Function at 0x40bf20
Capabilities:
Check os version

Disassembly:
sub esp, 0x94
push ebx
push esi
push edi
push 2
push 0x104
call fcn.00411e3e
add esp, 8
mov dword [0x4210c4], eax
push 0x104
push eax
mov eax, dword [0x421088]
push eax
call dword [0x421138]
mov ecx, dword [0x4210c4]
push ecx
call fcn.00411d78
mov ecx, dword [0x4210c4]
mov esi, eax
add esi, esi
add esp, 4
mov eax, esi
xor edx, edx
shr eax, 2
je 0x40bfb2
mov edi, eax
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx*2]
xor eax, eax
mov al, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx*2]
xor eax, eax
mov al, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx*2]
xor eax, eax
mov al, byte [ecx]
add edx, eax
inc ecx
mov eax, edx
shr eax, 0x1f
lea edx, [eax + edx*2]
xor eax, eax
mov al, byte [ecx]
add edx, eax
inc ecx
dec edi
jne 0x40bf73
and esi, 3
mov eax, esi
jbe 0x40bfcb
mov esi, edx
xor ebx, ebx
mov bl, byte [ecx]
shr esi, 0x1f
lea edx, [esi + edx*2]
add edx, ebx
inc ecx
dec eax
jne 0x40bfb9
mov ecx, dword [str.InstItClass]
push 0
push ecx
mov dword [0x421054], edx
call dword [0x4211cc]
mov esi, eax
mov ebx, 1
test esi, esi
je 0x40c048
push 2
push ebx
push 0x8001
push esi
call dword [0x42118c]
cmp eax, dword [0x421054]
jne 0x40c048
push 0x4210c4
call fcn.00402e60
add esp, 4
push esi
call dword [sym.imp.USER32.dll_GetLastActivePopup]
mov ebx, dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
mov edi, eax
call ebx
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x40c035
push 9
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
cmp esi, edi
je 0x40c03c
push edi
call ebx
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x94
ret
mov edx, dword [esp + 0xa4]
mov dword [0x4210a4], 0xffffffff
mov dword [0x421088], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
xor ecx, ecx
lea edi, [esp + 0xc]
mov cl, ah
lea edx, [esp + 0xc]
mov ch, al
xor eax, eax
mov word [0x421050], cx
mov ecx, 0x25
mov esi, 0x2000
push edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x10], 0x94
mov dword [0x42104c], esi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x40c143
mov eax, dword [esp + 0x1c]
dec eax
je 0x40c10f
dec eax
jne 0x40c143
mov eax, dword [esp + 0x10]
mov byte [0x42104a], bl
cmp eax, 4
mov dword [0x42104c], 0x10000
sete cl
cmp eax, 5
mov byte [0x421049], cl
jb 0x40c143
mov dword [0x42104c], 0x40000
jne 0x40c0f8
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x40c143
mov dword [0x42104c], 0x20000
jmp 0x40c143
cmp eax, 5
jbe 0x40c143
mov byte [0x421048], bl
mov dword [0x42104c], 0x80000
jmp 0x40c143
mov eax, dword [esp + 0x10]
mov dword [0x42104c], esi
cmp eax, 4
jne 0x40c137
mov eax, dword [esp + 0x14]
cmp eax, 0x5a
jae 0x40c139
test eax, eax
jbe 0x40c143
mov dword [0x42104c], 0x4000
jmp 0x40c143
jbe 0x40c143
mov dword [0x42104c], 0x8000
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
call fcn.00402180
push str.RICHED20.DLL
call dword [0x42110c]
test eax, eax
mov dword [0x42101c], eax
jne 0x40c176
push str.RICHED32.DLL
call dword [0x42110c]
mov dword [0x42101c], eax
jmp 0x40c17c
mov byte [0x421046], bl
push 2
push 0x104
call fcn.00411e3e
push 2
push 0x104
mov dword [0x420ffc], eax
call fcn.00411e3e
push 2
push 0x208
mov dword [0x4210a8], eax
call fcn.00411e3e
push 2
push 0x104
mov dword [0x420e5c], eax
call fcn.00411e3e
push 2
push 0x104
mov dword [0x420e58], eax
call fcn.00411e3e
push 2
push 0x104
mov dword [0x4210ac], eax
call fcn.00411e3e
push 2
push 0x104
mov dword [0x420e54], eax
call fcn.00411e3e
add esp, 0x38
mov dword [0x420e50], eax
mov eax, ebx
pop edi
pop esi
pop ebx
add esp, 0x94
ret