Function at 0x409760
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
mov eax, dword [0x43b274]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x154]
cmp dword [eax], 0
je 0x409789
jmp 0x409c0b
push 0x11c
push 0
lea ecx, [ebp - 0x128]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x128], 0x11c
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x4097da
mov dword [ebp - 0x128], 0x114
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x4097da
jmp 0x409c0b
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x118]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x124]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x120]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x11c]
mov dword [ecx + 8], edx
movzx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x18], eax
movzx edx, word [ebp - 0x12]
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x1c], edx
push 0x24
push 0
lea ecx, [ebp - 0x14c]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 1
push 5
mov ecx, dword [ebp - 0x154]
call fcn.00409d00
test eax, eax
je 0x409889
push str.GetNativeSystemInfo
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x409889
lea edx, [ebp - 0x14c]
push edx
call dword [ebp - 0x150]
movzx eax, word [ebp - 0x14c]
xor ecx, ecx
cmp eax, 9
sete cl
mov edx, dword [ebp - 0x154]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0xfa0
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0x14], 1
jne 0x40990a
mov edx, dword [ebp - 0x154]
cmp dword [edx + 0xc], 4
jne 0x409905
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x158], ecx
cmp dword [ebp - 0x158], 0xa
je 0x4098e9
cmp dword [ebp - 0x158], 0x5a
je 0x4098f8
jmp 0x409905
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 1
jmp 0x409905
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 2
jmp 0x409bff
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0x14], 2
jne 0x409bff
push 3
push 6
mov ecx, dword [ebp - 0x154]
call fcn.00409c30
test eax, eax
je 0x409949
mov edx, dword [ebp - 0x154]
mov dword [edx + 0xc], 6
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x10], 3
jmp 0x4099a5
push 4
push 6
mov ecx, dword [ebp - 0x154]
call fcn.00409c30
test eax, eax
je 0x409978
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0xc], 6
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x10], 4
jmp 0x4099a5
push 0
push 0xa
mov ecx, dword [ebp - 0x154]
call fcn.00409c30
test eax, eax
je 0x4099a5
mov eax, dword [ebp - 0x154]
mov dword [eax + 0xc], 0xa
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x10], 0
mov edx, dword [ebp - 0x154]
cmp dword [edx + 0xc], 5
jne 0x409a28
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x15c], ecx
cmp dword [ebp - 0x15c], 0
je 0x4099dd
cmp dword [ebp - 0x15c], 1
je 0x4099ec
cmp dword [ebp - 0x15c], 2
je 0x4099fb
jmp 0x409a23
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 3
jmp 0x409a23
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 4
jmp 0x409a23
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x409a16
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 5
jmp 0x409a23
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x29
jmp 0x409bff
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0xc], 6
jne 0x409b99
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
ja case.default.0x409a5a
mov ecx, dword [ebp - 0x160]
jmp dword [ecx*4 + 0x409c1c]
movzx edx, byte [ebp - 0xe]
cmp edx, 1
jne 0x409a94
mov eax, dword [ebp - 0x154]
cmp dword [eax + 4], 0
jne 0x409a85
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 6
jmp 0x409a92
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x3d
jmp 0x409aa1
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x33
jmp case.default.0x409a5a
movzx ecx, byte [ebp - 0xe]
cmp ecx, 1
jne 0x409ad9
mov edx, dword [ebp - 0x154]
cmp dword [edx + 4], 0
jne 0x409aca
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 7
jmp 0x409ad7
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x47
jmp 0x409ae6
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x34
jmp case.default.0x409a5a
movzx eax, byte [ebp - 0xe]
cmp eax, 1
jne 0x409b1e
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x409b0f
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 8
jmp 0x409b1c
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x51
jmp 0x409b2b
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x35
jmp case.default.0x409a5a
movzx edx, byte [ebp - 0xe]
cmp edx, 1
jne 0x409b60
mov eax, dword [ebp - 0x154]
cmp dword [eax + 4], 0
jne 0x409b51
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x52
jmp 0x409b5e
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x335
jmp 0x409b6d
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x36
jmp case.default.0x409a5a
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x409b8a
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0xa
jmp case.default.0x409a5a
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x65
jmp 0x409bff
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0xc], 0xa
jne 0x409bff
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x409bbf
jmp 0x409bff
movzx ecx, byte [ebp - 0xe]
cmp ecx, 1
jne 0x409bf2
mov edx, dword [ebp - 0x154]
cmp dword [edx + 4], 0
jne 0x409be3
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0xa
jmp 0x409bf0
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x65
jmp 0x409bff
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x37
mov eax, dword [ebp - 0x154]
mov dword [eax], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042279c
mov esp, ebp
pop ebp
ret