Function at 0x42730a
Capabilities:
Check os version

Disassembly:
push 0xac
mov eax, 0x43f83e
call fcn.00412746
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x80], ebx
test byte [0x457f9c], 1
mov dword [ebp - 0x38], eax
jne 0x42734d
or dword [0x457f9c], 1
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xff
mov dword [0x457f98], eax
push 4
call fcn.00410fd3
pop ecx
cmp eax, ebx
je 0x427363
lea ecx, [ebp - 0xa0]
mov dword [eax], ecx
jmp 0x427365
xor eax, eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 4], 1
call fcn.00402dba
mov dword [ebp - 0x88], eax
mov byte [eax + 0x2d], 1
mov eax, dword [ebp - 0x88]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x88]
mov dword [eax], eax
mov eax, dword [ebp - 0x88]
mov dword [eax + 8], eax
mov dword [ebp - 0x84], ebx
push 2
pop edi
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 4], edi
call fcn.00405232
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 3
call fcn.00405232
mov byte [ebp - 4], 4
cmp dword [0x457f98], 6
push 0x44bfa8
jl 0x42759d
lea esi, [ebp - 0x30]
call fcn.00401916
mov eax, esi
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.00401fd0
push ebx
push 1
mov byte [ebp - 4], 4
call fcn.0040115a
push str.productState
lea esi, [ebp - 0x30]
call fcn.00401916
mov eax, esi
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 6
call fcn.00401fd0
push ebx
push 1
mov byte [ebp - 4], 4
call fcn.0040115a
push str.ROOTSecurityCenter2
lea esi, [ebp - 0x74]
call fcn.00401916
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 7
push dword [ebp - 0x38]
mov edx, esi
lea ecx, [ebp - 0x2c]
call fcn.00426181
pop ecx
pop ecx
mov esi, eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 8
call fcn.00401edb
lea esi, [ebp - 0x2c]
call fcn.00402892
push dword [ebp - 0x2c]
call fcn.00410f30
pop ecx
push ebx
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 4
call fcn.0040115a
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
push 0x1c
cdq
pop ecx
idiv ecx
xor edi, edi
test eax, eax
jbe 0x4277bd
xor eax, eax
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
push 0x446804
push edi
lea esi, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.00406e79
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00403c02
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0xa
call fcn.004028e7
push ebx
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 9
call fcn.0040115a
lea eax, [edi + 1]
push eax
lea esi, [ebp - 0x58]
call fcn.00406e79
cmp dword [eax + 0x14], ebx
je 0x42753d
lea eax, [edi + 1]
push eax
call fcn.00406e79
mov ebx, eax
call fcn.0042354f
mov ebx, eax
lea eax, [ebp - 0x30]
test ebx, 0x1000
je 0x427514
push str.edou
jmp 0x427519
push 0x44c00c
push eax
call fcn.00403da8
lea eax, [ebp - 0x30]
test bl, 0x10
je 0x42752e
push 0x44c010
jmp 0x427533
push 0x44c014
push eax
call fcn.00403da8
xor ebx, ebx
jmp 0x42754b
push 0x44c018
lea eax, [ebp - 0x30]
push eax
call fcn.00403da8
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00406fbe
test eax, eax
jne 0x427573
lea eax, [ebp - 0x30]
push eax
lea ebx, [ebp - 0xa0]
call fcn.00406e9f
mov byte [eax], 1
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.0040115a
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
push 0x1c
cdq
pop ecx
idiv ecx
inc edi
inc edi
cmp edi, eax
jb 0x427492
jmp 0x4277bd
lea esi, [ebp - 0x74]
call fcn.00401916
mov eax, esi
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0xb
call fcn.00401fd0
push ebx
push 1
mov byte [ebp - 4], 4
call fcn.0040115a
push str.onAccessScanningEnabled
lea esi, [ebp - 0x74]
call fcn.00401916
mov eax, esi
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0xc
