Function at 0x72fe4c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff84
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], edx
mov esi, eax
mov ebx, dword [ebp + 0x14]
lea eax, [ebp - 0x60]
mov edx, dword [0x72d6f8]
call fcn.0040a2d8
xor eax, eax
push ebp
push 0x73038e
push dword fs:[eax]
mov dword fs:[eax], esp
test esi, esi
je 0x72fe9b
mov eax, esi
call fcn.00409868
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x76], 5
jmp 0x72fedd
movzx eax, byte [ebp + 0x18]
sub al, 1
jb 0x72fead
dec al
je 0x72feba
dec al
je 0x72fec7
jmp 0x72fed4
mov dword [ebp - 0x70], 0xfffd
mov byte [ebp - 0x76], 4
jmp 0x72fedd
mov dword [ebp - 0x70], 0xffff
mov byte [ebp - 0x76], 1
jmp 0x72fedd
mov dword [ebp - 0x70], 0xfffe
mov byte [ebp - 0x76], 3
jmp 0x72fedd
xor eax, eax
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x76], 5
mov esi, dword [ebp + 0xc]
inc esi
movzx eax, byte [0x7303a4]
mov byte [ebp - 0x75], al
lea ecx, [ebp - 0xc]
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
call fcn.0072fd84
mov eax, ebx
sub eax, 2
jb 0x72ff17
je 0x730071
dec eax
sub eax, 2
jb 0x72ff8b
je 0x730009
jmp 0x7300d8
test esi, esi
jne 0x72ff2e
mov dword [ebp - 0x74], 1
movzx eax, byte [0x7303a8]
mov byte [ebp - 0x75], al
jmp 0x72ff6f
xor eax, eax
mov dword [ebp - 0x74], eax
push 1
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x72fd58]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 1
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x72fd58]
call fcn.0040bb00
movzx eax, byte [0x7303a4]
mov byte [ebp - 0x75], al
cmp ebx, 1
jne 0x7300e7
or dword [ebp - 0x74], 8
movzx eax, byte [0x7303ac]
mov byte [ebp - 0x75], al
jmp 0x7300e7
test esi, esi
jne 0x72ffa2
mov dword [ebp - 0x74], 6
movzx eax, byte [0x7303b0]
mov byte [ebp - 0x75], al
jmp 0x72ffed
xor eax, eax
mov dword [ebp - 0x74], eax
push 2
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x72fd58]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 6
mov eax, dword [ebp - 8]
mov dword [eax + 4], 7
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x72fd58]
call fcn.0040bb00
movzx eax, byte [0x7303a4]
mov byte [ebp - 0x75], al
cmp ebx, 3
jne 0x7300e7
or dword [ebp - 0x74], 8
movzx eax, byte [0x7303ac]
mov byte [ebp - 0x75], al
jmp 0x7300e7
test esi, esi
jne 0x730020
mov dword [ebp - 0x74], 0x10
movzx eax, byte [0x7303b4]
mov byte [ebp - 0x75], al
jmp 0x730061
xor eax, eax
mov dword [ebp - 0x74], eax
push 1
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x72fd58]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 4
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x72fd58]
call fcn.0040bb00
movzx eax, byte [0x7303a4]
mov byte [ebp - 0x75], al
or dword [ebp - 0x74], 8
movzx eax, byte [0x7303ac]
mov byte [ebp - 0x75], al
jmp 0x7300e7
test esi, esi
jne 0x730081
mov eax, 0x7303c4
call fcn.006e41c8
jmp 0x7300c7
push 3
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x72fd58]
call fcn.0040b998
add esp, 4
mov eax, dword [ebp - 8]
mov dword [eax], 4
mov eax, dword [ebp - 8]
mov dword [eax + 4], 5
mov eax, dword [ebp - 8]
mov dword [eax + 8], 3
lea eax, [ebp - 4]
mov edx, dword [ebp - 8]
mov ecx, dword [0x72fd58]
call fcn.0040bb00
xor eax, eax
mov dword [ebp - 0x74], eax
movzx eax, byte [0x7303a4]
mov byte [ebp - 0x75], al
jmp 0x7300e7
mov eax, 0x730420
call fcn.006e41c8
xor eax, eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x7300f3
sub eax, 4
mov eax, dword [eax]
cmp esi, eax
je 0x730101
mov eax, 0x7303c4
call fcn.006e41c8
call sub.kernel32.dll_GetVersion
xchg al, ah
cmp ax, 0x501
jne 0x7302c6
lea eax, [ebp - 0x60]
mov edx, dword [ebp + 0x1c]
call fcn.00408bdc
lea eax, [ebp - 0x5c]
mov edx, dword [ebp - 0x64]
call fcn.00408bdc
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x68]
call fcn.00408bdc
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 0xc]
call fcn.00408bdc
call fcn.00606990
test al, al
je 0x73017a
cmp ebx, 2
jne 0x73017a
mov eax, dword [0x730464]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072e850
jmp 0x730207
call fcn.00606990
test al, al
je 0x7301ae
mov eax, dword [0x730468]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072e850
jmp 0x730207
cmp ebx, 2
jne 0x7301de
mov eax, dword [0x73046c]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072e850
jmp 0x730207
mov eax, dword [0x730470]
push eax
movzx eax, byte [ebp - 0x76]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x60]
xor ecx, ecx
movzx edx, byte [ebp - 0x75]
call fcn.0072e850
mov edx, eax
sub edx, 0x64
je 0x73021d
dec edx
je 0x73025f
dec edx
je 0x73029d
jmp 0x7302be
test ebx, ebx
je 0x730226
cmp ebx, 1
jne 0x73022d
mov dword [ebp - 0x6c], 1
cmp ebx, 4
je 0x730237
cmp ebx, 3
jne 0x73023e
mov dword [ebp - 0x6c], 6
cmp ebx, 5
jne 0x73024a
mov dword [ebp - 0x6c], 4
cmp ebx, 2
jne 0x730357
mov dword [ebp - 0x6c], 4
jmp 0x730357
cmp ebx, 1
jne 0x73026b
mov dword [ebp - 0x6c], 2
cmp ebx, 4
je 0x730275
cmp ebx, 3
jne 0x73027c
mov dword [ebp - 0x6c], 7
cmp ebx, 5
jne 0x730288
mov dword [ebp - 0x6c], 2
cmp ebx, 2
jne 0x730357
mov dword [ebp - 0x6c], 5
jmp 0x730357
cmp ebx, 3
jne 0x7302a9
mov dword [ebp - 0x6c], 2
cmp ebx, 2
jne 0x730357
mov dword [ebp - 0x6c], 3
jmp 0x730357
mov dword [ebp - 0x6c], eax
jmp 0x730357
mov eax, dword [ebp + 0x1c]
call fcn.00409868
movzx edx, byte [ebp + 0x18]
call fcn.00606968
mov edi, eax
mov esi, dword [ebp - 4]
test esi, esi
je 0x7302e5
sub esi, 4
mov esi, dword [esi]
call fcn.00606990
mov ebx, eax
movzx eax, byte [ebp + 0x18]
add al, 0xfe
sub al, 2
jae 0x7302ff
mov dword [ebp - 0x7c], 0x10
jmp 0x730304
xor eax, eax
mov dword [ebp - 0x7c], eax
push edi
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x74]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
dec esi
push esi
mov eax, dword [ebp + 8]
push eax
push ebx
mov eax, dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x68]
call fcn.00409868
push eax
mov eax, dword [ebp - 0x64]
call fcn.00409868
mov edx, eax
mov eax, dword [0x7b0f68]
mov eax, dword [eax]
mov eax, dword [eax + 0x188]
pop ecx
call fcn.0072fb5c
test al, al
jne 0x730357
xor eax, eax
mov dword [ebp - 0x6c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x730395
lea eax, [ebp - 0x60]
mov edx, dword [0x72d6f8]
call fcn.0040a460
lea eax, [ebp - 0xc]
call fcn.004087b4
lea eax, [ebp - 8]
mov edx, dword [0x72fd58]
mov ecx, 2
call fcn.0040a4f0
ret