Function at 0x4ecd14
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc40
push 0x94
push 0
lea eax, [ebp - 0x3c0]
push eax
call fcn.0066c86c
add esp, 0xc
mov dword [ebp - 0x3c0], 0x94
lea edx, [ebp - 0x3c0]
push edx
call sub.KERNEL32.DLL_GetVersionExA
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x4ecd62
mov al, byte [ebp - 0x3ac]
test al, al
jne 0x4ecd62
xor edx, edx
mov dword [ebp - 0x18], edx
lea ecx, [ebp - 0x3ac]
push ecx
push 0x7d2761
lea eax, [ebp - 0x32c]
push eax
call fcn.00670e94
add esp, 0xc
call sub.KERNEL32.DLL_GetVersion
mov dword [ebp - 4], eax
mov dl, byte [ebp - 4]
and dl, 0xff
xor ecx, ecx
mov cl, dl
mov dword [ebp - 8], ecx
mov ax, word [ebp - 4]
and ax, 0xffff
movzx edx, ax
shr edx, 8
xor ecx, ecx
mov cl, dl
mov dword [ebp - 0xc], ecx
xor eax, eax
mov dword [ebp - 0x1c], eax
xor edx, edx
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 4]
cmp ecx, 0x80000000
jae 0x4ecde0
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 4]
shr eax, 0x10
movzx edx, ax
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 8]
cmp ecx, 5
jb 0x4ece29
mov dword [ebp - 0x1c], 1
jmp 0x4ece29
mov eax, dword [ebp - 8]
cmp eax, 4
jae 0x4ecdfc
mov edx, dword [ebp - 4]
shr edx, 0x10
movzx ecx, dx
and ecx, 0xffff7fff
mov dword [ebp - 0x10], ecx
jmp 0x4ece29
xor eax, eax
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0xc]
cmp edx, 0xa
jb 0x4ece29
mov dword [ebp - 0x1c], 1
mov ecx, dword [ebp - 0xc]
cmp ecx, 0xa
jne 0x4ece29
movsx eax, byte [ebp - 0x3ab]
cmp eax, 0x41
je 0x4ece29
xor edx, edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x14], str.Windows
mov ecx, dword [ebp - 8]
cmp ecx, 5
jae 0x4ecf04
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x4ece4f
mov dword [ebp - 0x14], str.Windows_NT
jmp 0x4ecfc6
mov edx, dword [ebp - 0x10]
test edx, edx
jne 0x4ecef8
mov ecx, dword [ebp - 0xc]
test ecx, ecx
jne 0x4ecea2
mov dword [ebp - 0x14], str.Windows_95
movsx eax, byte [ebp - 0x3ab]
cmp eax, 0x43
je 0x4ecfc6
movsx edx, byte [ebp - 0x3ab]
cmp edx, 0x42
je 0x4ecfc6
movsx ecx, byte [ebp - 0x3ab]
cmp ecx, 0x41
je 0x4ecfc6
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x4ecfc6
mov edx, dword [ebp - 0xc]
cmp edx, 0xa
jne 0x4ecee0
mov dword [ebp - 0x14], str.Windows_98
movsx ecx, byte [ebp - 0x3ab]
cmp ecx, 0x41
jne 0x4eced6
push str._Second_Edition_
lea eax, [ebp - 0x32c]
push eax
call fcn.0066c9ec
add esp, 8
jmp 0x4ecfc6
xor edx, edx
mov dword [ebp - 0x18], edx
jmp 0x4ecfc6
mov ecx, dword [ebp - 0xc]
cmp ecx, 0x5a
jne 0x4ecfc6
mov dword [ebp - 0x14], str.Windows_Me
jmp 0x4ecfc6
mov dword [ebp - 0x14], str.Win32s
jmp 0x4ecfc6
mov eax, dword [ebp - 8]
cmp eax, 5
jne 0x4ecf48
mov edx, dword [ebp - 0xc]
test edx, edx
jne 0x4ecf1f
mov dword [ebp - 0x14], str.Windows_2000
jmp 0x4ecfc6
mov ecx, dword [ebp - 0xc]
cmp ecx, 1
jne 0x4ecf33
mov dword [ebp - 0x14], str.Windows_XP
jmp 0x4ecfc6
mov eax, dword [ebp - 0xc]
cmp eax, 2
jne 0x4ecfc6
mov dword [ebp - 0x14], str.Windows_2003
jmp 0x4ecfc6
mov edx, dword [ebp - 8]
cmp edx, 6
jne 0x4ecfc6
mov ecx, dword [ebp - 0xc]
test ecx, ecx
jne 0x4ecf60
mov dword [ebp - 0x14], str.Windows_Vista
jmp 0x4ecfc6
mov eax, dword [ebp - 0xc]
cmp eax, 1
jne 0x4ecf71
mov dword [ebp - 0x14], str.Windows_7
jmp 0x4ecfc6
mov edx, dword [ebp - 0xc]
cmp edx, 2
jne 0x4ecfc6
lea ecx, [ebp - 0x10]
push ecx
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 8]
push edx
call fcn.004ecc14
add esp, 0xc
mov ecx, dword [ebp - 0xc]
cmp ecx, 3
jne 0x4ecfbf
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 8]
push edx
call fcn.00423b2c
add esp, 8
mov ecx, dword [ebp - 8]
cmp ecx, 0xa
jne 0x4ecfb6
mov dword [ebp - 0x14], str.Windows_10
jmp 0x4ecfc6
mov dword [ebp - 0x14], str.Windows_8.1
jmp 0x4ecfc6
mov dword [ebp - 0x14], str.Windows_8
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4ed019
mov edx, dword [ebp - 0x18]
test edx, edx
je 0x4ecffa
lea ecx, [ebp - 0x32c]
push ecx
push dword [ebp - 0xc]
push dword [ebp - 8]
push dword [ebp - 0x14]
push str._s_v_d._d__s
lea eax, [ebp - 0x124]
push eax
call fcn.00670e94
add esp, 0x18
jmp 0x4ed069
push dword [ebp - 0xc]
push dword [ebp - 8]
push dword [ebp - 0x14]
push str._s_v_d._d
lea edx, [ebp - 0x124]
push edx
call fcn.00670e94
add esp, 0x14
jmp 0x4ed069
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x4ed049
lea eax, [ebp - 0x32c]
push eax
push dword [ebp - 0x10]
push dword [ebp - 0xc]
push dword [ebp - 8]
push dword [ebp - 0x14]
push str._s_v_d._d_Build__d__s
lea edx, [ebp - 0x124]
push edx
call fcn.00670e94
add esp, 0x1c
jmp 0x4ed069
push dword [ebp - 0x10]
push dword [ebp - 0xc]
push dword [ebp - 8]
push dword [ebp - 0x14]
push str._s_v_d._d_Build__d
lea ecx, [ebp - 0x124]
push ecx
call fcn.00670e94
add esp, 0x18
lea eax, [ebp - 0x124]
push eax
push dword [ebp + 8]
call fcn.0066c9ec
add esp, 8
mov eax, dword [ebp - 0x1c]
mov esp, ebp
pop ebp
ret