Function at 0x68961d
Capabilities:
Check os version

Disassembly:
push ebp
lea ebp, [esp - 0x118]
sub esp, 0x118
push 0xffffffffffffffff
push 0x6a345d
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x79b544]
xor eax, ebp
mov dword [ebp + 0x114], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov ebx, ecx
mov dword [ebp - 0x18], ebx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], ebx
push 0x750660
mov dword [ebp - 0x1c], edi
call fcn.004514db
lea eax, [ebp]
mov dword [ebp - 4], edi
push eax
mov dword [ebp - 0x1c], 1
mov dword [ebp], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 4]
mov dword [esi], ecx
sub eax, edi
je 0x689738
sub eax, 1
je 0x689706
sub eax, 1
jne 0x68974c
mov eax, dword [ebp + 8]
cmp ecx, 5
jne 0x6896db
test eax, eax
jne 0x6896c2
lea eax, [ebp + 0x14]
push eax
push str.Windows_2000_With__s
jmp 0x6896d0
cmp eax, 1
jne 0x6896fb
lea eax, [ebp + 0x14]
push eax
push str.Windows_XP__s
push ebx
call fcn.00452465
add esp, 0xc
jmp 0x68974c
mov ecx, dword [ebp + 4]
cmp ecx, 4
ja 0x6896fb
lea eax, [ebp + 0x14]
push eax
push dword [ebp + 8]
push ecx
push str.Windows_NT__d._d_with__s
push ebx
call fcn.00452465
add esp, 0x14
jmp 0x68974c
push eax
push dword [ebp + 4]
push str.Windows__d._d
jmp 0x689743
mov eax, dword [ebp + 8]
test eax, eax
jne 0x689716
push 0xa
push str.Windows_t95
jmp 0x68972f
cmp eax, 0xa
jne 0x689723
push eax
push str.Windows_98
jmp 0x68972f
cmp eax, 0x5a
jne 0x68974c
push 0xa
push str.Windows_tMe
mov ecx, ebx
call fcn.00452145
jmp 0x68974c
push dword [ebp + 8]
push dword [ebp + 4]
push 0x77088c
push ebx
call fcn.00452465
add esp, 0x10
mov edx, dword [ebp + 4]
lea ecx, [ebp - 0x14]
call fcn.00687bda
push ebx
lea eax, [ebp - 0x10]
mov dword [ebp - 4], 1
push str.OSVersion:
push eax
call fcn.00458ac7
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 2
call fcn.00451d78
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.0044ec01
mov dword [ebp - 0x18], edi
call fcn.00474f38
push eax
lea ecx, [ebp - 0x10]
call fcn.00451c1b
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 3
call fcn.0067fef3
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 4
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
call fcn.00452465
mov edi, dword [ebp - 0x10]
pop ecx
mov esi, esp
add edi, 0xfffffff0
push edi
mov dword [ebp - 0x20], esi
call fcn.0045207b
pop ecx
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.004547b1
push 0xb
push 0x7709dc
lea ecx, [ebp - 0x28]
call fcn.00452145
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x40]
call fcn.0067f45a
push dword [ebp - 0x14]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp + 4]
push eax
push str._s__d._d._d__s
push ebx
call fcn.00452465
add esp, 0x1c
mov ecx, ebx
call fcn.0045156f
push eax
push 0x75734c
call fcn.006778de
pop ecx
pop ecx
lea ecx, [ebp - 0x40]
call fcn.004547e0
mov ecx, edi
call fcn.0044ec01
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0044ec01
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x114]
xor ecx, ebp
call fcn.0049b511
add ebp, 0x118
leave
ret