Function at 0x408b02
Capabilities:
Get system information on windows

Disassembly:
push ebp
push ebx
mov edx, 0x54
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x408b09
mov eax, dword [esp + 0x15c]
mov dword [0x46bdcc], eax
lea ebp, [esp]
mov dword [ebp], 0x11c
push str.ntdll.dll
push 0xffffffff
call fcn.00427766
mov dword [esp + 0x140], eax
cmp dword [esp + 0x140], 0
je 0x408e10
push str.RtlGetVersion
push dword [esp + 0x144]
call fcn.004279d1
mov dword [esp + 0x144], eax
cmp dword [esp + 0x144], 0
je 0x408b82
lea eax, [esp]
push eax
push dword [esp + 0x148]
call fcn.00427a32
push dword [esp + 0x140]
call fcn.00427698
lea eax, [esp + 0x11c]
push eax
call sub.KERNEL32.dll_GetSystemInfo
mov eax, dword [0x46bdcc]
push eax
push eax
lea ebp, [esp + 8]
mov eax, dword [ebp + 4]
cdq
push edx
push eax
call fcn.004291b0
mov edx, 0x4392b8
call fcn.00429950
mov eax, dword [0x46bdcc]
push eax
push eax
mov eax, dword [ebp + 8]
cdq
push edx
push eax
call fcn.004291b0
pop eax
lea eax, [esp + 0x14c]
push eax
call fcn.004299b0
push dword [esp + 0x148]
mov edx, 0x439fb0
mov ecx, dword [esp]
call fcn.00429a30
je 0x408c07
mov edx, 0x439b30
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, 0x439fc8
mov ecx, dword [esp]
call fcn.00429a30
je 0x408c2c
mov edx, 0x43a5c4
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, 0x439fd0
mov ecx, dword [esp]
call fcn.00429a30
je 0x408c92
lea ebp, [esp + 4]
movsx ebx, byte [ebp + 0x11a]
cmp ebx, 1
jne 0x408c63
lea ebp, [esp + 0x120]
lea eax, [ebp]
mov ebx, eax
cmp ebx, 9
jne 0x408c63
mov eax, 1
jmp 0x408c65
xor eax, eax
and eax, eax
je 0x408c7c
mov edx, 0x43a5c4
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408c8d
mov edx, 0x4393ca
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, 0x439a2e
mov ecx, dword [esp]
call fcn.00429a30
je 0x408cda
lea ebp, [esp + 4]
movsx ebx, byte [ebp + 0x11a]
cmp ebx, 1
jne 0x408cc4
mov edx, 0x43988e
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408cd5
mov edx, 0x439464
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, 0x439a36
mov ecx, dword [esp]
call fcn.00429a30
je 0x408d22
lea ebp, [esp + 4]
movsx ebx, byte [ebp + 0x11a]
cmp ebx, 1
jne 0x408d0c
mov edx, 0x439e48
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408d1d
mov edx, 0x439464
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, 0x439a3e
mov ecx, dword [esp]
call fcn.00429a30
je 0x408d6a
lea ebp, [esp + 4]
movsx ebx, byte [ebp + 0x11a]
cmp ebx, 1
jne 0x408d54
mov edx, str.Windows_8
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408d65
mov edx, str.Windows_Server_2012
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, 0x439a46
mov ecx, dword [esp]
call fcn.00429a30
je 0x408daf
lea ebp, [esp + 4]
movsx ebx, byte [ebp + 0x11a]
cmp ebx, 1
jne 0x408d9c
mov edx, str.Windows_8
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408dad
mov edx, str.Windows_Server_2012
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, 0x4393c0
mov ecx, dword [esp]
call fcn.00429a30
je 0x408df2
lea ebp, [esp + 4]
movsx ebx, byte [ebp + 0x11a]
cmp ebx, 1
jne 0x408de1
mov edx, str.Windows_10
lea ecx, [esp + 0x150]
call fcn.0040a008
jmp 0x408df2
mov edx, str.Windows_Server_2016
lea ecx, [esp + 0x150]
call fcn.0040a008
pop eax
mov edx, dword [esp + 0x14c]
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
jmp 0x408e39
mov edx, 0x43a3c2
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
jmp 0x408e39
push dword [esp + 0x148]
call fcn.00429a70
push dword [esp + 0x14c]
call fcn.00429a70
add esp, 0x150
pop ebx
pop ebp
ret