Function at 0x4ca9ce
Capabilities:
Check os version
Get system information on windows

Disassembly:
mov eax, 0x69c868
call fcn.006375a8
sub esp, 0x160
push ebx
push esi
push edi
push 0xf
mov dword [ebp - 0x14], ecx
lea ebx, [ecx + 4]
pop esi
xor edx, edx
mov dword [ecx], 0x6d105c
mov dword [ebx + 0x14], esi
mov dword [ebx + 0x10], edx
cmp esi, 0x10
jb 0x4caa01
mov eax, dword [ebx]
jmp 0x4caa03
mov eax, ebx
mov byte [eax], dl
mov dword [ebp - 4], edx
lea eax, [ecx + 0x1c]
mov dword [eax + 0x14], esi
mov dword [eax + 0x10], edx
cmp esi, 0x10
jb 0x4caa18
mov eax, dword [eax]
mov byte [eax], dl
lea edi, [ecx + 0x34]
mov dword [edi + 0x14], esi
mov dword [edi + 0x10], edx
cmp esi, 0x10
jb 0x4caa2c
mov eax, dword [edi]
jmp 0x4caa2e
mov eax, edi
mov byte [eax], dl
lea esi, [ecx + 0x4c]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], edx
cmp dword [esi + 0x14], 0x10
jb 0x4caa47
mov eax, dword [esi]
jmp 0x4caa49
mov eax, esi
mov byte [eax], dl
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 3
push eax
mov dword [ebp - 0x16c], 0x11c
call dword [sym.imp.KERNEL32.DLL_GetVersionExW]
test eax, eax
je 0x4cab88
push dword [ebp - 0x160]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push str._d._d._d
push eax
call fcn.004638c2
add esp, 0x14
movzx eax, byte [ebp - 0x52]
mov byte [ebp - 4], 4
sub eax, 1
je 0x4caac3
sub eax, 1
je 0x4caaba
sub eax, 1
je 0x4caab1
mov dword [ebp - 0x10], str.unknown
jmp 0x4caaca
mov dword [ebp - 0x10], str.server
jmp 0x4caaca
mov dword [ebp - 0x10], str.domaincontroller
jmp 0x4caaca
mov dword [ebp - 0x10], str.workstation
push str.Windows
call fcn.0040d6de
pop ecx
push eax
push str.Windows
mov ecx, ebx
call fcn.0040d457
push dword [ebp - 0x10]
call fcn.0040d6de
pop ecx
mov ecx, dword [ebp - 0x14]
push eax
push dword [ebp - 0x10]
lea ecx, [ecx + 0x1c]
call fcn.0040d457
lea eax, [ebp - 0x2c]
cmp edi, eax
je 0x4cab0d
push 0xffffffffffffffff
push 0
push eax
mov ecx, edi
call fcn.0040d9ee
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemInfo]
movzx eax, word [ebp - 0x50]
test eax, eax
je 0x4cab62
cmp eax, 6
je 0x4cab4f
cmp eax, 9
je 0x4cab3c
push str.unknown
call fcn.0040d6de
pop ecx
push eax
push str.unknown
jmp 0x4cab73
push str.amd64
call fcn.0040d6de
pop ecx
push eax
push str.amd64
jmp 0x4cab73
push str.itanium
call fcn.0040d6de
pop ecx
push eax
push str.itanium
jmp 0x4cab73
push 0x6d10a4
call fcn.0040d6de
pop ecx
push eax
push 0x6d10a4
mov ecx, esi
call fcn.0040d457
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040daff
jmp 0x4cabf2
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push str.unknown
call fcn.0040d6de
pop ecx
push eax
push str.unknown
mov ecx, ebx
call fcn.0040d457
push str.unknown
call fcn.0040d6de
pop ecx
mov ecx, dword [ebp - 0x14]
push eax
push str.unknown
lea ecx, [ecx + 0x1c]
call fcn.0040d457
push str.unknown
call fcn.0040d6de
pop ecx
push eax
push str.unknown
mov ecx, edi
call fcn.0040d457
push str.unknown
call fcn.0040d6de
pop ecx
push eax
push str.unknown
mov ecx, esi
call fcn.0040d457
push 0x10
pop edx
cmp dword [esi + 0x14], edx
jb 0x4cabfc
mov esi, dword [esi]
cmp dword [edi + 0x14], edx
jb 0x4cac03
mov edi, dword [edi]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + 0x1c]
cmp dword [eax + 0x14], edx
jb 0x4cac10
mov eax, dword [eax]
cmp dword [ebx + 0x14], edx
jb 0x4cac17
mov ebx, dword [ebx]
push esi
push edi
push eax
push ebx
push str.OS_info:__name__s_release__s_version__s_machine__s
call fcn.0040c884
add esp, 0x14
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret