Function at 0x42241b
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
push 0x24
push 0
lea eax, [ebp - 0xd0]
push eax
call fcn.00493430
add esp, 0xc
push 0x9c
push 0
lea ecx, [ebp - 0xa4]
push ecx
call fcn.00493430
add esp, 0xc
mov dword [ebp - 0xa4], 0x9c
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jne 0x42247d
mov eax, 1
jmp 0x422bb2
push str.GetNativeSystemInfo
push 0x524930
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x4224b2
lea eax, [ebp - 0xd0]
push eax
call dword [ebp - 0xa8]
jmp 0x4224bf
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x94], 2
jne 0x422b9a
cmp dword [ebp - 0xa0], 4
jbe 0x422b9a
push str.Microsoft
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c20
cmp dword [ebp - 0xa0], 6
jne case.0x4225d3.4
cmp dword [ebp - 0x9c], 0
jne 0x422537
mov eax, dword [ebp - 0xa]
and eax, 0xff
cmp eax, 1
jne 0x422524
push str.Windows_Vista__Ver_6.0_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x422537
push str.Windows_Server_2008__Ver_6.0_
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
cmp dword [ebp - 0x9c], 1
jne 0x422575
mov eax, dword [ebp - 0xa]
and eax, 0xff
cmp eax, 1
jne 0x422562
push str.Windows_7__Ver_6.1_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x422575
push str.Windows_Server_2008_R2__Ver_6.1_
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
push str.GetProductInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 8], eax
lea eax, [ebp - 4]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x9c]
push ecx
mov edx, dword [ebp - 0xa0]
push edx
call dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
sub ecx, 1
mov dword [ebp - 0x124], ecx
cmp dword [ebp - 0x124], 0x18
ja case.0x4225d3.4
mov edx, dword [ebp - 0x124]
jmp dword [edx*4 + 0x422bb6]
push str.Ultimate_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp case.0x4225d3.4
push str.Home_Premium_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp case.0x4225d3.4
push str.Home_Basic_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp case.0x4225d3.4
push 0x524a24
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp case.0x4225d3.4
push str.Business_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp case.0x4225d3.4
push str.Starter_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp case.0x4225d3.4
push str.Cluster_Server_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp case.0x4225d3.4
push 0x524a74
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp case.0x4225d3.4
push str.Datacenter_Edition__core_installation_
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp case.0x4225d3.4
push 0x524ab0
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp case.0x4225d3.4
push str.Enterprise_Edition__core_installation_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp case.0x4225d3.4
push 0x524aec
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp case.0x4225d3.4
push str.Small_Business_Server
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp case.0x4225d3.4
push str.Small_Business_Server_Premium_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp case.0x4225d3.4
push 0x524b5c
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp case.0x4225d3.4
push str.Standard_Edition__core_installation_
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp case.0x4225d3.4
push str.Web_Server_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
cmp dword [ebp - 0xa0], 5
jne 0x4229c1
cmp dword [ebp - 0x9c], 2
jne 0x4229c1
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x422799
push str.Windows_Server_2003_R2__Ver_5.2__
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp 0x42282a
mov eax, dword [ebp - 0xc]
and eax, 0xffff
cmp eax, 0x2000
jne 0x4227bd
push str.Windows_Storage_Server_2003__Ver_5.2_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x42282a
mov edx, dword [ebp - 0xc]
and edx, 0xffff
cmp edx, 0x8000
jne 0x4227e3
push str.Windows_Home_Server__Ver_5.2_
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp 0x42282a
mov ecx, dword [ebp - 0xa]
and ecx, 0xff
cmp ecx, 1
jne 0x422817
mov edx, dword [ebp - 0xd0]
and edx, 0xffff
cmp edx, 9
jne 0x422817
push str.Windows_XP_Professional_x64_Edition__Ver_5.2_
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp 0x42282a
push str.Windows_Server_2003_
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
mov edx, dword [ebp - 0xa]
and edx, 0xff
cmp edx, 1
je 0x4229c1
mov eax, dword [ebp - 0xd0]
and eax, 0xffff
cmp eax, 6
jne 0x42289b
mov ecx, dword [ebp - 0xc]
and ecx, 0xffff
and ecx, 0x80
test ecx, ecx
je 0x422874
push str.Datacenter_Edition_for_Itanium_based_Systems
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp 0x422896
mov eax, dword [ebp - 0xc]
and eax, 0xffff
and eax, 2
test eax, eax
je 0x422896
push str.Enterprise_Edition_for_Itanium_based_Systems
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x4229c1
mov edx, dword [ebp - 0xd0]
and edx, 0xffff
cmp edx, 9
jne 0x42290f
mov eax, dword [ebp - 0xc]
and eax, 0xffff
and eax, 0x80
test eax, eax
je 0x4228d2
push str.Datacenter_x64_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x42290a
mov edx, dword [ebp - 0xc]
and edx, 0xffff
and edx, 2
test edx, edx
je 0x4228f7
push str.Enterprise_x64_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp 0x42290a
push str.Standard_x64_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x4229c1
mov edx, dword [ebp - 0xc]
and edx, 0xffff
and edx, 0x4000
test edx, edx
je 0x42293a
push str.Compute_Cluster_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp 0x4229c1
mov ecx, dword [ebp - 0xc]
and ecx, 0xffff
and ecx, 0x80
test ecx, ecx
je 0x422962
push str.Datacenter_Edition
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp 0x4229c1
mov eax, dword [ebp - 0xc]
and eax, 0xffff
and eax, 2
test eax, eax
je 0x422986
push str.Enterprise_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x4229c1
mov edx, dword [ebp - 0xc]
and edx, 0xffff
and edx, 0x400
test edx, edx
je 0x4229ae
push str.Web_Edition
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp 0x4229c1
push str.Standard_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
cmp dword [ebp - 0xa0], 5
jne 0x422a1f
cmp dword [ebp - 0x9c], 1
jne 0x422a1f
push str.Windows_XP__Ver_5.1_
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
mov eax, dword [ebp - 0xc]
and eax, 0xffff
and eax, 0x200
test eax, eax
je 0x422a0c
push str.Home_Edition
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x422a1f
push 0x524d90
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
cmp dword [ebp - 0xa0], 5
jne 0x422acd
cmp dword [ebp - 0x9c], 0
jne 0x422acd
push str.Windows_2000__Ver_5.0_
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
mov ecx, dword [ebp - 0xa]
and ecx, 0xff
cmp ecx, 1
jne 0x422a6f
push str.Professional
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp 0x422acd
mov eax, dword [ebp - 0xc]
and eax, 0xffff
and eax, 0x80
test eax, eax
je 0x422a95
push str.Datacenter_Server
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
jmp 0x422acd
mov edx, dword [ebp - 0xc]
and edx, 0xffff
and edx, 2
test edx, edx
je 0x422aba
push str.Advanced_Server
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
jmp 0x422acd
push 0x524dec
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
lea edx, [ebp - 0x90]
push edx
call fcn.00493490
add esp, 4
test eax, eax
jbe 0x422b08
push 0x524df4
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
lea ecx, [ebp - 0x90]
push ecx
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
mov eax, dword [ebp - 0x98]
push eax
push str.__build__d_
push 0x50
lea ecx, [ebp - 0x120]
push ecx
call fcn.00422ca0
add esp, 0x10
lea edx, [ebp - 0x120]
push edx
push 0x100
mov eax, dword [ebp + 8]
push eax
call fcn.00422c60
cmp dword [ebp - 0xa0], 6
jb 0x422b8b
mov ecx, dword [ebp - 0xd0]
and ecx, 0xffff
cmp ecx, 9
jne 0x422b69
push str.__64_bit
push 0x100
mov edx, dword [ebp + 8]
push edx
call fcn.00422c60
jmp 0x422b8b
mov eax, dword [ebp - 0xd0]
and eax, 0xffff
test eax, eax
jne 0x422b8b
push str.__32_bit
push 0x100
mov ecx, dword [ebp + 8]
push ecx
call fcn.00422c60
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 4]
mov dword [edx], eax
mov eax, 1
jmp 0x422bb2
mov ecx, dword [ebp + 0xc]
mov dword [ecx], 0
push str.This_sample_does_not_support_this_version_of_Windows._n
call fcn.0049350b
add esp, 4
xor eax, eax
mov esp, ebp
pop ebp
ret