Function at 0x403066
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x324
push esi
mov esi, ecx
push edi
lea eax, [ebp - 0x158]
push dword [esi + 0x48]
push dword [esi + 0x44]
push eax
call fcn.00403ed6
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0x88]
push eax
push 0x4206d8
call fcn.00416404
mov eax, dword [ebp + 8]
and eax, 1
mov dword [ebp - 0x8c], eax
je 0x403246
call fcn.004098d1
push eax
push 0
lea ecx, [ebp - 0x88]
call fcn.00416642
push dword [esi + 0x58]
lea ecx, [ebp - 0x88]
push 0x4206ac
call fcn.00416548
push dword [esi + 0x390]
lea ecx, [ebp - 0x88]
push 0x4206a4
call fcn.00416548
push dword [esi + 0x394]
lea ecx, [ebp - 0x88]
push 0x420698
call fcn.00416548
push dword [esi + 0x398]
lea ecx, [ebp - 0x88]
push 0x42068c
call fcn.00416548
push dword [esi + 0x39c]
lea ecx, [ebp - 0x88]
push 0x420680
call fcn.00416548
mov edi, dword [sym.imp.KERNEL32.dll_GetVersion]
call edi
cmp al, 4
jb 0x403146
call edi
cmp eax, 0x80000000
mov eax, 0x420674
jb 0x40314b
mov eax, 0x420668
push dword [esi + 0x3a0]
lea ecx, [ebp - 0x88]
push eax
call fcn.00416548
push dword [esi + 0x54]
lea ecx, [ebp - 0x88]
push 0x420660
call fcn.00416548
push dword [esi + 0x810]
lea ecx, [ebp - 0x88]
push 0x420658
call fcn.00416548
push dword [esi + 0x4c]
lea ecx, [ebp - 0x88]
push 0x4206d0
call fcn.00416548
push dword [esi + 0x50]
lea ecx, [ebp - 0x88]
push 0x42064c
call fcn.00416548
push dword [esi + 0x304]
lea ecx, [ebp - 0x88]
push 0x420614
call fcn.00416548
push dword [esi + 0x308]
lea ecx, [ebp - 0x88]
push 0x420604
call fcn.00416548
push dword [esi + 0x30c]
lea ecx, [ebp - 0x88]
push 0x4205f8
call fcn.00416548
push dword [esi + 0x310]
lea ecx, [ebp - 0x88]
push 0x4205ec
call fcn.00416548
push dword [esi + 0x314]
lea ecx, [ebp - 0x88]
push 0x4205e4
call fcn.00416548
push dword [esi + 0x318]
lea ecx, [ebp - 0x88]
push 0x4205d8
call fcn.00416548
push dword [esi + 0x31c]
lea ecx, [ebp - 0x88]
push 0x4205cc
call fcn.00416548
test byte [ebp + 8], 2
push ebx
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
je 0x403362
push dword [esi + 0x270]
lea ecx, [ebp - 0x88]
push 0x420640
call fcn.00416548
push dword [esi + 0x274]
lea ecx, [ebp - 0x88]
push 0x420630
call fcn.00416548
push dword [esi + 0x278]
lea ecx, [ebp - 0x88]
push 0x420624
call fcn.00416548
push 1
push 0x4205c0
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403357
xor eax, eax
cmp dword [esi + 0x278], eax
mov dword [ebp - 4], eax
jle 0x403357
mov dword [ebp - 8], eax
mov dword [ebp - 0x90], eax
mov edi, 0x4205b8
push dword [ebp - 4]
lea eax, [ebp - 0x25c]
push 0x4205c0
push edi
push eax
call ebx
mov eax, dword [esi + 0x280]
add esp, 0x10
add eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x88]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.00416642
