Function at 0x410204
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff64
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x410524
cmp dword [ebp + 0xc], 1
jb 0x410524
mov byte [ebx], 0
mov esi, 0x4cf20c
lea edi, [ebp - 0x9c]
mov ecx, 0x27
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x9c], 0x9c
lea eax, [ebp - 0x9c]
push eax
call sub.KERNEL32.DLL_GetVersionExA
test eax, eax
jne 0x410272
mov dword [ebp - 0x9c], 0x94
lea edx, [ebp - 0x9c]
push edx
call sub.KERNEL32.DLL_GetVersionExA
test eax, eax
je 0x410524
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
and ecx, 0xffff
mov esi, dword [ebp - 0x8c]
movzx edi, byte [ebp - 2]
cmp esi, 2
jne 0x410421
cmp edx, 6
jne 0x4102c3
cmp eax, 2
jne 0x4102c3
cmp edi, 1
jne 0x4102c3
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_8
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 6
jne 0x4102e9
cmp eax, 1
jne 0x4102e9
cmp edi, 1
jne 0x4102e9
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_7
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 6
jne 0x41030e
test eax, eax
jne 0x41030e
cmp edi, 1
jne 0x41030e
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_Vista
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 6
jne 0x41032f
cmp eax, 2
jne 0x41032f
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_Server_2012
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 6
jne 0x410350
cmp eax, 1
jne 0x410350
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_Server_2008_R2
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 6
jne 0x410370
test eax, eax
jne 0x410370
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_Server_2008
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 5
jne 0x410391
cmp eax, 2
jne 0x410391
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_Server_2003
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 5
jne 0x4103b2
cmp eax, 1
jne 0x4103b2
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_XP
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 5
jne 0x4103d2
test eax, eax
jne 0x4103d2
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_2000
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 4
jne 0x4103ee
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_NT4
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp edx, 3
jne 0x41040a
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_NT_3.x
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_NT__Indefinido_
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp esi, 1
jne 0x410524
cmp edx, 4
jne 0x410524
test eax, eax
jne 0x4104a8
cmp ecx, 0x3b6
jne 0x410456
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_95A
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp ecx, 0x3b7
jne 0x410475
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_95B
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp ecx, 0x457
jne 0x410494
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_95C
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_95
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp eax, 0xa
jne 0x4104f9
cmp ecx, 0x7ce
jne 0x4104c9
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_98A
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp ecx, 0x8ae
jne 0x4104e5
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_98SE
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_98
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
cmp eax, 0x5a
jne 0x410512
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_ME
push ebx
call fcn.004119e8
add esp, 0xc
jmp 0x410524
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_9x__Indefinido_
push ebx
call fcn.004119e8
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret