Function at 0x4bb170
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x22c
mov eax, dword [0x4fe37c]
xor eax, ebp
mov dword [ebp - 0x34], eax
push 0x24
push 0
lea eax, [ebp - 0x30]
push eax
call fcn.00445020
add esp, 0xc
push 0x11c
push 0
lea ecx, [ebp - 0x158]
push ecx
call fcn.00445020
add esp, 0xc
mov dword [ebp - 0x158], 0x11c
lea edx, [ebp - 0x158]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x4bb1d0
xor al, al
jmp 0x4bbfce
push str.GetNativeSystemInfo
push 0x4d7b20
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4bb1f9
lea eax, [ebp - 0x30]
push eax
call dword [ebp - 8]
jmp 0x4bb203
lea ecx, [ebp - 0x30]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x148], 2
jne 0x4bb215
cmp dword [ebp - 0x154], 4
ja 0x4bb21c
xor al, al
jmp 0x4bbfce
mov edx, dword [ebp + 8]
mov dword [ebp - 0x15c], edx
cmp dword [ebp - 0x15c], 0
je 0x4bb23f
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x164], eax
jmp 0x4bb249
mov dword [ebp - 0x164], 0
push str.Microsoft
mov ecx, dword [ebp - 0x164]
push ecx
call fcn.00424ff0
add esp, 8
cmp dword [ebp - 0x154], 6
jne case.0x4bb3dd.4
cmp dword [ebp - 0x150], 0
jne 0x4bb2ee
movzx edx, byte [ebp - 0x3e]
cmp edx, 1
jne 0x4bb2b6
cmp dword [ebp - 0x15c], 0
je 0x4bb296
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x168], eax
jmp 0x4bb2a0
mov dword [ebp - 0x168], 0
push str.Windows_Vista
mov ecx, dword [ebp - 0x168]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bb2ee
cmp dword [ebp - 0x15c], 0
je 0x4bb2d0
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x16c], edx
jmp 0x4bb2da
mov dword [ebp - 0x16c], 0
push str.Windows_Server_2008
mov eax, dword [ebp - 0x16c]
push eax
call fcn.0042ae30
add esp, 8
cmp dword [ebp - 0x150], 1
jne 0x4bb372
movzx ecx, byte [ebp - 0x3e]
cmp ecx, 1
jne 0x4bb33a
cmp dword [ebp - 0x15c], 0
je 0x4bb31a
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x170], edx
jmp 0x4bb324
mov dword [ebp - 0x170], 0
push str.Windows_7
mov eax, dword [ebp - 0x170]
push eax
call fcn.0042ae30
add esp, 8
jmp 0x4bb372
cmp dword [ebp - 0x15c], 0
je 0x4bb354
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x174], ecx
jmp 0x4bb35e
mov dword [ebp - 0x174], 0
push str.Windows_Server_2008_R2
mov edx, dword [ebp - 0x174]
push edx
call fcn.0042ae30
add esp, 8
push str.GetProductInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 4]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp - 0x154]
push edx
call dword [ebp - 0x160]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x178], eax
mov ecx, dword [ebp - 0x178]
sub ecx, 1
mov dword [ebp - 0x178], ecx
cmp dword [ebp - 0x178], 0x2f
ja case.0x4bb3dd.4
mov edx, dword [ebp - 0x178]
movzx eax, byte [edx + 0x4bc028]
jmp dword [eax*4 + 0x4bbfdc]
cmp dword [ebp - 0x15c], 0
je 0x4bb3fe
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x17c], ecx
jmp 0x4bb408
mov dword [ebp - 0x17c], 0
push str.Ultimate_Edition
mov edx, dword [ebp - 0x17c]
push edx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb43b
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x180], eax
jmp 0x4bb445
mov dword [ebp - 0x180], 0
push 0x4d7be0
mov ecx, dword [ebp - 0x180]
push ecx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb478
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x184], edx
jmp 0x4bb482
mov dword [ebp - 0x184], 0
push str.Home_Premium_Edition
mov eax, dword [ebp - 0x184]
push eax
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb4b5
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x188], ecx
jmp 0x4bb4bf
mov dword [ebp - 0x188], 0
push str.Home_Basic_Edition
mov edx, dword [ebp - 0x188]
push edx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb4f2
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x18c], eax
jmp 0x4bb4fc
mov dword [ebp - 0x18c], 0
push 0x4d7c1c
mov ecx, dword [ebp - 0x18c]
push ecx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb52f
