Function at 0x4332e7
Capabilities:
Check os version

Disassembly:
push 0x60
mov eax, 0x444464
call fcn.0041ce5d
mov eax, dword [ebp + 8]
xor ebx, ebx
xor edi, edi
mov esi, ecx
mov dword [ebp - 0x54], ebx
inc edi
test byte [0x467900], 1
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], eax
jne 0x433325
or dword [0x467900], edi
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xff
mov dword [0x4678fc], eax
call fcn.004018ed
lea eax, [ebp - 0x6c]
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0x54], edi
call fcn.0040813c
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 4], edi
call fcn.0040813c
mov byte [ebp - 4], 2
cmp dword [0x4678fc], 6
push 0x453738
lea esi, [ebp - 0x30]
jl 0x4334ea
call fcn.00401900
mov eax, esi
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 3
call fcn.00401d4d
push ebx
push edi
mov byte [ebp - 4], 2
call fcn.0040115a
push str.productState
lea esi, [ebp - 0x30]
call fcn.00401900
mov eax, esi
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 4
call fcn.00401d4d
push ebx
push edi
mov byte [ebp - 4], 2
call fcn.0040115a
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x4c], esp
lea ecx, [ebp - 0x6c]
push ecx
push eax
call fcn.00401b9a
sub esp, 0x1c
mov byte [ebp - 4], 5
mov esi, esp
mov dword [ebp - 0x50], esp
push dword [ebp - 0x14]
call fcn.004010aa
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x14], esp
push str.ROOTSecurityCenter2
mov byte [ebp - 4], 6
call fcn.00401900
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00432cbf
add esp, 0x50
mov esi, eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
call fcn.00401c57
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00402378
push dword [ebp - 0x2c]
call fcn.0041b531
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
pop ecx
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x14], ebx
test eax, eax
jbe 0x4336e0
mov edi, 0x44d404
mov ebx, dword [ebp - 0x14]
push edi
push ebx
lea esi, [ebp - 0x48]
call fcn.004195da
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00403075
add esp, 0xc
push 0xffffffffffffffff
mov byte [ebp - 4], 8
mov esi, dword [ebp - 0x10]
push 0
call fcn.004023f0
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.0040115a
inc ebx
push ebx
lea esi, [ebp - 0x48]
call fcn.004195da
cmp dword [eax + 0x14], 0
je 0x4334bf
push ebx
call fcn.004195da
mov ebx, eax
call fcn.00430912
mov ebx, eax
test ebx, 0x1000
je 0x433496
push str.edou
jmp 0x43349b
push 0x45379c
push dword [ebp - 0x10]
call fcn.0040336b
test bl, 0x10
je 0x4334af
push 0x4537a0
jmp 0x4334b4
push 0x4537a4
push dword [ebp - 0x10]
call fcn.0040336b
push edi
jmp 0x4334c4
push 0x4537a8
push dword [ebp - 0x10]
call fcn.0040336b
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
push 0x1c
cdq
pop ecx
idiv ecx
add dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], eax
jb 0x43342e
jmp 0x4336de
call fcn.00401900
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 9
call fcn.00401d4d
push ebx
push edi
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.0040115a
push 0x4537b0
lea esi, [ebp - 0x30]
call fcn.00401900
mov eax, esi
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xa
call fcn.00401d4d
push ebx
push edi
mov byte [ebp - 4], 2
call fcn.0040115a
push str.productUptoDate
lea esi, [ebp - 0x30]
call fcn.00401900
mov eax, esi
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xb
call fcn.00401d4d
push ebx
push edi
mov byte [ebp - 4], 2
call fcn.0040115a
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x50], esp
lea ecx, [ebp - 0x6c]
push ecx
push eax
call fcn.00401b9a
sub esp, 0x1c
mov byte [ebp - 4], 0xc
mov esi, esp
mov dword [ebp - 0x4c], esp
push dword [ebp - 0x14]
call fcn.004010aa
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x14], esp
push str.ROOTSecurityCenter
mov byte [ebp - 4], 0xd
call fcn.00401900
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00432cbf
add esp, 0x50
mov esi, eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xe
call fcn.00401c57
lea esi, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00402378
push dword [ebp - 0x2c]
call fcn.0041b531
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
pop ecx
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
jbe 0x4336e0
push 2
pop ebx
mov edi, 0x44d404
push edi
lea eax, [ebx - 2]
push eax
lea esi, [ebp - 0x48]
call fcn.004195da
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00403075
add esp, 0xc
push 0xffffffffffffffff
mov byte [ebp - 4], 0xf
mov esi, dword [ebp - 0x10]
push 0
call fcn.004023f0
push 0
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.0040115a
lea eax, [ebx - 1]
push str.true
push eax
lea esi, [ebp - 0x48]
call fcn.004195da
call fcn.004072a7
pop ecx
test al, al
je 0x433641
push str.edou
jmp 0x433668
push str.false
lea eax, [ebx - 1]
push eax
lea esi, [ebp - 0x48]
call fcn.004195da
call fcn.004072a7
pop ecx
test al, al
je 0x433663
push 0x45379c
jmp 0x433668
push 0x450ac4
push dword [ebp - 0x10]
call fcn.0040336b
push str.true
push ebx
lea esi, [ebp - 0x48]
call fcn.004195da
call fcn.004072a7
pop ecx
test al, al
je 0x43368f
push 0x4537a4
jmp 0x4336b3
push str.false
push ebx
lea esi, [ebp - 0x48]
call fcn.004195da
call fcn.004072a7
pop ecx
test al, al
je 0x4336ae
push 0x4537a0
jmp 0x4336b3
push 0x450ac4
push dword [ebp - 0x10]
call fcn.0040336b
push edi
push dword [ebp - 0x10]
call fcn.0040336b
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
push 0x1c
cdq
pop ecx
idiv ecx
add ebx, 3
lea ecx, [ebx - 2]
cmp ecx, eax
jb 0x4335e5
xor ebx, ebx
mov edi, dword [ebp - 0x10]
mov eax, dword [edi + 0x14]
cmp eax, ebx
je 0x4336f2
dec eax
mov ecx, edi
call fcn.00401937
lea esi, [ebp - 0x48]
call fcn.00402378
push dword [ebp - 0x48]
call fcn.0041b531
pop ecx
lea esi, [ebp - 0x6c]
call fcn.00402378
push dword [ebp - 0x6c]
call fcn.0041b531
pop ecx
mov eax, edi
call fcn.0041cf35
ret