Function at 0x730218
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff84
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], edx
mov esi, eax
mov ebx, dword [ebp + 0x14]
lea eax, [ebp - 0x60]
mov edx, dword [0x72dac4]
call fcn.0040a2d8
xor eax, eax
push ebp
push 0x73075a
push dword fs:[eax]
mov dword fs:[eax], esp
test esi, esi
je 0x730267
mov eax, esi
call fcn.00409868
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x76], 5
jmp 0x7302a9
movzx eax, byte [ebp + 0x18]
sub al, 1
jb 0x730279
dec al
je 0x730286
dec al
je 0x730293
jmp 0x7302a0
mov dword [ebp - 0x70], 0xfffd
mov byte [ebp - 0x76], 4
jmp 0x7302a9
mov dword [ebp - 0x70], 0xffff
mov byte [ebp - 0x76], 1
jmp 0x7302a9
mov dword [ebp - 0x70], 0xfffe
mov byte [ebp - 0x76], 3
jmp 0x7302a9
xor eax, eax
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x76], 5
mov esi, dword [ebp + 0xc]
inc esi
movzx eax, byte [0x730770]
mov byte [ebp - 0x75], al
lea ecx, [ebp - 0xc]
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
call fcn.00730150
mov eax, ebx
sub eax, 2
jb 0x7302e3
je 0x73043d
dec eax
sub eax, 2
jb 0x730357
je 0x7303d5
jmp 0x7304a4
test esi, esi
jne 0x7302fa
mov dword [ebp - 0x74], 1
movzx eax, byte [0x730774]
mov byte [ebp - 0x75], al
jmp 0x73033b
xor eax, eax
mov dword [ebp - 0x74], eax
push 1
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x730124]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 1
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x730124]
call fcn.0040bb00
movzx eax, byte [0x730770]
mov byte [ebp - 0x75], al
cmp ebx, 1
jne 0x7304b3
or dword [ebp - 0x74], 8
movzx eax, byte [0x730778]
mov byte [ebp - 0x75], al
jmp 0x7304b3
test esi, esi
jne 0x73036e
mov dword [ebp - 0x74], 6
movzx eax, byte [0x73077c]
mov byte [ebp - 0x75], al
jmp 0x7303b9
xor eax, eax
mov dword [ebp - 0x74], eax
push 2
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x730124]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 6
mov eax, dword [ebp - 8]
mov dword [eax + 4], 7
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x730124]
call fcn.0040bb00
movzx eax, byte [0x730770]
mov byte [ebp - 0x75], al
cmp ebx, 3
jne 0x7304b3
or dword [ebp - 0x74], 8
movzx eax, byte [0x730778]
mov byte [ebp - 0x75], al
jmp 0x7304b3
test esi, esi
jne 0x7303ec
mov dword [ebp - 0x74], 0x10
movzx eax, byte [0x730780]
mov byte [ebp - 0x75], al
jmp 0x73042d
xor eax, eax
mov dword [ebp - 0x74], eax
push 1
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x730124]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 4
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x730124]
call fcn.0040bb00
movzx eax, byte [0x730770]
mov byte [ebp - 0x75], al
or dword [ebp - 0x74], 8
movzx eax, byte [0x730778]
mov byte [ebp - 0x75], al
jmp 0x7304b3
test esi, esi
jne 0x73044d
mov eax, 0x730790
call fcn.006e420c
jmp 0x730493
push 3
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x730124]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 4
mov eax, dword [ebp - 8]
mov dword [eax + 4], 5
mov eax, dword [ebp - 8]
mov dword [eax + 8], 3
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x730124]
call fcn.0040bb00
xor eax, eax
mov dword [ebp - 0x74], eax
movzx eax, byte [0x730770]
mov byte [ebp - 0x75], al
jmp 0x7304b3
mov eax, 0x7307ec
call fcn.006e420c
xor eax, eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x7304bf
sub eax, 4
mov eax, dword [eax]
cmp esi, eax
je 0x7304cd
mov eax, 0x730790
call fcn.006e420c
call sub.kernel32.dll_GetVersion
xchg al, ah
cmp ax, 0x501
jne 0x730692
lea eax, [ebp - 0x60]
mov edx, dword [ebp + 0x1c]
call fcn.00408bdc
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x64]
call fcn.00408bdc
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x68]
call fcn.00408bdc
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 0xc]
call fcn.00408bdc
call fcn.00606990
test al, al
je 0x730546
cmp ebx, 2
jne 0x730546
mov eax, dword [0x730830]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072ec1c
jmp 0x7305d3
call fcn.00606990
test al, al
je 0x73057a
mov eax, dword [0x730834]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072ec1c
jmp 0x7305d3
cmp ebx, 2
jne 0x7305aa
mov eax, dword [0x730838]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072ec1c
jmp 0x7305d3
mov eax, dword [0x73083c]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072ec1c
mov edx, eax
sub edx, 0x64
je 0x7305e9
dec edx
je 0x73062b
dec edx
je 0x730669
jmp 0x73068a
test ebx, ebx
je 0x7305f2
cmp ebx, 1
jne 0x7305f9
mov dword [ebp - 0x6c], 1
cmp ebx, 4
je 0x730603
cmp ebx, 3
jne 0x73060a
mov dword [ebp - 0x6c], 6
cmp ebx, 5
jne 0x730616
mov dword [ebp - 0x6c], 4
cmp ebx, 2
jne 0x730723
mov dword [ebp - 0x6c], 4
jmp 0x730723
cmp ebx, 1
jne 0x730637
mov dword [ebp - 0x6c], 2
cmp ebx, 4
je 0x730641
cmp ebx, 3
jne 0x730648
mov dword [ebp - 0x6c], 7
cmp ebx, 5
jne 0x730654
mov dword [ebp - 0x6c], 2
cmp ebx, 2
jne 0x730723
mov dword [ebp - 0x6c], 5
jmp 0x730723
cmp ebx, 3
jne 0x730675
mov dword [ebp - 0x6c], 2
cmp ebx, 2
jne 0x730723
mov dword [ebp - 0x6c], 3
jmp 0x730723
mov dword [ebp - 0x6c], eax
jmp 0x730723
mov eax, dword [ebp + 0x1c]
call fcn.00409868
movzx edx, byte [ebp + 0x18]
call fcn.00606968
mov edi, eax
mov esi, dword [ebp - 4]
test esi, esi
je 0x7306b1
sub esi, 4
mov esi, dword [esi]
call fcn.00606990
mov ebx, eax
movzx eax, byte [ebp + 0x18]
add al, 0xfe
sub al, 2
jae 0x7306cb
mov dword [ebp - 0x7c], 0x10
jmp 0x7306d0
xor eax, eax
mov dword [ebp - 0x7c], eax
push edi
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
dec esi
push esi
mov eax, dword [ebp + 8]
push eax
push ebx
mov eax, dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
call fcn.00409868
push eax
mov eax, dword [ebp - 0x64]
call fcn.00409868
mov edx, eax
mov eax, dword [0x7b0f6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x188]
pop ecx
call fcn.0072ff28
test al, al
jne 0x730723
xor eax, eax
mov dword [ebp - 0x6c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x730761
lea eax, [ebp - 0x60]
mov edx, dword [0x72dac4]
call fcn.0040a460
lea eax, [ebp - 0xc]
call fcn.004087b4
lea eax, [ebp - 8]
mov edx, dword [0x730124]
mov ecx, 2
call fcn.0040a4f0
ret