Function at 0x42c339
Capabilities:
Check os version
Get system information on windows

Disassembly:
push 0x174
mov eax, 0x52b831
call fcn.004e41bf
mov edi, edx
mov esi, ecx
mov dword [ebp - 0x150], esi
xor ebx, ebx
mov dword [ebp - 0x158], ebx
call fcn.0042e6ed
test al, al
je 0x42c37a
push str.Windows_11
mov ecx, esi
mov dword [edi], 0x41300000
call fcn.00409c00
jmp 0x42c5c3
push 0x56204c
lea ecx, [ebp - 0x2c]
call fcn.00409c00
push str.ntdll.dll
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.DLL_LoadLibraryW]
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x150]
push ecx
lea ecx, [ebp - 0x154]
push ecx
call eax
cmp dword [ebp - 0x154], 6
jne 0x42c3da
cmp dword [ebp - 0x150], 3
jne 0x42c3fc
mov dword [edi], 0x4101999a
mov edi, str.Windows_8.1
jmp 0x42c590
cmp dword [ebp - 0x154], 0xa
jne 0x42c3fc
cmp dword [ebp - 0x150], 0
jne 0x42c3fc
mov dword [edi], 0x41200000
mov edi, str.Windows_10
jmp 0x42c590
lea eax, [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemInfo]
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x11c
push eax
call dword [sym.imp.KERNEL32.DLL_GetVersionExW]
test eax, eax
je 0x42c5a1
mov eax, dword [ebp - 0x148]
sub eax, 4
je 0x42c541
sub eax, 1
je 0x42c4c7
sub eax, 1
je 0x42c44f
mov edi, str.Error
jmp 0x42c590
mov eax, dword [ebp - 0x144]
sub eax, ebx
je 0x42c4a7
sub eax, 1
je 0x42c487
sub eax, 1
jne 0x42c5a1
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x41000000
jne 0x42c47d
mov edi, str.Windows_8
jmp 0x42c590
mov edi, str.Windows_Server_2012
jmp 0x42c590
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x40e00000
jne 0x42c49d
mov edi, str.Windows_7
jmp 0x42c590
mov edi, str.Windows_Server_2008_R2
jmp 0x42c590
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x40c00000
jne 0x42c4bd
mov edi, str.Windows_Vista
jmp 0x42c590
mov edi, str.Windows_Server_2008
jmp 0x42c590
mov eax, dword [ebp - 0x144]
sub eax, ebx
je 0x42c534
sub eax, 1
je 0x42c527
sub eax, 1
jne 0x42c5a1
cmp byte [ebp - 0x32], 1
mov dword [edi], 0x40a00000
jne 0x42c4ff
cmp word [ebp - 0x180], 9
jne 0x42c4ff
mov edi, str.Windows_XP_Professional_x64_Edition
jmp 0x42c590
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x59
call edi
test eax, eax
jne 0x42c514
mov edi, str.Windows_Server_2003
jmp 0x42c590
push 0x59
call edi
test eax, eax
je 0x42c5a1
mov edi, str.Windows_Server_2003_R2
jmp 0x42c590
mov dword [edi], 0x40800000
mov edi, str.Windows_XP
jmp 0x42c590
mov dword [edi], 0x40400000
mov edi, str.Windows_2000
jmp 0x42c590
mov eax, dword [ebp - 0x144]
test eax, eax
je 0x42c56f
cmp eax, 0xa
je 0x42c562
cmp eax, 0x5a
jne 0x42c5a1
mov dword [edi], 0x40000000
mov edi, str.Microsoft_Windows_Me
jmp 0x42c590
mov dword [edi], 0x3f800000
mov edi, str.Windows_98
jmp 0x42c590
and dword [edi], 0
cmp dword [ebp - 0x13c], 2
jne 0x42c582
mov edi, str.Windows_NT_4.0
jmp 0x42c590
cmp dword [ebp - 0x13c], 1
jne 0x42c5a1
mov edi, str.Windows_95
push edi
call fcn.00402c84
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.0040c4f2
mov dword [esi + 0x14], 0xf
lea eax, [ebp - 0x2c]
mov dword [esi + 0x10], ebx
mov ecx, esi
push eax
mov byte [esi], bl
call fcn.0040c7a3
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040bfcb
mov eax, esi
call fcn.004e4169
ret