Function at 0x407660
Capabilities:
Check os version
Get system information on windows

Disassembly:
push 0xffffffffffffffff
push 0x44684b
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x45b8b4]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push ebp
push edi
mov eax, dword [0x45b8b4]
xor eax, esp
push eax
lea eax, [esp + 0xe4]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xf4]
xor eax, eax
push 0x9c
push eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
lea eax, [esp + 0x48]
push eax
mov ebx, 8
mov dword [ebp], 0
call fcn.00430e80
add esp, 0xc
lea ecx, [esp + 0x40]
push ecx
mov dword [esp + 0x44], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x407b8a
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x407725
lea edx, [esp + 0x1c]
push edx
call eax
jmp 0x407730
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
call fcn.0041623a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40774a
push 0x80004005
call fcn.00403720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov dword [esp + 0xec], 0
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push ecx
push edx
lea eax, [esp + 0x1c]
push str.OS__Version__d__d
push eax
call fcn.00403d50
mov eax, dword [esp + 0x24]
add esp, 0xc
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
mov dword [esp + 0x20], eax
call fcn.00403f60
add eax, 0x10
mov dword [edi], eax
mov ecx, dword [esi + 0xfc]
add esp, 4
call fcn.00404170
mov eax, dword [esp + 0x50]
sub eax, 1
je 0x407acc
sub eax, 1
jne 0x407b62
cmp dword [esp + 0x44], 6
mov edi, 9
jne 0x4078a2
cmp dword [esp + 0x48], 1
jne 0x407826
cmp byte [esp + 0xda], 1
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x407805
push str.OS__Windows_7
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov ebx, 0xc
jmp 0x40781f
push str.OS__Windows_Server_2008_R2
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov ebx, 0xb
cmp dword [esp + 0x44], 6
jne 0x4078a2
cmp dword [esp + 0x48], 0
jne 0x407b62
cmp byte [esp + 0xda], 1
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x40785e
push str.OS__Windows_Vista
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov ebx, 0xa
jmp 0x407878
push str.OS__Windows_Server_2008
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov ebx, 0xb
cmp word [esp + 0x1c], di
jne 0x4078a2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__x64_Edition
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov dword [ebp], 1
cmp dword [esp + 0x44], 5
jne 0x407b62
cmp dword [esp + 0x48], 2
jne 0x407a26
push 0x59
mov ebx, edi
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x4078d4
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Windows_Server_2003_R2_
jmp 0x407935
cmp word [esp + 0xd8], 0x2000
jne 0x4078ee
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Windows_Storage_Server_2003
jmp 0x407935
cmp byte [esp + 0xda], 1
jne 0x407929
cmp word [esp + 0x1c], di
jne 0x407929
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Windows_XP_Professional_x64_Edition
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov ebx, 8
mov dword [ebp], 1
jmp 0x407945
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Windows_Server_2003_
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
cmp byte [esp + 0xda], 1
je 0x407a1b
mov eax, dword [esp + 0x1c]
cmp ax, 6
jne 0x407996
mov al, byte [esp + 0xd8]
test al, al
mov dword [ebp], 1
jns 0x407980
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Datacenter_Edition_for_Itanium_based_Systems
jmp 0x407a0b
test al, 2
je 0x407a1b
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Enterprise_Edition_for_Itanium_based_Systems
jmp 0x407a0b
cmp ax, di
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x4079cd
mov al, byte [esp + 0xdc]
test al, al
mov dword [ebp], 1
jns 0x4079bb
push str.OS__Datacenter_x64_Edition
jmp 0x407a0b
test al, 2
je 0x4079c6
push str.OS__Enterprise_x64_Edition
jmp 0x407a0b
push str.OS__Standard_x64_Edition
jmp 0x407a0b
mov eax, dword [esp + 0xdc]
test eax, 0x4000
je 0x4079e2
push str.OS__Compute_Cluster_Edition
jmp 0x407a0b
test al, al
jns 0x4079ed
push str.OS__Datacenter_Edition
jmp 0x407a0b
test al, 2
je 0x4079f8
push str.OS__Enterprise_Edition
jmp 0x407a0b
test eax, 0x400
je 0x407a06
push str.OS__Web_Edition
jmp 0x407a0b
push str.OS__Standard_Edition
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
cmp dword [esp + 0x44], 5
jne 0x407b62
cmp dword [esp + 0x48], 1
jne 0x407a6d
test dword [esp + 0xd8], 0x200
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
je 0x407a48
push str.OS__Windows_XP_Home_Edition
jmp 0x407a4d
push str.OS__Windows_XP_Professional
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
cmp dword [esp + 0x44], 5
mov ebx, 8
jne 0x407b62
cmp dword [esp + 0x48], 0
jne 0x407b62
cmp byte [esp + 0xda], 1
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
jne 0x407a90
push str.OS__Windows_2000_Professional
jmp 0x407ab2
mov al, byte [esp + 0xdc]
test al, al
jns 0x407aa2
push str.OS__Windows_2000_Datacenter_Server
jmp 0x407ab2
test al, 2
je 0x407aad
push str.OS__Windows_2000_Advanced_Server
jmp 0x407ab2
push str.OS__Windows_2000_Server
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov ebx, 7
jmp 0x407b62
mov edi, 4
cmp dword [esp + 0x44], edi
jne 0x407b62
cmp dword [esp + 0x48], 0
jne 0x407b09
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Microsoft_Windows_95
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
cmp dword [esp + 0x44], edi
mov ebx, 1
jne 0x407b62
mov ebp, 0xa
cmp dword [esp + 0x48], ebp
jne 0x407b62
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Microsoft_Windows_98
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
cmp dword [esp + 0x44], edi
mov ebx, 2
jne 0x407b62
cmp dword [esp + 0x48], ebp
jne 0x407b62
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.OS__Microsoft_Windows_Millennium_Edition
call fcn.004039f0
mov ecx, dword [esi + 0xfc]
call fcn.00404170
mov ebx, 3
mov eax, dword [esp + 0x18]
mov dword [esp + 0xec], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x407b8a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, ebx
mov ecx, dword [esp + 0xe4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd0]
xor ecx, esp
call fcn.0042e419
add esp, 0xe0
ret 4