Function at 0x740336
Capabilities:
Check os version

Disassembly:
push 0x634
mov eax, 0x7b41e0
call fcn.00772fd1
and dword [ebp - 0x628], 0
lea edi, [ebp - 0x4dc]
push 0x69
pop ecx
mov esi, str.ROF10cTljviWEUe4dsXC3COcK3PFRasPkZXifA8tiRYO2wPBZWIy5AFs48ZnXie4QSGh1cBB9DT6txF6ra4X6okD7sMDGnAFpVCMN8obmtjbchRL8yQ25nzLAF7DapwlEBonziMftuqrnH1UtnbEYROJPY5lKBHAzELdN7q5MomzZFifksHi6yY5roIv7yASi4VQHVT6sF3ghX0eAhrKOUjvNO77nnJKykAsecoqbuFAmjP6Mvg4wB2x4UVSb3lUXYa3iBB46J5e9O9XaC4ZtugbczqmEELaDQJvEQ7UzMLamMY1goQHeyEguIMyKOw2ECnRWlyL5Pf2O9oqa3twk8MKpKiyM5yuag9d4csSc2KeAjX9zIcm9xHFF6orOSo1gl7jx5RmW0mBWY3O84FrSzq0Jfgd41AtXNMu8v
mov ebx, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
push 0x46
pop ecx
mov dword [ebp - 0x640], ebx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.y2fx5cDZJDnpB4SZ9mkBho6iwE6DzZcwRJvRym6BopvRtzJldjG68YPSZvxqf1sgSBBExu1atj5K0B3b3tdqi4wd6VTYZ3mOYABHSuTbhoZplt52eIkQtzXsbNjzYuyb5uf0rNmmGclCo1tboh5ohC1KE7e8vAwooU7LBF2OpKROcaBU97h78XJG1Hr30KKQnCefkmCYgvysB2nGxEcSfxKwBosOfBi0MRumCprEB34z2zMaz1yMKXGlS2SoD3qYUZFQFiVdABWFldgp5L3kbq8A
lea edi, [ebp - 0x334]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
xor esi, esi
mov dword [ebp - 0x63c], esi
mov dword [ebp - 0x638], esi
mov dword [ebp - 0x634], esi
lea eax, [ebp - 0x4dc]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00405a50
lea eax, [ebp - 0x4f4]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x63c]
call fcn.004082f0
push esi
push 1
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 1
call fcn.004096c0
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00405a50
lea eax, [ebp - 0x4f4]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x63c]
call fcn.004082f0
push esi
push 1
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 1
call fcn.004096c0
push 0x118
lea eax, [ebp - 0x60c]
mov dword [ebp - 0x610], 0x11c
push esi
push eax
call fcn.0074fc20
add esp, 0xc
lea eax, [ebp - 0x610]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x8b08c8
mov ecx, ebx
call fcn.004026c0
mov eax, dword [ebp - 0x60c]
mov edi, dword [ebp - 0x604]
mov dword [ebp - 0x624], eax
movzx eax, byte [ebp - 0x4f6]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x608]
push str.ntdll.dll
mov dword [ebp - 0x628], 1
mov dword [ebp - 0x618], esi
mov dword [ebp - 0x61c], esi
mov dword [ebp - 0x614], esi
mov dword [ebp - 0x620], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x62c], eax
test eax, eax
je 0x7404dc
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x7404d0
lea ecx, [ebp - 0x614]
push ecx
lea ecx, [ebp - 0x61c]
push ecx
lea ecx, [ebp - 0x618]
push ecx
call eax
movzx eax, word [ebp - 0x614]
mov dword [ebp - 0x614], eax
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x624]
cmp eax, 5
jne 0x740526
mov eax, dword [ebp - 0x620]
test eax, eax
je 0x740617
cmp eax, 1
jne 0x740510
push str.WindowsXP
call fcn.0075fe99
pop ecx
push eax
push str.WindowsXP
jmp 0x740610
push str.WindowsServer2003
call fcn.0075fe99
pop ecx
push eax
push str.WindowsServer2003
jmp 0x740610
cmp eax, 6
jne 0x740617
mov eax, dword [ebp - 0x620]
sub eax, esi
je 0x7405e3
sub eax, 1
je 0x7405d0
sub eax, 1
jne 0x740617
cmp edi, 0x1ebb
je 0x74056a
lea eax, [edi - 0x1ee6]
cmp eax, 0x25
jbe 0x74056a
cmp edi, 0x1f13
jne 0x740586
mov esi, str.Windows8
push esi
call fcn.0075fe99
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00402820
xor esi, esi
jmp 0x740617
cmp dword [ebp - 0x618], 0xa
jne 0x7405ab
cmp dword [ebp - 0x61c], 0
jne 0x740617
push str.Windows10
call fcn.0075fe99
pop ecx
push eax
push str.Windows10
jmp 0x740610
cmp dword [ebp - 0x618], 6
jne 0x740617
cmp dword [ebp - 0x61c], 3
jne 0x740617
push str.Windows8.1
call fcn.0075fe99
pop ecx
push eax
push str.Windows8.1
jmp 0x740610
push str.Windows7
call fcn.0075fe99
pop ecx
push eax
push str.Windows7
jmp 0x740610
cmp dword [ebp - 0x630], 1
jne 0x7405ff
push str.WindowsVista
call fcn.0075fe99
pop ecx
push eax
push str.WindowsVista
jmp 0x740610
push str.WindowsServer2008
call fcn.0075fe99
pop ecx
push eax
push str.WindowsServer2008
mov ecx, ebx
call fcn.00402820
push 0x8b08c8
mov ecx, ebx
call fcn.0072c915
test eax, eax
jne 0x740685
push 0x208
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.0074fc20
mov eax, dword [ebp - 0x624]
push edi
push dword [ebp - 0x620]
push eax
lea eax, [ebp - 0x218]
push str.Windows_d._d._d
push eax
call fcn.00408370
add esp, 0x20
cmp word [ebp - 0x218], 0
jne 0x740669
mov eax, esi
jmp 0x740676
lea eax, [ebp - 0x218]
push eax
call fcn.0075fe99
pop ecx
push eax
lea eax, [ebp - 0x218]
mov ecx, ebx
push eax
call fcn.00402820
cmp dword [ebp + 0xc], 0
je 0x7406b3
cmp word [ebp - 0x5fc], 0
je 0x7406a4
lea eax, [ebp - 0x5fc]
push eax
call fcn.0075fe99
pop ecx
mov esi, eax
push esi
lea eax, [ebp - 0x5fc]
mov ecx, ebx
push eax
call fcn.004044c0
lea ecx, [ebp - 0x63c]
call fcn.006ec102
mov eax, ebx
call fcn.00772f7b
ret