Function at 0x472d3c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff50
push ebx
xor edx, edx
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 4], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x473049
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x98], 0x94
lea eax, [ebp - 0x98]
push eax
call sub.kernel32.dll_GetVersionExA
lea eax, [ebp - 4]
call fcn.00404574
mov eax, dword [ebp - 0x88]
sub eax, 1
jb 0x472db6
je 0x472dd5
dec eax
je 0x472ed1
jmp 0x472fc6
lea edx, [ebp - 4]
lea eax, [ebp - 0x84]
call fcn.004090e8
mov eax, ebx
mov edx, 0x473060
call fcn.004045c8
jmp 0x472fd2
mov eax, dword [ebp - 0x90]
sub eax, 1
jb 0x472df3
sub eax, 9
je 0x472e49
sub eax, 0x50
je 0x472e9f
jmp 0x472ec0
lea eax, [ebp - 0xa0]
mov dl, byte [ebp - 0x83]
call fcn.0040475c
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.00408734
mov eax, dword [ebp - 0x9c]
mov edx, 0x47307c
call fcn.00404980
jne 0x472e38
mov eax, ebx
mov edx, 0x473088
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x4730ac
call fcn.004045c8
jmp 0x472fd2
lea eax, [ebp - 0xa8]
mov dl, byte [ebp - 0x83]
call fcn.0040475c
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa4]
call fcn.00408734
mov eax, dword [ebp - 0xa4]
mov edx, 0x4730d0
call fcn.00404980
jne 0x472e8e
mov eax, ebx
mov edx, 0x4730dc
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x473100
call fcn.004045c8
jmp 0x472fd2
cmp dword [ebp - 0x8c], 0x45a0bb8
jne 0x472fd2
mov eax, ebx
mov edx, 0x473124
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x473144
call fcn.004045c8
jmp 0x472fd2
lea edx, [ebp - 4]
lea eax, [ebp - 0x84]
call fcn.004090e8
mov eax, dword [ebp - 0x94]
cmp eax, 6
ja case.0x472eee.0
jmp dword [eax*4 + 0x472ef5]
cmp dword [ebp - 0x90], 6
jne 0x472fd2
mov eax, ebx
mov edx, 0x473160
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x473174
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x47318c
call fcn.004045c8
jmp 0x472fd2
mov eax, dword [ebp - 0x90]
sub eax, 1
jb 0x472f63
je 0x472f71
dec eax
je 0x472f7f
jmp 0x472fd2
mov eax, ebx
mov edx, 0x4731a4
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x4731bc
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x4731d0
call fcn.004045c8
jmp 0x472fd2
mov eax, dword [ebp - 0x90]
sub eax, 1
jb 0x472f9c
je 0x472faa
jmp 0x472fd2
mov eax, ebx
mov edx, 0x4731e8
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x473200
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x473214
call fcn.004045c8
jmp 0x472fd2
mov eax, ebx
mov edx, 0x473224
call fcn.004045c8
push dword [ebx]
mov eax, dword [ebp - 0x94]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xac]
call fcn.00408920
push dword [ebp - 0xac]
push 0x473234
mov eax, dword [ebp - 0x90]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb0]
call fcn.00408920
push dword [ebp - 0xb0]
push 0x473240
push dword [ebp - 4]
mov eax, ebx
mov edx, 6
call fcn.004048f4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x473050
lea eax, [ebp - 0xb0]
mov edx, 6
call fcn.00404598
lea eax, [ebp - 4]
call fcn.00404574
ret