push 0x4dafb8
mov dword [0x4dafb8], 0x114
call esi
test eax, eax
jne 0x433bd8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x4dae94], eax
xor al, al
pop esi
pop ebx
ret
cmp dword [0x4dae98], 0
jne 0x433bf6
push 0x4dae98
mov dword [0x4dae98], 0x11c
call esi
test eax, eax
je 0x433bc8
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
cmp eax, 0x10
ja case.default.0x433c05
jmp dword [eax*4 + 0x433ec0]
cmp dword [0x4dafc8], 1
jne case.default.0x433c05
cmp dword [0x4dafbc], 4
jne case.default.0x433c05
cmp dword [0x4dafc0], 0x5a
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
cmp dword [0x4dafc8], 1
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
cmp dword [0x4dafbc], 5
jne case.default.0x433c05
cmp dword [0x4dafc0], 0
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
mov ecx, 2
cmp dword [0x4dafc8], ecx
jne case.default.0x433c05
cmp dword [0x4dafbc], 5
jne case.default.0x433c05
cmp dword [0x4dafc0], ecx
jne case.default.0x433c05
cmp byte [0x4dafb2], 3
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
cmp dword [0x4dafbc], 5
jne case.default.0x433c05
cmp dword [0x4dafc0], 1
jne case.default.0x433c05
cmp byte [0x4dafb2], 1
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
mov ecx, 2
cmp dword [0x4dafc8], ecx
jne case.default.0x433c05
cmp dword [0x4dafbc], 5
jne case.default.0x433c05
cmp dword [0x4dafc0], ecx
jmp 0x433cdb
mov ecx, 2
cmp dword [0x4dafc8], ecx
jne case.default.0x433c05
cmp dword [0x4dafbc], 5
jne case.default.0x433c05
mov eax, dword [0x4dafc0]
cmp eax, 1
je 0x433ce1
cmp eax, ecx
jmp 0x433cdb
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
cmp dword [0x4dafbc], 6
jne case.default.0x433c05
call fcn.00433f10
test al, al
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
cmp dword [0x4dafbc], 6
jne case.default.0x433c05
call fcn.00433f10
cmp al, 1
jne case.default.0x433c05
mov bl, al
pop esi
pop ebx
ret
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
cmp dword [0x4dafbc], 6
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
mov bl, 1
mov al, bl
pop esi
pop ebx
ret
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
cmp dword [0x4dafbc], 5
jmp 0x433eb5
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
mov eax, dword [0x4dafbc]
cmp eax, 5
jne 0x433e18
cmp dword [0x4dafc0], 1
jae 0x433eb7
mov al, bl
pop esi
pop ebx
ret
cmp eax, 6
jmp 0x433eb5
mov ecx, 2
cmp dword [0x4dafc8], ecx
jne case.default.0x433c05
mov eax, dword [0x4dafbc]
cmp eax, 5
ja 0x433eb7
jne case.default.0x433c05
mov eax, dword [0x4dafc0]
cmp eax, 1
ja 0x433eb7
jne case.default.0x433c05
cmp word [0x4dafac], cx
jmp 0x433eb5
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
mov eax, dword [0x4dafbc]
cmp eax, 5
ja 0x433eb7
jne case.default.0x433c05
mov eax, dword [0x4dafc0]
cmp eax, 1
ja 0x433eb7
jne case.default.0x433c05
cmp word [0x4dafac], 3
jmp 0x433eb5
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
cmp dword [0x4dafbc], 6
jmp 0x433eb5
cmp dword [0x4dafc8], 2
jne case.default.0x433c05
mov eax, dword [0x4dafbc]
cmp eax, 6
ja 0x433eb7
jne case.default.0x433c05
cmp dword [0x4dafc0], 0
ja 0x433eb7
cmp word [0x4dafac], 1
jb case.default.0x433c05
mov bl, 1
pop esi
mov al, bl
pop ebx
ret