Function at 0x41035c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff64
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x41067c
cmp dword [ebp + 0xc], 1
jb 0x41067c
mov byte [ebx], 0
mov esi, 0x4d0280
lea edi, [ebp - 0x9c]
mov ecx, 0x27
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x9c], 0x9c
lea eax, [ebp - 0x9c]
push eax
call sub.KERNEL32.DLL_GetVersionExA
test eax, eax
jne 0x4103ca
mov dword [ebp - 0x9c], 0x94
lea edx, [ebp - 0x9c]
push edx
call sub.KERNEL32.DLL_GetVersionExA
test eax, eax
je 0x41067c
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
and ecx, 0xffff
mov esi, dword [ebp - 0x8c]
movzx edi, byte [ebp - 2]
cmp esi, 2
jne 0x410579
cmp edx, 6
jne 0x41041b
cmp eax, 2
jne 0x41041b
cmp edi, 1
jne 0x41041b
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_8
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 6
jne 0x410441
cmp eax, 1
jne 0x410441
cmp edi, 1
jne 0x410441
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_7
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 6
jne 0x410466
test eax, eax
jne 0x410466
cmp edi, 1
jne 0x410466
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_Vista
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 6
jne 0x410487
cmp eax, 2
jne 0x410487
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_Server_2012
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 6
jne 0x4104a8
cmp eax, 1
jne 0x4104a8
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_Server_2008_R2
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 6
jne 0x4104c8
test eax, eax
jne 0x4104c8
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_Server_2008
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 5
jne 0x4104e9
cmp eax, 2
jne 0x4104e9
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_Server_2003
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 5
jne 0x41050a
cmp eax, 1
jne 0x41050a
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_XP
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 5
jne 0x41052a
test eax, eax
jne 0x41052a
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_2000
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 4
jne 0x410546
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_NT4
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp edx, 3
jne 0x410562
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_NT_3.x
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_NT__Indefinido_
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp esi, 1
jne 0x41067c
cmp edx, 4
jne 0x41067c
test eax, eax
jne 0x410600
cmp ecx, 0x3b6
jne 0x4105ae
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_95A
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp ecx, 0x3b7
jne 0x4105cd
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_95B
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp ecx, 0x457
jne 0x4105ec
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_95C
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_95
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp eax, 0xa
jne 0x410651
cmp ecx, 0x7ce
jne 0x410621
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_98A
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp ecx, 0x8ae
jne 0x41063d
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_98SE
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
mov eax, dword [ebp + 0xc]
push eax
push str.Windows_98
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
cmp eax, 0x5a
jne 0x41066a
mov edx, dword [ebp + 0xc]
push edx
push str.Windows_ME
push ebx
call fcn.00411b40
add esp, 0xc
jmp 0x41067c
mov ecx, dword [ebp + 0xc]
push ecx
push str.Windows_9x__Indefinido_
push ebx
call fcn.00411b40
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret