Function at 0x4bf290
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b0
push ebx
push esi
push 0x100
call fcn.0049b580
pop ecx
mov ebx, eax
mov dword [ebp - 0x94], 0x94
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x4bf6c0
push str.Windows
lea eax, [ebp - 0x114]
push eax
call fcn.00531ba0
add esp, 8
mov eax, dword [ebp - 0x84]
cmp eax, 3
jg case.default.0x4bf2ea
jmp dword [eax*4 + 0x6a75bc]
mov eax, dword [ebp - 0x90]
cmp eax, 4
jne 0x4bf31e
cmp dword [ebp - 0x8c], 0xa
jae 0x4bf31e
push 0x6a85f4
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
mov eax, dword [ebp - 0x90]
cmp eax, 4
jne 0x4bf34d
mov eax, dword [ebp - 0x8c]
cmp eax, 0xa
jne 0x4bf34d
push 0x6a85f0
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
push 0x6a85ec
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
mov eax, dword [ebp - 0x90]
cmp eax, 6
jne 0x4bf38a
push str._Windows_Vista
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp 0x4bf417
mov eax, dword [ebp - 0x90]
cmp eax, 5
jne 0x4bf3b6
mov eax, dword [ebp - 0x8c]
cmp eax, 2
jne 0x4bf3b6
push str._Server_2003
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp 0x4bf417
mov eax, dword [ebp - 0x90]
cmp eax, 5
jne 0x4bf3e2
mov eax, dword [ebp - 0x8c]
cmp eax, 1
jne 0x4bf3e2
push 0x6a85cc
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp 0x4bf417
mov eax, dword [ebp - 0x90]
cmp eax, 5
jne 0x4bf403
push str._2000
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp 0x4bf417
push 0x6a85c2
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
mov dword [ebp - 0x1b0], 0x9c
lea eax, [ebp - 0x1b0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je case.default.0x4bf2ea
movzx eax, byte [ebp - 0x116]
cmp eax, 1
jne 0x4bf4a6
mov eax, dword [ebp - 0x1ac]
cmp eax, 4
jne 0x4bf466
push str._Workstation_4.0
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
movzx eax, word [ebp - 0x118]
and eax, 0x200
je 0x4bf48d
push str._Home_Edition
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
push str._Professional
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
movzx eax, byte [ebp - 0x116]
cmp eax, 3
jne case.default.0x4bf2ea
mov eax, dword [ebp - 0x1ac]
cmp eax, 5
jne 0x4bf560
mov eax, dword [ebp - 0x1a8]
cmp eax, 2
jne 0x4bf560
movzx eax, word [ebp - 0x118]
and eax, 0x80
je 0x4bf4fb
push str._Datacenter_Edition
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
movzx eax, word [ebp - 0x118]
and eax, 2
je 0x4bf520
push str._Enterprise_Edition
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
movzx eax, word [ebp - 0x118]
cmp eax, 0x400
jne 0x4bf547
push str._Web_Edition
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
push str._Standard_Edition
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
mov eax, dword [ebp - 0x1ac]
cmp eax, 5
jne 0x4bf5db
mov eax, dword [ebp - 0x1a8]
test eax, eax
jne 0x4bf5db
movzx eax, word [ebp - 0x118]
and eax, 0x80
je 0x4bf5a0
push str._Datacenter_Server
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
movzx eax, word [ebp - 0x118]
and eax, 2
je 0x4bf5c5
push str._Advanced_Server
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
push str._Server
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
movzx eax, word [ebp - 0x118]
and eax, 2
je 0x4bf5fd
push str._Server_4.0__Enterprise_Edition
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
push str._Server_4.0
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
push str._32s
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
jmp case.default.0x4bf2ea
push 0x6a84ed
lea eax, [ebp - 0x114]
push eax
call fcn.00532090
add esp, 8
mov eax, dword [ebp - 0x88]
and eax, 0xffff
movzx eax, ax
push eax
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x114]
push eax
push str._s__lu._02lu._04d
push ebx
call fcn.00531da0
add esp, 0x18
lea eax, [ebp - 0x80]
test eax, eax
je 0x4bf6ce
xor esi, esi
jmp 0x4bf67b
inc esi
cmp byte [ebp + esi - 0x80], 0
je 0x4bf699
movsx eax, byte [ebp + esi - 0x80]
movzx eax, al
mov edx, dword [0x7c5bf8]
movsx eax, word [edx + eax*2]
and eax, 0x60
jne 0x4bf67a
movsx eax, byte [ebp + esi - 0x80]
test eax, eax
je 0x4bf6ce
push 0x6a84d9
push ebx
call fcn.00532090
add esp, 8
lea eax, [ebp + esi - 0x80]
push eax
push ebx
call fcn.00532090
add esp, 8
jmp 0x4bf6ce
push str.Windows
push ebx
call fcn.00531da0
add esp, 8
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret