Function at 0x1000c550
Capabilities:
Check os version

Disassembly:
mov eax, dword [0x10089088]
push ebx
push esi
xor esi, esi
push edi
mov edi, ecx
test eax, eax
je 0x1000c572
mov ecx, 0x47
mov esi, 0x10088f08
rep movsd dword es:[edi], dword [esi]
pop edi
mov esi, eax
pop esi
pop ebx
ret
push str.RtlGetVersion
push 0x10081570
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x11c
push 0
push edi
mov ebx, eax
call fcn.10047830
add esp, 0xc
mov dword [edi], 0x11c
test ebx, ebx
je 0x1000c5ac
push edi
call ebx
test eax, eax
je 0x1000c5bb
push edi
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x1000c5bb
pop edi
pop esi
pop ebx
ret
cmp dword [edi + 0x10], 2
jne 0x1000c87e
mov eax, dword [edi + 4]
cmp eax, 0xa
jne 0x1000c5d4
cmp dword [edi + 8], esi
ja 0x1000c5d6
cmp eax, eax
jbe 0x1000c5e1
mov esi, 0xff
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 0xa
jne 0x1000c61d
cmp dword [edi + 8], esi
jne 0x1000c5ff
cmp byte [edi + 0x11a], 1
jne 0x1000c5ff
mov esi, 0x96
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 0xa
jne 0x1000c61d
cmp dword [edi + 8], esi
jne 0x1000c61d
cmp byte [edi + 0x11a], 1
je 0x1000c61d
mov esi, 0xa0
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], 3
jne 0x1000c640
cmp byte [edi + 0x11a], 1
je 0x1000c640
mov esi, 0x8d
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], 3
jne 0x1000c663
cmp byte [edi + 0x11a], 1
jne 0x1000c663
mov esi, 0x83
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], 2
jne 0x1000c686
cmp byte [edi + 0x11a], 1
je 0x1000c686
mov esi, 0x8c
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], 2
jne 0x1000c6a9
cmp byte [edi + 0x11a], 1
jne 0x1000c6a9
mov esi, 0x82
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], 1
jne 0x1000c6d4
cmp byte [edi + 0x11a], 1
jne 0x1000c6d4
cmp word [edi + 0x114], 1
pop edi
sbb esi, esi
add esi, 0x79
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], 1
jne 0x1000c6ff
cmp byte [edi + 0x11a], 1
je 0x1000c6ff
cmp word [edi + 0x114], 1
pop edi
sbb esi, esi
add esi, 0x71
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], esi
jne 0x1000c725
cmp byte [edi + 0x11a], 1
je 0x1000c725
cmp word [edi + 0x114], 2
pop edi
sbb esi, esi
add esi, 0x6f
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 6
jne 0x1000c766
cmp dword [edi + 8], esi
jne 0x1000c766
cmp byte [edi + 0x11a], 1
jne 0x1000c766
lea esi, [eax + 0x5e]
movzx eax, word [edi + 0x114]
cmp eax, 1
jne 0x1000c752
mov esi, 0x66
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 2
jb 0x1000c87e
mov esi, 0x67
pop edi
mov eax, esi
pop esi
pop ebx
ret
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
cmp eax, 5
jne 0x1000c7b6
cmp dword [edi + 8], 2
jne 0x1000c7b6
cmp byte [edi + 0x11a], 1
je 0x1000c7b6
push 0x59
call ebx
test eax, eax
jne 0x1000c7b6
lea esi, [eax + 0x5a]
movzx eax, word [edi + 0x114]
cmp eax, 1
jne 0x1000c7a2
mov esi, 0x5c
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 2
jb 0x1000c87e
mov esi, 0x5e
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp dword [edi + 4], 5
jne 0x1000c803
cmp dword [edi + 8], 2
jne 0x1000c803
cmp byte [edi + 0x11a], 1
je 0x1000c803
push 0x59
call ebx
test eax, eax
je 0x1000c803
movzx eax, word [edi + 0x114]
mov esi, 0x5b
cmp eax, 1
jne 0x1000c7ef
mov esi, 0x5d
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 2
jb 0x1000c87e
mov esi, 0x5f
pop edi
mov eax, esi
pop esi
pop ebx
ret
mov eax, dword [edi + 4]
cmp eax, 5
jne 0x1000c87e
cmp dword [edi + 8], 2
jne 0x1000c83e
cmp byte [edi + 0x11a], 1
jne 0x1000c83e
lea esi, [eax + 0x46]
movzx eax, word [edi + 0x114]
cmp eax, 1
je 0x1000c858
cmp eax, 2
je 0x1000c868
cmp eax, 3
jb 0x1000c87e
mov esi, 0x54
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 5
jne 0x1000c87e
cmp dword [edi + 8], 1
jne 0x1000c87e
lea esi, [eax + 0x46]
movzx eax, word [edi + 0x114]
cmp eax, 1
jne 0x1000c863
mov esi, 0x50
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 2
jne 0x1000c873
mov esi, 0x52
pop edi
mov eax, esi
pop esi
pop ebx
ret
cmp eax, 3
mov ecx, 0x54
cmovae esi, ecx
pop edi
mov eax, esi
pop esi
pop ebx
ret