Function at 0x433c90
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x134
mov eax, dword [0x4b1120]
xor eax, ebp
mov dword [ebp - 8], eax
push 0x11c
push 0
lea eax, [ebp - 0x128]
push eax
call fcn.00447660
add esp, 0xc
mov dword [ebp - 0x128], 0x11c
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x433d08
push str.GetOSVersion____OSVERSIONINFOEX_failed
call fcn.00437da0
add esp, 4
mov dword [ebp - 0x128], 0x114
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x433d08
xor eax, eax
jmp 0x434499
mov eax, dword [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0x124]
push ecx
push str.GetOSVersion____MajorVersion_d_MinorVersion_d
call fcn.00437da0
add esp, 0xc
mov edx, dword [ebp - 0x124]
mov dword [0x4caf20], edx
mov eax, dword [ebp - 0x120]
mov dword [0x4caf24], eax
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0x134], ecx
cmp dword [ebp - 0x134], 0
je 0x434487
cmp dword [ebp - 0x134], 1
je 0x434277
cmp dword [ebp - 0x134], 2
je 0x433d6e
jmp 0x434494
mov dword [0x4caefc], 1
cmp dword [ebp - 0x124], 4
ja 0x433e37
mov dword [0x4caf00], 1
push 0x496eec
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_NT4
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x496f0c
call fcn.00437970
add esp, 8
cmp dword [ebp - 0x124], 4
jne 0x433de1
push str.GetOSVersion____Workstation_4.0
call fcn.00437da0
add esp, 4
jmp 0x433e09
movzx edx, word [ebp - 0x10]
and edx, 0x200
je 0x433dfc
push str.GetOSVersion____Home_Edition
call fcn.00437da0
add esp, 4
jmp 0x433e09
push str.GetOSVersion____Professional
call fcn.00437da0
add esp, 4
movzx eax, byte [ebp - 0xe]
cmp eax, 3
jne 0x433e37
movzx ecx, word [ebp - 0x10]
and ecx, 2
je 0x433e2a
push str.GetOSVersion____Server_4.0__Enterprise_Edition
call fcn.00437da0
add esp, 4
jmp 0x433e37
push str.GetOSVersion____Server_4.0
call fcn.00437da0
add esp, 4
cmp dword [ebp - 0x124], 5
jne 0x433ed5
cmp dword [ebp - 0x120], 0
jne 0x433ed5
mov dword [0x4caf04], 1
push 0x496fe0
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_2000
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x497004
call fcn.00437970
add esp, 8
movzx edx, word [ebp - 0x10]
and edx, 0x80
je 0x433eb0
push str.GetOSVersion____Datacenter_Server
call fcn.00437da0
add esp, 4
jmp 0x433ed5
movzx eax, word [ebp - 0x10]
and eax, 2
je 0x433ec8
push str.GetOSVersion____Advanced_Server
call fcn.00437da0
add esp, 4
jmp 0x433ed5
push str.GetOSVersion____Server
call fcn.00437da0
add esp, 4
cmp dword [ebp - 0x124], 5
jne 0x433f2b
cmp dword [ebp - 0x120], 1
jne 0x433f2b
mov dword [0x4caf08], 1
push 0x49708c
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_XP
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x4970ac
call fcn.00437970
add esp, 8
cmp dword [ebp - 0x124], 5
jne 0x433fed
cmp dword [ebp - 0x120], 2
jne 0x433fed
mov dword [0x4caf04], 1
mov dword [0x4caf0c], 1
push 0x4970d4
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_Server_2003
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x497104
call fcn.00437970
add esp, 8
movzx ecx, word [ebp - 0x10]
and ecx, 0x80
je 0x433fae
push str.GetOSVersion____Datacenter_Edition
call fcn.00437da0
add esp, 4
jmp 0x433fed
movzx edx, word [ebp - 0x10]
and edx, 2
je 0x433fc6
push str.GetOSVersion____Enterprise_Edition
call fcn.00437da0
add esp, 4
jmp 0x433fed
movzx eax, word [ebp - 0x10]
cmp eax, 0x400
jne 0x433fe0
push str.GetOSVersion____Web_Edition
call fcn.00437da0
add esp, 4
jmp 0x433fed
push str.GetOSVersion____Standard_Edition
call fcn.00437da0
add esp, 4
cmp dword [ebp - 0x124], 6
jne 0x434043
cmp dword [ebp - 0x120], 0
jne 0x434043
mov dword [0x4caf10], 1
push 0x4971b8
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_Vista
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x4971dc
call fcn.00437970
add esp, 8
cmp dword [ebp - 0x124], 6
jne 0x434099
cmp dword [ebp - 0x120], 1
jne 0x434099
mov dword [0x4caf14], 1
push 0x497204
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_Seven
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x497228
call fcn.00437970
add esp, 8
cmp dword [ebp - 0x124], 6
ja 0x4340b4
cmp dword [ebp - 0x124], 6
jne 0x4340f8
cmp dword [ebp - 0x120], 1
jbe 0x4340f8
mov dword [0x4caf18], 1
push str.10B0
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_8
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x497270
call fcn.00437970
add esp, 8
cmp dword [ebp - 0x124], 4
jne 0x434167
push str.Service_Pack_6
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x434167
lea edx, [ebp - 0x12c]
push edx
push 1
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionHotfixQ246009
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x43415a
mov eax, dword [ebp - 0x11c]
and eax, 0xffff
push eax
push str.GetOSVersion____Service_Pack_6a__Build__d_
call fcn.00437da0
add esp, 8
mov ecx, dword [ebp - 0x12c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
movzx edx, word [ebp - 0x14]
mov dword [0x4caf28], edx
mov eax, dword [0x4caf28]
push eax
push 0x49735c
push 4
push 0x4cb000
call fcn.00447c36
add esp, 0x10
mov ecx, dword [ebp - 0x11c]
and ecx, 0xffff
push ecx
movzx edx, word [ebp - 0x12]
push edx
push 0x4cb000
push str.GetOSVersion____Service_Pack_s__Minor_d___Build__d_
call fcn.00437970
add esp, 0x10
call fcn.0040a500
mov dword [0x4caf1c], eax
cmp dword [0x4caf1c], 0
je 0x434265
push str.GetOSVersion____Windows_64_bits
call fcn.00437da0
add esp, 4
cmp dword [0x4caf0c], 0
je 0x434222
mov dword [0x4caf08], 1
push 0x4973f4
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_XP_64
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x497418
call fcn.00437970
add esp, 8
jmp 0x434263
push 0x497440
push 0x20
push 0x4cb008
call fcn.00447b21
add esp, 0xc
push 1
push 0x497448
push 0x49744c
push 5
push 0x4caf2c
call fcn.0040e150
add esp, 0x14
push 0x4cb008
push 0x497450
call fcn.00437970
add esp, 8
jmp 0x434272
push str.GetOSVersion____Windows_32_bits
call fcn.00437da0
add esp, 4
jmp 0x434494
cmp dword [ebp - 0x124], 4
jne 0x434377
cmp dword [ebp - 0x120], 0
jne 0x434377
mov dword [0x4caef0], 1
push 0x497498
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_95
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x4974b8
call fcn.00437970
add esp, 8
movzx eax, word [ebp - 0x112]
cmp eax, 0x43
jne 0x434313
push 0x4974e0
push 4
push 0x4cb000
call fcn.0044a00d
add esp, 0xc
mov dword [0x4caf28], 2
push 0x4cb000
push 0x4974e4
call fcn.00437970
add esp, 8
jmp 0x434377
movzx ecx, word [ebp - 0x112]
cmp ecx, 0x42
jne 0x434351
push 0x49751c
push 4
push 0x4cb000
call fcn.0044a00d
add esp, 0xc
mov dword [0x4caf28], 1
push 0x4cb000
push 0x497520
call fcn.00437970
add esp, 8
jmp 0x434377
push 0x497558
push 4
push 0x4cb000
call fcn.0044a00d
add esp, 0xc
push 0x4cb000
push 0x49755c
call fcn.00437970
add esp, 8
cmp dword [ebp - 0x124], 4
jne 0x43442f
cmp dword [ebp - 0x120], 0xa
jne 0x43442f
mov dword [0x4caef4], 1
push 0x497594
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_98
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push 0x4975b4
call fcn.00437970
add esp, 8
movzx edx, word [ebp - 0x112]
cmp edx, 0x41
jne 0x43440e
push 0x4975dc
push 4
push 0x4cb000
call fcn.0044a00d
add esp, 0xc
mov dword [0x4caf28], 1
push str.GetOSVersion____Version_SE
call fcn.00437da0
add esp, 4
jmp 0x43442f
push 0x4975fc
push 4
push 0x4cb000
call fcn.0044a00d
add esp, 0xc
push str.GetOSVersion____Version_FE
call fcn.00437da0
add esp, 4
cmp dword [ebp - 0x124], 4
jne 0x434485
cmp dword [ebp - 0x120], 0x5a
jne 0x434485
mov dword [0x4caef8], 1
push 0x49761c
push 5
push 0x4caf2c
call fcn.0044a00d
add esp, 0xc
push str.Windows_Millennium
push 0x20
push 0x4cb008
call fcn.0044a00d
add esp, 0xc
push 0x4cb008
push str.GetOSVersion_____s
call fcn.00437970
add esp, 8
jmp 0x434494
push str.GetOSVersion____Microsoft_Win32s
call fcn.00437da0
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00447645
mov esp, ebp
pop ebp
ret