Function at 0x418968
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff64
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x418c88
cmp dword [ebp + 0xc], 1
jb 0x418c88
mov byte [ebx], 0
mov esi, 0x4d1850
lea edi, [ebp - 0x9c]
mov ecx, 0x27
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x9c], 0x9c
lea eax, [ebp - 0x9c]
push eax
call sub.KERNEL32.DLL_GetVersionExA
test eax, eax
jne 0x4189d6
mov dword [ebp - 0x9c], 0x94
lea edx, [ebp - 0x9c]
push edx
call sub.KERNEL32.DLL_GetVersionExA
test eax, eax
je 0x418c88
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
and ecx, 0xffff
mov esi, dword [ebp - 0x8c]
movzx edi, byte [ebp - 2]
cmp esi, 2
jne 0x418b85
cmp edx, 6
jne 0x418a27
cmp eax, 2
jne 0x418a27
cmp edi, 1
jne 0x418a27
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_8
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 6
jne 0x418a4d
cmp eax, 1
jne 0x418a4d
cmp edi, 1
jne 0x418a4d
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_7
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 6
jne 0x418a72
test eax, eax
jne 0x418a72
cmp edi, 1
jne 0x418a72
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_Vista
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 6
jne 0x418a93
cmp eax, 2
jne 0x418a93
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_Server_2012
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 6
jne 0x418ab4
cmp eax, 1
jne 0x418ab4
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_Server_2008_R2
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 6
jne 0x418ad4
test eax, eax
jne 0x418ad4
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_Server_2008
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 5
jne 0x418af5
cmp eax, 2
jne 0x418af5
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_Server_2003
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 5
jne 0x418b16
cmp eax, 1
jne 0x418b16
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_XP
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 5
jne 0x418b36
test eax, eax
jne 0x418b36
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_2000
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 4
jne 0x418b52
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_NT4
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp edx, 3
jne 0x418b6e
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_NT_3.x
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_NT__Indefinido_
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp esi, 1
jne 0x418c88
cmp edx, 4
jne 0x418c88
test eax, eax
jne 0x418c0c
cmp ecx, 0x3b6
jne 0x418bba
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_95A
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp ecx, 0x3b7
jne 0x418bd9
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_95B
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp ecx, 0x457
jne 0x418bf8
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_95C
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_95
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp eax, 0xa
jne 0x418c5d
cmp ecx, 0x7ce
jne 0x418c2d
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_98A
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp ecx, 0x8ae
jne 0x418c49
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_98SE
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_98
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
cmp eax, 0x5a
jne 0x418c76
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_ME
push ebx
call fcn.00417ef0
add esp, 0xc
jmp 0x418c88
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_9x__Indefinido_
push ebx
call fcn.00417ef0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret