Function at 0x10007dcb
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3ec
mov eax, dword [0x10058684]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov dword [ebp - 0x3c4], eax
xor eax, eax
push 0x1fe
push eax
mov word [ebp - 0x204], ax
lea eax, [ebp - 0x202]
push eax
call fcn.10024270
push 9
pop ecx
xor eax, eax
mov esi, 0x11c
push esi
lea edi, [ebp - 0x3ec]
push eax
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3c0]
push eax
call fcn.10024270
add esp, 0x18
lea eax, [ebp - 0x3c0]
push eax
mov dword [ebp - 0x3c0], esi
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x10008295
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push ebx
push str.GetNativeSystemInfo
mov ebx, 0x1004b008
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
test eax, eax
je 0x10007e6e
lea ecx, [ebp - 0x3ec]
push ecx
call eax
jmp 0x10007e7b
lea eax, [ebp - 0x3ec]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x3b0], 2
jne 0x10008292
cmp dword [ebp - 0x3bc], 4
jbe 0x10008292
lea eax, [ebp - 0x204]
push eax
mov edx, str.Microsoft
mov ecx, 0x100
call section..text
cmp dword [ebp - 0x3bc], 6
jne case.0x10007f49.5
cmp dword [ebp - 0x3b8], 0
jne 0x10007ee1
cmp byte [ebp - 0x2a6], 1
lea eax, [ebp - 0x204]
jne 0x10007ed7
push str.Windows_Vista
jmp 0x10007edc
push str.Windows_Server_2008
call fcn.10007767
cmp dword [ebp - 0x3b8], 1
jne 0x10007f0a
cmp byte [ebp - 0x2a6], 1
lea eax, [ebp - 0x204]
jne 0x10007f00
push str.Windows_7
jmp 0x10007f05
push str.Windows_Server_2008_R2
call fcn.10007767
push str.GetProductInfo
push ebx
call esi
push eax
call edi
lea ecx, [ebp - 0x3c8]
push ecx
push 0
push 0
push dword [ebp - 0x3b8]
push dword [ebp - 0x3bc]
call eax
mov eax, dword [ebp - 0x3c8]
cmp eax, 0x19
ja 0x10007fc0
je 0x10007fb9
dec eax
cmp eax, 0x11
ja case.0x10007f49.5
jmp dword [eax*4 + 0x100082a7]
push str.Ultimate_Edition
jmp 0x10007fca
push str.Home_Premium_Edition
jmp 0x10007fca
push str.Home_Basic_Edition
jmp 0x10007fca
push str.Enterprise_Edition
jmp 0x10007fca
push str.Business_Edition
jmp 0x10007fca
push str.Starter_Edition
jmp 0x10007fca
push str.Cluster_Server_Edition
jmp 0x10007fca
push str.Datacenter_Edition
jmp 0x10007fca
push str.Datacenter_Edition__core_installation_
jmp 0x10007fca
push str.Enterprise_Edition__core_installation_
jmp 0x10007fca
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x10007fca
push str.Small_Business_Server
jmp 0x10007fca
push str.Standard_Edition
jmp 0x10007fca
push str.Standard_Edition__core_installation_
jmp 0x10007fca
push str.Web_Server_Edition
jmp 0x10007fca
push str.Small_Business_Server_Premium_Edition
jmp 0x10007fca
cmp eax, 0x30
jne case.0x10007f49.5
push str.Professional
lea eax, [ebp - 0x204]
call fcn.10007767
cmp dword [ebp - 0x3bc], 5
mov esi, 0x400
jne 0x100081bc
cmp dword [ebp - 0x3b8], 2
jne 0x1000811e
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x10008007
push str.Windows_Server_2003_R2_
jmp 0x1000804c
test dword [ebp - 0x2a8], 0x2000
je 0x1000801a
push str.Windows_Storage_Server_2003
jmp 0x1000804c
test dword [ebp - 0x2a8], 0x8000
je 0x1000802d
push str.Windows_Home_Server
jmp 0x1000804c
cmp byte [ebp - 0x2a6], 1
jne 0x10008047
cmp word [ebp - 0x3ec], 9
jne 0x10008047
push str.Windows_XP_Professional_x64_Edition
jmp 0x1000804c
push str.Windows_Server_2003_
lea eax, [ebp - 0x204]
call fcn.10007767
cmp byte [ebp - 0x2a6], 1
je 0x10008111
cmp word [ebp - 0x3ec], 6
jne 0x10008095
test byte [ebp - 0x2a8], 0x80
je 0x10008081
push str.Datacenter_Edition_for_Itanium_based_Systems
jmp 0x10008106
test byte [ebp - 0x2a8], 2
je 0x10008111
push str.Enterprise_Edition_for_Itanium_based_Systems
jmp 0x10008106
cmp word [ebp - 0x3ec], 9
jne 0x100080cc
test byte [ebp - 0x2a8], 0x80
je 0x100080af
push str.Datacenter_x64_Edition
jmp 0x10008106
test byte [ebp - 0x2a8], 2
lea eax, [ebp - 0x204]
je 0x100080c5
push str.Enterprise_x64_Edition
jmp 0x1000810c
push str.Standard_x64_Edition
jmp 0x1000810c
mov eax, dword [ebp - 0x2a8]
test eax, 0x4000
je 0x100080e0
push str.Compute_Cluster_Edition
jmp 0x10008106
test al, al
jns 0x100080eb
push str.Datacenter_Edition
jmp 0x10008106
test al, 2
je 0x100080f6
push str.Enterprise_Edition
jmp 0x10008106
test esi, eax
je 0x10008101
push str.Web_Edition
jmp 0x10008106
push str.Standard_Edition
lea eax, [ebp - 0x204]
call fcn.10007767
cmp dword [ebp - 0x3bc], 5
jne 0x100081bc
cmp dword [ebp - 0x3b8], 1
jne 0x10008163
push str.Windows_XP
lea eax, [ebp - 0x204]
call fcn.10007767
test dword [ebp - 0x2a8], 0x200
lea eax, [ebp - 0x204]
je 0x10008150
push str.Home_Edition
jmp 0x10008155
push str.Professional
call fcn.10007767
cmp dword [ebp - 0x3bc], 5
jne 0x100081bc
cmp dword [ebp - 0x3b8], 0
jne 0x100081bc
push str.Windows_2000
lea eax, [ebp - 0x204]
call fcn.10007767
cmp byte [ebp - 0x2a6], 1
jne 0x1000818c
push str.Professional
jmp 0x100081b1
test byte [ebp - 0x2a8], 0x80
je 0x1000819c
push str.Datacenter_Server
jmp 0x100081b1
test byte [ebp - 0x2a8], 2
je 0x100081ac
push str.Advanced_Server
jmp 0x100081b1
push str.Server
lea eax, [ebp - 0x204]
call fcn.10007767
lea eax, [ebp - 0x3ac]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100081c5
sub eax, edx
sar eax, 1
je 0x100081f8
push 0x1004c064
lea eax, [ebp - 0x204]
call fcn.10007767
lea eax, [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x204]
call fcn.10007767
push dword [ebp - 0x3b4]
lea edi, [ebp - 0x2a4]
push 0x1004c068
push 0x50
pop ecx
call fcn.10001064
pop ecx
pop ecx
mov eax, edi
push eax
lea eax, [ebp - 0x204]
call fcn.10007767
cmp dword [ebp - 0x3bc], 6
jb 0x10008255
cmp word [ebp - 0x3ec], 9
jne 0x1000823b
push str.__64_bit
jmp 0x1000824a
cmp word [ebp - 0x3ec], 0
jne 0x10008255
push str.__32_bit
lea eax, [ebp - 0x204]
call fcn.10007767
cmp dword [ebp - 0x3c4], 0
je 0x10008292
lea eax, [ebp - 0x204]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10008267
sub eax, edx
sar eax, 1
cmp eax, esi
ja 0x10008292
push dword [ebp - 0x3c4]
lea edx, [ebp - 0x204]
mov ecx, esi
call section..text
xor eax, eax
inc eax
jmp 0x10008294
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1001d73b
leave
ret 4