Function at 0x4703dc
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff38
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xac], edx
mov dword [ebp - 0x98], edx
mov esi, eax
xor eax, eax
push ebp
push 0x47072b
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x94], 0x94
mov bl, 8
lea eax, [ebp - 0x94]
push eax
call sub.kernel32.dll_GetVersionExA
test eax, eax
je 0x4706f7
mov eax, dword [ebp - 0x84]
sub eax, 1
jb 0x47045d
je 0x4704b3
dec eax
je 0x4704f9
jmp 0x4706f7
lea eax, [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x9c], 0
lea edx, [ebp - 0xa8]
mov ecx, 1
mov eax, 0x470744
call fcn.0040b5b0
mov edx, dword [ebp - 0x98]
mov eax, esi
call fcn.00405548
xor ebx, ebx
jmp 0x4706f7
mov eax, dword [ebp - 0x8c]
sub eax, 1
jb 0x4704ca
sub eax, 9
je 0x4704d8
sub eax, 0x50
je 0x4704e6
jmp 0x4704f2
mov eax, esi
mov edx, 0x47075c
call fcn.00405548
jmp 0x4704f2
mov eax, esi
mov edx, 0x470770
call fcn.00405548
jmp 0x4704f2
mov eax, esi
mov edx, 0x470784
call fcn.00405548
mov bl, 1
jmp 0x4706f7
cmp dword [ebp - 0x90], 5
jne 0x47051e
cmp dword [ebp - 0x8c], 0
jne 0x47051e
mov eax, esi
mov edx, 0x470798
call fcn.00405548
mov bl, 3
jmp 0x4706f7
cmp dword [ebp - 0x90], 5
jne 0x47056d
cmp dword [ebp - 0x8c], 1
jne 0x47056d
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 6
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4707b0
call fcn.0040b5b0
mov edx, dword [ebp - 0xac]
mov eax, esi
call fcn.00405548
mov bl, 4
jmp 0x4706f7
cmp dword [ebp - 0x90], 5
jne 0x4705bc
cmp dword [ebp - 0x8c], 2
jne 0x4705bc
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 6
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4707c8
call fcn.0040b5b0
mov edx, dword [ebp - 0xb8]
mov eax, esi
call fcn.00405548
mov bl, 5
jmp 0x4706f7
cmp dword [ebp - 0x90], 6
jne 0x47060b
cmp dword [ebp - 0x8c], 0
jne 0x47060b
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 6
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4707e0
call fcn.0040b5b0
mov edx, dword [ebp - 0xbc]
mov eax, esi
call fcn.00405548
mov bl, 6
jmp 0x4706f7
mov edi, dword [ebp - 0x90]
cmp edi, 6
jne 0x47065c
cmp dword [ebp - 0x8c], 1
jne 0x47065c
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0xb0], 6
lea edx, [ebp - 0xb4]
xor ecx, ecx
mov eax, 0x4707fc
call fcn.0040b5b0
mov edx, dword [ebp - 0xc0]
mov eax, esi
call fcn.00405548
mov bl, 7
jmp 0x4706f7
cmp edi, 4
ja 0x4706ae
lea eax, [ebp - 0xc4]
push eax
mov dword [ebp - 0xa8], edi
mov byte [ebp - 0xa4], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x9c], 0
lea edx, [ebp - 0xa8]
mov ecx, 1
mov eax, 0x470814
call fcn.0040b5b0
mov edx, dword [ebp - 0xc4]
mov eax, esi
call fcn.00405548
mov bl, 2
jmp 0x4706f7
lea eax, [ebp - 0xc8]
push eax
mov dword [ebp - 0xa8], edi
mov byte [ebp - 0xa4], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x9c], 0
lea edx, [ebp - 0xa8]
mov ecx, 1
mov eax, 0x470830
call fcn.0040b5b0
mov edx, dword [ebp - 0xc8]
mov eax, esi
call fcn.00405548
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x470732
lea eax, [ebp - 0xc8]
mov edx, 5
call fcn.00405518
lea eax, [ebp - 0xac]
call fcn.004054f4
lea eax, [ebp - 0x98]
call fcn.004054f4
ret