Function at 0x741979
Capabilities:
Check os version

Disassembly:
push 0x688
mov eax, 0x7b59ff
call fcn.00774621
and dword [ebp - 0x67c], 0
lea edi, [ebp - 0x348]
push 0x4b
pop ecx
mov esi, str.9e5QHkAzs5bJ7N9o4a0rL6Gs51YVpdTK8Gj0edSKZitDCgyt6icaFX2wootcfMdVz7g9MSPkX6q4HQyMn0GkGiUli98GnKoQfCtzFUw4V0FvaeX23mCKwSeIDsvFKDuUmhrW7sqNrtll5Tqs9ckLXeMKWcrCLGKypvTIPeooTXy2ZoIvnJ0lxdxBpqWuAxzaK1ATFRbj5fnHgv5DRsXpbu9q6iq8CA4aFRVH5EsQjUPyIXbLvQTwbPO8yTUQDaHpczCvdwbYdUgy1thSucESMrALHSaJR3Lc9YjIpSc9mhza1W
mov ebx, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
push 0x7a
pop ecx
mov dword [ebp - 0x694], ebx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.fWFKo8BtSYILIxhUwpdBKgm0ZSZv6Rhl3rTYxF8Q6ANYDyiQzlNcSYPtvRcTQJaBMZXO0fMjkZmgkHatfISM0lWbUosXrnC5ImWmGOawtn0f5kGQpaQBgc7ivPGJRwAz2RuPFFhYNZRyNgkP3IVjmtdIhgM1hCOKSswfMY7UB3xERF8sEHFXJQPQKBKpUxdCb9jMOrukqOXeH9y4wb1vYJHMvGXlZegShXgwfqCSwAhqMYN5ATtFUokaFIPMDOvTimPrAv3IEJ3GL34HPSEeAqIhjBSg4xtYF6RfkrVnjvYAl2Ceiz9cyv7dARA4hM5qyI3pqVpY4glDoyV0SXEX1HlmOy5Ot6aBHHkLkKBrEjrhdCAgPo29YHI4WfM1OR3dWVf7pgEknqj838n6AyQIXvIgTn5ot4gK4kCMEEGkUNpgtnKAKizrO1QijyEa72eECMzsrQIy2S8rAtzhFk9Asvl83ti9R8cxVeeloZu
lea edi, [ebp - 0x530]
rep movsd dword es:[edi], dword [esi]
xor esi, esi
mov dword [ebp - 0x690], esi
mov dword [ebp - 0x68c], esi
mov dword [ebp - 0x688], esi
lea eax, [ebp - 0x348]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x548]
call fcn.00405a00
lea eax, [ebp - 0x548]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x690]
call fcn.00407ea0
push esi
push 1
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 1
call fcn.006eb1be
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x548]
call fcn.00405a00
lea eax, [ebp - 0x548]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x690]
call fcn.00407ea0
push esi
push 1
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 1
call fcn.006eb1be
push 0x118
lea eax, [ebp - 0x660]
mov dword [ebp - 0x664], 0x11c
push esi
push eax
call fcn.007512b0
add esp, 0xc
lea eax, [ebp - 0x664]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x8b5798
mov ecx, ebx
call fcn.004026c0
mov eax, dword [ebp - 0x660]
mov edi, dword [ebp - 0x658]
mov dword [ebp - 0x678], eax
movzx eax, byte [ebp - 0x54a]
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x65c]
push str.ntdll.dll
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x66c], esi
mov dword [ebp - 0x670], esi
mov dword [ebp - 0x668], esi
mov dword [ebp - 0x674], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x680], eax
test eax, eax
je 0x741b1e
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x741b12
lea ecx, [ebp - 0x668]
push ecx
lea ecx, [ebp - 0x670]
push ecx
lea ecx, [ebp - 0x66c]
push ecx
call eax
movzx eax, word [ebp - 0x668]
mov dword [ebp - 0x668], eax
push dword [ebp - 0x680]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x678]
cmp eax, 5
jne 0x741b68
mov eax, dword [ebp - 0x674]
test eax, eax
je 0x741c59
cmp eax, 1
jne 0x741b52
push str.WindowsXP
call fcn.00761599
pop ecx
push eax
push str.WindowsXP
jmp 0x741c52
push str.WindowsServer2003
call fcn.00761599
pop ecx
push eax
push str.WindowsServer2003
jmp 0x741c52
cmp eax, 6
jne 0x741c59
mov eax, dword [ebp - 0x674]
sub eax, esi
je 0x741c25
sub eax, 1
je 0x741c12
sub eax, 1
jne 0x741c59
cmp edi, 0x1ebb
je 0x741bac
lea eax, [edi - 0x1ee6]
cmp eax, 0x25
jbe 0x741bac
cmp edi, 0x1f13
jne 0x741bc8
mov esi, str.Windows8
push esi
call fcn.00761599
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.00402820
xor esi, esi
jmp 0x741c59
cmp dword [ebp - 0x66c], 0xa
jne 0x741bed
cmp dword [ebp - 0x670], 0
jne 0x741c59
push str.Windows10
call fcn.00761599
pop ecx
push eax
push str.Windows10
jmp 0x741c52
cmp dword [ebp - 0x66c], 6
jne 0x741c59
cmp dword [ebp - 0x670], 3
jne 0x741c59
push str.Windows8.1
call fcn.00761599
pop ecx
push eax
push str.Windows8.1
jmp 0x741c52
push str.Windows7
call fcn.00761599
pop ecx
push eax
push str.Windows7
jmp 0x741c52
cmp dword [ebp - 0x684], 1
jne 0x741c41
push str.WindowsVista
call fcn.00761599
pop ecx
push eax
push str.WindowsVista
jmp 0x741c52
push str.WindowsServer2008
call fcn.00761599
pop ecx
push eax
push str.WindowsServer2008
mov ecx, ebx
call fcn.00402820
push 0x8b5798
mov ecx, ebx
call fcn.0072e47d
test eax, eax
jne 0x741cc7
push 0x208
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.007512b0
mov eax, dword [ebp - 0x678]
push edi
push dword [ebp - 0x674]
push eax
lea eax, [ebp - 0x218]
push str.Windows_d._d._d
push eax
call fcn.00407f20
add esp, 0x20
cmp word [ebp - 0x218], 0
jne 0x741cab
mov eax, esi
jmp 0x741cb8
lea eax, [ebp - 0x218]
push eax
call fcn.00761599
pop ecx
push eax
lea eax, [ebp - 0x218]
mov ecx, ebx
push eax
call fcn.00402820
cmp dword [ebp + 0xc], 0
je 0x741cf5
cmp word [ebp - 0x650], 0
je 0x741ce6
lea eax, [ebp - 0x650]
push eax
call fcn.00761599
pop ecx
mov esi, eax
push esi
lea eax, [ebp - 0x650]
mov ecx, ebx
push eax
call fcn.00404470
lea ecx, [ebp - 0x690]
call fcn.006eb210
mov eax, ebx
call fcn.007745cb
ret