Function at 0x40ff9b
Capabilities:
Check os version

Disassembly:
push 0x168
mov eax, 0x439320
call fcn.00424c9a
mov eax, dword [ebp + 8]
mov dword [ebp - 0x158], eax
push 0x449c8c
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 0x151], 1
call fcn.00404040
and dword [ebp - 4], 0
push 0x449cb0
lea eax, [ebp - 0x80]
push eax
call fcn.00404040
push 0x449cec
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 1
call fcn.00404040
lea esi, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.004040e0
push eax
mov edi, 0x80000002
push edi
xor eax, eax
call fcn.0040de32
test al, al
je 0x410017
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x80]
call fcn.004040e0
push eax
push edi
xor eax, eax
call fcn.0040de32
test al, al
je 0x410033
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x48]
call fcn.004040e0
push eax
push edi
xor eax, eax
call fcn.0040de32
test al, al
je 0x41004f
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0xb8]
call fcn.004040e0
push eax
mov ebx, 0x80000001
push ebx
xor eax, eax
call fcn.0040de32
test al, al
je 0x410073
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x80]
call fcn.004040e0
push eax
push ebx
xor eax, eax
call fcn.0040de32
test al, al
je 0x41008f
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x48]
call fcn.004040e0
push eax
push ebx
xor eax, eax
call fcn.0040de32
test al, al
je 0x4100ab
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0xb8]
call fcn.004040e0
push eax
mov ebx, 0x100
push edi
mov eax, ebx
call fcn.0040de32
test al, al
je 0x4100cf
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x80]
call fcn.004040e0
push eax
push edi
mov eax, ebx
call fcn.0040de32
test al, al
je 0x4100eb
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x48]
call fcn.004040e0
push eax
push edi
mov eax, ebx
call fcn.0040de32
test al, al
je 0x410107
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0xb8]
call fcn.004040e0
push eax
mov edi, 0x80000001
push edi
mov eax, ebx
call fcn.0040de32
test al, al
je 0x41012b
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x80]
call fcn.004040e0
push eax
push edi
mov eax, ebx
call fcn.0040de32
test al, al
je 0x410147
mov byte [ebp - 0x151], 0
lea esi, [ebp - 0x48]
call fcn.004040e0
push eax
push edi
mov eax, ebx
call fcn.0040de32
test al, al
je 0x410163
mov byte [ebp - 0x151], 0
mov esi, 0x94
push esi
xor ebx, ebx
lea eax, [ebp - 0x150]
push ebx
push eax
call fcn.00425210
add esp, 0xc
lea eax, [ebp - 0x150]
push eax
mov dword [ebp - 0x150], esi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [ebp - 0x14c], 6
jae 0x41019d
mov byte [ebp - 0x151], bl
cmp byte [ebp - 0x151], bl
jne 0x41020b
cmp dword [0x458f70], ebx
je 0x410234
push 0x2d
call dword [0x458f58]
pop ecx
cmp eax, ebx
je 0x410234
push 0x925
mov esi, 0x45a178
push esi
xor ecx, ecx
lea edi, [ebp - 0x174]
call fcn.004033b1
push ebx
xor ebx, ebx
inc ebx
push ebx
mov ecx, edi
call fcn.00402614
mov eax, dword [ebp - 0x158]
push 0x42c
push esi
xor ecx, ecx
lea edi, [ebp - 0x174]
mov dword [eax + 0x11a0], ebx
call fcn.004033b1
push 0
push ebx
mov ecx, edi
call fcn.00402614
lea eax, [ebp - 0x48]
call fcn.004041bd
lea eax, [ebp - 0x80]
call fcn.004041bd
lea eax, [ebp - 0xb8]
call fcn.004041bd
mov al, byte [ebp - 0x151]
call fcn.00424d1d
ret 4
push 0x926
push 0x45a178
xor ecx, ecx
lea edi, [ebp - 0x174]
call fcn.004033b1
push ebx
push 1
mov ecx, edi
call fcn.00402614
mov byte [ebp - 0x151], 1
mov byte [0x458f84], 1
jmp 0x41020b