Function at 0x100d4870
Capabilities:
Check os version
Get system information on windows

Disassembly:
sub esp, 0x168
push ebx
push esi
push edi
push 0x118
lea eax, [esp + 0x30]
mov ebx, edx
push 0
push eax
mov esi, ecx
call fcn.100747a0
add esp, 0xc
mov dword [esp + 0x28], 0x11c
lea eax, [esp + 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x100d4bd3
mov eax, dword [esp + 0x2c]
add eax, 0xfffffffc
cmp eax, 6
ja case.0x100d48ca.7
jmp dword [eax*4 + 0x100d4bec]
mov eax, dword [esp + 0x30]
test eax, eax
je 0x100d490d
cmp eax, 0xa
je 0x100d48fa
cmp eax, 0x5a
jne 0x100d4bbb
push 0x14
push str.Microsoft_Windows_Me
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
push 0x14
push str.Microsoft_Windows_98
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
mov eax, dword [esp + 0x38]
cmp eax, 2
jne 0x100d4929
push 0x18
push str.Microsoft_Windows_NT_4.0
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
cmp eax, 1
jne 0x100d4bbb
push 0x14
push str.Microsoft_Windows_95
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
mov eax, dword [esp + 0x30]
sub eax, 0
je 0x100d49db
sub eax, 1
je 0x100d49c8
sub eax, 1
jne 0x100d4bbb
cmp byte [esp + 0x142], 1
jne 0x100d4988
cmp word [esp + 0x14c], 9
jne 0x100d4988
push 0x2d
push str.Microsoft_Windows_XP_Professional_x64_Edition
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x59
call edi
test eax, eax
jne 0x100d49a9
push 0x1d
push str.Microsoft_Windows_Server_2003
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
push 0x59
call edi
test eax, eax
je 0x100d4bbb
push 0x20
push str.Microsoft_Windows_Server_2003_R2
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
push 0x14
push str.Microsoft_Windows_XP
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
push 0x16
push str.Microsoft_Windows_2000
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
mov eax, dword [esp + 0x30]
sub eax, 0
je 0x100d4a6b
sub eax, 1
je 0x100d4a31
cmp byte [esp + 0x142], 1
mov ecx, 0x13
jne 0x100d4a1e
push ecx
mov eax, str.Microsoft_Windows_8
mov ecx, esi
push eax
call fcn.1001a860
jmp 0x100d4bbb
push ecx
mov eax, str.Windows_Server_2012
mov ecx, esi
push eax
call fcn.1001a860
jmp 0x100d4bbb
cmp byte [esp + 0x142], 1
jne 0x100d4a53
mov ecx, 0x13
mov eax, str.Microsoft_Windows_7
push ecx
push eax
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
mov ecx, 0x20
mov eax, str.Microsoft_Windows_Server_2008_R2
push ecx
push eax
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
cmp byte [esp + 0x142], 1
jne 0x100d4a8d
mov ecx, 0x17
mov eax, str.Microsoft_Windows_Vista
push ecx
push eax
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
mov ecx, 0x1d
mov eax, str.Microsoft_Windows_Server_2008
push ecx
push eax
mov ecx, esi
call fcn.1001a860
jmp 0x100d4bbb
mov eax, dword [esp + 0x30]
test eax, eax
je 0x100d4b0b
push eax
push dword [esp + 0x30]
lea eax, [esp + 0x18]
push str.Windows__d._d
push eax
call fcn.100d4590
add esp, 0x10
mov ecx, esi
push eax
call fcn.1001df20
mov edx, dword [esp + 0x24]
cmp edx, 8
jb 0x100d4bbb
mov ecx, dword [esp + 0x10]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100d4bb1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d4bdf
jmp 0x100d4bb1
cmp byte [esp + 0x142], 1
mov ecx, esi
jne 0x100d4b28
push 0x14
push str.Microsoft_Windows_10
call fcn.1001a860
jmp 0x100d4bbb
push 0x1d
push str.Microsoft_Windows_Server_2016
call fcn.1001a860
jmp 0x100d4bbb
push dword [esp + 0x30]
lea eax, [esp + 0x14]
push dword [esp + 0x30]
push str.Windows__d._d
push eax
call fcn.100d4590
mov edi, eax
add esp, 0x10
cmp esi, edi
je 0x100d4b83
mov ecx, esi
call fcn.1001a0c0
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov edx, dword [esp + 0x24]
cmp edx, 8
jb 0x100d4bbb
mov ecx, dword [esp + 0x10]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100d4bb1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d4be4
push edx
push ecx
call fcn.100703b3
add esp, 8
mov eax, dword [esp + 0x2c]
mov dword [ebx], eax
cmp dword [esi + 0x10], 0
je 0x100d4bd3
mov al, 1
pop edi
pop esi
pop ebx
add esp, 0x168
ret
pop edi
pop esi
xor al, al
pop ebx
add esp, 0x168
ret
call fcn.1007e0fa
call fcn.1007e0fa
nop dword [eax]
ror dword [eax + 0xd], 1
adc byte [ebp + 73], al
or eax, 0xd49ee10
adc byte [ecx], bh
dec ebx
or eax, 0xd4b3910
adc byte [ecx], bh
dec ebx
or eax, 0xd4aa510
adc ah, cl
int3