Function at 0x413b30
Capabilities:
Check os version

Disassembly:
sub esp, 0x94
push ebx
push esi
push edi
push 0x42bc2c
push 0x104
call fcn.00402160
mov eax, dword [0x42bc2c]
mov ecx, dword [0x42bbf0]
add esp, 8
push 0x104
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [0x42bc2c]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, edx
mov edi, ecx
xor edx, edx
mov esi, edi
shr esi, 2
je 0x413bc1
mov ecx, edx
shr ecx, 0x1f
lea edx, [ecx + edx*2]
xor ecx, ecx
mov cl, byte [eax]
add edx, ecx
inc eax
mov ecx, edx
shr ecx, 0x1f
lea edx, [ecx + edx*2]
xor ecx, ecx
mov cl, byte [eax]
add edx, ecx
inc eax
mov ecx, edx
shr ecx, 0x1f
lea edx, [ecx + edx*2]
xor ecx, ecx
mov cl, byte [eax]
add edx, ecx
inc eax
mov ecx, edx
shr ecx, 0x1f
lea edx, [ecx + edx*2]
xor ecx, ecx
mov cl, byte [eax]
add edx, ecx
inc eax
dec esi
jne 0x413b82
and edi, 3
mov ecx, edi
jbe 0x413bda
mov esi, edx
xor ebx, ebx
mov bl, byte [eax]
shr esi, 0x1f
lea edx, [esi + edx*2]
add edx, ebx
inc eax
dec ecx
jne 0x413bc8
push 0
push str.InstItClass
mov dword [0x42bbb8], edx
call dword [sym.imp.USER32.dll_FindWindowA]
mov esi, eax
mov ebx, 1
test esi, esi
je 0x413c55
push 2
push ebx
push 0x8001
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, dword [0x42bbb8]
jne 0x413c55
push 0x42bc2c
call fcn.004021a0
add esp, 4
push esi
call dword [sym.imp.USER32.dll_GetLastActivePopup]
mov ebx, dword [sym.imp.USER32.dll_BringWindowToTop]
push esi
mov edi, eax
call ebx
push esi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x413c42
push 9
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
cmp esi, edi
je 0x413c49
push edi
call ebx
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x94
ret
mov edx, dword [esp + 0xa4]
mov dword [0x42bc0c], 0xffffffff
mov dword [0x42bbf0], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
xor ecx, ecx
lea edi, [esp + 0xc]
mov cl, ah
lea edx, [esp + 0xc]
mov ch, al
xor eax, eax
mov word [0x42bbb4], cx
mov ecx, 0x25
mov esi, 0x2000
push edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x10], 0x94
mov dword [0x42bbb0], esi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x413d52
mov eax, dword [esp + 0x1c]
dec eax
je 0x413d1e
dec eax
jne 0x413d52
mov eax, dword [esp + 0x10]
xor ecx, ecx
cmp eax, 4
mov dword [0x42bbac], ebx
sete cl
cmp eax, 5
mov dword [0x42bbb0], 0x10000
mov dword [0x42bba8], ecx
jb 0x413d52
mov dword [0x42bbb0], 0x40000
jne 0x413d07
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x413d52
mov dword [0x42bbb0], 0x20000
jmp 0x413d52
cmp eax, 5
jbe 0x413d52
mov dword [0x42bba4], ebx
mov dword [0x42bbb0], 0x80000
jmp 0x413d52
mov eax, dword [esp + 0x10]
mov dword [0x42bbb0], esi
cmp eax, 4
jne 0x413d46
mov eax, dword [esp + 0x14]
cmp eax, 0x5a
jae 0x413d48
test eax, eax
jbe 0x413d52
mov dword [0x42bbb0], 0x4000
jmp 0x413d52
jbe 0x413d52
mov dword [0x42bbb0], 0x8000
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
call fcn.00402e10
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.RICHED20.DLL
call esi
test eax, eax
mov dword [0x42bb88], eax
jne 0x413d83
push str.RICHED32.DLL
call esi
mov dword [0x42bb88], eax
jmp 0x413d89
mov dword [0x42bb84], ebx
push 0x42bb40
push 0x104
call fcn.00402160
push 0x42bc10
push 0x104
call fcn.00402160
push 0x42b764
push 0x208
call fcn.00402160
push 0x42b760
push 0x104
call fcn.00402160
push 0x42bc14
push 0x104
call fcn.00402160
push 0x42b75c
push 0x104
call fcn.00402160
push 0x42b758
push 0x104
call fcn.00402160
push 0x42b7d4
push 0x29e
call fcn.00402160
add esp, 0x40
push 0x42b7d0
push 0x29e
call fcn.00402160
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebx
add esp, 0x94
ret