Function at 0x1001c6e0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061e88
mov eax, dword fs:[0]
push eax
sub esp, 0x16c
mov eax, dword [0x1007f070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x50], eax
push 0x118
lea eax, [ebp - 0x174]
mov dword [ebp - 0x5c], 0
push 0
push eax
call fcn.1003b430
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [0x100836a0]
mov dword [ebp - 0x54], eax
test eax, eax
je 0x1001c750
mov esi, dword [0x1008369c]
jmp 0x1001c799
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push eax
push 0x64
push 0
call dword [sym.imp.NETAPI32.dll_NetWkstaGetInfo]
test eax, eax
jne 0x1001c78a
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [eax + 0xc]
mov esi, dword [eax + 0x10]
mov dword [ebp - 0x54], ecx
mov dword [0x100836a0], ecx
mov dword [0x1008369c], esi
call dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
jmp 0x1001c799
mov eax, dword [ebp - 0x174]
mov esi, dword [ebp - 0x170]
mov dword [ebp - 0x54], eax
call fcn.1001af40
push 0x10
push str.Windows_unknown_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov bl, al
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.1000e0a0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x54]
add eax, 0xfffffffc
cmp eax, 6
ja case.default.0x1001c8af
jmp dword [eax*4 + 0x1001c978]
test esi, esi
je 0x1001c804
cmp esi, 0xa
je 0x1001c7fa
cmp esi, 0x5a
jne case.default.0x1001c8af
push str.Windows_Me
jmp 0x1001c91a
push str.Windows_98
jmp 0x1001c91a
mov eax, dword [ebp - 0x168]
cmp eax, 2
jne 0x1001c819
push str.Windows_NT_4.0
jmp 0x1001c91a
cmp eax, 1
jne case.default.0x1001c8af
push str.Windows_95
jmp 0x1001c91a
mov eax, esi
sub eax, 0
je 0x1001c8a3
sub eax, 1
je 0x1001c89c
sub eax, 1
jne case.default.0x1001c8af
cmp byte [ebp - 0x5e], 1
jne 0x1001c85c
mov eax, 9
cmp ax, word [ebp - 0x4c]
jne 0x1001c85c
push str.Windows_XP_Professional_x64_Edition
jmp 0x1001c91a
test dword [ebp - 0x60], 0x8000
je 0x1001c86f
push str.Windows_Home_Server
jmp 0x1001c91a
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x1001c885
push str.Windows_Server_2003
jmp 0x1001c91a
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je case.default.0x1001c8af
push str.Windows_Server_2003_R2
jmp 0x1001c91a
push str.Windows_XP
jmp 0x1001c91a
push str.Windows_2000
jmp 0x1001c91a
cmp esi, 3
ja case.default.0x1001c8af
jmp dword [esi*4 + 0x1001c994]
lea ecx, [ebp - 0x28]
test bl, bl
je 0x1001c8c4
push str.Windows_Server_2008
jmp 0x1001c91d
push str.Windows_Vista
jmp 0x1001c91d
lea ecx, [ebp - 0x28]
test bl, bl
je 0x1001c8d9
push str.Windows_Server_2008_R2
jmp 0x1001c91d
push str.Windows_7
jmp 0x1001c91d
lea ecx, [ebp - 0x28]
test bl, bl
je 0x1001c8ee
push str.Windows_Server_2012
jmp 0x1001c91d
push str.Windows_8
jmp 0x1001c91d
lea ecx, [ebp - 0x28]
test bl, bl
je 0x1001c903
push str.Windows_Server_2012_R2
jmp 0x1001c91d
push str.Windows_8.1
jmp 0x1001c91d
test bl, bl
je 0x1001c915
push str.Windows_Server_2016
jmp 0x1001c91a
push str.Windows_10
lea ecx, [ebp - 0x28]
call fcn.1000aab0
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push esi
push dword [ebp - 0x54]
cmovae eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x58]
push eax
push str._s__d._d_
push esi
call fcn.1001b7f0
mov ecx, dword [ebp - 0x14]
add esp, 0x14
cmp ecx, 0x10
jb 0x1001c958
inc ecx
push ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x28]
call fcn.1000e830
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10037fa1
mov esp, ebp
pop ebp
ret