Function at 0x1006982c
Capabilities:
Check os version

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xf0
mov eax, dword [0x100c51b8]
xor eax, esp
mov dword [esp + 0xec], eax
lea esi, [esp + 0x58]
mov dword [esp + 0x30], esi
mov eax, dword [esp + 0x30]
mov edi, 0x94
push edi
push 0
push dword [esp + 0x38]
call fcn.1008c000
add esp, 0xc
mov dword [esi], edi
push esi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea ecx, [esp + 0x54]
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
mov edi, dword [esi + 4]
mov ebx, dword [esi + 8]
xor eax, eax
cmp ebx, 1
sete al
mov edx, 2
sub edx, eax
mov dword [esp + 0x14], edx
test ebx, ebx
mov dword [esp + 8], ebx
mov edx, 0x6865c0be
mov eax, 0x38605d81
cmove edx, eax
mov dword [esp + 0x34], edi
cmp edi, 5
cmovne edx, eax
mov dword [esp + 0x1c], edx
cmp edi, 6
mov eax, 0x1a56e738
mov edx, 0xaf41076c
cmove edx, eax
mov dword [esp + 0x10], edx
cmp edi, 7
mov eax, 0x67231492
mov edx, 0x5d5de533
cmovge edx, eax
mov dword [esp + 0x18], edx
mov dword [ecx], edi
lea ecx, [esp + 0x50]
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x3c]
mov dword [ecx], ebx
lea eax, [esp + 0x4c]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov eax, dword [esi + 0xc]
cmp eax, 0x3839
mov ecx, 0x7d67bbcd
mov edx, 0xab4be844
cmovge edx, ecx
mov dword [esp + 0x2c], edx
cmp eax, 0x3ad7
mov ecx, 0xaabc4d50
mov ebp, 0x2f13dc9
cmovge ebp, ecx
cmp eax, 0x3fab
mov ecx, 0x939e496e
mov edx, 0x583388c7
cmovge edx, ecx
mov dword [esp + 0x28], edx
cmp eax, 0x42ee
mov ecx, 0x88adca03
mov edx, 0x16cfb47f
cmovge edx, ecx
cmp eax, 0x4563
mov ecx, 0x7a17811e
mov esi, 0xb84242ef
cmovge esi, ecx
mov dword [esp + 0x24], esi
cmp eax, 0x47ba
mov ecx, 0xb420830a
mov ebx, 0xa687de5b
cmovge ebx, ecx
cmp eax, 0x47bb
mov ecx, 0x83c7ae46
mov esi, 0xd2d20a40
cmovge esi, ecx
cmp eax, 0x4a61
mov ecx, 0x368cd16
mov edi, 0xb9545807
cmovge ecx, edi
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x4c]
mov dword [ecx], eax
cmp dword [esp + 0x34], 0xa
mov eax, 0x189803a8
mov ecx, 0x51222a9d
cmove ecx, eax
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 8]
cmp eax, 3
lea eax, [eax + 3]
mov ecx, 6
cmovb ecx, eax
mov dword [esp + 4], ecx
mov eax, 0x6cfc048f
mov edi, eax
cmp eax, 0x51222a9c
jle 0x10069a0e
cmp edi, 0x67231491
jle 0x10069bf0
cmp edi, 0x67231492
je 0x10069c31
cmp edi, 0x6865c0be
je 0x10069c40
mov eax, edi
cmp edi, 0x6cfc048f
jne 0x100699d1
mov eax, dword [esp + 0xc]
jmp 0x100699d1
cmp edi, 0x1a56e737
jg 0x10069c17
mov eax, dword [esp + 0x1c]
cmp edi, 0xaf41076c
je 0x100699d1
cmp edi, 0x189803a8
jne 0x10069c76
mov edi, 0x7d3c9d5f
mov eax, edi
cmp edi, 0xd2d20a3f
jg 0x10069a7c
cmp eax, 0xaabc4d4f
jle 0x10069aae
cmp eax, 0xb4208309
jle 0x10069b0e
cmp eax, 0xb420830a
je 0x10069b96
mov edi, edx
cmp eax, 0xb84242ef
je 0x10069a37
mov edi, eax
cmp eax, 0xb9545807
jne 0x10069a37
mov ecx, 0x10
mov edi, 0x1ab6153e
jmp 0x10069a37
cmp eax, 0x1ab6153d
jle 0x10069ae0
cmp eax, 0x7d3c9d5e
jg 0x10069b35
mov edi, ebp
cmp eax, 0x583388c7
je 0x10069a37
cmp eax, 0x7a17811e
jne 0x10069be1
mov ecx, 0xd
mov edi, 0x1ab6153e
jmp 0x10069a37
cmp eax, 0x939e496d
jg 0x10069b56
cmp eax, 0x83c7ae46
je 0x10069ba5
mov edi, eax
cmp eax, 0x88adca03
jne 0x10069a37
mov ecx, 0xc
mov edi, 0x1ab6153e
jmp 0x10069a37
cmp eax, 0x368cd15
jg 0x10069b73
mov edi, ebx
cmp eax, 0xd2d20a40
je 0x10069a37
mov edi, eax
cmp eax, 0x2f13dc9
jne 0x10069a37
mov edi, dword [esp + 0x2c]
jmp 0x10069a37
cmp eax, 0xaabc4d50
je 0x10069bb4
mov edi, eax
cmp eax, 0xab4be844
jne 0x10069a37
mov ecx, 7
mov edi, 0x1ab6153e
jmp 0x10069a37
cmp eax, 0x7d67bbcd
je 0x10069bc3
mov edi, eax
cmp eax, 0x7d3c9d5f
jne 0x10069a37
mov edi, dword [esp + 0x20]
jmp 0x10069a37
cmp eax, 0x939e496e
je 0x10069bd2
mov edi, eax
cmp eax, 0xa687de5b
jne 0x10069a37
mov edi, dword [esp + 0x24]
jmp 0x10069a37
mov edi, esi
cmp eax, 0x368cd16
je 0x10069a37
mov edi, eax
cmp eax, 0x16cfb47f
jne 0x10069a37
mov edi, dword [esp + 0x28]
jmp 0x10069a37
mov ecx, 0xe
mov edi, 0x1ab6153e
jmp 0x10069a37
mov ecx, 0xf
mov edi, 0x1ab6153e
jmp 0x10069a37
mov ecx, 0xa
mov edi, 0x1ab6153e
jmp 0x10069a37
mov ecx, 9
mov edi, 0x1ab6153e
jmp 0x10069a37
mov ecx, 0xb
mov edi, 0x1ab6153e
jmp 0x10069a37
mov edi, eax
cmp eax, 0x1ab6153e
jne 0x10069a37
jmp 0x10069c36
mov eax, dword [esp + 0x18]
cmp edi, 0x51222a9d
je 0x100699d1
mov eax, edi
cmp edi, 0x5d5de533
jne 0x100699d1
mov eax, dword [esp + 0x10]
jmp 0x100699d1
cmp edi, 0x1a56e738
je 0x10069c4e
mov eax, edi
cmp edi, 0x38605d81
jne 0x100699d1
xor ecx, ecx
jmp 0x10069c36
mov ecx, 0x11
mov eax, 0xab3d47ec
jmp 0x100699d1
mov eax, 0xab3d47ec
mov ecx, dword [esp + 0x14]
jmp 0x100699d1
mov eax, 0xb9069d51
cmp eax, 0x509a0ff
je 0x10069c68
cmp eax, 0xb9069d51
jne 0x10069c53
mov eax, 0x509a0ff
jmp 0x10069c53
mov eax, 0xab3d47ec
mov ecx, dword [esp + 4]
jmp 0x100699d1
mov eax, edi
cmp edi, 0xab3d47ec
jne 0x100699d1
cmp dword [esp + 0x34], 6
mov dword [esp + 0x44], ecx
sete byte [esp + 2]
cmp dword [esp + 8], 2
sete byte [esp + 3]
mov eax, 0x85a92ac5
cmp eax, 0x99adbcc6
jle 0x10069cc2
cmp eax, 0x99adbcc7
je 0x10069d07
cmp eax, 0xc220a3f5
je 0x10069d10
cmp eax, 0xe97961ee
jne 0x10069ca1
jmp 0x1006a173
cmp eax, 0x85a92ac5
je 0x1006a14a
cmp eax, 0x99695bea
jne 0x10069ca1
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.RtlGetNtVersionNumbers
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x48], eax
cmp dword [esp + 0x48], 0
mov eax, 0xc220a3f5
mov ecx, 0x99adbcc7
cmove eax, ecx
mov edx, dword [esp + 0x44]
jmp 0x10069ca1
mov eax, 0xe97961ee
mov esi, edx
jmp 0x10069ca1
mov dword [esp + 8], esi
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x5c]
push ecx
call eax
movzx edi, word [esp + 0x4c]
mov dword [esp + 0x4c], edi
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov ebp, dword [esp + 0x54]
xor eax, eax
cmp edx, 1
sete al
mov ecx, 2
sub ecx, eax
mov dword [esp + 0x14], ecx
test edx, edx
mov ecx, 0x38605d81
mov eax, 0x6865c0be
cmovne ecx, eax
cmp ebp, 5
mov eax, 0x38605d81
cmovne ecx, eax
mov dword [esp + 0x1c], ecx
cmp ebp, 6
mov ecx, 0xaf41076c
mov eax, 0x1a56e738
cmove ecx, eax
mov dword [esp + 0x10], ecx
cmp ebp, 7
mov ecx, 0x5d5de533
mov eax, 0x67231492
cmovge ecx, eax
mov dword [esp + 0x18], ecx
cmp edi, 0x3839
mov ecx, 0xab4be844
mov eax, 0x7d67bbcd
cmovae ecx, eax
mov dword [esp + 0x2c], ecx
cmp edi, 0x3ad7
mov esi, 0x2f13dc9
mov eax, 0xaabc4d50
cmovae esi, eax
cmp edi, 0x3fab
mov ecx, 0x583388c7
mov eax, 0x939e496e
cmovae ecx, eax
mov dword [esp + 0x28], ecx
cmp edi, 0x42ee
mov eax, 0x16cfb47f
mov ecx, 0x88adca03
cmovae eax, ecx
cmp edi, 0x4563
mov edx, 0xb84242ef
mov ecx, 0x7a17811e
cmovae edx, ecx
mov dword [esp + 0x24], edx
cmp edi, 0x47ba
mov ecx, 0xa687de5b
mov ebx, 0xb420830a
cmovae ecx, ebx
cmp edi, 0x47bb
mov ebx, 0xd2d20a40
mov edx, 0x83c7ae46
cmovae ebx, edx
cmp edi, 0x4a61
mov edi, 0x368cd16
mov edx, 0xb9545807
cmovae edi, edx
mov dword [esp + 0x20], edi
cmp ebp, 0xa
mov edi, 0x51222a9d
mov edx, 0x189803a8
cmove edi, edx
mov dword [esp + 0xc], edi
mov edx, dword [esp + 4]
cmp edx, 3
lea edi, [edx + 3]
mov edx, 6
cmovae edi, edx
mov dword [esp + 4], edi
mov edi, 0x6cfc048f
mov ebp, edi
cmp edi, 0x51222a9c
jle 0x10069eac
cmp ebp, 0x67231491
jle 0x1006a0a6
cmp ebp, 0x67231492
je 0x1006a0e7
cmp ebp, 0x6865c0be
je 0x1006a0f6
mov edi, ebp
cmp ebp, 0x6cfc048f
jne 0x10069e6e
mov edi, dword [esp + 0xc]
jmp 0x10069e6e
cmp ebp, 0x1a56e737
jg 0x1006a0cd
mov edi, dword [esp + 0x1c]
cmp ebp, 0xaf41076c
je 0x10069e6e
cmp ebp, 0x189803a8
jne 0x1006a12e
mov edi, 0x7d3c9d5f
mov ebp, edi
cmp edi, 0xd2d20a3f
jg 0x10069f1f
cmp ebp, 0xaabc4d4f
jle 0x10069f55
cmp ebp, 0xb4208309
jle 0x10069fbb
