Function at 0x6862d0
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov dword [ebp - 0x30], ecx
push 0x24
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.005a7100
add esp, 0xc
push 0x11c
push 0
mov ecx, dword [ebp - 0x30]
add ecx, 0x24
push ecx
call fcn.005a7100
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov dword [edx + 0x24], 0x11c
mov eax, dword [ebp - 0x30]
add eax, 0x24
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x686324
jmp 0x686661
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x68634d
lea ecx, [ebp - 0x2c]
push ecx
call dword [ebp - 4]
jmp 0x686357
lea edx, [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x34], 2
jne 0x68659b
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + 0x28], 4
jbe 0x68659b
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x28], 6
jne 0x6863d3
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x2c], 1
jne 0x6863d3
mov ecx, dword [ebp - 0x30]
movzx edx, byte [ecx + 0x13e]
cmp edx, 1
jne 0x6863b1
push str.Windows_7
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov eax, dword [ebp - 0x30]
mov dword [eax + 4], 0xd
jmp 0x6863ce
push str.Windows_Server_2008_R2
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 0xe
jmp 0x686596
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x28], 6
jne 0x686435
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x2c], 0
jne 0x686435
mov ecx, dword [ebp - 0x30]
movzx edx, byte [ecx + 0x13e]
cmp edx, 1
jne 0x686413
push str.Windows_Vista
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov eax, dword [ebp - 0x30]
mov dword [eax + 4], 0xc
jmp 0x686430
push str.Windows_Server_2008
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 0xf
jmp 0x686596
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x28], 5
jne 0x686536
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x2c], 2
jne 0x686536
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x68647d
push str.Windows_Server_2003_R2
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 0xa
jmp 0x686534
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 0x13c]
cmp eax, 0x2000
jne 0x6864b0
push str.Windows_Storage_Server_2003
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 9
jmp 0x686534
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 0x13c]
cmp eax, 0x8000
jne 0x6864e0
push str.Windows_Home_Server
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 0xb
jmp 0x686534
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx + 0x13e]
cmp eax, 1
jne 0x686517
movzx ecx, word [ebp - 0x2c]
cmp ecx, 9
jne 0x686517
push str.Windows_XP_Professional_x64_Edition
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov edx, dword [ebp - 0x30]
mov dword [edx + 4], 8
jmp 0x686534
push str.Windows_Server_2003
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov eax, dword [ebp - 0x30]
mov dword [eax + 4], 9
jmp 0x686596
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + 0x28], 5
jne 0x686567
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x2c], 1
jne 0x686567
push str.Windows_XP
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov eax, dword [ebp - 0x30]
mov dword [eax + 4], 7
jmp 0x686596
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + 0x28], 5
jne 0x686596
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x2c], 0
jne 0x686596
push str.Windows_2000
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov eax, dword [ebp - 0x30]
mov dword [eax + 4], 6
jmp 0x686661
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + 0x34], 1
jne 0x68663b
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x28], 4
jne 0x6865d9
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x2c], 0
jne 0x6865d9
push str.Microsoft_Windows_95
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 0
jmp 0x686639
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x28], 4
jne 0x68660a
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x2c], 0xa
jne 0x68660a
push str.Microsoft_Windows_98
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 1
jmp 0x686639
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x28], 4
jne 0x686639
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x2c], 0x5a
jne 0x686639
push str.Microsoft_Windows_Millennium_Edition
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 4], 2
jmp 0x686661
mov edx, dword [ebp - 0x30]
cmp dword [edx + 0x34], 0
jne 0x686661
push str.Microsoft_Win32s
mov ecx, dword [ebp - 0x30]
add ecx, 0x140
call fcn.00405460
mov eax, dword [ebp - 0x30]
mov dword [eax + 4], 3
mov esp, ebp
pop ebp
ret