Function at 0x4537d4
Capabilities:
Check os version

Disassembly:
push 0x348
mov eax, 0x59f5cd
call fcn.0045f202
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x330]
xor ebx, ebx
mov dword [ebp - 0x354], esi
push 0x118
push ebx
mov dword [ebp - 0x34c], ebx
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x334], 0x11c
call fcn.0056f980
add esp, 0xc
lea eax, [ebp - 0x334]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x5a178c
mov ecx, esi
call fcn.0040f6c0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x348], eax
movzx eax, byte [ebp - 0x21a]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 0x328]
push str.ntdll.dll
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x338], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
test edi, edi
je 0x4538c5
push str.RtlGetNtVersionNumbers
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4538be
lea ecx, [ebp - 0x33c]
push ecx
lea ecx, [ebp - 0x344]
push ecx
lea ecx, [ebp - 0x340]
push ecx
call eax
movzx eax, word [ebp - 0x33c]
mov dword [ebp - 0x33c], eax
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x348]
mov edi, dword [ebp - 0x338]
cmp eax, 5
jne 0x45390f
test edi, edi
je 0x453a01
cmp edi, 1
jne 0x4538f9
push str.WindowsXP
call fcn.0057cf7b
pop ecx
push eax
push str.WindowsXP
jmp 0x4539fa
push str.WindowsServer2003
call fcn.0057cf7b
pop ecx
push eax
push str.WindowsServer2003
jmp 0x4539fa
cmp eax, 6
jne 0x453a01
mov eax, edi
sub eax, 0
je 0x4539cd
sub eax, 1
je 0x4539ba
sub eax, 1
jne 0x453a01
cmp ebx, 0x1ebb
je 0x453950
lea eax, [ebx - 0x1ee6]
cmp eax, 0x25
jbe 0x453950
cmp ebx, 0x1f13
jne 0x453970
mov edi, str.Windows8
push edi
call fcn.0057cf7b
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00411630
mov edi, dword [ebp - 0x338]
jmp 0x453a01
cmp dword [ebp - 0x340], 0xa
jne 0x453995
cmp dword [ebp - 0x344], 0
jne 0x453a01
push str.Windows10
call fcn.0057cf7b
pop ecx
push eax
push str.Windows10
jmp 0x4539fa
cmp dword [ebp - 0x340], 6
jne 0x453a01
cmp dword [ebp - 0x344], 3
jne 0x453a01
push str.Windows8.1
call fcn.0057cf7b
pop ecx
push eax
push str.Windows8.1
jmp 0x4539fa
push str.Windows7
call fcn.0057cf7b
pop ecx
push eax
push str.Windows7
jmp 0x4539fa
cmp dword [ebp - 0x350], 1
jne 0x4539e9
push str.WindowsVista
call fcn.0057cf7b
pop ecx
push eax
push str.WindowsVista
jmp 0x4539fa
push str.WindowsServer2008
call fcn.0057cf7b
pop ecx
push eax
push str.WindowsServer2008
mov ecx, esi
call fcn.00411630
push 0x5a178c
mov ecx, esi
call fcn.0044c065
test al, al
je 0x453a5c
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0056f980
mov eax, dword [ebp - 0x348]
push ebx
push edi
push eax
lea eax, [ebp - 0x218]
push str.Windows_d._d._d
push eax
call fcn.00411a40
lea eax, [ebp - 0x218]
push eax
call fcn.0057cf7b
add esp, 0x24
mov ecx, esi
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00411630
cmp dword [ebp + 0xc], 0
je 0x453a7e
lea eax, [ebp - 0x320]
push eax
call fcn.0057cf7b
pop ecx
push eax
lea eax, [ebp - 0x320]
mov ecx, esi
push eax
call fcn.004114b0
mov eax, esi
call fcn.0045f1bd
ret