Function at 0x1004bf5
Capabilities:
Check os version

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1b8
mov eax, dword [0x100c2c4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
lea eax, [ebp - 0x19c]
xor edi, edi
push eax
mov dword [ebp - 0x1a8], esi
mov dword [ebp - 0x1a0], edi
mov dword [ebp - 0x1a4], edi
mov dword [ebp - 0x19c], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x1004c5a
mov dword [ebp - 0x1a0], 0x4b4
push edi
push 0x10
push edi
push edi
push dword [ebp - 0x1a0]
push edi
jmp 0x1004f18
mov eax, dword [ebp - 0x18c]
dec eax
mov ecx, dword [ebp - 0x198]
je 0x1004cc8
dec eax
je 0x1004c78
mov dword [ebp - 0x1a0], 0x4ca
jmp 0x1004c49
push 2
pop eax
xor ebx, ebx
push 3
inc ebx
mov word [0x100d0cc], ax
pop eax
mov dword [0x100c2bc], ebx
mov dword [0x100c2c0], ebx
cmp ecx, eax
ja 0x1004cbb
mov edx, ebx
mov word [0x100d0cc], dx
jb 0x1004cad
jne 0x1004cde
cmp dword [ebp - 0x194], 0x33
jae 0x1004cde
mov dword [0x100c2bc], edi
mov dword [0x100c2c0], edi
jmp 0x1004cde
cmp ecx, 5
jb 0x1004cde
mov word [0x100d0cc], ax
jmp 0x1004cde
xor eax, eax
mov word [0x100d0cc], ax
inc eax
xor ebx, ebx
mov dword [0x100c2bc], eax
mov dword [0x100c2c0], eax
inc ebx
cmp dword [0x100def4], edi
jne 0x1004f1d
cmp esi, edi
je 0x1004f1d
cmp word [0x100d0cc], di
jne 0x1004d00
add esi, 0x40
jmp 0x1004d03
add esi, 4
movzx edi, word [ebp - 0x190]
xor ecx, ecx
mov dword [ebp - 0x1a4], ecx
imul ecx, ecx, 0x18
lea eax, [ecx + esi]
push dword [eax + 4]
push dword [eax]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
call fcn.01001ead
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + ecx*4 - 0x1b0], eax
imul ecx, ecx, 0x18
lea eax, [ecx + esi]
push dword [eax + 0x10]
push dword [eax + 0xc]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
call fcn.01001ead
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ebp + ecx*4 - 0x1b0]
test edx, edx
js 0x1004eae
test eax, eax
jg 0x1004eae
test edx, edx
jne 0x1004e84
test eax, eax
jne 0x1004d9b
mov eax, ecx
imul eax, eax, 0x18
mov edx, edi
cmp edx, dword [eax + esi + 8]
jb 0x1004e9b
cmp edx, dword [eax + esi + 0x14]
jmp 0x1004e95
test edx, edx
jne 0x1004e84
mov eax, ecx
imul eax, eax, 0x18
cmp edi, dword [eax + esi + 8]
jb 0x1004e9b
mov eax, dword [ebp - 0x1a8]
cmp dword [eax + 0x7c], 0
je 0x1004f1d
lea ecx, [ebp - 0x1a4]
push ecx
push 0x104
lea ecx, [ebp - 0x108]
push ecx
push eax
call fcn.010027ac
test eax, eax
jne 0x1004f1d
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a0], 0x54d
mov eax, dword [ebp - 0x1a8]
xor ebx, ebx
and dword [ebp - 0x1ac], ebx
xor edi, edi
cmp dword [ebp - 0x1a0], 0x54d
jne 0x1004e27
mov edx, dword [eax + 0x80]
imul ecx, ecx, 0x3c
add edx, ecx
lea esi, [edx + eax + 0x84]
lea ebx, [ebp - 0x108]
test esi, esi
je 0x1004e43
mov ecx, dword [esi + 0x34]
push dword [esi + 0x30]
lea edi, [ecx + eax + 0x84]
call fcn.01001e81
mov dword [ebp - 0x1ac], eax
test byte [0x100def8], 1
jne 0x1004f06
cmp byte [edi], 0
je 0x1004f06
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
call fcn.010077f1
test eax, eax
je 0x1004ec7
push 1
push 0x10
push dword [0x100db04]
call fcn.0100779c
test eax, eax
je 0x1004ec7
mov eax, 0x180000
jmp 0x1004ec9
test eax, eax
jne 0x1004db2
mov eax, ecx
imul eax, eax, 0x18
cmp edi, dword [eax + esi + 0x14]
jbe 0x1004db2
test ecx, ecx
je 0x1004eb2
mov dword [ebp - 0x1a0], 0x54c
jmp 0x1004df3
cmp ecx, ebx
je 0x1004e9f
inc ecx
mov dword [ebp - 0x1a4], ecx
cmp ecx, 2
jl 0x1004d12
jmp 0x1004db2
xor eax, eax
or eax, dword [ebp - 0x1ac]
or eax, 0x30
push eax
push 0x100d214
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
test byte [ebp - 0x1ac], 4
je 0x1004ef8
cmp eax, 6
jne 0x1004f1d
and dword [ebp - 0x1a0], 0
jmp 0x1004f1d
test byte [ebp - 0x1ac], 1
je 0x1004f1d
cmp eax, 1
jmp 0x1004eed
push 0
push 0x30
push ebx
push 0x100d214
push dword [ebp - 0x1a0]
push 0
call fcn.01003810
mov ecx, dword [ebp - 4]
xor eax, eax
cmp dword [ebp - 0x1a0], eax
pop edi
sete al
pop esi
xor ecx, ebp
pop ebx
call fcn.01006b51
leave
ret 4