Function at 0x40fb37
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x184
mov eax, dword [0x43e00c]
xor eax, esp
mov dword [esp + 0x180], eax
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
lea edi, [esi + 0x28]
mov dword [esi], ebx
mov ecx, edi
mov dword [esi + 4], ebx
mov byte [esi + 8], bl
call fcn.0040b28a
mov dword [esi + 0x40], 3
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
call fcn.0040fdd8
lea ecx, [esi + 0x50]
mov dword [esi + 0x4c], eax
call fcn.0040b28a
push pe_nt_image_headers32
lea eax, [esp + 0x70]
mov dword [esp + 0x6c], 0x11c
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
push eax
mov dword [esi + 0xc], ecx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], ebx
call fcn.0040fe1b
mov dword [esi], eax
lea ecx, [esp + 0x3c]
movzx eax, word [esp + 0x180]
add esp, 4
mov dword [esi + 0x20], eax
movzx eax, word [esp + 0x17e]
mov dword [esi + 0x24], eax
lea eax, [esp + 0x7c]
push eax
call fcn.00403490
lea edx, [esp + 0x38]
lea ecx, [esp + 0x50]
call fcn.0040ebc3
mov ebx, eax
cmp edi, ebx
je 0x40fc1c
push 0
push 1
mov ecx, edi
call fcn.0040a073
push ebx
mov ecx, edi
call fcn.00409f2a
xor ebx, ebx
lea ecx, [esp + 0x50]
push 0
inc ebx
push ebx
call fcn.0040a073
push 0
push ebx
lea ecx, [esp + 0x40]
call fcn.0040a189
push 9
pop eax
mov ecx, eax
lea edi, [esp + 0x14]
xor eax, eax
rep stosd dword es:[edi], eax
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov cx, word [esp + 0x14]
push 2
pop edi
movzx eax, cx
push 9
pop edx
test eax, eax
je 0x40fc74
cmp eax, 6
je 0x40fc6f
cmp eax, edx
jne 0x40fc78
mov dword [esi + 0x40], ebx
jmp 0x40fc78
mov dword [esi + 0x40], edi
jmp 0x40fc78
and dword [esi + 0x40], 0
cmp dword [esp + 0x6c], 6
mov eax, dword [esp + 0x28]
mov dword [esi + 0x44], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x48], eax
je 0x40fceb
cmp dword [esp + 0x6c], 0xa
je 0x40fceb
cmp dword [esp + 0x6c], 5
jne 0x40fd38
cmp dword [esp + 0x70], edi
jne 0x40fcd0
cmp byte [esp + 0x182], 1
jne 0x40fcb8
cmp cx, dx
je 0x40fd67
mov ax, word [esp + 0x180]
not ax
movzx eax, ax
shr eax, 0xe
and eax, edi
mov dword [esi + 0x1c], eax
jmp 0x40fd3c
cmp dword [esp + 0x70], ebx
jne 0x40fd38
mov ax, word [esp + 0x180]
not ax
movzx eax, ax
shr eax, 9
and eax, ebx
jmp 0x40fccb
push str.GetProductInfo
push 0x427544
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [esp + 0x10]
push ecx
push 0
push 0
push dword [esp + 0x7c]
push dword [esp + 0x7c]
call eax
mov eax, dword [esp + 0x10]
cmp eax, 0xf
ja 0x40fd53
cmp eax, 0xc
jae 0x40fd6c
cmp eax, ebx
je 0x40fd67
cmp eax, 4
je 0x40fd67
cmp eax, 6
je 0x40fd67
jbe 0x40fd38
cmp eax, 0xa
jbe 0x40fd6c
and dword [esi + 0x1c], 0
mov ecx, dword [esp + 0x18c]
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00406335
mov esp, ebp
pop ebp
ret
cmp eax, 0x11
jb 0x40fd38
cmp eax, 0x12
jbe 0x40fd6c
cmp eax, 0x19
je 0x40fd6c
cmp eax, 0x30
jne 0x40fd38
mov dword [esi + 0x1c], ebx
jmp 0x40fd3c
mov dword [esi + 0x1c], edi
jmp 0x40fd3c