Function at 0x42c93c
Capabilities:
Check os version
Get system information on windows

Disassembly:
push 0x174
mov eax, 0x529f8c
call fcn.004e27d2
mov edi, edx
mov esi, ecx
mov dword [ebp - 0x150], esi
xor ebx, ebx
mov dword [ebp - 0x158], ebx
call fcn.0042ecfd
test al, al
je 0x42c97d
push str.Windows_11
mov ecx, esi
mov dword [edi], 0x41300000
call fcn.00409c4d
jmp 0x42cbc6
push 0x560194
lea ecx, [ebp - 0x2c]
call fcn.00409c4d
push str.ntdll.dll
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x150]
push ecx
lea ecx, [ebp - 0x154]
push ecx
call eax
cmp dword [ebp - 0x154], 6
jne 0x42c9dd
cmp dword [ebp - 0x150], 3
jne 0x42c9ff
mov dword [edi], 0x4101999a
mov edi, str.Windows_8.1
jmp 0x42cb93
cmp dword [ebp - 0x154], 0xa
jne 0x42c9ff
cmp dword [ebp - 0x150], 0
jne 0x42c9ff
mov dword [edi], 0x41200000
mov edi, str.Windows_10
jmp 0x42cb93
lea eax, [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemInfo]
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x11c
push eax
call dword [sym.imp.KERNEL32.DLL_GetVersionExW]
test eax, eax
je 0x42cba4
mov eax, dword [ebp - 0x148]
sub eax, 4
je 0x42cb44
sub eax, 1
je 0x42caca
sub eax, 1
je 0x42ca52
mov edi, str.Error
jmp 0x42cb93
mov eax, dword [ebp - 0x144]
sub eax, ebx
je 0x42caaa
sub eax, 1
je 0x42ca8a
sub eax, 1
jne 0x42cba4
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x41000000
jne 0x42ca80
mov edi, str.Windows_8
jmp 0x42cb93
mov edi, str.Windows_Server_2012
jmp 0x42cb93
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x40e00000
jne 0x42caa0
mov edi, str.Windows_7
jmp 0x42cb93
mov edi, str.Windows_Server_2008_R2
jmp 0x42cb93
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x40c00000
jne 0x42cac0
mov edi, str.Windows_Vista
jmp 0x42cb93
mov edi, str.Windows_Server_2008
jmp 0x42cb93
mov eax, dword [ebp - 0x144]
sub eax, ebx
je 0x42cb37
sub eax, 1
je 0x42cb2a
sub eax, 1
jne 0x42cba4
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x40a00000
jne 0x42cb02
cmp word [ebp - 0x180], 9
jne 0x42cb02
mov edi, str.Windows_XP_Professional_x64_Edition
jmp 0x42cb93
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x59
call edi
test eax, eax
jne 0x42cb17
mov edi, str.Windows_Server_2003
jmp 0x42cb93
push 0x59
call edi
test eax, eax
je 0x42cba4
mov edi, str.Windows_Server_2003_R2
jmp 0x42cb93
mov dword [edi], 0x40800000
mov edi, str.Windows_XP
jmp 0x42cb93
mov dword [edi], 0x40400000
mov edi, str.Windows_2000
jmp 0x42cb93
mov eax, dword [ebp - 0x144]
test eax, eax
je 0x42cb72
cmp eax, 0xa
je 0x42cb65
cmp eax, 0x5a
jne 0x42cba4
mov dword [edi], 0x40000000
mov edi, str.Microsoft_Windows_Me
jmp 0x42cb93
mov dword [edi], 0x3f800000
mov edi, str.Windows_98
jmp 0x42cb93
and dword [edi], 0
cmp dword [ebp - 0x13c], 2
jne 0x42cb85
mov edi, str.Windows_NT_4.0
jmp 0x42cb93
cmp dword [ebp - 0x13c], 1
jne 0x42cba4
mov edi, str.Windows_95
push edi
call fcn.00402ce5
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.0040c552
mov dword [esi + 0x14], 0xf
lea eax, [ebp - 0x2c]
mov dword [esi + 0x10], ebx
mov ecx, esi
push eax
mov byte [esi], bl
call fcn.0040c803
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040c02b
mov eax, esi
call fcn.004e277c
ret