push dword [ebp - 4]
lea eax, [ebp - 0x25c]
push 0x4205ac
push edi
push eax
call ebx
mov eax, dword [esi + 0x284]
add esp, 0x10
add eax, dword [ebp - 8]
lea ecx, [ebp - 0x88]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.00416642
inc dword [ebp - 4]
add dword [ebp - 0x90], 0x104
mov eax, dword [ebp - 4]
add dword [ebp - 8], 0x32
cmp eax, dword [esi + 0x278]
jl 0x4032d2
lea ecx, [ebp - 0x88]
call fcn.0041650a
cmp dword [ebp - 0x8c], 0
je 0x403691
lea eax, [esi + 0x968]
lea ecx, [ebp - 0x88]
push eax
push 0x420580
call fcn.00416642
push dword [esi + 0x99c]
lea ecx, [ebp - 0x88]
push 0x420570
call fcn.00416548
push dword [esi + 0x60]
lea ecx, [ebp - 0x88]
push 0x420564
call fcn.00416548
push dword [esi + 0x2d8]
lea ecx, [ebp - 0x88]
push 0x420558
call fcn.00416548
push dword [esi + 0x2dc]
lea ecx, [ebp - 0x88]
push 0x42054c
call fcn.00416548
push dword [esi + 0x2e0]
lea ecx, [ebp - 0x88]
push 0x420540
call fcn.00416548
push dword [esi + 0x5c]
lea ecx, [ebp - 0x88]
push 0x420530
call fcn.00416548
push dword [esi + 0x388]
lea ecx, [ebp - 0x88]
push 0x420520
call fcn.00416548
push dword [esi + 0x9ac]
lea ecx, [ebp - 0x88]
push 0x420514
call fcn.00416548
push dword [esi + 0x320]
lea ecx, [ebp - 0x88]
push 0x420504
call fcn.00416548
push dword [esi + 0x38c]
lea ecx, [ebp - 0x88]
push 0x4204f4
call fcn.00416548
lea eax, [esi + 0x324]
lea ecx, [ebp - 0x88]
push eax
push 0x4204e8
call fcn.00416642
lea eax, [esi + 0x356]
lea ecx, [ebp - 0x88]
push eax
push 0x4204d8
call fcn.00416642
lea eax, [esi + 0x3a4]
lea ecx, [ebp - 0x88]
push eax
push 0x4204d0
call fcn.00416642
push dword [esi + 0x7c0]
lea ecx, [ebp - 0x88]
push 0x4204c8
call fcn.004165c9
push dword [esi + 0x7c4]
lea ecx, [ebp - 0x88]
push 0x4201e8
call fcn.00416548
push dword [esi + 0x7c8]
lea ecx, [ebp - 0x88]
push 0x4204b8
call fcn.00416548
push dword [esi + 0x7cc]
lea ecx, [ebp - 0x88]
push 0x4204ac
call fcn.00416548
push dword [esi + 0x7d8]
lea ecx, [ebp - 0x88]
push 0x420488
call fcn.00416548
push dword [esi + 0x2f8]
push 0x42047c
lea ecx, [ebp - 0x88]
call fcn.00416548
push dword [esi + 0x2fc]
lea ecx, [ebp - 0x88]
push 0x420470
call fcn.00416548
push dword [esi + 0x300]
lea ecx, [ebp - 0x88]
push 0x420464
call fcn.00416548
lea eax, [esi + 0x7dc]
lea ecx, [ebp - 0x88]
push eax
push 0x420458
call fcn.00416642
push 1
push 0x420450
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x4035f7
push dword [esi + 0x2e4]
lea ecx, [ebp - 0x88]
push 0x420444
call fcn.00416548
push dword [esi + 0x2e8]
lea ecx, [ebp - 0x88]
push 0x420434
call fcn.00416548
push dword [esi + 0x2ec]
lea ecx, [ebp - 0x88]
push 0x420428
call fcn.00416548
push dword [esi + 0x2f0]
lea ecx, [ebp - 0x88]
push 0x42041c
call fcn.00416548
push dword [esi + 0x2f4]
lea ecx, [ebp - 0x88]
push 0x420410
