Function at 0x460e6d
Capabilities:
Check os version

Disassembly:
mov eax, 0x563543
call fcn.0053c1d0
sub esp, 0xa8
mov eax, dword [0x5af710]
push ebx
xor eax, ebp
push esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push edi
xor edi, edi
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], edi
call fcn.005504da
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0xb0], eax
mov esi, 0x9c
push esi
lea eax, [ebp - 0xac]
push edi
push eax
mov dword [ebp - 4], edi
call fcn.0053c340
add esp, 0xc
lea eax, [ebp - 0xac]
mov dword [ebp - 0xac], esi
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExA]
push eax
call esi
mov ebx, eax
cmp ebx, edi
jne 0x460f19
lea eax, [ebp - 0xac]
push eax
mov dword [ebp - 0xac], 0x94
call esi
test eax, eax
jne 0x460f19
mov ecx, dword [ebp - 0xb4]
push 0x572aed
call fcn.00405500
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
jmp 0x461140
mov eax, dword [ebp - 0x9c]
sub eax, edi
je 0x46111b
dec eax
je 0x4610a6
dec eax
jne 0x46112b
cmp dword [ebp - 0xa8], 4
ja 0x460f4e
push str.WINNT
lea ecx, [ebp - 0xb0]
call fcn.00404600
push 5
pop esi
cmp dword [ebp - 0xa8], esi
jne 0x460fb3
cmp dword [ebp - 0xa4], edi
jne 0x460f79
push str.WIN2000
lea ecx, [ebp - 0xb0]
call fcn.00404600
cmp dword [ebp - 0xa8], esi
jne 0x460fb3
cmp dword [ebp - 0xa4], 1
jne 0x460f9a
push str.WINXP
lea ecx, [ebp - 0xb0]
call fcn.00404600
cmp dword [ebp - 0xa8], esi
jne 0x460fb3
cmp dword [ebp - 0xa4], 2
jne 0x460fb3
push str.WIN2003
lea ecx, [ebp - 0xb0]
call fcn.00404600
cmp ebx, edi
je 0x46112b
cmp byte [ebp - 0x12], 1
jne 0x460ff4
cmp dword [ebp - 0xa8], 4
lea ecx, [ebp - 0xb0]
jne 0x460fda
push str.WKT4.0
jmp 0x461095
test byte [ebp - 0x13], 2
je 0x460fea
push 0x576d78
jmp 0x461095
push str._PRO
jmp 0x461095
cmp byte [ebp - 0x12], 3
jne 0x46112b
cmp dword [ebp - 0xa8], esi
jne 0x461084
cmp dword [ebp - 0xa4], 2
jne 0x461055
mov eax, dword [ebp - 0x14]
test al, al
jns 0x46101d
push 0x576d6c
jmp 0x461026
test al, 2
je 0x46102e
push 0x576d68
lea ecx, [ebp - 0xb0]
jmp 0x461095
cmp ax, 0x400
lea ecx, [ebp - 0xb0]
jne 0x461041
push 0x576d64
jmp 0x461095
cmp ax, 1
jne 0x46104e
push str._SBS
jmp 0x461095
push 0x576d58
jmp 0x461095
cmp dword [ebp - 0xa4], edi
jne 0x461084
test byte [ebp - 0x14], 0x80
lea ecx, [ebp - 0xb0]
je 0x461070
push 0x576d54
jmp 0x461095
test byte [ebp - 0x14], 2
je 0x46107d
push 0x576d50
jmp 0x461095
push str._SVR
jmp 0x461095
test byte [ebp - 0x14], 2
lea ecx, [ebp - 0xb0]
je 0x46109f
push str.SVR4.0_EE
call fcn.0042ad47
jmp 0x46112b
push str.SVR4.0
jmp 0x461095
cmp dword [ebp - 0xa8], 4
jne 0x46112b
cmp dword [ebp - 0xa4], edi
jne 0x4610d0
push str.WIN95
lea ecx, [ebp - 0xb0]
call fcn.00404600
cmp dword [ebp - 0xa8], 4
jne 0x46112b
cmp dword [ebp - 0xa4], 0xa
jne 0x46110b
push str.WIN98
lea ecx, [ebp - 0xb0]
call fcn.00404600
cmp byte [ebp - 0x97], 0x41
jne 0x461102
push 0x576d58
lea ecx, [ebp - 0xb0]
call fcn.0042ad47
cmp dword [ebp - 0xa8], 4
jne 0x46112b
cmp dword [ebp - 0xa4], 0x5a
jne 0x46112b
push str.WINME
jmp 0x461120
push str.WIN32S
lea ecx, [ebp - 0xb0]
call fcn.00404600
mov esi, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xb4]
push esi
call fcn.00405500
lea ecx, [esi - 0x10]
call fcn.00401250
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xb4]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
xor ecx, ebp
pop ebx
call fcn.0053aaae
leave
ret