Function at 0x4027ec
Capabilities:
Check os version

Disassembly:
push 0x320
mov eax, 0x43c139
call fcn.00423c42
mov esi, ecx
xor edi, edi
mov dword [ebp - 0x32c], esi
mov dword [ebp - 0x328], edi
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], edi
mov word [esi], ax
lea eax, [ebp - 0x324]
mov dword [ebp - 4], edi
push eax
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x324], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x314]
sub eax, edi
je 0x4029d5
dec eax
je 0x40296e
dec eax
je 0x402860
mov ebx, str.Unknown
jmp 0x4029da
cmp dword [ebp - 0x320], 5
jne 0x4028d9
cmp dword [ebp - 0x31c], 2
jne 0x402890
mov ebx, str.Windows_2003
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 5
jne 0x4028d9
cmp dword [ebp - 0x31c], 1
jne 0x4028b7
mov ebx, str.Windows_XP
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 5
jne 0x4028d9
cmp dword [ebp - 0x31c], 0
jne 0x4029ea
mov ebx, str.Windows_2000
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 4
ja 0x4028f7
mov ebx, str.Windows_NT
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 6
jne 0x4029ea
cmp dword [ebp - 0x31c], 0
jne 0x40292f
mov ebx, str.Windows_Vista
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 6
jne 0x4029ea
cmp dword [ebp - 0x31c], 1
jne 0x40295a
mov ebx, str.Windows_7
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 6
jne 0x4029ea
cmp dword [ebp - 0x31c], 2
jne 0x4029ea
mov ebx, str.Windows_8
jmp 0x4029da
cmp dword [ebp - 0x320], 4
jne 0x4029ea
cmp dword [ebp - 0x31c], 0
jne 0x40299e
mov ebx, str.Windows_95
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 4
jne 0x4029ea
cmp dword [ebp - 0x31c], 0xa
jne 0x4029c5
mov ebx, str.Windows_98
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
cmp dword [ebp - 0x320], 4
jne 0x4029ea
cmp dword [ebp - 0x31c], 0x5a
jne 0x4029ea
mov ebx, str.Windows_ME
jmp 0x4029da
mov ebx, str.Windows_Win32s
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.00403888
xor eax, eax
push 0x1fe
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x20e]
push edi
push eax
call fcn.0041e3e0
push dword [ebp - 0x318]
lea eax, [ebp - 0x210]
push dword [ebp - 0x31c]
push dword [ebp - 0x320]
push str.__build_d._d._d_
push 0x100
push eax
call fcn.0041f5ab
add esp, 0x24
cmp word [ebp - 0x310], 0
je 0x402a79
mov ebx, 0x444dd8
push ebx
call fcn.0041e3c2
pop ecx
push eax
push ebx
mov ecx, esi
call fcn.004037e5
cmp word [ebp - 0x310], 0
jne 0x402a5d
mov eax, edi
jmp 0x402a6a
lea eax, [ebp - 0x310]
push eax
call fcn.0041e3c2
pop ecx
push eax
lea eax, [ebp - 0x310]
mov ecx, esi
push eax
call fcn.004037e5
cmp word [ebp - 0x210], 0
je 0x402a92
lea eax, [ebp - 0x210]
push eax
call fcn.0041e3c2
pop ecx
mov edi, eax
push edi
lea eax, [ebp - 0x210]
mov ecx, esi
push eax
call fcn.004037e5
mov eax, esi
call fcn.00423bf1
ret