cmp ebp, 0xb420830a
je 0x1006a04b
mov edi, eax
cmp ebp, 0xb84242ef
je 0x10069ed5
mov edi, ebp
cmp ebp, 0xb9545807
jne 0x10069ed5
mov edx, 0x10
mov edi, 0x1ab6153e
jmp 0x10069ed5
cmp ebp, 0x1ab6153d
jle 0x10069f8a
cmp ebp, 0x7d3c9d5e
jg 0x10069fe4
mov edi, esi
cmp ebp, 0x583388c7
je 0x10069ed5
cmp ebp, 0x7a17811e
jne 0x1006a096
mov edx, 0xd
mov edi, 0x1ab6153e
jmp 0x10069ed5
cmp ebp, 0x939e496d
jg 0x1006a007
cmp ebp, 0x83c7ae46
je 0x1006a05a
mov edi, ebp
cmp ebp, 0x88adca03
jne 0x10069ed5
mov edx, 0xc
mov edi, 0x1ab6153e
jmp 0x10069ed5
cmp ebp, 0x368cd15
jg 0x1006a026
mov edi, ecx
cmp ebp, 0xd2d20a40
je 0x10069ed5
mov edi, ebp
cmp ebp, 0x2f13dc9
jne 0x10069ed5
mov edi, dword [esp + 0x2c]
jmp 0x10069ed5
cmp ebp, 0xaabc4d50
je 0x1006a069
mov edi, ebp
cmp ebp, 0xab4be844
jne 0x10069ed5
mov edx, 7
mov edi, 0x1ab6153e
jmp 0x10069ed5
cmp ebp, 0x7d67bbcd
je 0x1006a078
mov edi, ebp
cmp ebp, 0x7d3c9d5f
jne 0x10069ed5
mov edi, dword [esp + 0x20]
jmp 0x10069ed5
cmp ebp, 0x939e496e
je 0x1006a087
mov edi, ebp
cmp ebp, 0xa687de5b
jne 0x10069ed5
mov edi, dword [esp + 0x24]
jmp 0x10069ed5
mov edi, ebx
cmp ebp, 0x368cd16
je 0x10069ed5
mov edi, ebp
cmp ebp, 0x16cfb47f
jne 0x10069ed5
mov edi, dword [esp + 0x28]
jmp 0x10069ed5
mov edx, 0xe
mov edi, 0x1ab6153e
jmp 0x10069ed5
mov edx, 0xf
mov edi, 0x1ab6153e
jmp 0x10069ed5
mov edx, 0xa
mov edi, 0x1ab6153e
jmp 0x10069ed5
mov edx, 9
mov edi, 0x1ab6153e
jmp 0x10069ed5
mov edx, 0xb
mov edi, 0x1ab6153e
jmp 0x10069ed5
mov edi, ebp
cmp ebp, 0x1ab6153e
jne 0x10069ed5
jmp 0x1006a0ec
mov edi, dword [esp + 0x18]
cmp ebp, 0x51222a9d
je 0x10069e6e
mov edi, ebp
cmp ebp, 0x5d5de533
jne 0x10069e6e
mov edi, dword [esp + 0x10]
jmp 0x10069e6e
cmp ebp, 0x1a56e738
je 0x1006a104
mov edi, ebp
cmp ebp, 0x38605d81
jne 0x10069e6e
xor edx, edx
jmp 0x1006a0ec
mov edx, 0x11
mov edi, 0xab3d47ec
jmp 0x10069e6e
mov edi, 0xab3d47ec
mov edx, dword [esp + 0x14]
jmp 0x10069e6e
mov edx, 0xb9069d51
cmp edx, 0x509a0ff
je 0x1006a120
cmp edx, 0xb9069d51
jne 0x1006a109
mov edx, 0x509a0ff
jmp 0x1006a109
mov edi, 0xab3d47ec
mov edx, dword [esp + 4]
jmp 0x10069e6e
mov edi, ebp
cmp ebp, 0xab3d47ec
jne 0x10069e6e
mov eax, 0x99adbcc7
mov esi, dword [esp + 8]
jmp 0x10069ca1
mov cl, byte [esp + 2]
cmp byte [esp + 3], 0
mov eax, 0xe97961ee
mov esi, 0x99695bea
cmovne eax, esi
test cl, cl
mov ecx, 0xe97961ee
cmove eax, ecx
mov esi, dword [esp + 0x44]
jmp 0x10069ca1
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xec]
xor ecx, esp
call fcn.100879aa
mov eax, esi
add esp, 0xf0
pop esi
pop edi
pop ebx
pop ebp
ret