Function at 0x4241f0
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xdc
mov eax, dword [0x43735c]
mov ecx, dword [ebp + 0x10]
xor eax, ebp
push ebx
mov dword [esp + 0xdc], eax
mov eax, dword [ebp + 8]
test eax, eax
push esi
push edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], ecx
je 0x4244d6
mov edx, dword [ebp + 0xc]
test edx, edx
jbe 0x4244d6
test ecx, ecx
je 0x4244d6
mov ecx, dword [ebp + 0x14]
test ecx, ecx
jbe 0x4244d6
push 0x18
push str.Unknown_Windows_version
push edx
push eax
call fcn.00422b40
xor eax, eax
mov ecx, 0x27
lea edi, [esp + 0x50]
rep stosd dword es:[edi], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
add esp, 0x10
lea ecx, [esp + 0x1c]
mov dword [esp + 0x38], eax
push ecx
mov dword [esp + 0x44], 0x9c
mov dword [esp + 0x40], eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [esp + 0x40]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x4244d6
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x50]
and esi, 0xffff
push esi
push ebx
push eax
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
push str._u._u._u
push eax
push ecx
call fcn.00422b10
mov ecx, 1
add esp, 0x18
cmp edi, ecx
jne 0x4243c0
cmp dword [esp + 0x14], 4
jne 0x4244d6
cmp ebx, 0xa
jae 0x42434c
cmp esi, 0x3b6
jne 0x424316
mov edx, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push 0xb
push str.Windows_95
push edx
push eax
jmp 0x4244ce
jbe 0x42432c
cmp esi, 0x438
ja 0x424334
push 0xf
push str.Windows_95_SP1
jmp 0x4244c5
cmp esi, 0x438
jbe 0x424349
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x10]
push 0x10
push str.Windows_95_OSR2
push eax
push ecx
jmp 0x4244ce
cmp ebx, 0xa
jne 0x4243a2
cmp esi, 0x7ce
jne 0x42436b
mov edx, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push 0xb
push str.Windows_98
push edx
push eax
jmp 0x4244ce
jbe 0x424381
cmp esi, 0x887
jae 0x42438d
push 0xf
push str.Windows_98_SP1
jmp 0x4244c5
cmp esi, 0x887
jb 0x4244d6
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x10]
push 0xe
push str.Windows_98_SE
push eax
push ecx
jmp 0x4244ce
cmp ebx, 0x5a
jne 0x4244d6
mov edx, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push 0xb
push str.Windows_ME
push edx
push eax
jmp 0x4244ce
cmp edi, 2
jne 0x4244b9
mov eax, dword [esp + 0x14]
cmp eax, 3
jne 0x4243e7
cmp ebx, 0x33
jne 0x4244d6
push 0x10
push str.Windows_NT_3.51
jmp 0x4244c5
cmp eax, 4
jne 0x424409
test ebx, ebx
jne 0x4244d6
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x10]
push 0xd
push str.Windows_NT_4
push eax
push ecx
jmp 0x4244ce
cmp eax, 5
jne 0x424483
test ebx, ebx
jne 0x42443c
cmp byte [esp + 0xda], cl
jne 0x424430
mov edx, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push 0x1a
push str.Windows_2000_Professional
push edx
push eax
jmp 0x4244ce
push 0x14
push str.Windows_2000_Server
jmp 0x4244c5
cmp ebx, ecx
jne 0x424452
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x10]
push 0xb
push str.Windows_XP
push eax
push ecx
jmp 0x4244ce
cmp ebx, 2
jne 0x4244d6
cmp byte [esp + 0xda], cl
jne 0x42447a
cmp word [esp + 0x1c], 9
jne 0x42447a
mov edx, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push 0x10
push str.Windows_XP_x64_
push edx
push eax
jmp 0x4244ce
push 0x14
push str.Windows_Server_2003
jmp 0x4244c5
cmp eax, 6
jne 0x4244d6
test ebx, ebx
jne 0x4244d6
cmp byte [esp + 0xda], cl
jne 0x4244a7
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x10]
push 0xe
push str.Windows_Vista
push eax
push ecx
jmp 0x4244ce
mov edx, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push 0x14
push str.Windows_Server_2008
push edx
push eax
jmp 0x4244ce
cmp edi, 3
jne 0x4244d6
push 0xb
push str.Windows_CE
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x18]
push ecx
push edx
call fcn.00422b40
add esp, 0x10
mov ecx, dword [esp + 0xe4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00415465
mov esp, ebp
pop ebp
ret