Function at 0x504e60
Capabilities:
Check os version

Disassembly:
sub esp, 0x1a4
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0x19c], eax
push esi
push edi
push 0x118
lea eax, [esp + 0x10]
push 0
push eax
call fcn.005861b0
add esp, 0xc
mov dword [esp + 8], 0x11c
lea eax, [esp + 8]
push eax
call dword [sym.imp.ntdll.dll_RtlGetVersion]
nop dword [eax]
test eax, eax
jns 0x504eb3
mov dword [0x62db64], 0
jmp 0x5053e7
mov eax, dword [esp + 0xc]
mov ecx, 0x2e
push 0
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x14]
push 0x50
mov dword [esp + 0x170], eax
mov eax, dword [esp + 0x1c]
push str.0.0.0
mov dword [esp + 0x1a4], eax
lea eax, [esp + 0x134]
push 5
push eax
mov dword [esp + 0x13c], 8
mov dword [esp + 0x154], 0
mov word [esp + 0x164], cx
mov dword [esp + 0x16c], 8
mov dword [esp + 0x184], 0
mov word [esp + 0x194], cx
mov dword [esp + 0x19c], 8
call sym.SystemInformer.exe_Ordinal_1380
mov eax, dword [esp + 0x10]
lea esi, [esp + 8]
mov ecx, 0x47
mov edi, 0x633a78
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0xc]
cmp ecx, 6
jne 0x504f62
cmp eax, 1
jb 0x504ea4
nop
jmp 0x504f6e
jb 0x504ea4
jne 0x505004
cmp eax, 1
jne 0x504f9e
mov dword [0x62db64], 0x3d
mov dword [0x62dbb8], 0x6143c4
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
nop
cmp eax, 2
jne 0x504fd0
mov dword [0x62db64], 0x3e
mov dword [0x62dbb8], 0x6143b0
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 3
jne 0x5053dd
mov dword [0x62db64], 0x3f
mov dword [0x62dbb8], 0x614398
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp ecx, 0xa
jne 0x5053dd
cmp dword [esp + 0x10], 0
jne 0x5053dd
mov eax, dword ds:[esp + 0x14]
cmp eax, 0x65f4
jbe 0x505052
mov eax, 0x60b318
mov dword [0x62db64], 0xffffffff
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
jb 0x50507f
mov eax, str.Windows_11_24H2
mov dword [0x62db64], 0x75
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
nop
cmp eax, 0x5867
jb 0x5050b2
mov eax, str.Windows_11_23H2
mov dword [0x62db64], 0x74
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x585d
jb 0x5050e4
mov eax, str.Windows_11_22H2
mov dword [0x62db64], 0x73
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x55f0
jb 0x505116
mov eax, str.Windows_11
mov dword [0x62db64], 0x72
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x4a65
jb 0x50514c
mov eax, str.Windows_10_22H2
mov dword [0x62db64], 0x71
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x4a64
jb 0x50517e
mov eax, str.Windows_10_21H2
mov dword [0x62db64], 0x70
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
nop
cmp eax, 0x4a63
jb 0x5051b2
mov eax, str.Windows_10_21H1
mov dword [0x62db64], 0x6f
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x4a62
jb 0x5051e4
mov eax, str.Windows_10_20H2
mov dword [0x62db64], 0x6e
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x4a61
jb 0x505216
mov eax, str.Windows_10_20H1
mov dword [0x62db64], 0x6d
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x47bb
jb 0x50524c
mov eax, str.Windows_10_19H2
mov dword [0x62db64], 0x6c
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x47ba
jb 0x50527e
mov eax, str.Windows_10_19H1
mov dword [0x62db64], 0x6b
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
nop
cmp eax, 0x4563
jb 0x5052b2
mov eax, str.Windows_10_RS5
mov dword [0x62db64], 0x6a
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x42ee
jb 0x5052e4
mov eax, str.Windows_10_RS4
mov dword [0x62db64], 0x69
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x3fab
jb 0x505316
mov eax, str.Windows_10_RS3
mov dword [0x62db64], 0x68
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x3ad7
jb 0x50534c
mov eax, str.Windows_10_RS2
mov dword [0x62db64], 0x67
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
cmp eax, 0x3839
jb 0x50537e
mov eax, str.Windows_10_RS1
mov dword [0x62db64], 0x66
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
nop
cmp eax, 0x295a
jb 0x5053b2
mov eax, str.Windows_10_TH2
mov dword [0x62db64], 0x65
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
mov eax, str.Windows_10
mov dword [0x62db64], 0x64
mov dword [0x62dbb8], eax
pop edi
pop esi
mov ecx, dword [esp + 0x19c]
xor ecx, esp
call fcn.00583f7f
add esp, 0x1a4
ret
mov dword [0x62db64], 0xffffffff
mov ecx, dword ds:[esp + 0x1a4]
pop edi
pop esi
xor ecx, esp
mov dword [0x62dbb8], 0x60b318
call fcn.00583f7f
add esp, 0x1a4
ret