Function at 0x40705a
Capabilities:
Check os version

Disassembly:
push 0x344
mov eax, 0x4112bf
call fcn.00402f84
xor ebx, ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x214], ebx
lea eax, [ebp - 0x210]
mov dword [ebp - 0x21c], 0x200
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], ebx
push 2
pop edx
mov dword [ebp - 0x220], edx
mov eax, dword [ebp - 0x214]
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], edx
lea ecx, [ebp - 0x220]
call fcn.00405481
push 0x407430
lea ecx, [ebp - 0x220]
call fcn.00404d0b
lea edx, [ebp - 0x33c]
mov dword [ebp - 0x33c], ebx
mov ecx, 0x407588
call fcn.004083a6
mov esi, dword [ebp - 0x33c]
mov edi, ebx
mov dword [ebp - 0x350], esi
mov dword [ebp - 0x34c], edi
test esi, esi
je 0x407103
inc edi
mov dword [ebp - 0x34c], edi
mov byte [ebp - 4], 6
test esi, esi
je 0x407127
push 0x4045f4
lea ecx, [ebp - 0x220]
call fcn.00404d0b
push esi
lea ecx, [ebp - 0x220]
call fcn.00404d0b
push 0x40744c
lea ecx, [ebp - 0x220]
call fcn.00404d0b
mov dword [ebp - 0x33c], ebx
lea ecx, [ebp - 0x220]
call fcn.0040c698
mov edx, dword [ebp - 0x214]
lea eax, [ebp - 0x33c]
push ecx
push eax
push 0x40745c
call fcn.0040e126
test eax, eax
je 0x40719c
cmp dword [ebp - 0x33c], 0
je 0x40719c
mov byte [ebp - 4], 2
test edi, edi
je 0x407186
test esi, esi
je 0x407180
mov edx, esi
call fcn.00402093
mov dword [ebp - 0x34c], ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.00402e57
mov al, 1
jmp 0x4073fd
lea ecx, [ebp - 0x220]
call fcn.00405481
push 0x407404
lea ecx, [ebp - 0x220]
call fcn.00404d0b
push 0x407420
lea ecx, [ebp - 0x220]
call fcn.00404d0b
lea ecx, [ebp - 0x220]
call fcn.0040c698
mov edx, dword [ebp - 0x214]
lea eax, [ebp - 0x33c]
push ecx
push eax
push 0x407474
call fcn.0040e126
test eax, eax
je 0x407215
cmp dword [ebp - 0x33c], 0
je 0x407215
mov byte [ebp - 4], 2
test edi, edi
je 0x407186
test esi, esi
je 0x40720a
mov edx, esi
call fcn.00402093
mov dword [ebp - 0x34c], ebx
jmp 0x407186
lea eax, [ebp - 0x338]
mov dword [ebp - 0x338], 0x114
xor ebx, ebx
push eax
inc ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x407238
call fcn.0040c1b9
cmp dword [ebp - 0x334], 5
ja 0x40724c
jne 0x407251
cmp dword [ebp - 0x330], 0
jbe 0x407251
mov ebx, 0x101
and dword [ebp - 0x340], 0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x340]
mov edx, 0x407490
push eax
push ebx
push ecx
call fcn.00408ac8
test eax, eax
jne 0x4072f8
xor ecx, ecx
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x348], ecx
push ecx
push ecx
push ecx
push ecx
lea eax, [ebp - 0x348]
push eax
push ecx
push ecx
lea eax, [ebp - 0x33c]
push eax
push ecx
push ecx
push ecx
push dword [ebp - 0x340]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x4072f8
cmp dword [ebp - 0x33c], eax
jne 0x4072bc
cmp dword [ebp - 0x348], eax
je 0x4072f8
mov byte [ebp - 4], 6
cmp dword [ebp - 0x340], 0
je 0x4072d5
push dword [ebp - 0x340]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 2
test edi, edi
je 0x407186
test esi, esi
je 0x4072ec
mov edx, esi
call fcn.00402093
and dword [ebp - 0x34c], 0
jmp 0x407186
and dword [ebp - 0x344], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x344]
mov edx, 0x407510
push eax
push ebx
push ecx
call fcn.00408ac8
xor ebx, ebx
test eax, eax
jne 0x4073a1
mov dword [ebp - 0x348], ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x348]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x344]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
jne 0x4073a1
cmp dword [ebp - 0x348], ebx
je 0x4073a1
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x344], ebx
je 0x407367
push dword [ebp - 0x344]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x340], ebx
je 0x40737f
push dword [ebp - 0x340]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 2
test edi, edi
je 0x407186
test esi, esi
je 0x407396
mov edx, esi
call fcn.00402093
mov dword [ebp - 0x34c], ebx
jmp 0x407186
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x344], 0
je 0x4073ba
push dword [ebp - 0x344]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x340], 0
je 0x4073d3
push dword [ebp - 0x340]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 2
test edi, edi
je 0x4073ec
test esi, esi
je 0x4073e6
mov edx, esi
call fcn.00402093
mov dword [ebp - 0x34c], ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.00402e57
xor al, al
call fcn.00401f50
ret