Function at 0x26879fca
Capabilities:
Check os version

Disassembly:
mov eax, 0x268edfbf
call fcn.268eb4dc
sub esp, 0x5b8
and dword [ebp - 0x28], 0
push ebx
push esi
push edi
lea eax, [ebp - 0x1ac]
push eax
mov esi, ecx
mov edi, edx
mov dword [ebp - 0x1ac], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea eax, [ebp - 0x44]
push eax
call fcn.2687b1de
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x44]
push eax
call fcn.2687958b
test eax, eax
pop ecx
jne 0x2687a0a0
mov eax, dword [edi]
push 0x138e4
push edi
call dword [eax + 0x3c]
mov ebx, 0x268f3f58
call fcn.268e6bb2
pop ecx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x44]
call fcn.2687b205
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x24]
xor ecx, ecx
xor ebx, ebx
cmp eax, ebx
setne cl
mov dword [ebp - 0x1c], eax
dec ecx
cmp eax, ebx
mov dword [ebp - 0x10], ecx
je 0x2687a077
lea eax, [ebp - 0x24]
call fcn.268d69af
push dword [eax]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea eax, [ebp - 0x24]
call fcn.268d69bf
cmp dword [ebp - 0x1c], ebx
jne 0x2687a05a
mov byte [ebp - 4], 1
lea eax, [ebp - 0x24]
push eax
call fcn.2687b22c
lea esi, [ebp - 0x44]
call fcn.268d6b77
mov esi, dword [ebp + 8]
mov dword [esi], ebx
mov dword [ebp - 0x28], 1
mov byte [ebp - 4], bl
jmp 0x2687a334
cmp esi, 0xffffffff
jne 0x2687a0a7
xor esi, esi
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x5c], esi
push 0x268f1584
lea esi, [ebp + 0xc]
mov dword [ebp - 0x48], eax
call fcn.268e2ff3
mov byte [ebp - 4], 3
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x44]
call fcn.2687b205
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp - 0x1c], eax
dec ecx
test eax, eax
mov dword [ebp - 0x10], ecx
je 0x2687a2b1
mov dword [ebp + 0x18], ebx
mov ebx, dword [sym.imp.MSVCRT.dll__itow]
lea eax, [ebp - 0x24]
call fcn.268d69af
and dword [ebp + 0x10], 0
mov edi, eax
mov dword [ebp + 0x1c], 1
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + eax*4 - 0x5c]
cmp esi, 0xffffffff
je 0x2687a283
cmp dword [ebp + 0x1c], 0
je 0x2687a13c
and dword [ebp + 0x1c], 0
jmp 0x2687a14a
push 0x2691126c
lea eax, [ebp + 0xc]
push eax
call fcn.268e33a7
mov eax, esi
sub eax, 0
je 0x2687a24f
dec eax
je 0x2687a1e8
dec eax
dec eax
je 0x2687a1c7
dec eax
je 0x2687a1a7
dec eax
je 0x2687a187
dec eax
jne 0x2687a276
push 0xa
lea eax, [ebp - 0x98]
push eax
mov eax, dword [edi]
push dword [eax + 0x20c]
call fcn.268d5e0f
pop ecx
push eax
jmp 0x2687a1d8
cmp dword [ebp - 0x19c], 2
jne 0x2687a276
push 0xa
lea eax, [ebp - 0x98]
push eax
mov eax, dword [edi]
push dword [eax + 0x218]
jmp 0x2687a1d8
cmp dword [ebp - 0x19c], 2
jne 0x2687a276
push 0xa
lea eax, [ebp - 0x98]
push eax
mov eax, dword [edi]
push dword [eax + 0x21c]
jmp 0x2687a1d8
push 0xa
lea eax, [ebp - 0x98]
push eax
mov eax, dword [edi]
push dword [eax + 0x20c]
call ebx
add esp, 0xc
lea eax, [ebp - 0x98]
jmp 0x2687a26c
push dword [edi]
lea esi, [ebp + 0x14]
call fcn.268e2ff3
mov byte [ebp - 4], 5
push 0x26912d94
xor ecx, ecx
call fcn.268e36ff
cmp eax, 0xffffffff
je 0x2687a236
push 4
lea eax, [ebp - 0x2c]
push eax
mov eax, esi
push eax
call fcn.268e3521
mov byte [ebp - 4], 6
call fcn.268e3147
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.268e33a7
mov byte [ebp - 4], 5
lea eax, [ebp - 0x2c]
call fcn.268e3036
jmp 0x2687a241
push dword [edi]
lea eax, [ebp + 0xc]
push eax
call fcn.268e33a7
mov byte [ebp - 4], 4
lea eax, [ebp + 0x14]
call fcn.268e3036
jmp 0x2687a276
mov ecx, dword [edi]
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x5c4]
push eax
call fcn.26863476
pop ecx
pop ecx
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.268e33a7
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 5
jl 0x2687a120
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp - 0x34]
je 0x2687a299
push 0x268f163c
lea eax, [ebp + 0xc]
push eax
call fcn.268e33a7
inc dword [ebp + 0x18]
lea eax, [ebp - 0x24]
call fcn.268d69bf
cmp dword [ebp - 0x1c], 0
jne 0x2687a10b
xor ebx, ebx
inc ebx
mov byte [ebp - 4], 3
lea eax, [ebp - 0x24]
push eax
call fcn.2687b22c
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x44]
call fcn.2687b205
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x24]
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp - 0x1c], eax
dec ecx
test eax, eax
mov dword [ebp - 0x10], ecx
je 0x2687a301
lea eax, [ebp - 0x24]
call fcn.268d69af
push dword [eax]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
lea eax, [ebp - 0x24]
call fcn.268d69bf
cmp dword [ebp - 0x1c], 0
jne 0x2687a2e3
mov byte [ebp - 4], 3
lea eax, [ebp - 0x24]
push eax
call fcn.2687b22c
lea esi, [ebp - 0x44]
call fcn.268d6b77
push dword [ebp + 0xc]
mov esi, dword [ebp + 8]
call fcn.26869bdf
mov dword [ebp - 0x28], ebx
mov byte [ebp - 4], 1
lea eax, [ebp + 0xc]
call fcn.268e3036
mov byte [ebp - 4], 0
lea eax, [ebp - 0x44]
push eax
call fcn.268d39a2
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x18