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x190], edx
jmp 0x4bb539
mov dword [ebp - 0x190], 0
push str.Business_Edition
mov eax, dword [ebp - 0x190]
push eax
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb56c
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x194], ecx
jmp 0x4bb576
mov dword [ebp - 0x194], 0
push str.Starter_Edition
mov edx, dword [ebp - 0x194]
push edx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb5a9
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x198], eax
jmp 0x4bb5b3
mov dword [ebp - 0x198], 0
push str.Cluster_Server_Edition
mov ecx, dword [ebp - 0x198]
push ecx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb5e6
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x19c], edx
jmp 0x4bb5f0
mov dword [ebp - 0x19c], 0
push 0x4d7c6c
mov eax, dword [ebp - 0x19c]
push eax
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb623
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1a0], ecx
jmp 0x4bb62d
mov dword [ebp - 0x1a0], 0
push str.Datacenter_Edition__core_installation_
mov edx, dword [ebp - 0x1a0]
push edx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb660
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1a4], eax
jmp 0x4bb66a
mov dword [ebp - 0x1a4], 0
push 0x4d7ca8
mov ecx, dword [ebp - 0x1a4]
push ecx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb69d
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x1a8], edx
jmp 0x4bb6a7
mov dword [ebp - 0x1a8], 0
push str.Enterprise_Edition__core_installation_
mov eax, dword [ebp - 0x1a8]
push eax
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb6da
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1ac], ecx
jmp 0x4bb6e4
mov dword [ebp - 0x1ac], 0
push 0x4d7ce4
mov edx, dword [ebp - 0x1ac]
push edx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb717
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1b0], eax
jmp 0x4bb721
mov dword [ebp - 0x1b0], 0
push str.Small_Business_Server
mov ecx, dword [ebp - 0x1b0]
push ecx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb754
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x1b4], edx
jmp 0x4bb75e
mov dword [ebp - 0x1b4], 0
push str.Small_Business_Server_Premium_Edition
mov eax, dword [ebp - 0x1b4]
push eax
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb791
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1b8], ecx
jmp 0x4bb79b
mov dword [ebp - 0x1b8], 0
push 0x4d7d54
mov edx, dword [ebp - 0x1b8]
push edx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb7cb
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1bc], eax
jmp 0x4bb7d5
mov dword [ebp - 0x1bc], 0
push str.Standard_Edition__core_installation_
mov ecx, dword [ebp - 0x1bc]
push ecx
call fcn.0042ae30
add esp, 8
jmp case.0x4bb3dd.4
cmp dword [ebp - 0x15c], 0
je 0x4bb805
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x1c0], edx
jmp 0x4bb80f
mov dword [ebp - 0x1c0], 0
push str.Web_Server_Edition
mov eax, dword [ebp - 0x1c0]
push eax
call fcn.0042ae30
add esp, 8
cmp dword [ebp - 0x154], 5
jne 0x4bbc65
cmp dword [ebp - 0x150], 2
jne 0x4bbc65
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x4bb886
cmp dword [ebp - 0x15c], 0
je 0x4bb863
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1c4], ecx
jmp 0x4bb86d
mov dword [ebp - 0x1c4], 0
push str.Windows_Server_2003_R2_
mov edx, dword [ebp - 0x1c4]
push edx
call fcn.0042ae30
add esp, 8
jmp 0x4bb99a
movzx eax, word [ebp - 0x40]
and eax, 0x2000
je 0x4bb8ce
cmp dword [ebp - 0x15c], 0
je 0x4bb8ab
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1c8], ecx
jmp 0x4bb8b5
mov dword [ebp - 0x1c8], 0
push str.Windows_Storage_Server_2003
mov edx, dword [ebp - 0x1c8]
push edx
call fcn.0042ae30
add esp, 8
jmp 0x4bb99a
movzx eax, word [ebp - 0x40]
and eax, 0x8000
je 0x4bb916
cmp dword [ebp - 0x15c], 0
je 0x4bb8f3
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1cc], ecx
