Function at 0x415a70
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
mov eax, dword [0x5e632c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x154]
cmp dword [eax], 0
je 0x415a99
jmp 0x415f0c
push 0x11c
push 0
lea ecx, [ebp - 0x128]
push ecx
call fcn.004bbbe0
add esp, 0xc
mov dword [ebp - 0x128], 0x11c
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x415aea
mov dword [ebp - 0x128], 0x114
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x415aea
jmp 0x415f0c
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x118]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x124]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x120]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x11c]
mov dword [ecx + 8], edx
movzx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x18], eax
movzx edx, word [ebp - 0x12]
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x1c], edx
push 0x24
push 0
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004bbbe0
add esp, 0xc
push 1
push 5
mov ecx, dword [ebp - 0x154]
call fcn.004166e0
test eax, eax
je 0x415b99
push 0x5cb7c8
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x415b99
lea edx, [ebp - 0x14c]
push edx
call dword [ebp - 0x150]
movzx eax, word [ebp - 0x14c]
xor ecx, ecx
cmp eax, 9
sete cl
mov edx, dword [ebp - 0x154]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 4
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0x14], 1
jne 0x415c1a
mov edx, dword [ebp - 0x154]
cmp dword [edx + 0xc], 4
jne 0x415c15
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x158], ecx
cmp dword [ebp - 0x158], 0xa
je 0x415bf9
cmp dword [ebp - 0x158], 0x5a
je 0x415c08
jmp 0x415c15
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 1
jmp 0x415c15
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 2
jmp 0x415f00
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0x14], 2
jne 0x415f00
push 3
push 6
mov ecx, dword [ebp - 0x154]
call fcn.004159a0
test eax, eax
je 0x415c59
mov edx, dword [ebp - 0x154]
mov dword [edx + 0xc], 6
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x10], 3
jmp 0x415cb5
push 4
push 6
mov ecx, dword [ebp - 0x154]
call fcn.004159a0
test eax, eax
je 0x415c88
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0xc], 6
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x10], 4
jmp 0x415cb5
push 0
push 0xa
mov ecx, dword [ebp - 0x154]
call fcn.004159a0
test eax, eax
je 0x415cb5
mov eax, dword [ebp - 0x154]
mov dword [eax + 0xc], 0xa
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x10], 0
mov edx, dword [ebp - 0x154]
cmp dword [edx + 0xc], 5
jne 0x415d38
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x15c], ecx
cmp dword [ebp - 0x15c], 0
je 0x415ced
cmp dword [ebp - 0x15c], 1
je 0x415cfc
cmp dword [ebp - 0x15c], 2
je 0x415d0b
jmp 0x415d33
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 3
jmp 0x415d33
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 4
jmp 0x415d33
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x415d26
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 5
jmp 0x415d33
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x29
jmp 0x415f00
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0xc], 6
jne 0x415ea9
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
ja case.default.0x415d6a
mov ecx, dword [ebp - 0x160]
jmp dword [ecx*4 + 0x415f1c]
movzx edx, byte [ebp - 0xe]
cmp edx, 1
jne 0x415da4
mov eax, dword [ebp - 0x154]
cmp dword [eax + 4], 0
jne 0x415d95
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 6
jmp 0x415da2
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x3d
jmp 0x415db1
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x33
jmp case.default.0x415d6a
movzx ecx, byte [ebp - 0xe]
cmp ecx, 1
jne 0x415de9
mov edx, dword [ebp - 0x154]
cmp dword [edx + 4], 0
jne 0x415dda
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 7
jmp 0x415de7
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x47
jmp 0x415df6
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x34
jmp case.default.0x415d6a
movzx eax, byte [ebp - 0xe]
cmp eax, 1
jne 0x415e2e
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x415e1f
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 8
jmp 0x415e2c
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x51
jmp 0x415e3b
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x35
jmp case.default.0x415d6a
movzx edx, byte [ebp - 0xe]
cmp edx, 1
jne 0x415e70
mov eax, dword [ebp - 0x154]
cmp dword [eax + 4], 0
jne 0x415e61
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x52
jmp 0x415e6e
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x335
jmp 0x415e7d
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x36
jmp case.default.0x415d6a
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x415e9a
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0xa
jmp case.default.0x415d6a
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x65
jmp 0x415f00
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0xc], 0xa
jne 0x415f00
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x415ecf
jmp 0x415f00
movzx ecx, byte [ebp - 0xe]
cmp ecx, 1
jne 0x415f00
mov edx, dword [ebp - 0x154]
cmp dword [edx + 4], 0
jne 0x415ef3
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0xa
jmp 0x415f00
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x65
mov edx, dword [ebp - 0x154]
mov dword [edx], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004b9002
mov esp, ebp
pop ebp
ret