Function at 0x401f00
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x4233eb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc8
push esi
push edi
push str.GetOS
lea ecx, [esp + 0xc]
call section..text
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0x10]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x10]
mov dword [esp + 0xd8], 0
push eax
mov dword [esp + 0x14], 0x9c
call esi
mov edi, eax
test edi, edi
jne 0x401f9e
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0x94
push ecx
call esi
test eax, eax
jne 0x401f9e
lea ecx, [esp + 8]
mov dword [esp + 0xd8], 0xffffffff
call fcn.00401130
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0xc8]
mov dword fs:[0], ecx
add esp, 0xd4
ret
mov eax, dword [esp + 0x20]
push ebx
sub eax, 2
je 0x401fb7
mov dword [0x433bf0], 6
jmp 0x402257
mov eax, dword [esp + 0x18]
mov esi, 6
cmp eax, esi
mov ebx, 1
jne 0x40200c
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x4020ff
cmp byte [esp + 0xae], bl
jne 0x401ff4
lea edx, [esp + 0xc]
push str.Microsoft_Windows_Vista
mov dword [0x433bf0], 5
push edx
jmp 0x402004
lea eax, [esp + 0xc]
push str.Windows_Server__Longhorn_
mov dword [0x433bf0], esi
push eax
call fcn.004011d0
add esp, 8
cmp dword [esp + 0x18], 5
jne 0x4020ff
cmp dword [esp + 0x1c], 2
jne 0x4020b4
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x402047
lea ecx, [esp + 0xb0]
push ecx
call eax
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x402065
lea edx, [esp + 0xc]
push str.Microsoft_Windows_Server_2003__R2_
mov dword [0x433bf0], esi
push edx
jmp 0x4020a3
cmp byte [esp + 0xae], bl
jne 0x40208f
cmp word [esp + 0xb0], 9
jne 0x40208f
lea eax, [esp + 0xc]
push str.Microsoft_Windows_XP_Professional_x64_Edition
mov dword [0x433bf0], 4
push eax
jmp 0x4020a3
lea ecx, [esp + 0xc]
push str.Microsoft_Windows_Server_2003_
mov dword [0x433bf0], 3
push ecx
call fcn.004011d0
mov eax, dword [esp + 0x20]
add esp, 8
cmp eax, 5
jne 0x4020ff
cmp dword [esp + 0x1c], ebx
jne 0x4020df
lea edx, [esp + 0xc]
push str.Microsoft_Windows_XP
push edx
mov dword [0x433bf0], 2
call fcn.004011d0
mov eax, dword [esp + 0x20]
add esp, 8
cmp eax, 5
jne 0x4020ff
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x4020ff
lea eax, [esp + 0xc]
push str.Microsoft_Windows_2000
push eax
mov dword [0x433bf0], ebx
call fcn.004011d0
add esp, 8
test edi, edi
je 0x402257
mov al, byte [esp + 0xae]
cmp al, bl
jne 0x402146
cmp word [esp + 0xb0], 9
je 0x402257
mov eax, dword [esp + 0xac]
test ah, 2
je 0x40213c
lea ecx, [esp + 0xc]
push str.Home_Edition
push ecx
jmp 0x40224f
push str.Professional
jmp 0x40224a
cmp al, 3
je 0x402152
cmp al, 2
jne 0x402257
cmp dword [esp + 0x18], 5
jne 0x402257
mov eax, dword [esp + 0x1c]
cmp eax, 2
jne 0x40221a
mov ax, word [esp + 0xb0]
cmp ax, si
jne 0x4021a8
mov al, byte [esp + 0xac]
test al, 0x80
je 0x402191
lea eax, [esp + 0xc]
push str.Datacenter_Edition_for_Itanium_based_Systems
push eax
jmp 0x40224f
test al, 2
je 0x402257
lea ecx, [esp + 0xc]
push str.Enterprise_Edition_for_Itanium_based_Systems
push ecx
jmp 0x40224f
cmp ax, 9
jne 0x4021df
mov al, byte [esp + 0xac]
test al, 0x80
je 0x4021c3
push str.Datacenter_x64_Edition
jmp 0x40224a
test al, 2
je 0x4021d3
lea eax, [esp + 0xc]
push str.Enterprise_x64_Edition
push eax
jmp 0x40224f
lea ecx, [esp + 0xc]
push str.Standard_x64_Edition
push ecx
jmp 0x40224f
mov eax, dword [esp + 0xac]
test al, 0x80
je 0x4021f1
push str.Datacenter_Edition
jmp 0x40224a
test al, 2
je 0x402201
lea eax, [esp + 0xc]
push str.Enterprise_Edition
push eax
jmp 0x40224f
cmp ax, 0x400
jne 0x402213
lea ecx, [esp + 0xc]
push str.Web_Edition
push ecx
jmp 0x40224f
push str.Standard_Edition
jmp 0x40224a
test eax, eax
jne 0x402257
mov al, byte [esp + 0xac]
test al, 0x80
je 0x402235
lea eax, [esp + 0xc]
push str.Datacenter_Server
push eax
jmp 0x40224f
test al, 2
je 0x402245
lea ecx, [esp + 0xc]
push str.Advanced_Server
push ecx
jmp 0x40224f
push str.Server
lea edx, [esp + 0x10]
push edx
call fcn.004011d0
add esp, 8
mov esi, dword [0x433bf0]
lea ecx, [esp + 0xc]
mov dword [esp + 0xdc], 0xffffffff
call fcn.00401130
mov ecx, dword [esp + 0xd4]
pop ebx
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0xd4
ret