call fcn.00401fd0
push ebx
push 1
mov byte [ebp - 4], 4
call fcn.0040115a
push str.productUptoDate
lea esi, [ebp - 0x74]
call fcn.00401916
mov eax, esi
push eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
call fcn.00401fd0
push ebx
push 1
mov byte [ebp - 4], 4
call fcn.0040115a
push str.ROOTSecurityCenter
lea esi, [ebp - 0x74]
call fcn.00401916
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0xe
push dword [ebp - 0x38]
mov edx, esi
lea ecx, [ebp - 0x2c]
call fcn.00426181
pop ecx
pop ecx
mov esi, eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xf
call fcn.00401edb
lea esi, [ebp - 0x2c]
call fcn.00402892
push dword [ebp - 0x2c]
call fcn.00410f30
pop ecx
push ebx
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 4
call fcn.0040115a
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
jbe 0x4277bd
xor eax, eax
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
push 0x446804
lea eax, [edi - 2]
push eax
lea esi, [ebp - 0x58]
mov byte [ebp - 4], 0x10
call fcn.00406e79
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00403c02
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.004028e7
push ebx
push 1
lea esi, [ebp - 0x74]
mov byte [ebp - 4], 0x10
call fcn.0040115a
lea eax, [edi - 1]
push eax
lea esi, [ebp - 0x58]
call fcn.00406e79
push 0x44bd98
call fcn.00403f05
test eax, eax
jne 0x4276f3
push str.edou
jmp 0x427719
lea eax, [edi - 1]
push eax
lea esi, [ebp - 0x58]
call fcn.00406e79
push 0x44bda4
call fcn.00403f05
test eax, eax
jne 0x427714
push 0x44c00c
jmp 0x427719
push 0x44c098
lea eax, [ebp - 0x30]
push eax
call fcn.00403da8
push edi
lea esi, [ebp - 0x58]
call fcn.00406e79
push 0x44bd98
call fcn.00403f05
test eax, eax
jne 0x427740
push 0x44c014
jmp 0x427763
push edi
lea esi, [ebp - 0x58]
call fcn.00406e79
push 0x44bda4
call fcn.00403f05
test eax, eax
jne 0x42775e
push 0x44c010
jmp 0x427763
push 0x44c098
lea eax, [ebp - 0x30]
push eax
call fcn.00403da8
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00406fbe
test eax, eax
jne 0x427794
lea eax, [ebp - 0x30]
push eax
lea ebx, [ebp - 0xa0]
call fcn.00406e9f
mov byte [eax], 1
xor ebx, ebx
push ebx
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.0040115a
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x4c]
push 0x1c
cdq
pop ecx
idiv ecx
add edi, 3
lea ecx, [edi - 2]
cmp ecx, eax
jb 0x427682
mov esi, dword [ebp - 0x40]
call fcn.00401903
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x78], eax
mov eax, dword [eax]
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], eax
jmp 0x42784a
lea esi, [ebp - 0x3c]
call fcn.00407012
mov edi, eax
push edi
lea esi, [ebp - 0x34]
call fcn.004010aa
mov al, byte [edi + 0x1c]
mov byte [ebp - 0x18], al
push 0x446804
mov eax, esi
push eax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x12
call fcn.00403c02
add esp, 0xc
push 0xffffffffffffffff
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x40]
push ebx
call fcn.004028e7
push ebx
push 1
lea esi, [ebp - 0x74]
call fcn.0040115a
push ebx
push 1
lea esi, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.0040115a
lea esi, [ebp - 0x3c]
call fcn.0040703d
lea edi, [ebp - 0x7c]
lea esi, [ebp - 0x3c]
call fcn.004088e0
test al, al
je 0x4277e8
mov edi, dword [ebp - 0x40]
mov eax, dword [edi + 0x14]
cmp eax, ebx
je 0x42786b
dec eax
mov ecx, edi
call fcn.00401a23
lea esi, [ebp - 0x58]
call fcn.00402892
push dword [ebp - 0x58]
call fcn.00410f30
pop ecx
lea esi, [ebp - 0xb8]
call fcn.00402892
push dword [ebp - 0xb8]
call fcn.00410f30
pop ecx
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], bl
call fcn.00406f96
mov eax, edi
call fcn.004127c9
ret