Function at 0x430600
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
mov eax, dword [0x472554]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x154]
cmp dword [eax], 0
je 0x430629
jmp 0x430aab
push 0x11c
push 0
lea ecx, [ebp - 0x128]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x128], 0x11c
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x43067a
mov dword [ebp - 0x128], 0x114
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x43067a
jmp 0x430aab
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x118]
mov dword [ecx + 0x14], edx
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x124]
mov dword [eax + 0xc], ecx
mov edx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x120]
mov dword [edx + 0x10], eax
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x11c]
mov dword [ecx + 8], edx
movzx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x18], eax
movzx edx, word [ebp - 0x12]
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x1c], edx
push 0x24
push 0
lea ecx, [ebp - 0x14c]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 1
push 5
mov ecx, dword [ebp - 0x154]
call fcn.00430ba0
test eax, eax
je 0x430729
push str.GetNativeSystemInfo
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x430729
lea edx, [ebp - 0x14c]
push edx
call dword [ebp - 0x150]
movzx eax, word [ebp - 0x14c]
xor ecx, ecx
cmp eax, 9
sete cl
mov edx, dword [ebp - 0x154]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0xfa0
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0x14], 1
jne 0x4307aa
mov edx, dword [ebp - 0x154]
cmp dword [edx + 0xc], 4
jne 0x4307a5
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x158], ecx
cmp dword [ebp - 0x158], 0xa
je 0x430789
cmp dword [ebp - 0x158], 0x5a
je 0x430798
jmp 0x4307a5
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 1
jmp 0x4307a5
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 2
jmp 0x430a9f
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0x14], 2
jne 0x430a9f
push 3
push 6
mov ecx, dword [ebp - 0x154]
call fcn.00430ad0
test eax, eax
je 0x4307e9
mov edx, dword [ebp - 0x154]
mov dword [edx + 0xc], 6
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x10], 3
jmp 0x430845
push 4
push 6
mov ecx, dword [ebp - 0x154]
call fcn.00430ad0
test eax, eax
je 0x430818
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0xc], 6
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x10], 4
jmp 0x430845
push 0
push 0xa
mov ecx, dword [ebp - 0x154]
call fcn.00430ad0
test eax, eax
je 0x430845
mov eax, dword [ebp - 0x154]
mov dword [eax + 0xc], 0xa
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x10], 0
mov edx, dword [ebp - 0x154]
cmp dword [edx + 0xc], 5
jne 0x4308c8
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x15c], ecx
cmp dword [ebp - 0x15c], 0
je 0x43087d
cmp dword [ebp - 0x15c], 1
je 0x43088c
cmp dword [ebp - 0x15c], 2
je 0x43089b
jmp 0x4308c3
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 3
jmp 0x4308c3
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 4
jmp 0x4308c3
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x4308b6
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 5
jmp 0x4308c3
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x29
jmp 0x430a9f
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0xc], 6
jne 0x430a39
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
ja case.default.0x4308fa
mov ecx, dword [ebp - 0x160]
jmp dword [ecx*4 + 0x430abc]
movzx edx, byte [ebp - 0xe]
cmp edx, 1
jne 0x430934
mov eax, dword [ebp - 0x154]
cmp dword [eax + 4], 0
jne 0x430925
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 6
jmp 0x430932
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x3d
jmp 0x430941
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x33
jmp case.default.0x4308fa
movzx ecx, byte [ebp - 0xe]
cmp ecx, 1
jne 0x430979
mov edx, dword [ebp - 0x154]
cmp dword [edx + 4], 0
jne 0x43096a
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 7
jmp 0x430977
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x47
jmp 0x430986
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x34
jmp case.default.0x4308fa
movzx eax, byte [ebp - 0xe]
cmp eax, 1
jne 0x4309be
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x4309af
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 8
jmp 0x4309bc
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x51
jmp 0x4309cb
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x35
jmp case.default.0x4308fa
movzx edx, byte [ebp - 0xe]
cmp edx, 1
jne 0x430a00
mov eax, dword [ebp - 0x154]
cmp dword [eax + 4], 0
jne 0x4309f1
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x52
jmp 0x4309fe
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x335
jmp 0x430a0d
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x36
jmp case.default.0x4308fa
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 4], 0
jne 0x430a2a
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0xa
jmp case.default.0x4308fa
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0x65
jmp 0x430a9f
mov ecx, dword [ebp - 0x154]
cmp dword [ecx + 0xc], 0xa
jne 0x430a9f
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x430a5f
jmp 0x430a9f
movzx ecx, byte [ebp - 0xe]
cmp ecx, 1
jne 0x430a92
mov edx, dword [ebp - 0x154]
cmp dword [edx + 4], 0
jne 0x430a83
mov eax, dword [ebp - 0x154]
mov dword [eax + 0x20], 0xa
jmp 0x430a90
mov ecx, dword [ebp - 0x154]
mov dword [ecx + 0x20], 0x65
jmp 0x430a9f
mov edx, dword [ebp - 0x154]
mov dword [edx + 0x20], 0x37
mov eax, dword [ebp - 0x154]
mov dword [eax], 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043dcfe
mov esp, ebp
pop ebp
ret