Function at 0x40f100
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x204
mov eax, dword [0x42a95c]
xor eax, ebp
mov dword [ebp - 0x38], eax
push 0x24
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.00413440
add esp, 0xc
push 0x11c
push 0
lea ecx, [ebp - 0x158]
push ecx
call fcn.00413440
add esp, 0xc
mov dword [ebp - 0x158], 0x11c
lea edx, [ebp - 0x158]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x40f170
mov dword [ebp - 0x158], 0x114
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push str.GetNativeSystemInfo
push 0x421688
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x40f199
lea ecx, [ebp - 0x34]
push ecx
call dword [ebp - 0x10]
jmp 0x40f1a3
lea edx, [ebp - 0x34]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x23
call fcn.004129f0
add esp, 4
push eax
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415992
add esp, 0xc
cmp dword [ebp - 0x148], 2
jne 0x40f8c0
cmp dword [ebp - 0x154], 4
jbe 0x40f8c0
cmp dword [ebp - 0x154], 6
jne 0x40f4c3
cmp dword [ebp - 0x150], 0
jne 0x40f228
movzx ecx, byte [ebp - 0x3e]
cmp ecx, 1
jne 0x40f210
push str.Windows_Vista
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f226
push str.Windows_Server_2008
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f280
cmp dword [ebp - 0x150], 1
jne 0x40f26a
movzx ecx, byte [ebp - 0x3e]
cmp ecx, 1
jne 0x40f252
push str.Windows_7
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f268
push str.Windows_Server_2008_R2
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f280
push 0x421738
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
push str.GetProductInfo
push 0x421768
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xc], eax
lea edx, [ebp - 4]
push edx
push 0
push 0
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp - 0x154]
push ecx
call dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x1fc]
sub eax, 1
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x2f
ja case.0x40f2e5.4
mov ecx, dword [ebp - 0x1fc]
movzx edx, byte [ecx + 0x40fa64]
jmp dword [edx*4 + 0x40fa18]
push str.Ultimate_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push 0x4217a8
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Home_Premium_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Home_Basic_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push 0x421818
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Business_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Starter_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Cluster_Server_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push 0x4218b4
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Datacenter_Edition__core_installation_
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push 0x421930
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Enterprise_Edition__core_installation_
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push 0x4219a8
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Small_Business_Server
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Small_Business_Server_Premium_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push 0x421a7c
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Standard_Edition__core_installation_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp case.0x40f2e5.4
push str.Web_Server_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f7f7
cmp dword [ebp - 0x154], 5
jne 0x40f7e1
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
je 0x40f74e
cmp dword [ebp - 0x200], 1
je 0x40f6fa
cmp dword [ebp - 0x200], 2
je 0x40f504
jmp 0x40f7df
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x40f528
push str.Windows_Server_2003_R2_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f58c
movzx edx, word [ebp - 0x40]
and edx, 0x2000
je 0x40f54c
push str.Windows_Storage_Server_2003
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f58c
movzx ecx, byte [ebp - 0x3e]
cmp ecx, 1
jne 0x40f576
movzx edx, word [ebp - 0x34]
cmp edx, 9
jne 0x40f576
push str.Windows_XP_Professional_x64_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f58c
push str.Windows_Server_2003_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
movzx edx, byte [ebp - 0x3e]
cmp edx, 1
je 0x40f6f5
movzx eax, word [ebp - 0x34]
cmp eax, 6
jne 0x40f5ea
movzx ecx, word [ebp - 0x40]
and ecx, 0x80
je 0x40f5c6
push str.Datacenter_Edition_for_Itanium_based_Systems
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f5e5
movzx eax, word [ebp - 0x40]
and eax, 2
je 0x40f5e5
push str.Enterprise_Edition_for_Itanium_based_Systems
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f6f5
movzx edx, word [ebp - 0x34]
cmp edx, 9
jne 0x40f652
movzx eax, word [ebp - 0x40]
and eax, 0x80
je 0x40f616
push str.Datacenter_x64_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f64d
movzx edx, word [ebp - 0x40]
and edx, 2
je 0x40f637
push str.Enterprise_x64_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f64d
push str.Standard_x64_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f6f5
movzx edx, word [ebp - 0x40]
and edx, 0x4000
je 0x40f676
push str.Compute_Cluster_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f6f5
movzx ecx, word [ebp - 0x40]
and ecx, 0x80
je 0x40f69a
push str.Datacenter_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f6f5
movzx eax, word [ebp - 0x40]
and eax, 2
je 0x40f6bb
push str.Enterprise_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f6f5
movzx edx, word [ebp - 0x40]
and edx, 0x400
je 0x40f6df
push str.Web_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f6f5
push str.Standard_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f7df
push str.Windows_XP
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
movzx eax, word [ebp - 0x40]
and eax, 0x200
je 0x40f733
push str.Home_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f749
push 0x421e2c
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f7df
push str.Windows_2000
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
movzx ecx, byte [ebp - 0x3e]
cmp ecx, 1
jne 0x40f785
push str.Professional
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f7df
movzx eax, word [ebp - 0x40]
and eax, 0x80
je 0x40f7a8
push str.Datacenter_Server
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f7df
movzx edx, word [ebp - 0x40]
and edx, 2
je 0x40f7c9
push str.Advanced_Server
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f7df
push str.Server
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f7f7
push str.Future_Windows
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
lea eax, [ebp - 0x144]
push eax
call fcn.00414030
add esp, 4
test eax, eax
jbe 0x40f838
push 0x421ef4
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
lea edx, [ebp - 0x144]
push edx
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
mov ecx, dword [ebp - 0x14c]
push ecx
push 0x421ef8
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x1f8]
push eax
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
cmp dword [ebp - 0x154], 6
jb 0x40f8b4
movzx edx, word [ebp - 0x34]
cmp edx, 9
jne 0x40f896
push str.__64_bit
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f8b4
movzx ecx, word [ebp - 0x34]
test ecx, ecx
jne 0x40f8b4
push str.__32_bit
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
xor eax, eax
jmp 0x40fa09
cmp dword [ebp - 0x148], 2
jne 0x40f8e4
push str.Windows_NT_4.0
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f9e8
cmp dword [ebp - 0x148], 1
jne 0x40f9d2
cmp dword [ebp - 0x154], 4
jne 0x40f9d0
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x204], ecx
cmp dword [ebp - 0x204], 0
je 0x40f92e
cmp dword [ebp - 0x204], 0xa
je 0x40f974
cmp dword [ebp - 0x204], 0x5a
je 0x40f9ba
jmp 0x40f9d0
push str.Windows_95
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
movzx eax, word [ebp - 0x142]
cmp eax, 0x43
je 0x40f95c
movzx ecx, word [ebp - 0x142]
cmp ecx, 0x42
jne 0x40f972
push str.OSR2
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
jmp 0x40f9d0
push str.Windows_98
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
movzx ecx, word [ebp - 0x142]
cmp ecx, 0x41
je 0x40f9a2
movzx edx, word [ebp - 0x142]
cmp edx, 0x42
jne 0x40f9b8
push 0x421f94
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
jmp 0x40f9d0
push str.Windows_Millennium_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415c30
add esp, 0xc
jmp 0x40f9e8
push str.Win32s_n
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00415c30
add esp, 0xc
push 0x18
call fcn.004129f0
add esp, 4
push eax
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00415c30
add esp, 0xc
mov eax, 2
mov ecx, dword [ebp - 0x38]
xor ecx, ebp
call fcn.00413653
mov esp, ebp
pop ebp
ret