Function at 0x498a20
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b79ad
mov eax, dword fs:[0]
push eax
sub esp, 0x18c
mov eax, dword [0x5a0fe0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ecx, eax
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
push 0x564e70
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x134], esi
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
push str.Unknown
mov ecx, ebx
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
push str.ntdll.dll
mov dword [esi], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x499039
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x499039
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x138]
push ecx
lea ecx, [ebp - 0x13c]
push ecx
call eax
mov eax, dword [ebp - 0x13c]
cmp eax, 6
jne 0x498bc4
cmp dword [ebp - 0x138], 3
jne 0x498cba
mov edi, dword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_long_int__int_]
lea eax, [ebp - 0x154]
push 0xa
push dword [ebp - 0x158]
push eax
call edi
mov ebx, eax
push 0xa
push dword [ebp - 0x138]
lea eax, [ebp - 0x150]
mov dword [ebp - 4], 0
push eax
call edi
mov esi, eax
push 0xa
push dword [ebp - 0x13c]
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 1
push eax
call edi
push esi
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 2
push eax
call fcn.004021a8
push ebx
push eax
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 3
push eax
call fcn.004021a8
mov ecx, dword [ebp - 0x140]
add esp, 0x3c
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
lea ecx, [ebp - 0x144]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x148]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x14c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x150]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x154]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [ebp - 0x130]
push str.Windows_8.1
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 0xb0
jmp 0x499039
cmp eax, 0xa
jne 0x498cba
cmp dword [ebp - 0x138], 0
jne 0x498cba
mov edi, dword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_long_int__int_]
push eax
push dword [ebp - 0x158]
lea eax, [ebp - 0x144]
push eax
call edi
mov ebx, eax
push 0xa
push dword [ebp - 0x138]
lea eax, [ebp - 0x148]
mov dword [ebp - 4], 4
push eax
call edi
mov esi, eax
push 0xa
push dword [ebp - 0x13c]
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 5
push eax
call edi
push esi
push eax
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 6
push eax
call fcn.004021a8
push ebx
push eax
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 7
push eax
call fcn.004021a8
mov ecx, dword [ebp - 0x140]
add esp, 0x3c
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
lea ecx, [ebp - 0x154]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x150]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x14c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x148]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x144]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [ebp - 0x130]
push str.Windows_10
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 0xc0
jmp 0x499039
lea eax, [ebp - 0x198]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x11c
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x499033
mov esi, dword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QString::number_unsigned_long_int__int_]
lea eax, [ebp - 0x174]
push 0xa
push dword [ebp - 0x120]
push eax
call esi
mov ebx, eax
push 0xa
push dword [ebp - 0x124]
lea eax, [ebp - 0x170]
mov dword [ebp - 4], 8
push eax
call esi
mov edi, eax
push 0xa
push dword [ebp - 0x128]
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 9
push eax
call esi
push 0x564dc4
push eax
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xa
push eax
call fcn.00403d0a
push edi
push eax
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0xb
push eax
call fcn.004021a8
push 0x564dc4
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xc
push eax
call fcn.00403d0a
add esp, 0x48
push ebx
push eax
lea eax, [ebp - 0x15c]
mov byte [ebp - 4], 0xd
push eax
call fcn.004021a8
mov ecx, dword [ebp - 0x140]
add esp, 0xc
push eax
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_class_QString_const__]
lea ecx, [ebp - 0x15c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x160]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x164]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x168]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x16c]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x170]
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
lea ecx, [ebp - 0x174]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_]
mov eax, dword [ebp - 0x128]
sub eax, 4
je 0x498f9b
sub eax, 1
je 0x498ece
sub eax, 1
jne 0x499039
mov eax, dword [ebp - 0x124]
sub eax, 0
je 0x498e96
sub eax, 1
je 0x498e5e
sub eax, 1
jne 0x499039
cmp byte [ebp - 0x12], 1
mov ecx, dword [ebp - 0x130]
jne 0x498e4e
push str.Windows_8
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 0xa0
jmp 0x499039
push str.Windows_Server_2012
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
jmp 0x499039
cmp byte [ebp - 0x12], 1
mov ecx, dword [ebp - 0x130]
jne 0x498e86
push str.Windows_7
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 0x90
jmp 0x499039
push str.Windows_Server_2008_R2
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
jmp 0x499039
cmp byte [ebp - 0x12], 1
mov ecx, dword [ebp - 0x130]
jne 0x498ebe
push str.Windows_Vista
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 0x80
jmp 0x499039
push str.Windows_Server_2008
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
jmp 0x499039
mov eax, dword [ebp - 0x124]
sub eax, 0
je 0x498f79
sub eax, 1
je 0x498f57
sub eax, 1
jne 0x499039
cmp byte [ebp - 0x12], 1
jne 0x498f11
cmp word [ebp - 0x198], 9
jne 0x498f11
mov ecx, dword [ebp - 0x130]
push str.Windows_XP_Professional_x64_Edition
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
jmp 0x499039
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x59
call esi
test eax, eax
jne 0x498f35
mov ecx, dword [ebp - 0x130]
push str.Windows_Server_2003
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
jmp 0x499039
push 0x59
call esi
test eax, eax
je 0x499039
mov ecx, dword [ebp - 0x130]
push str.Windows_Server_2003_R2
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
jmp 0x499039
mov ecx, dword [ebp - 0x130]
push str.Windows_XP
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 0x30
jmp 0x499039
mov ecx, dword [ebp - 0x130]
push str.Windows_2000
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 0x20
jmp 0x499039
mov eax, dword [ebp - 0x124]
test eax, eax
je 0x498ff1
cmp eax, 0xa
je 0x498fd2
cmp eax, 0x5a
jne 0x499039
mov ecx, dword [ebp - 0x130]
push str.Windows_Me
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 4
jmp 0x499039
mov ecx, dword [ebp - 0x130]
push str.Windows_98
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 3
jmp 0x499039
mov eax, dword [ebp - 0x11c]
cmp eax, 2
jne 0x49900f
mov ecx, dword [ebp - 0x130]
push str.Windows_NT_4.0
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
jmp 0x499039
cmp eax, 1
jne 0x499039
mov ecx, dword [ebp - 0x130]
push str.Windows_95
call dword [sym.imp.Qt5Core.dll_public:_class_QString____thiscall_QString::operator_char_const__]
mov eax, dword [ebp - 0x134]
mov dword [eax], 2
jmp 0x499039
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00402315
mov esp, ebp
pop ebp
ret 0xc