Function at 0x43ab02
Capabilities:
Check os version

Disassembly:
push 0x348
mov eax, 0x743c03
call fcn.005f004f
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x330]
xor ebx, ebx
mov dword [ebp - 0x354], esi
push 0x118
push ebx
mov dword [ebp - 0x34c], ebx
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x334], 0x11c
call fcn.005c1f30
add esp, 0xc
lea eax, [ebp - 0x334]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x75b41c
mov ecx, esi
call fcn.00409440
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x348], eax
movzx eax, byte [ebp - 0x21a]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 4], ebx
mov ebx, dword [ebp - 0x328]
push 0x75cb74
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x338], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
test edi, edi
je 0x43abf3
push str.RtlGetNtVersionNumbers
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x43abec
lea ecx, [ebp - 0x33c]
push ecx
lea ecx, [ebp - 0x344]
push ecx
lea ecx, [ebp - 0x340]
push ecx
call eax
movzx eax, word [ebp - 0x33c]
mov dword [ebp - 0x33c], eax
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x348]
mov edi, dword [ebp - 0x338]
cmp eax, 5
jne 0x43ac3d
test edi, edi
je 0x43ad52
cmp edi, 1
jne 0x43ac27
push str.WindowsXP
call fcn.005c5a2e
pop ecx
push eax
push str.WindowsXP
jmp 0x43ad4b
push str.WindowsServer2003
call fcn.005c5a2e
pop ecx
push eax
push str.WindowsServer2003
jmp 0x43ad4b
cmp eax, 6
jne 0x43ad52
mov eax, edi
sub eax, 0
je 0x43ad1e
sub eax, 1
je 0x43ad0b
sub eax, 1
jne 0x43ad52
cmp ebx, 0x1ebb
je 0x43ac7e
lea eax, [ebx - 0x1ee6]
cmp eax, 0x25
jbe 0x43ac7e
cmp ebx, 0x1f13
jne 0x43ac9e
mov edi, str.Windows8
push edi
call fcn.005c5a2e
pop ecx
push eax
push edi
mov ecx, esi
call fcn.0040a2c0
mov edi, dword [ebp - 0x338]
jmp 0x43ad52
cmp dword [ebp - 0x340], 0xa
jne 0x43ace6
cmp dword [ebp - 0x344], 0
jne 0x43ad52
cmp dword [ebp - 0x33c], 0x4e20
jae 0x43acd3
push str.Windows10
call fcn.005c5a2e
pop ecx
push eax
push str.Windows10
jmp 0x43ad4b
push str.Windows11
call fcn.005c5a2e
pop ecx
push eax
push str.Windows11
jmp 0x43ad4b
cmp dword [ebp - 0x340], 6
jne 0x43ad52
cmp dword [ebp - 0x344], 3
jne 0x43ad52
push str.Windows8.1
call fcn.005c5a2e
pop ecx
push eax
push str.Windows8.1
jmp 0x43ad4b
push str.Windows7
call fcn.005c5a2e
pop ecx
push eax
push str.Windows7
jmp 0x43ad4b
cmp dword [ebp - 0x350], 1
jne 0x43ad3a
push str.WindowsVista
call fcn.005c5a2e
pop ecx
push eax
push str.WindowsVista
jmp 0x43ad4b
push str.WindowsServer2008
call fcn.005c5a2e
pop ecx
push eax
push str.WindowsServer2008
mov ecx, esi
call fcn.0040a2c0
push 0x75b41c
mov ecx, esi
call fcn.00418390
test al, al
je 0x43adad
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.005c1f30
mov eax, dword [ebp - 0x348]
push ebx
push edi
push eax
lea eax, [ebp - 0x218]
push str.Windows_d._d._d
push eax
call fcn.0040d2b0
lea eax, [ebp - 0x218]
push eax
call fcn.005c5a2e
add esp, 0x24
mov ecx, esi
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0040a2c0
cmp dword [ebp + 0xc], 0
je 0x43adcf
lea eax, [ebp - 0x320]
push eax
call fcn.005c5a2e
pop ecx
push eax
lea eax, [ebp - 0x320]
mov ecx, esi
push eax
call fcn.0040d810
mov eax, esi
call fcn.005f000a
ret