Function at 0x4036ee
Capabilities:
Check os version

Disassembly:
push edi
pop edi
push ebp
mov ebp, esp
sub esp, 0x1c4
mov eax, dword [0x408004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0x94
push ecx
pop ebx
xor edi, edi
push eax
mov dword [ebp - 0x1ac], ebx
push edi
pop esi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x403737
mov esi, 0x4b4
jmp 0x40396b
mov eax, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x198]
push 2
pop ecx
sub eax, 1
je 0x4037a9
sub eax, 1
je 0x40375a
mov esi, 0x4ca
jmp 0x40396b
xor eax, eax
mov word [0x409a40], cx
inc eax
mov dword [0x408184], eax
mov dword [0x408180], eax
cmp edx, 3
ja 0x40379c
push eax
pop ecx
push 3
pop eax
mov word [0x409a40], cx
cmp edx, eax
jb 0x40378e
jne 0x4037bf
cmp dword [ebp - 0x194], 0x33
jae 0x4037bf
mov dword [0x408184], edi
mov dword [0x408180], edi
jmp 0x4037bf
cmp edx, 5
jb 0x4037bf
push 3
pop eax
mov cx, ax
jmp 0x4037b8
xor eax, eax
xor ecx, ecx
inc eax
mov dword [0x408184], eax
mov dword [0x408180], eax
mov word [0x409a40], cx
cmp dword [0x408a34], esi
jne 0x403a27
test ebx, ebx
je 0x403a27
xor eax, eax
mov dword [ebp - 0x1a8], edi
test cx, cx
setne al
dec eax
and eax, 0x3c
add eax, 4
add ebx, eax
and dword [ebp - 0x1a0], esi
mov dword [ebp - 0x1b4], ebx
mov edx, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x198]
imul eax, edi, 0x18
mov dword [ebp - 0x1a4], eax
push dword [eax + ebx + 4]
push dword [eax + ebx]
call fcn.00402a89
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1a4]
push dword [eax + ebx + 0x10]
push dword [eax + ebx + 0xc]
call fcn.00402a89
mov ecx, dword [ebp - 0x1b0]
mov edx, 0x54d
test ecx, ecx
js 0x4038eb
test eax, eax
jg 0x4038eb
test ecx, ecx
jne 0x403883
test eax, eax
mov eax, dword [ebp - 0x190]
jne 0x40386e
movzx ecx, ax
mov eax, dword [ebp - 0x1a4]
cmp ecx, dword [eax + ebx + 8]
jb 0x4038a0
cmp ecx, dword [eax + ebx + 0x14]
jmp 0x40389e
mov ecx, dword [ebp - 0x1a4]
movzx eax, ax
cmp eax, dword [ecx + ebx + 8]
jae 0x403915
jmp 0x4038a0
test eax, eax
jne 0x403915
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x190]
movzx eax, ax
cmp eax, dword [ecx + ebx + 0x14]
jbe 0x403915
test edi, edi
je 0x4038f4
mov esi, 0x54c
and dword [ebp - 0x1a0], 0
xor ebx, ebx
and dword [ebp - 0x1b0], 0
cmp esi, edx
mov edx, dword [ebp - 0x1ac]
jne 0x403975
mov ecx, dword [edx + 0x80]
imul eax, edi, 0x3c
add ecx, 0x84
add ecx, eax
lea eax, [ebp - 0x108]
add ecx, edx
mov dword [ebp - 0x1a0], eax
jmp 0x40397b
cmp dword [ebp - 0x1a0], 1
je 0x40390c
inc edi
mov dword [ebp - 0x1a8], edi
mov dword [ebp - 0x1a0], edi
cmp edi, 2
jl 0x4037f6
jmp 0x403911
mov esi, 0x54c
test esi, esi
jne 0x40394d
mov ecx, dword [ebp - 0x1ac]
cmp dword [ecx + 0x7c], 0
je 0x403a27
lea eax, [ebp - 0x1a8]
push eax
push ecx
lea edx, [ebp - 0x108]
call fcn.004028e8
test eax, eax
jne 0x403a27
mov edi, dword [ebp - 0x1a8]
mov edx, 0x54d
push edx
pop esi
cmp esi, edx
je 0x4038a9
cmp esi, 0x54c
je 0x4038a9
test esi, esi
je 0x403a27
xor edi, edi
push edi
push 0x10
push edi
push edi
jmp 0x403a1e
mov ecx, dword [ebp - 0x1b4]
test ecx, ecx
je 0x4039a9
mov edi, dword [ecx + 0x34]
mov eax, dword [ecx + 0x30]
add edi, 0x84
add edi, edx
test al, 1
je 0x403998
mov ebx, 0x104
jmp 0x4039af
and al, 2
movzx ebx, al
neg ebx
sbb ebx, ebx
and ebx, 0x101
jmp 0x4039af
mov edi, dword [ebp - 0x1b0]
test byte [0x408a38], 1
jne 0x403a0f
test edi, edi
je 0x403a0f
cmp byte [edi], 0
je 0x403a0f
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
call fcn.0040681f
test eax, eax
je 0x4039e3
push ecx
call fcn.004067c9
test eax, eax
je 0x4039e3
mov eax, 0x180030
jmp 0x4039e6
push 0x30
pop eax
or eax, ebx
push eax
push 0x409154
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
test bl, 4
je 0x403a01
cmp eax, 6
jmp 0x403a09
test bl, 1
je 0x403a27
cmp eax, 1
jne 0x403a27
xor esi, esi
jmp 0x403a27
push 0
push 0x30
push dword [ebp - 0x1a0]
push 0x409154
push esi
pop edx
xor ecx, ecx
call fcn.004044b9
mov ecx, dword [ebp - 4]
xor eax, eax
test esi, esi
pop edi
sete al
xor ecx, ebp
pop esi
pop ebx
call fcn.00406ce0
mov esp, ebp
pop ebp
ret