Function at 0x100482e0
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f23b8
mov eax, dword fs:[0]
push eax
sub esp, 0x174
mov eax, dword [0x1011b040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x150], 0
lea ecx, [ebp - 0x28]
call fcn.10009fb0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
push 0x11c
push 0
lea ecx, [ebp - 0x144]
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0x144], 0x11c
lea edx, [ebp - 0x144]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jne 0x100483f0
mov dword [ebp - 0x144], 0x114
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x100483f0
push 0x100f83f5
mov ecx, dword [ebp + 8]
call fcn.10009fe0
mov ecx, dword [ebp - 0x148]
or ecx, 1
mov dword [ebp - 0x148], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.1000a070
mov eax, dword [ebp + 8]
jmp 0x1004876d
push 0x100f9afc
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x10048425
lea edx, [ebp - 0x180]
push edx
call dword [ebp - 0x150]
jmp 0x10048432
lea eax, [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x14c], ecx
cmp dword [ebp - 0x14c], 0
je 0x10048724
cmp dword [ebp - 0x14c], 1
je 0x10048694
cmp dword [ebp - 0x14c], 2
je 0x10048466
jmp 0x10048733
cmp dword [ebp - 0x140], 6
jne 0x10048493
cmp dword [ebp - 0x13c], 3
jne 0x10048493
movzx edx, byte [ebp - 0x2a]
cmp edx, 1
jne 0x10048493
push str.Microsoft_Windows_8.1
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 6
jne 0x100484c0
cmp dword [ebp - 0x13c], 3
jne 0x100484c0
movzx eax, byte [ebp - 0x2a]
cmp eax, 1
je 0x100484c0
push str.Microsoft_Windows_Server_2012_R2
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 6
jne 0x100484ed
cmp dword [ebp - 0x13c], 2
jne 0x100484ed
movzx ecx, byte [ebp - 0x2a]
cmp ecx, 1
jne 0x100484ed
push str.Microsoft_Windows_8
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 6
jne 0x1004851a
cmp dword [ebp - 0x13c], 2
jne 0x1004851a
movzx edx, byte [ebp - 0x2a]
cmp edx, 1
je 0x1004851a
push str.Microsoft_Windows_Server_2012
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 6
jne 0x10048547
cmp dword [ebp - 0x13c], 0
jne 0x10048547
movzx eax, byte [ebp - 0x2a]
cmp eax, 1
jne 0x10048547
push str.Microsoft_Windows_Vista
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 6
jne 0x10048574
cmp dword [ebp - 0x13c], 0
jne 0x10048574
movzx ecx, byte [ebp - 0x2a]
cmp ecx, 1
je 0x10048574
push str.Microsoft_Windows_Server_2008
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 6
jne 0x100485a1
cmp dword [ebp - 0x13c], 1
jne 0x100485a1
movzx edx, byte [ebp - 0x2a]
cmp edx, 1
jne 0x100485a1
push str.Microsoft_Windows7
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 6
jne 0x100485ce
cmp dword [ebp - 0x13c], 1
jne 0x100485ce
movzx eax, byte [ebp - 0x2a]
cmp eax, 1
je 0x100485ce
push str.Microsoft_Windows_Server_2008_R2
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 5
jne 0x10048637
cmp dword [ebp - 0x13c], 2
jne 0x10048637
movzx ecx, byte [ebp - 0x2a]
cmp ecx, 1
jne 0x10048604
movzx edx, word [ebp - 0x180]
cmp edx, 9
jne 0x10048604
push str.Microsoft_Windows_XP_Professional_x64_Edition
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x10048635
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x1004861c
mov dword [ebp - 0x158], str.Microsoft_Windows_Server_2003_R2
jmp 0x10048626
mov dword [ebp - 0x158], str.Microsoft_Windows_Server_2003
mov eax, dword [ebp - 0x158]
push eax
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 5
jne 0x10048658
cmp dword [ebp - 0x13c], 1
jne 0x10048658
push str.Microsoft_Windows_XP
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 5
jne 0x10048679
cmp dword [ebp - 0x13c], 0
jne 0x10048679
push str.Microsoft_Windows_2000
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x1004868f
cmp dword [ebp - 0x140], 4
ja 0x1004868f
push str.Microsoft_Windows_NT
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x10048740
cmp dword [ebp - 0x140], 4
jne 0x100486b5
cmp dword [ebp - 0x13c], 0
jne 0x100486b5
push str.Microsoft_Windows_95
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x10048722
cmp dword [ebp - 0x140], 4
jne 0x10048703
cmp dword [ebp - 0x13c], 0xa
jne 0x10048703
mov ecx, 2
shl ecx, 0
movzx edx, word [ebp + ecx - 0x130]
cmp edx, 0x41
jne 0x100486e8
mov dword [ebp - 0x154], str.Windows_98_SE
jmp 0x100486f2
mov dword [ebp - 0x154], str.Windows_98
mov eax, dword [ebp - 0x154]
push eax
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x10048722
cmp dword [ebp - 0x140], 4
jne 0x10048722
cmp dword [ebp - 0x13c], 0x5a
jne 0x10048722
push str.Microsoft_Windows_Millennium_Edition
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x10048740
push str.Microsoft_Win32s
lea ecx, [ebp - 0x28]
call fcn.1001ca80
jmp 0x10048740
push str.Unknown
lea ecx, [ebp - 0x28]
call fcn.1001ca80
lea ecx, [ebp - 0x28]
push ecx
mov ecx, dword [ebp + 8]
call fcn.1000a020
mov edx, dword [ebp - 0x148]
or edx, 1
mov dword [ebp - 0x148], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.1000a070
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ec36e
mov esp, ebp
pop ebp
ret