Function at 0x4bd4e4
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffec8
push ebx
push esi
push edi
push 0x100
call sym.SISCOM.EXE__hb_xgrab
pop ecx
mov esi, eax
push 0x9c
push 0
lea eax, [ebp - 0x9c]
push eax
call fcn.004cfa5c
add esp, 0xc
mov dword [ebp - 0x9c], 0x9c
lea edx, [ebp - 0x9c]
push edx
call fcn.004da636
test eax, eax
je 0x4bd7ee
xor ebx, ebx
xor edi, edi
mov eax, dword [ebp - 0x8c]
sub eax, 1
jb 0x4bd741
je 0x4bd555
dec eax
je 0x4bd597
dec eax
je 0x4bd748
jmp 0x4bd74d
cmp dword [ebp - 0x98], 4
jne 0x4bd571
cmp dword [ebp - 0x94], 0xa
jae 0x4bd571
mov ebx, 0x7451e4
jmp 0x4bd74d
cmp dword [ebp - 0x98], 4
jne 0x4bd58d
cmp dword [ebp - 0x94], 0xa
jne 0x4bd58d
mov ebx, 0x7451e8
jmp 0x4bd74d
mov ebx, 0x7451ec
jmp 0x4bd74d
cmp dword [ebp - 0x98], 6
jne 0x4bd5c0
cmp dword [ebp - 0x94], 0
jne 0x4bd5c0
cmp byte [ebp - 2], 1
jne 0x4bd5b9
mov ebx, str._Vista
jmp 0x4bd63f
mov ebx, str._2008
jmp 0x4bd63f
cmp dword [ebp - 0x98], 6
jne 0x4bd5e6
cmp dword [ebp - 0x94], 1
jne 0x4bd5e6
cmp byte [ebp - 2], 1
jne 0x4bd5df
mov ebx, 0x7451fd
jmp 0x4bd63f
mov ebx, str._2008_R2
jmp 0x4bd63f
cmp dword [ebp - 0x98], 5
jne 0x4bd611
cmp dword [ebp - 0x94], 2
jne 0x4bd611
push 0x62
call fcn.004dae14
test eax, eax
je 0x4bd60a
mov ebx, str._2003_R2
jmp 0x4bd63f
mov ebx, str._2003
jmp 0x4bd63f
cmp dword [ebp - 0x98], 5
jne 0x4bd62a
cmp dword [ebp - 0x94], 1
jne 0x4bd62a
mov ebx, 0x745218
jmp 0x4bd63f
cmp dword [ebp - 0x98], 5
jne 0x4bd63a
mov ebx, str._2000
jmp 0x4bd63f
mov ebx, 0x745222
mov dword [ebp - 0x138], 0x9c
lea eax, [ebp - 0x138]
push eax
call fcn.004da636
test eax, eax
je 0x4bd74d
cmp byte [ebp - 0x9e], 1
jne 0x4bd696
cmp dword [ebp - 0x134], 4
jne 0x4bd679
mov edi, str._Workstation_4.0
jmp 0x4bd74d
test byte [ebp - 0x9f], 2
je 0x4bd68c
mov edi, str._Home_Edition
jmp 0x4bd74d
mov edi, str._Professional
jmp 0x4bd74d
cmp byte [ebp - 0x9e], 3
jne 0x4bd74d
cmp dword [ebp - 0x134], 5
jne 0x4bd6f1
cmp dword [ebp - 0x130], 2
jne 0x4bd6f1
test byte [ebp - 0xa0], 0x80
je 0x4bd6c8
mov edi, str._Datacenter_Edition
jmp 0x4bd74d
test byte [ebp - 0xa0], 2
je 0x4bd6d8
mov edi, str._Enterprise_Edition
jmp 0x4bd74d
cmp word [ebp - 0xa0], 0x400
jne 0x4bd6ea
mov edi, str._Web_Edition
jmp 0x4bd74d
mov edi, str._Standard_Edition
jmp 0x4bd74d
cmp dword [ebp - 0x134], 5
jne 0x4bd72a
cmp dword [ebp - 0x130], 0
jne 0x4bd72a
test byte [ebp - 0xa0], 0x80
je 0x4bd713
mov edi, str._Datacenter_Server
jmp 0x4bd74d
test byte [ebp - 0xa0], 2
je 0x4bd723
mov edi, str._Advanced_Server
jmp 0x4bd74d
mov edi, 0x7452a5
jmp 0x4bd74d
test byte [ebp - 0xa0], 2
je 0x4bd73a
mov edi, str._Server_4.0__Enterprise_Edition
jmp 0x4bd74d
mov edi, str._Server_4.0
jmp 0x4bd74d
mov ebx, str._32s
jmp 0x4bd74d
mov ebx, 0x7452ef
mov ax, word [ebp - 0x90]
and ax, 0xffff
movzx edx, ax
push edx
push dword [ebp - 0x94]
push dword [ebp - 0x98]
test edi, edi
jne 0x4bd771
mov edi, 0x7451e7
push edi
test ebx, ebx
jne 0x4bd778
xor ebx, ebx
push ebx
push str.Windows_s_s__lu._02lu._04d
push 0x100
push esi
call fcn.004bd2a9
add esp, 0x20
lea eax, [ebp - 0x88]
test eax, eax
je 0x4bd801
xor ebx, ebx
jmp 0x4bd79b
inc ebx
cmp byte [ebp + ebx - 0x88], 0
je 0x4bd7b8
movsx eax, byte [ebp + ebx - 0x88]
push eax
call fcn.004d3374
pop ecx
test eax, eax
jne 0x4bd79a
cmp byte [ebp + ebx - 0x88], 0
je 0x4bd801
push 0xff
push 0x74530e
push esi
call fcn.004bb49f
add esp, 0xc
push 0xff
lea edx, [ebp - 0x88]
add ebx, edx
push ebx
push esi
call fcn.004bb49f
add esp, 0xc
jmp 0x4bd801
push str.Windows
push 0x100
push esi
call fcn.004bd2a9
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret