Function at 0x76ef717c
Capabilities:
Check os version
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
xor ebx, ebx
mov dword [ebp - 8], ebx
mov dword [0x76f11060], 0x76f11d98
mov dword [0x76f11064], 0x76f1127c
mov dword [0x76f11054], 0x76f11d38
call dword [sym.imp._CKERNEL.DLL_GetVersion]
cmp eax, 0x80000000
lea eax, [ebp - 8]
push eax
push 1
push ebx
jae 0x76efd20e
push 0x76ef7290
push reloc.WS2__32_Coverage_C_WINDOWS_system32.DLL_Ordinal_2
call dword [sym.imp._CADVAPI.DLL_RegOpenKeyExA]
cmp eax, ebx
jne 0x76ef7243
cmp dword [ebp - 8], ebx
je 0x76ef7243
push esi
push edi
mov edi, dword [sym.imp._CADVAPI.DLL_RegQueryValueExA]
lea eax, [ebp - 0xc]
push eax
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
mov esi, 0x76ef727c
push esi
push dword [ebp - 8]
call edi
test eax, eax
je 0x76efd218
lea eax, [ebp - 0xc]
push eax
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
mov esi, 0x76ef7264
push esi
push dword [ebp - 8]
call edi
test eax, eax
je 0x76efd2c8
lea eax, [ebp - 0xc]
push eax
push ebx
lea eax, [ebp - 0x10]
push eax
push ebx
mov esi, 0x76ef7248
push esi
push dword [ebp - 8]
call edi
test eax, eax
je 0x76efd378
push dword [ebp - 8]
call dword [sym.imp._CADVAPI.DLL_RegCloseKey]
pop edi
pop esi
pop ebx
leave
ret
push 0x76efd41c
jmp 0x76ef71c5
cmp dword [ebp - 0xc], ebx
je 0x76ef71fe
push dword [ebp - 0xc]
call fcn.76ef3674
cmp eax, ebx
mov dword [ebp - 4], eax
je 0x76ef71fe
lea ecx, [ebp - 0xc]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
push esi
push dword [ebp - 8]
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jne 0x76efd2bb
cmp dword [ebp - 0x10], 7
jne 0x76efd2bb
mov ebx, dword [ebp - 4]
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
je 0x76efd291
jmp 0x76efd259
cmp dword [ebp - 0x14], 0xa
jae 0x76efd297
push ebx
call dword [sym.imp._Cmvrt.DLL_atoi]
test eax, eax
pop ecx
je 0x76efd281
mov ecx, dword [ebp - 0x14]
inc dword [ebp - 0x14]
mov dword [ecx*4 + 0x76f13400], eax
lea ebx, [ebx + esi + 1]
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x76efd28a
sub eax, esi
mov esi, eax
jne 0x76efd262
mov eax, dword [ebp - 0x14]
push dword [ebp - 4]
and dword [eax*4 + 0x76f13400], 0
mov dword [0x76f11060], 0x76f13400
call fcn.76ef264e
xor ebx, ebx
jmp 0x76ef71fe
push dword [ebp - 4]
call fcn.76ef264e
jmp 0x76ef71fe
cmp dword [ebp - 0xc], ebx
je 0x76ef721b
push dword [ebp - 0xc]
call fcn.76ef3674
cmp eax, ebx
mov dword [ebp - 4], eax
je 0x76ef721b
lea ecx, [ebp - 0xc]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
push esi
push dword [ebp - 8]
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jne 0x76efd36b
cmp dword [ebp - 0x10], 7
jne 0x76efd36b
mov ebx, dword [ebp - 4]
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
je 0x76efd341
jmp 0x76efd309
cmp dword [ebp - 0x14], 0xa
jae 0x76efd347
push ebx
call dword [sym.imp._Cmvrt.DLL_atoi]
test eax, eax
pop ecx
je 0x76efd331
mov ecx, dword [ebp - 0x14]
inc dword [ebp - 0x14]
mov dword [ecx*4 + 0x76f133c0], eax
lea ebx, [ebx + esi + 1]
mov eax, ebx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x76efd33a
sub eax, esi
mov esi, eax
jne 0x76efd312
mov eax, dword [ebp - 0x14]
push dword [ebp - 4]
and dword [eax*4 + 0x76f133c0], 0
mov dword [0x76f11064], 0x76f133c0
call fcn.76ef264e
xor ebx, ebx
jmp 0x76ef721b
push dword [ebp - 4]
call fcn.76ef264e
jmp 0x76ef721b
cmp dword [ebp - 0xc], ebx
je 0x76ef7238
push dword [ebp - 0xc]
call fcn.76ef3674
cmp eax, ebx
mov dword [ebp - 4], eax
je 0x76ef7238
lea ecx, [ebp - 0xc]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
push esi
push dword [ebp - 8]
mov dword [ebp - 0x14], ebx
call edi
test eax, eax
jne 0x76efd40d
cmp dword [ebp - 0x10], 7
jne 0x76efd40d
mov eax, dword [ebp - 4]
mov edi, eax
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
je 0x76efd3f1
jmp 0x76efd3b9
cmp dword [ebp - 0x14], 0xa
jae 0x76efd3f9
push edi
call dword [sym.imp._Cmvrt.DLL_atoi]
cmp eax, ebx
pop ecx
je 0x76efd3e1
mov ecx, dword [ebp - 0x14]
inc dword [ebp - 0x14]
mov dword [ecx*4 + 0x76f13380], eax
lea edi, [edi + esi + 1]
mov eax, edi
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x76efd3ea
sub eax, esi
mov esi, eax
cmp esi, ebx
jne 0x76efd3c2
mov eax, dword [ebp - 0x14]
mov dword [eax*4 + 0x76f13380], ebx
mov dword [0x76f11054], 0x76f13380
push dword [ebp - 4]
call fcn.76ef264e
jmp 0x76ef7238