Function at 0x493240
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov eax, dword [0x5ac7dc]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0
je 0x493265
cmp dword [ebp + 0xc], 0
je 0x493265
cmp dword [ebp + 0x10], 0
jne 0x49326c
xor eax, eax
jmp 0x493595
push str.unknown_Windows_version
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0
mov dword [ebp - 0x118], 0x114
lea edx, [ebp - 0x118]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x4932a6
xor eax, eax
jmp 0x493595
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x110]
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x124], edx
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
mov dword [ebp - 0x120], eax
mov ecx, dword [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x11c]
push edx
mov eax, dword [ebp - 0x124]
push eax
push str._u._u._u
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
cmp dword [ebp - 0x128], 1
jne 0x493480
cmp dword [ebp - 0x124], 4
jne 0x493480
cmp dword [ebp - 0x11c], 0xa
jae 0x49334e
cmp dword [ebp - 0x120], 0x3b6
jne 0x49334e
push str.Windows_95
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0xc]
mov dword [eax], 1
jmp 0x49347b
cmp dword [ebp - 0x11c], 0xa
jae 0x49338c
cmp dword [ebp - 0x120], 0x3b6
jbe 0x49338c
cmp dword [ebp - 0x120], 0x438
ja 0x49338c
push str.Windows_95_SP1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp + 0xc]
mov dword [edx], 2
jmp 0x49347b
cmp dword [ebp - 0x11c], 0xa
jae 0x4933be
cmp dword [ebp - 0x120], 0x438
jbe 0x4933be
push str.Windows_95_OSR2
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 3
jmp 0x49347b
cmp dword [ebp - 0x11c], 0xa
jne 0x4933f0
cmp dword [ebp - 0x120], 0x7ce
jne 0x4933f0
push str.Windows_98
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0xc]
mov dword [eax], 4
jmp 0x49347b
cmp dword [ebp - 0x11c], 0xa
jne 0x49342b
cmp dword [ebp - 0x120], 0x7ce
jbe 0x49342b
cmp dword [ebp - 0x120], 0x887
jae 0x49342b
push str.Windows_98_SP1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp + 0xc]
mov dword [edx], 5
jmp 0x49347b
cmp dword [ebp - 0x11c], 0xa
jne 0x49345a
cmp dword [ebp - 0x120], 0x887
jb 0x49345a
push str.Windows_98_SE
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 6
jmp 0x49347b
cmp dword [ebp - 0x11c], 0x5a
jne 0x49347b
push str.Windows_ME
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0xc]
mov dword [eax], 7
jmp 0x493590
cmp dword [ebp - 0x128], 2
jne 0x49356f
cmp dword [ebp - 0x124], 3
jne 0x4934bc
cmp dword [ebp - 0x11c], 0x33
jne 0x4934bc
push str.Windows_NT_3.51
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x65
jmp 0x49356d
cmp dword [ebp - 0x124], 4
jne 0x4934eb
cmp dword [ebp - 0x11c], 0
jne 0x4934eb
push str.Windows_NT_4
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x66
jmp 0x49356d
cmp dword [ebp - 0x124], 5
jne 0x493517
cmp dword [ebp - 0x11c], 0
jne 0x493517
push str.Windows_2000
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x67
jmp 0x49356d
cmp dword [ebp - 0x124], 5
jne 0x493543
cmp dword [ebp - 0x11c], 1
jne 0x493543
push str.Windows_XP
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp + 0xc]
mov dword [edx], 0x68
jmp 0x49356d
cmp dword [ebp - 0x124], 5
jne 0x49356d
cmp dword [ebp - 0x11c], 2
jne 0x49356d
push str.Windows_2003_Server
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0x69
jmp 0x493590
cmp dword [ebp - 0x128], 3
jne 0x493590
push str.Windows_CE
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xc9
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004ae22e
mov esp, ebp
pop ebp
ret