Function at 0x4093e0
Capabilities:
Check os version
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x39c
mov eax, dword [0x42c3f8]
xor eax, ebp
mov dword [ebp - 0x38], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x34], eax
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.00409a40
add esp, 4
push 0
mov eax, dword [ebp + 8]
push eax
push 0
mov ecx, 0x42d4c4
call fcn.00409a70
mov dword [ebp - 0x34], eax
push 0x426278
call fcn.004010c0
add esp, 4
push 0x114
push 0
lea ecx, [ebp - 0x150]
push ecx
call fcn.004129b0
add esp, 0xc
mov dword [ebp - 0x150], 0x114
lea edx, [ebp - 0x150]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x14c], 6
jb 0x4094d2
call fcn.00408b50
movzx eax, al
test eax, eax
je 0x4094c5
push 0x104
lea ecx, [ebp - 0x360]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 1
push 0
push 0
lea eax, [ebp - 0x360]
push eax
push str.runas
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x4e20
mov ecx, dword [0x42d4c0]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor eax, eax
jmp 0x4096d1
mov edx, dword [0x42d4c0]
push edx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea ecx, [ebp - 0x2c]
call fcn.00402ab0
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040a800
cmp eax, 1
je 0x40950d
mov dword [ebp - 0x384], 0
lea ecx, [ebp - 0x2c]
call fcn.00402b10
mov eax, dword [ebp - 0x384]
jmp 0x4096d1
mov dword [ebp - 8], 0x14
call fcn.00408b80
movzx eax, al
test eax, eax
je 0x4095c2
lea ecx, [ebp - 0x380]
call fcn.00408260
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x380]
call fcn.0040a880
cmp eax, 1
jne 0x409557
lea ecx, [ebp - 0x380]
call fcn.00408280
jmp 0x409514
mov dword [ebp - 0x388], 0
lea ecx, [ebp - 0x380]
call fcn.00408280
lea ecx, [ebp - 0x2c]
call fcn.00402b10
mov eax, dword [ebp - 0x388]
jmp 0x4096d1
lea ecx, [ebp - 0x30]
call fcn.00405400
call fcn.00409060
mov dword [ebp - 0x154], eax
mov edx, dword [ebp - 0x154]
push edx
push str.dev18
push str.__s_du_
lea eax, [ebp - 0x30]
push eax
call fcn.00409ec0
add esp, 0x10
push str.installstat.exe
lea ecx, [ebp - 0x390]
call fcn.00405d60
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x390]
push edx
call fcn.00408e70
add esp, 8
lea ecx, [ebp - 0x390]
call fcn.00405690
push str._unreg
lea ecx, [ebp - 0x394]
call fcn.00405d60
push str.yyrun.exe
lea ecx, [ebp - 0x398]
call fcn.00405d60
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp - 0x398]
push ecx
call fcn.00408e70
add esp, 8
lea ecx, [ebp - 0x398]
call fcn.00405690
lea ecx, [ebp - 0x394]
call fcn.00405690
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
call fcn.00408fd0
add esp, 8
mov dword [ebp - 4], eax
call fcn.00408dc0
push 0
push 0
push 0
mov ecx, 0x42d4bc
call fcn.004032a0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x42d4c4
call fcn.00409bc0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x39c], ecx
lea ecx, [ebp - 0x30]
call fcn.00405690
lea ecx, [ebp - 0x2c]
call fcn.00402b10
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x38]
xor ecx, ebp
call fcn.00411eb4
mov esp, ebp
pop ebp
ret 0x10