Function at 0x405be0
Capabilities:
Check os version

Disassembly:
push ebp
lea ebp, [esp - 0x78]
mov eax, 0x100b4
call fcn.004035e0
push ebx
push esi
push edi
push 0xffff
xor ebx, ebx
lea eax, [ebp - 0x1003c]
push ebx
push eax
mov esi, ecx
call fcn.00403f40
add esp, 0xc
lea ecx, [ebp - 0x1003c]
mov edx, esi
call fcn.00406156
mov edi, eax
push esi
mov byte [edi], bl
inc edi
push edi
call fcn.00403f8c
pop ecx
pop ecx
mov ecx, dword [0x40c014]
cmp byte [ecx], bl
je 0x405c4a
push 0x4011ec
push edi
call fcn.00403f6e
push dword [0x40c014]
push edi
call fcn.00403f6e
add esp, 0x10
push 0x44
pop esi
push esi
lea eax, [ebp - 0x3c]
push ebx
push eax
call fcn.00403f40
push 0x10
lea eax, [ebp + 0x60]
mov dword [ebp - 0x3c], esi
push ebx
push eax
call fcn.00403f40
add esp, 0x18
mov cl, 1
call fcn.0040607e
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ebx, eax
call fcn.00406237
test al, al
je 0x405cc4
lea eax, [ebp + 0x60]
mov edx, edi
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [0x40c018]
xor eax, eax
lea ecx, [ebp - 0x1003c]
push eax
push eax
push eax
push eax
push eax
call fcn.0040457b
test eax, eax
jne 0x405d4d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, 0x2e4
je 0x405cc4
cmp esi, 0x202b
jne 0x405d41
push 0x3c
pop esi
push esi
xor edi, edi
lea eax, [ebp + 0x24]
push edi
push eax
call fcn.00403f40
add esp, 0xc
mov dword [ebp + 0x24], esi
cmp byte [0x40c02d], 0
mov dword [ebp + 0x28], 0x40
mov dword [ebp + 0x2c], edi
je 0x405cff
cmp ebx, 0x80000000
jae 0x405cff
mov eax, 0x4011f8
cmp bl, 6
jae 0x405d04
mov eax, 0x4011f0
mov dword [ebp + 0x30], eax
lea ecx, [ebp + 0x24]
lea eax, [ebp - 0x1003c]
mov dword [ebp + 0x40], 1
mov dword [ebp + 0x34], eax
mov eax, dword [0x40c014]
mov dword [ebp + 0x38], eax
mov eax, dword [0x40c018]
mov dword [ebp + 0x3c], eax
call fcn.00404954
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
test eax, eax
jne 0x405d4f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
xor cl, cl
call fcn.0040607e
jmp 0x405e1e
xor edi, edi
xor cl, cl
call fcn.0040607e
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x70], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea edx, [ebp - 0x1003c]
mov ecx, eax
call fcn.00406188
lea eax, [ebp - 0x1003c]
push eax
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
xor ebx, ebx
test esi, esi
mov dword [ebp + 0x74], esi
setne bl
inc ebx
push 0x1cff
push 0xffffffffffffffff
push edi
lea eax, [ebp + 0x70]
push eax
push ebx
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
cmp eax, ebx
jne 0x405dd2
push 1
push edi
push edi
push edi
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
cmp dword [ebp + 0xc], 0x12
je 0x405dbe
cmp dword [ebp + 0xc], 0x10
jne 0x405dc6
mov ecx, dword [ebp + 0x60]
call fcn.00406663
lea eax, [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x405d8c
test esi, esi
je 0x405de5
cmp eax, 1
jne 0x405de5
mov ecx, dword [ebp + 0x60]
call fcn.00406663
jmp 0x405d8c
cmp dword [ebp + 0x74], 0
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x405df6
push dword [ebp + 0x74]
call esi
push 0x40c004
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [ebp + 0x60]
call esi
cmp dword [ebp + 0x64], 0
je 0x405e14
push dword [ebp + 0x64]
call esi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, edi
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x78
leave
ret