call fcn.00416548
lea ecx, [ebp - 0x88]
call fcn.0041650a
push dword [esi + 0x64]
lea ecx, [ebp - 0x88]
push 0x420404
call fcn.00416548
lea eax, [esi + 0x68]
lea ecx, [ebp - 0x88]
push eax
push 0x4203fc
call fcn.00416642
lea eax, [esi + 0x16c]
lea ecx, [ebp - 0x88]
push eax
push 0x4203f0
call fcn.00416642
lea eax, [esi + 0x3ae]
lea ecx, [ebp - 0x88]
push eax
push 0x4203e8
call fcn.00416642
lea eax, [esi + 0x4b2]
lea ecx, [ebp - 0x88]
push eax
push 0x4203e0
call fcn.00416642
lea eax, [esi + 0x6ba]
lea ecx, [ebp - 0x88]
push eax
push 0x4203d4
call fcn.00416642
lea eax, [esi + 0x5b6]
lea ecx, [ebp - 0x88]
push eax
push 0x4203c8
call fcn.00416642
test byte [ebp + 8], 4
je 0x4038ab
push 1
push 0x4203bc
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x4038ab
push dword [esi + 0x814]
lea ecx, [ebp - 0x88]
push 0x4203ac
call fcn.00416548
push dword [esi + 0x828]
lea ecx, [ebp - 0x88]
push 0x42039c
call fcn.00416548
push dword [esi + 0x818]
lea ecx, [ebp - 0x88]
push 0x420390
call fcn.00416548
push dword [esi + 0x82c]
lea ecx, [ebp - 0x88]
push 0x420380
call fcn.00416548
push dword [esi + 0x81c]
lea ecx, [ebp - 0x88]
push 0x420370
call fcn.00416548
push dword [esi + 0x820]
lea ecx, [ebp - 0x88]
push 0x420360
call fcn.00416548
push dword [esi + 0x824]
lea ecx, [ebp - 0x88]
push 0x420354
call fcn.00416548
push 1
push 0x420348
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x4037ae
and dword [ebp - 4], 0
lea edi, [esi + 0x830]
push dword [ebp - 4]
lea eax, [ebp - 0x158]
push 0x42058c
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x158]
push dword [edi]
lea ecx, [ebp - 0x88]
push eax
call fcn.00416548
inc dword [ebp - 4]
add edi, 4
cmp dword [ebp - 4], 7
jl 0x40376f
lea ecx, [ebp - 0x88]
call fcn.0041650a
push dword [esi + 0x84c]
lea ecx, [ebp - 0x88]
push 0x42033c
call fcn.00416548
push dword [esi + 0x850]
lea ecx, [ebp - 0x88]
push 0x420330
call fcn.00416548
push dword [esi + 0x854]
lea ecx, [ebp - 0x88]
push 0x420320
call fcn.00416548
push dword [esi + 0x858]
lea ecx, [ebp - 0x88]
push 0x420314
call fcn.00416548
push dword [esi + 0x85c]
lea ecx, [ebp - 0x88]
push 0x420308
call fcn.00416548
push dword [esi + 0x860]
lea ecx, [ebp - 0x88]
push 0x4202fc
call fcn.00416548
push dword [esi + 0x864]
lea ecx, [ebp - 0x88]
push 0x4202f0
call fcn.00416548
push dword [esi + 0x868]
lea ecx, [ebp - 0x88]
push 0x4202e4
call fcn.00416548
push dword [esi + 0x86c]
lea ecx, [ebp - 0x88]
push 0x4202d8
call fcn.00416548
push dword [esi + 0x870]
lea ecx, [ebp - 0x88]
push 0x4202cc
call fcn.00416548
push dword [esi + 0x874]
lea ecx, [ebp - 0x88]
push 0x4202c0
call fcn.00416548
lea ecx, [ebp - 0x88]
call fcn.0041650a
test byte [ebp + 8], 8
je 0x40393e
push 1
push 0x4202b8
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x40393e