jmp 0x4bb8fd
mov dword [ebp - 0x1cc], 0
push str.Windows_Home_Server
mov edx, dword [ebp - 0x1cc]
push edx
call fcn.0042ae30
add esp, 8
jmp 0x4bb99a
movzx eax, byte [ebp - 0x3e]
cmp eax, 1
jne 0x4bb962
movzx ecx, word [ebp - 0x30]
cmp ecx, 9
jne 0x4bb962
cmp dword [ebp - 0x15c], 0
je 0x4bb942
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x1d0], edx
jmp 0x4bb94c
mov dword [ebp - 0x1d0], 0
push str.Windows_XP_Professional_x64_Edition
mov eax, dword [ebp - 0x1d0]
push eax
call fcn.0042ae30
add esp, 8
jmp 0x4bb99a
cmp dword [ebp - 0x15c], 0
je 0x4bb97c
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1d4], ecx
jmp 0x4bb986
mov dword [ebp - 0x1d4], 0
push str.Windows_Server_2003_
mov edx, dword [ebp - 0x1d4]
push edx
call fcn.0042ae30
add esp, 8
movzx eax, byte [ebp - 0x3e]
cmp eax, 1
je 0x4bbc65
movzx ecx, word [ebp - 0x30]
cmp ecx, 6
jne 0x4bba40
movzx edx, word [ebp - 0x40]
and edx, 0x80
je 0x4bb9fa
cmp dword [ebp - 0x15c], 0
je 0x4bb9da
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1d8], eax
jmp 0x4bb9e4
mov dword [ebp - 0x1d8], 0
push str.Datacenter_Edition_for_Itanium_based_Systems
mov ecx, dword [ebp - 0x1d8]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bba3b
movzx edx, word [ebp - 0x40]
and edx, 2
je 0x4bba3b
cmp dword [ebp - 0x15c], 0
je 0x4bba1d
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1dc], eax
jmp 0x4bba27
mov dword [ebp - 0x1dc], 0
push str.Enterprise_Edition_for_Itanium_based_Systems
mov ecx, dword [ebp - 0x1dc]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bbc65
movzx edx, word [ebp - 0x30]
cmp edx, 9
jne 0x4bbb12
movzx eax, word [ebp - 0x40]
and eax, 0x80
je 0x4bba92
cmp dword [ebp - 0x15c], 0
je 0x4bba72
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1e0], ecx
jmp 0x4bba7c
mov dword [ebp - 0x1e0], 0
push str.Datacenter_x64_Edition
mov edx, dword [ebp - 0x1e0]
push edx
call fcn.0042ae30
add esp, 8
jmp 0x4bbb0d
movzx eax, word [ebp - 0x40]
and eax, 2
je 0x4bbad5
cmp dword [ebp - 0x15c], 0
je 0x4bbab5
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x1e4], ecx
jmp 0x4bbabf
mov dword [ebp - 0x1e4], 0
push str.Enterprise_x64_Edition
mov edx, dword [ebp - 0x1e4]
push edx
call fcn.0042ae30
add esp, 8
jmp 0x4bbb0d
cmp dword [ebp - 0x15c], 0
je 0x4bbaef
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1e8], eax
jmp 0x4bbaf9
mov dword [ebp - 0x1e8], 0
push str.Standard_x64_Edition
mov ecx, dword [ebp - 0x1e8]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bbc65
movzx edx, word [ebp - 0x40]
and edx, 0x4000
je 0x4bbb5b
cmp dword [ebp - 0x15c], 0
je 0x4bbb38
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1ec], eax
jmp 0x4bbb42
mov dword [ebp - 0x1ec], 0
push str.Compute_Cluster_Edition
mov ecx, dword [ebp - 0x1ec]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bbc65
movzx edx, word [ebp - 0x40]
and edx, 0x80
je 0x4bbba4
cmp dword [ebp - 0x15c], 0
je 0x4bbb81
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1f0], eax
jmp 0x4bbb8b
mov dword [ebp - 0x1f0], 0
push str.Datacenter_Edition
mov ecx, dword [ebp - 0x1f0]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bbc65
movzx edx, word [ebp - 0x40]
and edx, 2
je 0x4bbbe7
cmp dword [ebp - 0x15c], 0
je 0x4bbbc7
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1f4], eax
jmp 0x4bbbd1
mov dword [ebp - 0x1f4], 0
push str.Enterprise_Edition
mov ecx, dword [ebp - 0x1f4]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bbc65
movzx edx, word [ebp - 0x40]
and edx, 0x400
je 0x4bbc2d
cmp dword [ebp - 0x15c], 0
je 0x4bbc0d
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x1f8], eax
jmp 0x4bbc17
mov dword [ebp - 0x1f8], 0
push str.Web_Edition
mov ecx, dword [ebp - 0x1f8]
push ecx
call fcn.0042ae30
add esp, 8
jmp 0x4bbc65
cmp dword [ebp - 0x15c], 0
je 0x4bbc47
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x1fc], edx
jmp 0x4bbc51
mov dword [ebp - 0x1fc], 0
push str.Standard_Edition
mov eax, dword [ebp - 0x1fc]
push eax
call fcn.0042ae30
add esp, 8
cmp dword [ebp - 0x154], 5
jne 0x4bbd34
cmp dword [ebp - 0x150], 1
jne 0x4bbd34
cmp dword [ebp - 0x15c], 0
je 0x4bbc99
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x200], ecx
jmp 0x4bbca3
mov dword [ebp - 0x200], 0
push str.Windows_XP
mov edx, dword [ebp - 0x200]
push edx
call fcn.0042ae30
add esp, 8
movzx eax, word [ebp - 0x40]
and eax, 0x200
je 0x4bbcfc
cmp dword [ebp - 0x15c], 0
je 0x4bbcdc
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x204], ecx
jmp 0x4bbce6
mov dword [ebp - 0x204], 0
push str.Home_Edition
mov edx, dword [ebp - 0x204]
push edx
call fcn.0042ae30
add esp, 8
jmp 0x4bbd34
cmp dword [ebp - 0x15c], 0
je 0x4bbd16
mov eax, dword [ebp - 0x15c]
add eax, 8
mov dword [ebp - 0x208], eax
jmp 0x4bbd20
mov dword [ebp - 0x208], 0
push 0x4d7f50
mov ecx, dword [ebp - 0x208]
push ecx
call fcn.0042ae30
add esp, 8
cmp dword [ebp - 0x154], 5
jne 0x4bbe8d
cmp dword [ebp - 0x150], 0
jne 0x4bbe8d
cmp dword [ebp - 0x15c], 0
je 0x4bbd68
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x20c], edx
jmp 0x4bbd72
mov dword [ebp - 0x20c], 0
push str.Windows_2000
mov eax, dword [ebp - 0x20c]
push eax
call fcn.0042ae30
add esp, 8
movzx ecx, byte [ebp - 0x3e]
cmp ecx, 1
jne 0x4bbdcc
cmp dword [ebp - 0x15c], 0
je 0x4bbda9
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x210], edx
jmp 0x4bbdb3
mov dword [ebp - 0x210], 0
push str.Professional
mov eax, dword [ebp - 0x210]
push eax
call fcn.0042ae30
add esp, 8
jmp 0x4bbe8d
movzx ecx, word [ebp - 0x40]
and ecx, 0x80
je 0x4bbe12
cmp dword [ebp - 0x15c], 0
je 0x4bbdf2
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x214], edx
jmp 0x4bbdfc
mov dword [ebp - 0x214], 0
push str.Datacenter_Server
mov eax, dword [ebp - 0x214]
push eax
call fcn.0042ae30
add esp, 8
jmp 0x4bbe8d
movzx ecx, word [ebp - 0x40]
and ecx, 2
je 0x4bbe55
cmp dword [ebp - 0x15c], 0
je 0x4bbe35
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x218], edx
jmp 0x4bbe3f
mov dword [ebp - 0x218], 0
push str.Advanced_Server
mov eax, dword [ebp - 0x218]
push eax
call fcn.0042ae30
add esp, 8
jmp 0x4bbe8d
cmp dword [ebp - 0x15c], 0
je 0x4bbe6f
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x21c], ecx
jmp 0x4bbe79
mov dword [ebp - 0x21c], 0
push str.Server
mov edx, dword [ebp - 0x21c]
push edx
call fcn.0042ae30
add esp, 8
lea eax, [ebp - 0x144]
push eax
call fcn.00444a90
add esp, 4
test eax, eax
jbe 0x4bbee8
cmp dword [ebp - 0x15c], 0
je 0x4bbeba
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x220], ecx
jmp 0x4bbec4
mov dword [ebp - 0x220], 0
lea edx, [ebp - 0x144]
push edx
push 0x4d7fac
mov eax, dword [ebp - 0x220]
push eax
call fcn.0042ae30
add esp, 8
push eax
call fcn.00424ff0
add esp, 8
cmp dword [ebp - 0x15c], 0
je 0x4bbf02
mov ecx, dword [ebp - 0x15c]
add ecx, 8
mov dword [ebp - 0x224], ecx
jmp 0x4bbf0c
mov dword [ebp - 0x224], 0
push 0x4d7fb0
mov edx, dword [ebp - 0x14c]
push edx
push 0x4d7fb4
mov eax, dword [ebp - 0x224]
push eax
call fcn.00424ff0
add esp, 8
mov ecx, eax
call fcn.00438cc0
push eax
call fcn.00424ff0
add esp, 8
cmp dword [ebp - 0x154], 6
jb 0x4bbfcc
movzx ecx, word [ebp - 0x30]
cmp ecx, 9
jne 0x4bbf8c
cmp dword [ebp - 0x15c], 0
je 0x4bbf6c
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x228], edx
jmp 0x4bbf76
mov dword [ebp - 0x228], 0
push str.__64_bit
mov eax, dword [ebp - 0x228]
push eax
call fcn.0042ae30
add esp, 8
jmp 0x4bbfcc
movzx ecx, word [ebp - 0x30]
test ecx, ecx
jne 0x4bbfcc
cmp dword [ebp - 0x15c], 0
je 0x4bbfae
mov edx, dword [ebp - 0x15c]
add edx, 8
mov dword [ebp - 0x22c], edx
jmp 0x4bbfb8
mov dword [ebp - 0x22c], 0
push str.__32_bit
mov eax, dword [ebp - 0x22c]
push eax
call fcn.0042ae30
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0x34]
xor ecx, ebp
call fcn.004443e3
mov esp, ebp
pop ebp
ret