Function at 0x4c61ab
Capabilities:
Check os version
Get system information on windows

Disassembly:
mov eax, 0x676f70
call fcn.0062921c
sub esp, 0x160
push ebx
push esi
push edi
push 0xf
mov dword [ebp - 0x14], ecx
lea ebx, [ecx + 4]
pop esi
xor edx, edx
mov dword [ecx], 0x6a8bf4
mov dword [ebx + 0x14], esi
mov dword [ebx + 0x10], edx
cmp esi, 0x10
jb 0x4c61de
mov eax, dword [ebx]
jmp 0x4c61e0
mov eax, ebx
mov byte [eax], dl
mov dword [ebp - 4], edx
lea eax, [ecx + 0x1c]
mov dword [eax + 0x14], esi
mov dword [eax + 0x10], edx
cmp esi, 0x10
jb 0x4c61f5
mov eax, dword [eax]
mov byte [eax], dl
lea edi, [ecx + 0x34]
mov dword [edi + 0x14], esi
mov dword [edi + 0x10], edx
cmp esi, 0x10
jb 0x4c6209
mov eax, dword [edi]
jmp 0x4c620b
mov eax, edi
mov byte [eax], dl
lea esi, [ecx + 0x4c]
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], edx
cmp dword [esi + 0x14], 0x10
jb 0x4c6224
mov eax, dword [esi]
jmp 0x4c6226
mov eax, esi
mov byte [eax], dl
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 3
push eax
mov dword [ebp - 0x16c], 0x11c
call dword [sym.imp.KERNEL32.DLL_GetVersionExW]
test eax, eax
je 0x4c6365
push dword [ebp - 0x160]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push str._d._d._d
push eax
call fcn.004607cf
add esp, 0x14
movzx eax, byte [ebp - 0x52]
mov byte [ebp - 4], 4
sub eax, 1
je 0x4c62a0
sub eax, 1
je 0x4c6297
sub eax, 1
je 0x4c628e
mov dword [ebp - 0x10], str.unknown
jmp 0x4c62a7
mov dword [ebp - 0x10], str.server
jmp 0x4c62a7
mov dword [ebp - 0x10], str.domaincontroller
jmp 0x4c62a7
mov dword [ebp - 0x10], str.workstation
push str.Windows
call fcn.0040a79e
pop ecx
push eax
push str.Windows
mov ecx, ebx
call fcn.0040a517
push dword [ebp - 0x10]
call fcn.0040a79e
pop ecx
mov ecx, dword [ebp - 0x14]
push eax
push dword [ebp - 0x10]
lea ecx, [ecx + 0x1c]
call fcn.0040a517
lea eax, [ebp - 0x2c]
cmp edi, eax
je 0x4c62ea
push 0xffffffffffffffff
push 0
push eax
mov ecx, edi
call fcn.0040aaae
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemInfo]
movzx eax, word [ebp - 0x50]
test eax, eax
je 0x4c633f
cmp eax, 6
je 0x4c632c
cmp eax, 9
je 0x4c6319
push str.unknown
call fcn.0040a79e
pop ecx
push eax
push str.unknown
jmp 0x4c6350
push str.amd64
call fcn.0040a79e
pop ecx
push eax
push str.amd64
jmp 0x4c6350
push str.itanium
call fcn.0040a79e
pop ecx
push eax
push str.itanium
jmp 0x4c6350
push 0x6a8c3c
call fcn.0040a79e
pop ecx
push eax
push 0x6a8c3c
mov ecx, esi
call fcn.0040a517
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040abbf
jmp 0x4c63cf
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push str.unknown
call fcn.0040a79e
pop ecx
push eax
push str.unknown
mov ecx, ebx
call fcn.0040a517
push str.unknown
call fcn.0040a79e
pop ecx
mov ecx, dword [ebp - 0x14]
push eax
push str.unknown
lea ecx, [ecx + 0x1c]
call fcn.0040a517
push str.unknown
call fcn.0040a79e
pop ecx
push eax
push str.unknown
mov ecx, edi
call fcn.0040a517
push str.unknown
call fcn.0040a79e
pop ecx
push eax
push str.unknown
mov ecx, esi
call fcn.0040a517
push 0x10
pop edx
cmp dword [esi + 0x14], edx
jb 0x4c63d9
mov esi, dword [esi]
cmp dword [edi + 0x14], edx
jb 0x4c63e0
mov edi, dword [edi]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + 0x1c]
cmp dword [eax + 0x14], edx
jb 0x4c63ed
mov eax, dword [eax]
cmp dword [ebx + 0x14], edx
jb 0x4c63f4
mov ebx, dword [ebx]
push esi
push edi
push eax
push ebx
push str.OS_info:__name__s_release__s_version__s_machine__s
call fcn.00409944
add esp, 0x14
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret