Function at 0x10043aa
Capabilities:
Check os version

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0x1b4
mov eax, dword [0x100a2cc]
mov dword [ebp + 0x70], eax
push esi
lea eax, [ebp - 0x24]
xor esi, esi
push eax
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x24], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x10043fb
mov dword [ebp - 0x12c], 0x4b4
push esi
push 0x10
push esi
push esi
push dword [ebp - 0x12c]
push esi
call fcn.01003a62
jmp 0x100468c
mov eax, dword [ebp - 0x14]
dec eax
mov edx, dword [ebp - 0x20]
je 0x1004460
dec eax
je 0x1004413
mov dword [ebp - 0x12c], 0x4ca
jmp 0x10043e5
xor ecx, ecx
push 3
inc ecx
pop eax
cmp edx, eax
mov dword [0x100a2c4], ecx
mov dword [0x100a2c8], ecx
mov word [0x100aa64], 2
ja 0x1004453
mov word [0x100aa64], cx
jb 0x1004445
cmp edx, eax
jne 0x1004474
cmp dword [ebp - 0x1c], 0x33
jae 0x1004474
mov dword [0x100a2c4], esi
mov dword [0x100a2c8], esi
jmp 0x1004474
cmp edx, 5
jb 0x1004474
mov word [0x100aa64], ax
jmp 0x1004474
xor eax, eax
inc eax
mov word [0x100aa64], si
mov dword [0x100a2c4], eax
mov dword [0x100a2c8], eax
cmp dword [0x100b894], esi
jne 0x100468c
push edi
mov edi, dword [ebp + 0x7c]
cmp edi, esi
je 0x100468b
cmp word [0x100aa64], si
lea esi, [edi + 0x40]
je 0x100449b
lea esi, [edi + 4]
xor ecx, ecx
push ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x130], ecx
lea eax, [ecx + ecx*2]
lea eax, [esi + eax*8]
push dword [eax + 4]
push dword [eax]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.010022cc
mov ecx, dword [ebp - 0x130]
mov dword [ebp + ecx*4 - 0x138], eax
lea eax, [ecx + ecx*2]
lea eax, [esi + eax*8]
push dword [eax + 0x10]
push dword [eax + 0xc]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.010022cc
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp + ecx*4 - 0x138]
test edx, edx
mov dword [ebp + ecx*4 - 0x140], eax
jl 0x1004623
test eax, eax
jg 0x1004623
test edx, edx
jne 0x10045f8
test eax, eax
jne 0x100452b
lea eax, [ecx + ecx*2]
movzx edx, bx
lea eax, [esi + eax*8]
cmp edx, dword [eax + 8]
jb 0x1004610
cmp edx, dword [eax + 0x14]
jmp 0x100460a
test edx, edx
jne 0x10045f8
movzx edx, bx
lea eax, [ecx + ecx*2]
cmp edx, dword [esi + eax*8 + 8]
jb 0x1004610
cmp dword [edi + 0x7c], 0
je 0x100468a
lea eax, [ebp - 0x130]
push eax
push 0x104
lea eax, [ebp - 0x128]
push eax
push edi
call fcn.010027bf
test eax, eax
jne 0x100468a
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x12c], 0x54d
xor ebx, ebx
cmp dword [ebp - 0x12c], 0x54d
jne 0x10045a2
imul ecx, ecx, 0x3c
add ecx, dword [edi + 0x80]
lea ebx, [ebp - 0x128]
lea esi, [ecx + edi + 0x84]
mov eax, dword [esi + 0x34]
push dword [esi + 0x30]
lea edi, [eax + edi + 0x84]
call fcn.010022af
test byte [0x100b898], 1
mov dword [ebp + 0x7c], eax
jne 0x1004673
cmp byte [edi], 0
je 0x1004673
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
call fcn.01006124
test eax, eax
je 0x100463d
push 1
push 0x10
push dword [0x100b4a4]
call fcn.010060d6
test eax, eax
je 0x100463d
mov eax, 0x180000
jmp 0x100463f
test eax, eax
jne 0x1004543
movzx edx, bx
lea eax, [ecx + ecx*2]
cmp edx, dword [esi + eax*8 + 0x14]
jbe 0x1004543
test ecx, ecx
je 0x1004628
mov dword [ebp - 0x12c], 0x54c
jmp 0x100457e
cmp ecx, 1
je 0x1004614
inc ecx
cmp ecx, 2
mov dword [ebp - 0x130], ecx
jl 0x10044a7
jmp 0x1004543
xor eax, eax
or eax, dword [ebp + 0x7c]
or eax, 0x30
push eax
push 0x100abb4
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
test byte [ebp + 0x7c], 4
je 0x1004668
cmp eax, 6
jne 0x100468a
and dword [ebp - 0x12c], 0
jmp 0x100468a
test byte [ebp + 0x7c], 1
je 0x100468a
cmp eax, 1
jmp 0x100465d
push 0
push 0x30
push ebx
push 0x100abb4
push dword [ebp - 0x12c]
push 0
call fcn.01003a62
pop ebx
pop edi
mov ecx, dword [ebp + 0x70]
xor eax, eax
cmp dword [ebp - 0x12c], eax
pop esi
sete al
call fcn.01005e37
add ebp, 0x74
leave
ret 4