Function at 0x437d30
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58cb9b
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x5f0a00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
push 0
push 0
push 0xa
mov dword [ebp - 0x160], edi
call fcn.0043a510
add esp, 0xc
test eax, eax
je 0x437dba
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0xa
mov dword [edi + 0x14], 0xf
movq xmm0, qword [str.Windows_10]
movq qword [edi], xmm0
mov cx, word [0x59cf30]
mov word [edi + 8], cx
mov byte [edi + 0xa], 0
jmp 0x438150
push 0
push 3
push 6
call fcn.0043a510
add esp, 0xc
test eax, eax
je 0x437e15
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0xb
mov dword [edi + 0x14], 0xf
movq xmm0, qword [str.Windows_8.1]
movq qword [edi], xmm0
mov ax, word [0x59cf3c]
mov word [edi + 8], ax
mov al, byte [0x59cf3e]
mov byte [edi + 0xa], al
mov byte [edi + 0xb], 0
jmp 0x438150
push 0
push 2
push 6
call fcn.0043a510
add esp, 0xc
test eax, eax
je 0x437e66
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 9
mov dword [edi + 0x14], 0xf
movq xmm0, qword [str.Windows_8]
movq qword [edi], xmm0
mov al, byte [0x59cf48]
mov byte [edi + 8], al
mov byte [edi + 9], 0
jmp 0x438150
push 0
push 0
push 6
call fcn.0043a510
add esp, 0xc
test eax, eax
je 0x437eb7
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 9
mov dword [edi + 0x14], 0xf
movq xmm0, qword [str.Windows_7]
movq qword [edi], xmm0
mov al, byte [0x59cf54]
mov byte [edi + 8], al
mov byte [edi + 9], 0
jmp 0x438150
lea ecx, [ebp - 0x160]
call fcn.004335b0
lea eax, [ebp - 0x194]
mov dword [ebp - 4], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x118
lea eax, [ebp - 0x158]
push 0
push eax
call fcn.00557d70
add esp, 0xc
mov dword [ebp - 0x15c], 0x11c
lea eax, [ebp - 0x15c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x43812a
mov eax, dword [ebp - 0x158]
sub eax, 5
je 0x438035
sub eax, 1
je 0x437f58
sub eax, 4
jne 0x43807f
push 5
push str.win10
mov ecx, 0x5f00dc
call fcn.00429350
push dword [ebp - 0x150]
lea eax, [ebp - 0x160]
push str.Windows_10___d_
push eax
call fcn.00436c30
add esp, 0xc
jmp 0x43807f
mov eax, dword [ebp - 0x154]
sub eax, 0
je 0x438003
sub eax, 1
je 0x437fa5
sub eax, 1
jne 0x43807f
push 4
push str.win8
mov ecx, 0x5f00dc
call fcn.00429350
push dword [ebp - 0x150]
lea eax, [ebp - 0x160]
push str.Windows_8___d_
push eax
call fcn.00436c30
add esp, 0xc
jmp 0x43807f
cmp byte [ebp - 0x42], 1
mov ecx, 0x5f00dc
jne 0x437fdb
push 4
push str.win7
call fcn.00429350
push dword [ebp - 0x150]
lea eax, [ebp - 0x160]
push str.Windows_7___d_
push eax
call fcn.00436c30
add esp, 0xc
jmp 0x43807f
push 6
push str.win2k8
call fcn.00429350
push dword [ebp - 0x150]
lea eax, [ebp - 0x160]
push str.Windows_2008_R2___d_
push eax
call fcn.00436c30
add esp, 0xc
jmp 0x43807f
cmp byte [ebp - 0x42], 1
lea eax, [ebp - 0x160]
push dword [ebp - 0x150]
jne 0x438025
push str.Windows_Vista___d_
push eax
call fcn.00436c30
add esp, 0xc
jmp 0x43807f
push str.Windows_2008___d_
push eax
call fcn.00436c30
add esp, 0xc
jmp 0x43807f
mov eax, dword [ebp - 0x154]
sub eax, 0
je 0x43806f
sub eax, 1
je 0x438068
sub eax, 1
jne 0x43807f
cmp byte [ebp - 0x42], 1
jne 0x438061
cmp word [ebp - 0x194], 9
jne 0x438061
push str.Windows_XP_x64
jmp 0x438074
push str.Windows_2003
jmp 0x438074
push str.Windows_XP
jmp 0x438074
push str.Windows_2000
lea ecx, [ebp - 0x160]
call fcn.004350d0
push dword [ebp - 0x150]
lea eax, [ebp - 0x13]
push eax
call fcn.004157b0
add esp, 8
lea ecx, [ebp - 0x161]
push ecx
lea ecx, [ebp - 0x13]
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.00415370
lea eax, [ebp - 0x40]
mov ecx, 0x5f00f4
push eax
call fcn.004351f0
lea ecx, [ebp - 0x40]
call fcn.0040ddb0
mov esi, dword [ebp - 0x160]
cmp dword [esi - 0xc], 0
je 0x438130
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x168]
call fcn.00433610
mov eax, dword [ebp - 0x168]
mov byte [ebp - 4], 1
cmp dword [eax - 0xc], 0
jle 0x438119
push str.Service_Pack
push eax
call fcn.005582d2
add esp, 8
test eax, eax
je 0x438119
mov ecx, dword [ebp - 0x168]
sub eax, ecx
sar eax, 1
js 0x438119
push ecx
lea ecx, [ebp - 0x160]
call fcn.00435580
mov esi, dword [ebp - 0x160]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0
call fcn.004345a0
jmp 0x438130
mov esi, dword [ebp - 0x160]
push esi
mov ecx, edi
call fcn.0042e500
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x438150
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00551e44
mov esp, ebp
pop ebp
ret