Function at 0x4037f0
Capabilities:
Check os version
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
push 0x14
push 0
lea eax, [ebp - 0xac]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x14
push 0
push 0x409758
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x98], 0x94
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.KERNEL32.DLL_GetVersionExA]
test eax, eax
je 0x4039c3
cmp dword [ebp - 0x94], 4
jne 0x403879
cmp dword [ebp - 0x90], 0
jne 0x403879
cmp dword [ebp - 0x88], 1
jne 0x403861
mov dword [ebp - 0xb0], 0x407948
cmp dword [ebp - 0x88], 2
jne 0x403874
mov dword [ebp - 0xb0], 0x40794c
jmp 0x4039c1
cmp dword [ebp - 0x94], 4
jne 0x40389a
cmp dword [ebp - 0x90], 0xa
jne 0x40389a
mov dword [ebp - 0xb0], 0x407950
jmp 0x4039c1
cmp dword [ebp - 0x94], 4
jne 0x4038bb
cmp dword [ebp - 0x90], 0x5a
jne 0x4038bb
mov dword [ebp - 0xb0], 0x407954
jmp 0x4039c1
cmp dword [ebp - 0x94], 5
jne 0x4038dc
cmp dword [ebp - 0x90], 0
jne 0x4038dc
mov dword [ebp - 0xb0], 0x407958
jmp 0x4039c1
cmp dword [ebp - 0x94], 5
jne 0x4038fd
cmp dword [ebp - 0x90], 1
jne 0x4038fd
mov dword [ebp - 0xb0], 0x40795c
jmp 0x4039c1
cmp dword [ebp - 0x94], 5
jne 0x40391e
cmp dword [ebp - 0x90], 2
jne 0x40391e
mov dword [ebp - 0xb0], 0x407960
jmp 0x4039c1
cmp dword [ebp - 0x94], 6
jne 0x40393f
cmp dword [ebp - 0x90], 0
jne 0x40393f
mov dword [ebp - 0xb0], 0x407964
jmp 0x4039c1
cmp dword [ebp - 0x94], 6
jne 0x40395d
cmp dword [ebp - 0x90], 1
jne 0x40395d
mov dword [ebp - 0xb0], 0x407968
jmp 0x4039c1
cmp dword [ebp - 0x94], 6
jne 0x40397b
cmp dword [ebp - 0x90], 2
jne 0x40397b
mov dword [ebp - 0xb0], 0x40796c
jmp 0x4039c1
cmp dword [ebp - 0x94], 6
jne 0x403999
cmp dword [ebp - 0x90], 3
jne 0x403999
mov dword [ebp - 0xb0], 0x407970
jmp 0x4039c1
cmp dword [ebp - 0x94], 0xa
jne 0x4039b7
cmp dword [ebp - 0x90], 0
jne 0x4039b7
mov dword [ebp - 0xb0], 0x407974
jmp 0x4039c1
mov dword [ebp - 0xb0], 0x407978
jmp 0x4039cd
mov dword [ebp - 0xb0], 0x40797c
call fcn.00403580
movzx edx, al
test edx, edx
je 0x4039eb
push 0x407980
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x407984
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x14
lea eax, [ebp - 0xac]
push eax
push 7
push 0x800
call dword [sym.imp.KERNEL32.DLL_GetLocaleInfoA]
test eax, eax
je 0x403a2d
lea ecx, [ebp - 0xac]
push ecx
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
jmp 0x403a3f
push 0x407988
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x40798c
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
mov edx, dword [ebp - 0xb0]
push edx
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x407990
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
call fcn.00403790
movzx eax, al
test eax, eax
je 0x403a97
push 0x407994
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
jmp 0x403aa9
push 0x407998
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
push str.AU
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x403ad9
push 0x4079a0
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
jmp 0x403aeb
push 0x4079a4
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x4079a8
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
push 8
call fcn.00402f10
add esp, 4
push eax
push 0x409758
call sub.MSVCRT.dll_strcat
add esp, 8
mov eax, 0x409758
mov esp, ebp
pop ebp
ret