Function at 0x403587
Capabilities:
Check os version

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0x94
mov ebx, ecx
xor edi, edi
push eax
mov dword [ebp - 0x1ac], ebx
mov esi, edi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x4035cd
mov esi, 0x4b4
jmp 0x4035e4
mov eax, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x198]
dec eax
je 0x40363d
dec eax
je 0x4035ee
mov esi, 0x4ca
push edi
push 0x10
push edi
push edi
jmp 0x40385e
xor ecx, ecx
inc ecx
mov dword [0x4081f8], ecx
mov dword [0x4081c4], ecx
push 2
pop eax
mov word [0x409a80], ax
cmp edx, 3
ja 0x403633
mov eax, ecx
push 3
pop ecx
mov word [0x409a80], ax
cmp edx, ecx
jb 0x403625
jne 0x403654
cmp dword [ebp - 0x194], 0x33
jae 0x403654
mov dword [0x4081f8], edi
mov dword [0x4081c4], edi
jmp 0x403654
cmp edx, 5
jb 0x403654
push 3
pop eax
jmp 0x40364e
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [0x4081f8], ecx
mov dword [0x4081c4], ecx
mov word [0x409a80], ax
cmp dword [0x408954], esi
jne 0x403867
test ebx, ebx
je 0x403867
test ax, ax
jne 0x403672
add ebx, 0x40
jmp 0x403675
add ebx, 4
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1a0], edi
mov edx, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x198]
imul eax, edi, 0x18
mov dword [ebp - 0x1a4], eax
push dword [eax + ebx + 4]
push dword [eax + ebx]
call fcn.004028fa
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a4]
push dword [eax + ebx + 0x10]
push dword [eax + ebx + 0xc]
call fcn.004028fa
mov ecx, dword [ebp - 0x1a8]
test ecx, ecx
js 0x403766
test eax, eax
jg 0x403766
test ecx, ecx
jne 0x403705
test eax, eax
mov eax, dword [ebp - 0x190]
jne 0x4036f4
movzx ecx, ax
mov eax, dword [ebp - 0x1a4]
cmp ecx, dword [eax + ebx + 8]
jb 0x40371e
cmp ecx, dword [eax + ebx + 0x14]
jmp 0x40371c
mov ecx, dword [ebp - 0x1a4]
movzx eax, ax
cmp eax, dword [ecx + ebx + 8]
jae 0x40377d
jmp 0x40371e
test eax, eax
jne 0x40377d
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x190]
movzx eax, ax
cmp eax, dword [ecx + ebx + 0x14]
jbe 0x40377d
test edi, edi
je 0x40376b
mov esi, 0x54c
and dword [ebp - 0x1a0], 0
xor ebx, ebx
and dword [ebp - 0x1a8], 0
mov edx, dword [ebp - 0x1ac]
cmp esi, 0x54d
jne 0x4037b7
mov ecx, dword [edx + 0x80]
imul eax, edi, 0x3c
add ecx, 0x84
add ecx, eax
lea eax, [ebp - 0x108]
add ecx, edx
mov dword [ebp - 0x1a0], eax
jmp 0x4037bd
cmp edi, 1
je 0x403722
push 2
inc edi
pop eax
mov dword [ebp - 0x1a0], edi
cmp edi, eax
jl 0x403681
mov ecx, dword [ebp - 0x1ac]
cmp dword [ecx + 0x7c], esi
je 0x403867
lea eax, [ebp - 0x1a0]
push eax
push ecx
lea edx, [ebp - 0x108]
call fcn.00402755
test eax, eax
jne 0x403867
mov edi, dword [ebp - 0x1a0]
mov esi, 0x54d
jmp 0x403727
mov ecx, dword [ebp - 0x1b0]
test ecx, ecx
je 0x4037eb
mov edi, dword [ecx + 0x34]
mov eax, dword [ecx + 0x30]
add edi, 0x84
add edi, edx
test al, 1
je 0x4037da
mov ebx, 0x104
jmp 0x4037f1
and al, 2
movzx ebx, al
neg ebx
sbb ebx, ebx
and ebx, 0x101
jmp 0x4037f1
mov edi, dword [ebp - 0x1a8]
test byte [0x408958], 1
jne 0x40384f
cmp byte [edi], 0
je 0x40384f
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
call fcn.0040671d
test eax, eax
je 0x403821
push ecx
call fcn.004066c2
test eax, eax
je 0x403821
mov eax, 0x180000
jmp 0x403823
xor eax, eax
or eax, ebx
or eax, 0x30
push eax
push 0x409194
push edi
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
test bl, 4
je 0x403841
cmp eax, 6
jmp 0x403849
test bl, 1
je 0x403867
cmp eax, 1
jne 0x403867
xor esi, esi
jmp 0x403867
push 0
push 0x30
push dword [ebp - 0x1a0]
push 0x409194
mov edx, esi
xor ecx, ecx
call fcn.00404327
mov ecx, dword [ebp - 4]
xor eax, eax
test esi, esi
pop edi
sete al
xor ecx, ebp
pop esi
pop ebx
call fcn.00406c20
mov esp, ebp
pop ebp
ret