Function at 0x4d9312
Capabilities:
Check os version

Disassembly:
push 0x6d8
mov eax, 0x5466c5
call fcn.00506b61
and dword [ebp - 0x6cc], 0
lea edi, [ebp - 0x3c4]
push 0x6a
pop ecx
mov esi, str.ocRFQscuh2xodVS7W5oGLCd0SQFID6jYmmcE4f4x0kbcQghonAJK46vAXVCS1aHo4AuikAygJhkjsmsXDGTGan1JHdDpC8bE4jZzA44EtW7I4XLTjgLkacxpygDizrfFIdph1ByYIuWJS22p69VR1pr5lbzLlJVeyVHKhi8cQaiouKjt1ZRS0MjiVB0RrPRIJU3fK6TLUOFE5femA7lGxeh6qlNtVWom4oAhwDrQ2P5tTGdOFzXCc9gBcAXuxxkVeU0Xl4oEVGBjAa1n9mIsqX21xe7N1LtZsHFeMsKHQy5WYMLD0Esj7PtWBmBiFe7XWidzJOfeo4dgFpg64YywbgGSny3ORUiIAokUWhDEnNMSz92KPoiHiXLQLTWgsGnSTHHfYbXvNjKeLNCyrULlgFMUVtucIcecBIIbW1yVmX
mov ebx, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
push 0x6f
pop ecx
mov dword [ebp - 0x6e4], ebx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.IYWBXXXI9OC5WDWXP0bVrK4bMw6CNsxfH88V9JWNlU18RX9YOzPn8EBEWc0kvewOBrgpD1uGkqfAfgDkxxAeHB0JruEDhaFT4lvQGuU0WntPcCopVz56RPm3dH5ZYkra4caaZObrl5gvqYhixUtG3hQRPuAYZ9aDPzz9Qb97D8oNBSJUOXvy0TouTVS9jRLsEArzkPuLuWWBCTWvvTwHXVtgekPCl2y87mwNkA5dGmJZvKlCwOiiwMgWmaChFqfLCsesg3wl6zHx4zF4kOgK8q1w2DEQmrGTY1nK5IYvPAZhUfPwALPqgdEfoZSgHw2L3DWrULl1rz4InVEURggHoeodMHEj3XdGr8ediZ18Xo3Wy8KywSvdrHrpMxLl1OI7E0zQIufswXiRRMGARCFioyRCyN8pFMHDI3vMKeM7XrWwOZpgTaLhQXDdElx
lea edi, [ebp - 0x580]
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov dword [ebp - 0x6e0], esi
mov dword [ebp - 0x6dc], esi
mov dword [ebp - 0x6d8], esi
lea eax, [ebp - 0x3c4]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x598]
call fcn.00405820
lea eax, [ebp - 0x598]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x6e0]
call fcn.00407e30
push esi
push 1
lea ecx, [ebp - 0x598]
mov byte [ebp - 4], 1
call fcn.0046d37e
lea eax, [ebp - 0x580]
push eax
lea ecx, [ebp - 0x598]
call fcn.00405820
lea eax, [ebp - 0x598]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x6e0]
call fcn.00407e30
push esi
push 1
lea ecx, [ebp - 0x598]
mov byte [ebp - 4], 1
call fcn.0046d37e
push 0x118
lea eax, [ebp - 0x6b0]
mov dword [ebp - 0x6b4], 0x11c
push esi
push eax
call fcn.004e37a0
add esp, 0xc
lea eax, [ebp - 0x6b4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x63d8a0
mov ecx, ebx
call fcn.004024f0
mov eax, dword [ebp - 0x6b0]
mov edi, dword [ebp - 0x6a8]
mov dword [ebp - 0x6c8], eax
movzx eax, byte [ebp - 0x59a]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6ac]
push str.ntdll.dll
mov dword [ebp - 0x6cc], 1
mov dword [ebp - 0x6bc], esi
mov dword [ebp - 0x6c0], esi
mov dword [ebp - 0x6b8], esi
mov dword [ebp - 0x6c4], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x6d0], eax
test eax, eax
je 0x4d94b7
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4d94ab
lea ecx, [ebp - 0x6b8]
push ecx
lea ecx, [ebp - 0x6c0]
push ecx
lea ecx, [ebp - 0x6bc]
push ecx
call eax
movzx eax, word [ebp - 0x6b8]
mov dword [ebp - 0x6b8], eax
push dword [ebp - 0x6d0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x6c8]
cmp eax, 5
jne 0x4d9501
mov eax, dword [ebp - 0x6c4]
test eax, eax
je 0x4d95f2
cmp eax, 1
jne 0x4d94eb
push str.WindowsXP
call fcn.004f3a59
pop ecx
push eax
push str.WindowsXP
jmp 0x4d95eb
push str.WindowsServer2003
call fcn.004f3a59
pop ecx
push eax
push str.WindowsServer2003
jmp 0x4d95eb
cmp eax, 6
jne 0x4d95f2
mov eax, dword [ebp - 0x6c4]
sub eax, esi
je 0x4d95be
sub eax, 1
je 0x4d95ab
sub eax, 1
jne 0x4d95f2
cmp edi, 0x1ebb
je 0x4d9545
lea eax, [edi - 0x1ee6]
cmp eax, 0x25
jbe 0x4d9545
cmp edi, 0x1f13
jne 0x4d9561
mov esi, str.Windows8
push esi
call fcn.004f3a59
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00402650
xor esi, esi
jmp 0x4d95f2
cmp dword [ebp - 0x6bc], 0xa
jne 0x4d9586
cmp dword [ebp - 0x6c0], 0
jne 0x4d95f2
push str.Windows10
call fcn.004f3a59
pop ecx
push eax
push str.Windows10
jmp 0x4d95eb
cmp dword [ebp - 0x6bc], 6
jne 0x4d95f2
cmp dword [ebp - 0x6c0], 3
jne 0x4d95f2
push str.Windows8.1
call fcn.004f3a59
pop ecx
push eax
push str.Windows8.1
jmp 0x4d95eb
push str.Windows7
call fcn.004f3a59
pop ecx
push eax
push str.Windows7
jmp 0x4d95eb
cmp dword [ebp - 0x6d4], 1
jne 0x4d95da
push str.WindowsVista
call fcn.004f3a59
pop ecx
push eax
push str.WindowsVista
jmp 0x4d95eb
push str.WindowsServer2008
call fcn.004f3a59
pop ecx
push eax
push str.WindowsServer2008
mov ecx, ebx
call fcn.00402650
push 0x63d8a0
mov ecx, ebx
call fcn.004c3da9
test eax, eax
jne 0x4d9660
push 0x208
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004e37a0
mov eax, dword [ebp - 0x6c8]
push edi
push dword [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x218]
push str.Windows_d._d._d
push eax
call fcn.00407eb0
add esp, 0x20
cmp word [ebp - 0x218], 0
jne 0x4d9644
mov eax, esi
jmp 0x4d9651
lea eax, [ebp - 0x218]
push eax
call fcn.004f3a59
pop ecx
push eax
lea eax, [ebp - 0x218]
mov ecx, ebx
push eax
call fcn.00402650
cmp dword [ebp + 0xc], 0
je 0x4d968e
cmp word [ebp - 0x6a0], 0
je 0x4d967f
lea eax, [ebp - 0x6a0]
push eax
call fcn.004f3a59
pop ecx
mov esi, eax
push esi
lea eax, [ebp - 0x6a0]
mov ecx, ebx
push eax
call fcn.00404290
lea ecx, [ebp - 0x6e0]
call fcn.0046d3d0
mov eax, ebx
call fcn.00506b0b
ret