Function at 0x424220
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
mov eax, dword [0x487010]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push str.RtlGetVersion
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x42462d
push 0x11c
lea eax, [ebp - 0x23c]
push 0
push eax
call fcn.00439bf0
add esp, 0xc
mov dword [ebp - 0x23c], 0x11c
lea eax, [ebp - 0x23c]
push eax
call esi
test eax, eax
jne 0x42462d
cmp dword [ebp - 0x238], 0xa
jb 0x4242ad
cmp dword [ebp - 0x230], 0x55f0
pop esi
sbb eax, eax
add eax, 0xb
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439bd8
mov esp, ebp
pop ebp
ret
push edi
xor eax, eax
mov dword [ebp - 0x120], 0x11c
push 0xfe
push eax
mov word [ebp - 0x10c], ax
lea eax, [ebp - 0x10a]
push eax
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call fcn.00439bf0
mov esi, dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call esi
push edx
push eax
call esi
push edx
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
xor ecx, ecx
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 6
push eax
mov dword [ebp - 0x118], 2
mov word [ebp - 0xc], cx
call edi
test eax, eax
je 0x42436a
pop edi
mov eax, 8
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439bd8
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0x120], 0x11c
push 0xfe
push eax
mov word [ebp - 0x10c], ax
lea eax, [ebp - 0x10a]
push eax
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call fcn.00439bf0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call esi
push edx
push eax
call esi
push edx
push eax
call esi
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 6
xor ecx, ecx
mov dword [ebp - 0x118], 1
push eax
mov word [ebp - 0xc], cx
call edi
test eax, eax
je 0x42441a
pop edi
mov eax, 7
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439bd8
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0x120], 0x11c
push 0xfe
push eax
mov word [ebp - 0x10c], ax
lea eax, [ebp - 0x10a]
push eax
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call fcn.00439bf0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call esi
push edx
push eax
call esi
push edx
push eax
call esi
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 6
xor ecx, ecx
mov dword [ebp - 0x118], 0
push eax
mov word [ebp - 0xc], cx
call edi
test eax, eax
je 0x4244ca
pop edi
mov eax, 6
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439bd8
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0x120], 0x11c
push 0xfe
push eax
mov word [ebp - 0x10c], ax
lea eax, [ebp - 0x10a]
push eax
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call fcn.00439bf0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call esi
push edx
push eax
call esi
push edx
push eax
call esi
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 5
xor ecx, ecx
mov dword [ebp - 0x118], 1
push eax
mov word [ebp - 0xc], cx
call edi
test eax, eax
je 0x42461b
xor eax, eax
mov dword [ebp - 0x120], 0x11c
push 0xfe
push eax
mov word [ebp - 0x10c], ax
lea eax, [ebp - 0x10a]
push eax
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
call fcn.00439bf0
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
push 3
push 0x20
push 3
push 1
push 3
push 2
push eax
push eax
call esi
push edx
push eax
call esi
push edx
push eax
call esi
push edx
push eax
push 0x23
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 5
mov ecx, 3
mov dword [ebp - 0x118], 1
push eax
mov word [ebp - 0xc], cx
call edi
neg eax
pop edi
sbb eax, eax
and eax, 4
inc eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439bd8
mov esp, ebp
pop ebp
ret
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439bd8
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 7
xor ecx, ebp
pop esi
call fcn.00439bd8
mov esp, ebp
pop ebp
ret