lea eax, [esi + 0x878]
mov ecx, esi
push eax
lea eax, [ebp - 0x88]
push 0x4202ac
push eax
call fcn.00403dc6
lea eax, [esi + 0x8b4]
mov ecx, esi
push eax
lea eax, [ebp - 0x88]
push 0x42029c
push eax
call fcn.00403dc6
lea eax, [esi + 0x8f0]
mov ecx, esi
push eax
lea eax, [ebp - 0x88]
push 0x420290
push eax
call fcn.00403dc6
lea eax, [esi + 0x92c]
mov ecx, esi
push eax
lea eax, [ebp - 0x88]
push 0x420284
push eax
call fcn.00403dc6
lea ecx, [ebp - 0x88]
call fcn.0041650a
test byte [ebp + 8], 0x10
je 0x403a17
push 1
push 0x420278
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403a17
mov eax, dword [esi + 0x9bc]
and dword [ebp - 4], 0
lea edi, [esi + 0x9bc]
mov ecx, edi
call dword [eax + 4]
test eax, eax
mov dword [ebp - 8], eax
je 0x4039ba
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
push eax
lea eax, [ebp - 0x158]
push 0x42058c
push eax
call ebx
mov eax, dword [ebp - 8]
add esp, 0xc
lea ecx, [ebp - 0x88]
push dword [eax + 8]
lea eax, [ebp - 0x158]
push eax
call fcn.00416642
mov eax, dword [edi]
push dword [ebp - 8]
mov ecx, edi
call dword [eax + 8]
jmp 0x403977
mov eax, dword [ebp - 4]
inc dword [ebp - 4]
push eax
lea eax, [ebp - 0x158]
push 0x42058c
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x324]
lea ecx, [ebp - 0x88]
push 0xc8
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.004165ed
cmp eax, 1
jne 0x403a0c
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0x88]
push eax
call fcn.004166e1
cmp eax, 1
je 0x4039ba
lea ecx, [ebp - 0x88]
call fcn.0041650a
test byte [ebp + 8], 0x20
je 0x403aaf
push dword [esi + 0x7d0]
lea ecx, [ebp - 0x88]
push 0x4204a0
call fcn.00416548
push dword [esi + 0x7d4]
lea ecx, [ebp - 0x88]
push 0x420494
call fcn.00416548
push 1
push 0x420268
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403aaf
mov eax, dword [esi + 0x9a0]
lea edi, [esi + 0x9a0]
mov ecx, edi
call dword [eax + 4]
test eax, eax
mov dword [ebp - 8], eax
je 0x403aa4
jmp 0x403a80
mov eax, dword [ebp - 8]
lea ecx, [eax + 0x3a]
add eax, 8
push ecx
push eax
lea ecx, [ebp - 0x88]
call fcn.00416642
mov eax, dword [edi]
push dword [ebp - 8]
mov ecx, edi
call dword [eax + 8]
test eax, eax
mov dword [ebp - 8], eax
jne 0x403a7d
lea ecx, [ebp - 0x88]
call fcn.0041650a
test byte [ebp + 8], 0x40
je 0x403afc
push 1
push 0x42025c
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403afc
push dword [esi + 0x38]
lea ecx, [ebp - 0x88]
push 0x420250
call fcn.00416548
push dword [esi + 0x3c]
lea ecx, [ebp - 0x88]
push 0x420240
call fcn.00416548
lea ecx, [ebp - 0x88]
call fcn.0041650a
test byte [ebp + 9], 0x10
je 0x403c8d
push 1
push 0x420234
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403c8d
call fcn.0040c0b5
test byte [ebp + 9], 0x20
mov dword [ebp - 0x8c], eax
je 0x403b3e
push 0
lea ecx, [ebp - 0x88]
