Function at 0x4c6c40
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffec8
push ebx
push esi
push edi
push 0x100
call sym.SISCOM.EXE__hb_xgrab
pop ecx
mov esi, eax
push 0x9c
push 0
lea eax, [ebp - 0x9c]
push eax
call fcn.004d91b8
add esp, 0xc
mov dword [ebp - 0x9c], 0x9c
lea edx, [ebp - 0x9c]
push edx
call fcn.004e3d92
test eax, eax
je 0x4c6f4a
xor ebx, ebx
xor edi, edi
mov eax, dword [ebp - 0x8c]
sub eax, 1
jb 0x4c6e9d
je 0x4c6cb1
dec eax
je 0x4c6cf3
dec eax
je 0x4c6ea4
jmp 0x4c6ea9
cmp dword [ebp - 0x98], 4
jne 0x4c6ccd
cmp dword [ebp - 0x94], 0xa
jae 0x4c6ccd
mov ebx, 0x713c9c
jmp 0x4c6ea9
cmp dword [ebp - 0x98], 4
jne 0x4c6ce9
cmp dword [ebp - 0x94], 0xa
jne 0x4c6ce9
mov ebx, 0x713ca0
jmp 0x4c6ea9
mov ebx, 0x713ca4
jmp 0x4c6ea9
cmp dword [ebp - 0x98], 6
jne 0x4c6d1c
cmp dword [ebp - 0x94], 0
jne 0x4c6d1c
cmp byte [ebp - 2], 1
jne 0x4c6d15
mov ebx, str._Vista
jmp 0x4c6d9b
mov ebx, str._2008
jmp 0x4c6d9b
cmp dword [ebp - 0x98], 6
jne 0x4c6d42
cmp dword [ebp - 0x94], 1
jne 0x4c6d42
cmp byte [ebp - 2], 1
jne 0x4c6d3b
mov ebx, 0x713cb5
jmp 0x4c6d9b
mov ebx, str._2008_R2
jmp 0x4c6d9b
cmp dword [ebp - 0x98], 5
jne 0x4c6d6d
cmp dword [ebp - 0x94], 2
jne 0x4c6d6d
push 0x62
call fcn.004e4570
test eax, eax
je 0x4c6d66
mov ebx, str._2003_R2
jmp 0x4c6d9b
mov ebx, str._2003
jmp 0x4c6d9b
cmp dword [ebp - 0x98], 5
jne 0x4c6d86
cmp dword [ebp - 0x94], 1
jne 0x4c6d86
mov ebx, 0x713cd0
jmp 0x4c6d9b
cmp dword [ebp - 0x98], 5
jne 0x4c6d96
mov ebx, str._2000
jmp 0x4c6d9b
mov ebx, 0x713cda
mov dword [ebp - 0x138], 0x9c
lea eax, [ebp - 0x138]
push eax
call fcn.004e3d92
test eax, eax
je 0x4c6ea9
cmp byte [ebp - 0x9e], 1
jne 0x4c6df2
cmp dword [ebp - 0x134], 4
jne 0x4c6dd5
mov edi, str._Workstation_4.0
jmp 0x4c6ea9
test byte [ebp - 0x9f], 2
je 0x4c6de8
mov edi, str._Home_Edition
jmp 0x4c6ea9
mov edi, str._Professional
jmp 0x4c6ea9
cmp byte [ebp - 0x9e], 3
jne 0x4c6ea9
cmp dword [ebp - 0x134], 5
jne 0x4c6e4d
cmp dword [ebp - 0x130], 2
jne 0x4c6e4d
test byte [ebp - 0xa0], 0x80
je 0x4c6e24
mov edi, str._Datacenter_Edition
jmp 0x4c6ea9
test byte [ebp - 0xa0], 2
je 0x4c6e34
mov edi, str._Enterprise_Edition
jmp 0x4c6ea9
cmp word [ebp - 0xa0], 0x400
jne 0x4c6e46
mov edi, str._Web_Edition
jmp 0x4c6ea9
mov edi, str._Standard_Edition
jmp 0x4c6ea9
cmp dword [ebp - 0x134], 5
jne 0x4c6e86
cmp dword [ebp - 0x130], 0
jne 0x4c6e86
test byte [ebp - 0xa0], 0x80
je 0x4c6e6f
mov edi, str._Datacenter_Server
jmp 0x4c6ea9
test byte [ebp - 0xa0], 2
je 0x4c6e7f
mov edi, str._Advanced_Server
jmp 0x4c6ea9
mov edi, 0x713d5d
jmp 0x4c6ea9
test byte [ebp - 0xa0], 2
je 0x4c6e96
mov edi, str._Server_4.0__Enterprise_Edition
jmp 0x4c6ea9
mov edi, str._Server_4.0
jmp 0x4c6ea9
mov ebx, str._32s
jmp 0x4c6ea9
mov ebx, 0x713da7
mov ax, word [ebp - 0x90]
and ax, 0xffff
movzx edx, ax
push edx
push dword [ebp - 0x94]
push dword [ebp - 0x98]
test edi, edi
jne 0x4c6ecd
mov edi, 0x713c9f
push edi
test ebx, ebx
jne 0x4c6ed4
xor ebx, ebx
push ebx
push str.Windows_s_s__lu._02lu._04d
push 0x100
push esi
call fcn.004c6a05
add esp, 0x20
lea eax, [ebp - 0x88]
test eax, eax
je 0x4c6f5d
xor ebx, ebx
jmp 0x4c6ef7
inc ebx
cmp byte [ebp + ebx - 0x88], 0
je 0x4c6f14
movsx eax, byte [ebp + ebx - 0x88]
push eax
call fcn.004dcad0
pop ecx
test eax, eax
jne 0x4c6ef6
cmp byte [ebp + ebx - 0x88], 0
je 0x4c6f5d
push 0xff
push 0x713dc6
push esi
call fcn.004c4bfb
add esp, 0xc
push 0xff
lea edx, [ebp - 0x88]
add ebx, edx
push ebx
push esi
call fcn.004c4bfb
add esp, 0xc
jmp 0x4c6f5d
push str.Windows
push 0x100
push esi
call fcn.004c6a05
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret