Function at 0x4657c0
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x260
mov eax, dword [0x517074]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x25c]
mov dword [0x51e6a0], eax
mov eax, dword [ebp - 0x244]
mov dword [0x51dba0], eax
mov eax, dword [ebp - 0x254]
mov dword [0x517aa8], eax
mov eax, dword [ebp - 0x24c]
push 0x11c
mov dword [0x517ab8], eax
lea eax, [ebp - 0x120]
push 0
push eax
mov dword [0x517aac], 0
call fcn.004a5940
add esp, 0xc
mov dword [ebp - 0x120], 0x11c
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x46585e
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push esi
mov esi, dword [0x51e664]
test esi, esi
jne 0x46588c
push str.RtlGetVersion
push str.NTDLL.DLL
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [0x51e664], esi
test esi, esi
je 0x4658d6
push 0x11c
lea eax, [ebp - 0x23c]
push 0
push eax
call fcn.004a5940
add esp, 0xc
mov dword [ebp - 0x23c], 0x11c
lea eax, [ebp - 0x23c]
mov ecx, esi
push eax
call dword [0x4db310]
call esi
test eax, eax
jne 0x4658d6
push edi
mov ecx, 0x47
lea esi, [ebp - 0x23c]
lea edi, [ebp - 0x120]
rep movsd dword es:[edi], dword [esi]
pop edi
cmp dword [ebp - 0x110], 2
jne 0x4659e6
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x118]
mov dword [0x51e6a4], 0xa
cmp ecx, 5
jb 0x465a8d
mov edx, 0xb
cmp ecx, 6
jb 0x465965
mov dword [0x51e6a4], 0xd
cmp ecx, 7
jb 0x465927
mov dword [0x51e6a4], 0x11
jmp 0x465976
cmp eax, 1
jb 0x465976
mov dword [0x51e6a4], 0xe
cmp eax, 2
jb 0x465976
mov dword [0x51e6a4], 0xf
cmp eax, 3
jb 0x465976
mov dword [0x51e6a4], 0x10
cmp eax, 4
jb 0x465976
mov dword [0x51e6a4], 0x11
jmp 0x465976
cmp eax, 1
mov esi, 0xc
cmovae edx, esi
mov dword [0x51e6a4], edx
cmp ecx, 5
jne 0x4659c8
cmp eax, 1
jne 0x465998
cmp word [ebp - 0xc], 2
jae 0x4659ce
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x4659b5
cmp word [ebp - 0xc], 1
jae 0x4659ce
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret
ja 0x4659ce
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret
jbe 0x465a8d
mov byte [0x51e681], 1
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x11c], 4
jne 0x465a83
mov eax, dword [ebp - 0x118]
mov dword [0x51e6a4], 1
test eax, eax
jne 0x465a30
mov eax, 0x457
cmp word [ebp - 0x114], ax
jb 0x465a8d
mov dword [0x51e6a4], 2
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret
cmp eax, 0x5a
jae 0x465a68
mov eax, 0x8ae
mov dword [0x51e6a4], 3
cmp word [ebp - 0x114], ax
jb 0x465a8d
mov dword [0x51e6a4], 4
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret
mov dword [0x51e6a4], 5
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret
mov dword [0x51e6a4], 0
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
pop esi
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret