Function at 0x41fdcb
Capabilities:
Check os version

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0x124
mov eax, dword [0x454090]
xor eax, ebp
mov dword [ebp + 0x74], eax
push ebx
push edi
push 0x118
lea eax, [ebp - 0xa4]
push 0
push eax
call fcn.0042e8b0
mov edi, dword [sym.imp.KERNEL32.dll_GetVersionExW]
add esp, 0xc
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa8], 0x11c
call edi
mov dword [ebp - 0xac], eax
test eax, eax
jne 0x41fe3c
lea eax, [ebp - 0xa8]
push eax
mov dword [ebp - 0xa8], 0x114
call edi
test eax, eax
jne 0x41fe3c
push str.OsNotIdentified
jmp 0x420218
mov eax, dword [ebp - 0x98]
sub eax, 0
je 0x420213
dec eax
je 0x420191
dec eax
jne 0x41fe32
xor ebx, ebx
inc ebx
cmp dword [ebp - 0xa4], 6
jne 0x41ffbb
cmp dword [ebp - 0xa0], 2
jne 0x41feb2
cmp byte [ebp + 0x72], bl
jne 0x41fe92
call fcn.00424571
test al, al
mov eax, esi
je 0x41fe88
push str.Windows_8_x64
jmp 0x42021a
push str.Windows_8_x86
jmp 0x42021a
call fcn.00424571
test al, al
je 0x41fea5
push str.Windows_Server_2012_x64
jmp 0x420218
cmp dword [ebp - 0xa4], 6
jne 0x41ffbb
cmp dword [ebp - 0xa0], ebx
jne 0x41ff31
cmp byte [ebp + 0x72], bl
jne 0x41fefe
call fcn.00424571
test al, al
movzx eax, word [ebp + 0x6c]
je 0x41fee5
dec eax
mov eax, esi
je 0x41fedb
push str.Windows_7_x64
jmp 0x42021a
push str.Windows_7_x64_Service_Pack_1
jmp 0x42021a
dec eax
mov eax, esi
je 0x41fef4
push str.Windows_7_x86
jmp 0x42021a
push str.Windows_7_x86_Service_Pack_1
jmp 0x42021a
call fcn.00424571
test al, al
je 0x41ff24
movzx eax, word [ebp + 0x6c]
dec eax
mov eax, esi
je 0x41ff1a
push str.Windows_Server_2008_R2_x64
jmp 0x42021a
push str.Windows_Server_2008_R2_x64_Service_Pack_1
jmp 0x42021a
cmp dword [ebp - 0xa4], 6
jne 0x41ffbb
cmp dword [ebp - 0xa0], 0
jne 0x41fe32
cmp byte [ebp + 0x72], bl
jne 0x41ff9c
call fcn.00424571
test al, al
movzx eax, word [ebp + 0x6c]
je 0x41ff76
dec eax
je 0x41ff6c
dec eax
mov eax, esi
je 0x41ff62
push str.Windows_Vista_x64
jmp 0x42021a
push str.Windows_Vista_x64_Service_Pack_2
jmp 0x42021a
push str.Windows_Vista_x64_Service_Pack_1
jmp 0x420218
dec eax
je 0x41ff92
dec eax
mov eax, esi
je 0x41ff88
push str.Windows_Vista_x86
jmp 0x42021a
push str.Windows_Vista_x86_Service_Pack_2
jmp 0x42021a
push str.Windows_Vista_x86_Service_Pack_1
jmp 0x420218
call fcn.00424571
test al, al
mov eax, esi
je 0x41ffb1
push str.Windows_Server_2008_x64
jmp 0x42021a
push str.Windows_Server_2008_x86
jmp 0x42021a
cmp dword [ebp - 0xa4], 5
jne 0x420113
cmp dword [ebp - 0xa0], 2
jne 0x42005d
cmp byte [ebp + 0x72], bl
jne 0x420004
movzx eax, word [ebp + 0x6c]
dec eax
je 0x41fffa
dec eax
mov eax, esi
je 0x41fff0
push str.Windows_XP_x64
jmp 0x42021a
push str.Windows_XP_x64_Service_Pack_2
jmp 0x42021a
push str.Windows_XP_x64_Service_Pack_1
jmp 0x420218
call fcn.00424571
test al, al
movzx eax, word [ebp + 0x6c]
je 0x420037
dec eax
je 0x42002d
dec eax
mov eax, esi
je 0x420023
push str.Windows_Server_2003_x64
jmp 0x42021a
push str.Windows_Server_2003_x64_Service_Pack_2
jmp 0x42021a
push str.Windows_Server_2003_x64_Service_Pack_1
jmp 0x420218
dec eax
je 0x420053
dec eax
mov eax, esi
je 0x420049
push str.Windows_Server_2003_x86
jmp 0x42021a
push str.Windows_Server_2003_x86_Service_Pack_2
jmp 0x42021a
push str.Windows_Server_2003_x86_Service_Pack_1
jmp 0x420218
cmp dword [ebp - 0xa0], ebx
jne 0x4200af
cmp dword [ebp - 0xac], 0
jne 0x420078
push str.Windows_XP_x86
jmp 0x420218
movzx eax, word [ebp + 0x6c]
dec eax
je 0x4200a5
dec eax
je 0x42009b
dec eax
mov eax, esi
je 0x420091
push str.Windows_XP_x86
jmp 0x42021a
push str.Windows_XP_x86_Service_Pack_3
jmp 0x42021a
push str.Windows_XP_x86_Service_Pack_2
jmp 0x420218
push str.Windows_XP_x86_Service_Pack_1
jmp 0x420218
cmp dword [ebp - 0xa0], 0
jne 0x41fe32
cmp dword [ebp - 0xac], 0
jne 0x4200cf
push str.Windows_2000
jmp 0x420218
movzx eax, word [ebp + 0x6c]
dec eax
je 0x420109
dec eax
je 0x4200ff
dec eax
je 0x4200f5
dec eax
mov eax, esi
je 0x4200eb
push str.Windows_2000
jmp 0x42021a
push str.Windows_2000_Service_Pack_4
jmp 0x42021a
push str.Windows_2000_Service_Pack_3
jmp 0x420218
push str.Windows_2000_Service_Pack_2
jmp 0x420218
push str.Windows_2000_Service_Pack_1
jmp 0x420218
cmp dword [ebp - 0xa4], 4
ja 0x41fe32
cmp dword [ebp - 0xac], 0
jne 0x420133
push str.Windows_NT_4.0
jmp 0x420218
movzx eax, word [ebp + 0x6c]
dec eax
je 0x420187
dec eax
je 0x42017d
dec eax
je 0x420173
dec eax
je 0x420169
dec eax
je 0x42015f
dec eax
mov eax, esi
je 0x420155
push str.Windows_NT_4.0
jmp 0x42021a
push str.Windows_NT_4.0_Service_Pack_6
jmp 0x42021a
push str.Windows_NT_4.0_Service_Pack_5
jmp 0x420218
push str.Windows_NT_4.0_Service_Pack_4
jmp 0x420218
push str.Windows_NT_4.0_Service_Pack_3
jmp 0x420218
push str.Windows_NT_4.0_Service_Pack_2
jmp 0x420218
push str.Windows_NT_4.0_Service_Pack_1
jmp 0x420218
cmp dword [ebp - 0xa4], 4
jne 0x41fe32
cmp dword [ebp - 0xa0], 0
jne 0x4201d4
cmp dword [ebp - 0x9c], 0x3b6
jbe 0x4201ba
push str.Windows_95_OSR
jmp 0x420218
cmp word [ebp - 0x92], 0x43
mov eax, esi
jne 0x4201cd
push str.Windows_95_OSR2.5
jmp 0x42021a
push str.Windows_95
jmp 0x42021a
cmp dword [ebp - 0xa0], 0xa
jne 0x4201ff
cmp word [ebp - 0x92], 0x41
je 0x4201f8
cmp word [ebp - 0x92], 0x42
je 0x4201f8
push str.Windows_98
jmp 0x420218
push str.Windows_98_SE
jmp 0x420218
cmp dword [ebp - 0xa0], 0x5a
jne 0x41fe32
push str.Windows_Millennium
jmp 0x420218
push str.Windows_95
mov eax, esi
call fcn.004045c9
mov ecx, dword [ebp + 0x74]
pop edi
xor ecx, ebp
mov eax, esi
pop ebx
call fcn.0042e88b
add ebp, 0x78
leave
ret