Function at 0x403f40
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x198
mov eax, dword [0x43100c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x118
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
lea eax, [ebp - 0x15c]
movaps xmmword [ebp - 0x40], xmm0
push 0
push eax
movaps xmmword [ebp - 0x30], xmm0
call fcn.00415f70
add esp, 0xc
mov dword [ebp - 0x160], 0x11c
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x403fbe
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00414cec
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
sub esp, 0x18
mov ecx, esp
push 0x432414
call fcn.00413990
lea ecx, [ebp - 0x17c]
call fcn.004029f0
mov esi, eax
add esp, 0x18
cmp dword [esi + 0x14], 0x10
jb 0x403fe5
mov esi, dword [esi]
sub esp, 0x18
mov ecx, esp
push 0x431d84
call fcn.00413990
lea ecx, [ebp - 0x194]
call fcn.004029f0
add esp, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x40400a
mov eax, dword [eax]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x180]
mov esi, eax
cmp edx, 0x10
jb 0x404055
mov ecx, dword [ebp - 0x194]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40404b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404639
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x168]
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
cmp edx, 0x10
jb 0x4040aa
mov ecx, dword [ebp - 0x17c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4040a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404639
push edx
push ecx
call fcn.0041535e
add esp, 8
mov dword [ebp - 0x16c], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
push eax
test esi, esi
je 0x4040d1
call esi
jmp 0x4040d7
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x15c]
cmp eax, 0xa
jne 0x4040fe
cmp dword [ebp - 0x158], 0
jne 0x404621
xor eax, eax
cmp byte [ebp - 0x46], 1
setne al
inc eax
jmp 0x40461c
cmp eax, 6
jne 0x4045c7
mov eax, dword [ebp - 0x158]
cmp eax, 3
jne 0x404123
xor eax, eax
cmp byte [ebp - 0x46], 1
setne al
add eax, 3
jmp 0x40461c
cmp eax, 2
jne 0x4045a4
sub esp, 0x18
cmp byte [ebp - 0x46], 1
jne 0x4041ff
mov esi, esp
mov dword [0x431930], 1
sub esp, 0x18
mov ecx, esp
push 0x432054
call fcn.00413990
mov ecx, esi
call fcn.004029f0
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x432264
call fcn.00413990
mov ecx, esi
call fcn.004029f0
add esp, 0x18
lea ecx, [ebp - 0x17c]
mov edx, 0x80000002
call fcn.00402b00
add esp, 0x30
cmp dword [eax + 0x14], 0x10
jb 0x404191
mov eax, dword [eax]
push eax
call fcn.004185cd
mov edx, dword [ebp - 0x168]
add esp, 4
cmp eax, 0x55f0
setge al
mov byte [ebp - 0x161], al
cmp edx, 0x10
jb 0x4041e8
mov ecx, dword [ebp - 0x17c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4041d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40463e
push edx
push ecx
call fcn.0041535e
mov al, byte [ebp - 0x161]
add esp, 8
test al, al
je 0x404593
mov dword [0x431930], 0x12
jmp 0x404593
mov ecx, esp
mov dword [0x431930], 4
push str.NjEqGU
call fcn.00413990
lea ecx, [ebp - 0x194]
call fcn.004029f0
mov esi, esp
mov edi, eax
sub esp, 0x18
mov ecx, esp
push 0x432324
call fcn.00413990
mov ecx, esi
call fcn.004029f0
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x432264
call fcn.00413990
mov ecx, esi
call fcn.004029f0
add esp, 0x18
lea ecx, [ebp - 0x17c]
mov edx, 0x80000002
call fcn.00402b00
add esp, 0x30
mov edx, edi
cmp dword [edi + 0x14], 0x10
jb 0x404272
mov edx, dword [edi]
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x40427c
mov ecx, dword [eax]
push dword [edi + 0x10]
push edx
mov edx, dword [eax + 0x10]
push ecx
call fcn.004142e0
mov edx, dword [ebp - 0x168]
add esp, 0xc
mov esi, eax
cmp edx, 0x10
jb 0x4042c8
mov ecx, dword [ebp - 0x17c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4042be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404643
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
cmp edx, 0x10
jb 0x40431d
mov ecx, dword [ebp - 0x194]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404313
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404643
push edx
push ecx
call fcn.0041535e
add esp, 8
mov eax, dword [0x431930]
mov ecx, 0x10
cmp esi, 0xf4240
cmovb eax, ecx
sub esp, 0x18
mov ecx, esp
mov dword [0x431930], eax
push str.NjErEk
call fcn.00413990
lea ecx, [ebp - 0x194]
call fcn.004029f0
mov esi, esp
mov edi, eax
sub esp, 0x18
mov ecx, esp
push 0x432324
call fcn.00413990
mov ecx, esi
call fcn.004029f0
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x432264
call fcn.00413990
mov ecx, esi
call fcn.004029f0
add esp, 0x18
lea ecx, [ebp - 0x17c]
mov edx, 0x80000002
call fcn.00402b00
add esp, 0x30
mov edx, edi
cmp dword [edi + 0x14], 0x10
jb 0x4043a1
mov edx, dword [edi]
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x4043ab
mov ecx, dword [eax]
push dword [edi + 0x10]
push edx
mov edx, dword [eax + 0x10]
push ecx
call fcn.004142e0
mov edx, dword [ebp - 0x168]
add esp, 0xc
mov esi, eax
cmp edx, 0x10
jb 0x4043f7
mov ecx, dword [ebp - 0x17c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4043ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404648
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
cmp edx, 0x10
jb 0x40444c
mov ecx, dword [ebp - 0x194]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404442
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404648
push edx
push ecx
call fcn.0041535e
add esp, 8
mov eax, dword [0x431930]
mov ecx, 0x11
cmp esi, 0xf4240
cmovb eax, ecx
sub esp, 0x18
mov ecx, esp
mov dword [0x431930], eax
push str.NjEqFk
call fcn.00413990
lea ecx, [ebp - 0x194]
call fcn.004029f0
mov esi, esp
mov edi, eax
sub esp, 0x18
mov ecx, esp
push 0x432324
call fcn.00413990
mov ecx, esi
call fcn.004029f0
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x432264
call fcn.00413990
mov ecx, esi
call fcn.004029f0
add esp, 0x18
lea ecx, [ebp - 0x17c]
mov edx, 0x80000002
call fcn.00402b00
add esp, 0x30
mov edx, edi
cmp dword [edi + 0x14], 0x10
jb 0x4044d0
mov edx, dword [edi]
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x4044da
mov ecx, dword [eax]
push dword [edi + 0x10]
push edx
mov edx, dword [eax + 0x10]
push ecx
call fcn.004142e0
mov edx, dword [ebp - 0x168]
add esp, 0xc
mov esi, eax
cmp edx, 0x10
jb 0x404526
mov ecx, dword [ebp - 0x17c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40451c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40464d
push edx
push ecx
call fcn.0041535e
add esp, 8
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
cmp edx, 0x10
jb 0x40457b
mov ecx, dword [ebp - 0x194]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x404571
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40464d
push edx
push ecx
call fcn.0041535e
add esp, 8
mov eax, dword [0x431930]
cmp esi, 0xf4240
mov ecx, 2
cmovb eax, ecx
mov dword [0x431930], eax
mov eax, dword [ebp - 0x15c]
cmp eax, 6
jne 0x4045c7
mov eax, dword [ebp - 0x158]
test eax, eax
jne 0x4045b4
cmp byte [ebp - 0x46], 1
setne al
add eax, 7
jmp 0x40461c
cmp eax, 1
jne 0x404621
xor eax, eax
cmp byte [ebp - 0x46], 1
setne al
add eax, 9
jmp 0x40461c
cmp eax, 5
jne 0x404621
mov ecx, dword [ebp - 0x158]
cmp ecx, 2
jne 0x4045fc
cmp byte [ebp - 0x46], 1
jne 0x4045f0
cmp word [ebp - 0x40], 9
jne 0x4045f0
mov dword [0x431930], 0xc
jmp 0x404621
mov dword [0x431930], 0xd
jmp 0x404621
cmp ecx, 1
jne 0x40460d
mov dword [0x431930], 0xe
jmp 0x404621
mov eax, dword [0x431930]
test ecx, ecx
mov edx, 0xf
cmove eax, edx
mov dword [0x431930], eax
mov ecx, dword [ebp - 4]
mov eax, dword [0x431930]
xor ecx, ebp
pop edi
pop esi
call fcn.00414cec
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004187ac
call fcn.004187ac
call fcn.004187ac
call fcn.004187ac
call fcn.004187ac
int3