call fcn.0041674d
and dword [ebp - 4], 0
cmp dword [esi + 0xc], 0
jle 0x403c82
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp - 4]
mov edi, dword [eax + ecx*4]
lea eax, [edi + 0x32]
push eax
push edi
lea eax, [ebp - 0x158]
push 0x42077c
push eax
call ebx
mov eax, dword [esi + 0x7c8]
add esp, 0x10
add eax, dword [edi + 0xd4]
cmp eax, dword [ebp - 0x8c]
jl 0x403c5b
cmp dword [edi + 0xd8], 0xa
je 0x403c5b
lea eax, [ebp - 0x158]
push 1
push eax
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403c73
push edi
push 0x420228
lea ecx, [ebp - 0x88]
call fcn.00416642
lea eax, [edi + 0x32]
lea ecx, [ebp - 0x88]
push eax
push 0x42021c
call fcn.00416642
push dword [edi + 0x64]
lea ecx, [ebp - 0x88]
push 0x420214
call fcn.004165c9
push dword [edi + 0x68]
lea ecx, [ebp - 0x88]
push 0x42020c
call fcn.00416548
lea eax, [edi + 0x6c]
lea ecx, [ebp - 0x88]
push eax
push 0x420200
call fcn.00416642
lea eax, [edi + 0x9e]
lea ecx, [ebp - 0x88]
push eax
push 0x4201f4
call fcn.00416642
push dword [edi + 0xd8]
lea ecx, [ebp - 0x88]
push 0x42025c
call fcn.00416548
push dword [edi + 0xd4]
lea ecx, [ebp - 0x88]
push 0x4201e8
call fcn.004165c9
lea ecx, [ebp - 0x88]
call fcn.0041650a
jmp 0x403c73
test byte [ebp + 9], 0x40
je 0x403c73
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0x88]
push eax
call fcn.0041674d
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp eax, dword [esi + 0xc]
jl 0x403b4c
lea ecx, [ebp - 0x88]
call fcn.0041650a
test byte [ebp + 8], 0x80
je 0x403d2c
push 1
push 0x4205a4
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403d2c
push dword [esi + 0x288]
lea ecx, [ebp - 0x88]
push 0x420598
call fcn.00416548
push dword [esi + 0x290]
lea ecx, [ebp - 0x88]
push 0x420590
call fcn.00416548
xor edi, edi
cmp dword [esi + 0x288], edi
jle 0x403d21
and dword [ebp - 8], edi
push edi
lea eax, [ebp - 0x25c]
push 0x42058c
push eax
call ebx
mov eax, dword [ebp - 8]
add esp, 0xc
add eax, dword [esi + 0x28c]
lea ecx, [ebp - 0x88]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.00416642
add dword [ebp - 8], 0x32
inc edi
cmp edi, dword [esi + 0x288]
jl 0x403ce6
lea ecx, [ebp - 0x88]
call fcn.0041650a
test byte [ebp + 9], 0x80
pop ebx
je 0x403db2
cmp dword [esi + 0x2c0], 0
lea edi, [esi + 0x2c0]
je 0x403db2
push 1
push 0x4201e0
lea ecx, [ebp - 0x88]
call fcn.004164a1
test eax, eax
je 0x403db2
push dword [esi + 0x2c4]
lea ecx, [ebp - 0x88]
push dword [edi]
push 0x4201d4
call fcn.004166a3
mov eax, dword [esi + 0x2cc]
test eax, eax
je 0x403d91
push dword [esi + 0x2d0]
lea ecx, [ebp - 0x88]
push eax
push 0x4201c4
call fcn.004166a3
push dword [esi + 0x2c8]
lea ecx, [ebp - 0x88]
push 0x4201b4
call fcn.00416548
lea ecx, [ebp - 0x88]
call fcn.0041650a
lea ecx, [ebp - 0x88]
call fcn.0041641e
push 1
pop eax
pop edi
pop esi
leave
ret 4