Function at 0x4067c8
Capabilities:
Check os version

Disassembly:
push 0x5dc
mov eax, 0x414163
call fcn.004129b4
mov dword [ebp - 0x5b0], ecx
cmp byte [ebp + 0x10], 0
mov edi, 0x80070057
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x5cc], esi
mov byte [ebp - 0x5ac], bl
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x5c8], eax
jne 0x406814
test cl, cl
je 0x406aeb
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
mov edi, eax
test edi, edi
js 0x406aeb
push 0x27
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x484]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
mov eax, 0x4033a0
test bl, bl
jne 0x40684c
mov eax, 0x4033d0
push eax
mov edx, 0x104
lea ecx, [ebp - 0x474]
call fcn.004040c5
mov edi, eax
test edi, edi
js 0x40687c
xor eax, eax
lea ecx, [ebp - 0x474]
mov word [ebp - 0x1a], ax
lea eax, [ebp - 0x62]
push eax
call fcn.00403fc1
mov edi, eax
test edi, edi
jne 0x4068ec
cmp byte [ebp - 0x5bc], 0
je 0x4068f4
push dword [esi + 0x34]
mov edx, 0x104
lea ecx, [ebp - 0x26c]
call fcn.004040c5
mov edi, eax
test edi, edi
js 0x406aeb
push 0x4033ec
lea ecx, [ebp - 0x26c]
call fcn.00403fc1
mov edi, eax
test edi, edi
js 0x406aeb
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00403fc1
mov edi, eax
test edi, edi
js 0x406aeb
push 0x402670
lea ecx, [ebp - 0x26c]
call fcn.00403fc1
mov edi, eax
test edi, edi
js 0x406aeb
xor al, al
mov byte [ebp - 0x5a5], al
test bl, bl
je 0x40695a
mov esi, 0x11c
lea eax, [ebp - 0x5a4]
push esi
push 0
push eax
call fcn.0040d210
add esp, 0xc
mov dword [ebp - 0x5a4], esi
lea eax, [ebp - 0x5a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x594], 2
jne 0x406954
cmp dword [ebp - 0x5a0], 6
jne 0x406954
cmp dword [ebp - 0x59c], 1
jne 0x406954
mov al, 1
mov ecx, 0x4033f0
mov byte [ebp - 0x5a5], al
jmp 0x406960
mov al, byte [ebp - 0x5a5]
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x5b8], ecx
test bl, bl
je 0x406973
mov esi, 0x4025c0
test al, al
jne 0x406979
lea esi, [ebp - 0x484]
sub esp, 0x10
mov dl, bl
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004082c5
mov dword [ebp - 0x5b4], eax
mov dword [eax + 0x44], 1
test bl, bl
je 0x4069a9
cmp byte [ebp - 0x5a5], 0
je 0x4069a9
mov ecx, dword [ebp + 0x18]
mov dword [eax + 0x48], ecx
lea eax, [ebp - 0x5b4]
push eax
lea edx, [ebp - 0x5b8]
lea ecx, [ebp - 0x5c4]
call fcn.00407537
and dword [ebp - 4], 0
lea ecx, [ebp - 0x26c]
mov eax, dword [ebp - 0x5bc]
lea edx, [ebp - 0x5b0]
movzx eax, al
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x5b0], eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x5b4]
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.004075ba
lea eax, [ebp - 0x5d8]
mov byte [ebp - 4], 1
push eax
lea edx, [ebp - 0x5c4]
lea ecx, [ebp - 0x5e8]
call fcn.00407638
mov byte [ebp - 4], 2
mov ebx, dword [ebp - 0x5cc]
push eax
mov esi, dword [ebx]
push dword [esi + 4]
push esi
call fcn.00407aea
mov edx, eax
mov ecx, 0xffffffe
mov eax, dword [ebx + 4]
sub ecx, eax
cmp ecx, 1
jae 0x406a5c
push 0x402738
call fcn.00408696
inc eax
lea ecx, [ebp - 0x5e8]
mov dword [ebx + 4], eax
mov dword [esi + 4], edx
mov eax, dword [edx + 4]
mov byte [ebp - 4], 1
mov dword [eax], edx
call fcn.00406b04
mov ecx, dword [ebp - 0x5c4]
call fcn.004083c9
mov edi, eax
test edi, edi
js 0x406ac5
lea eax, [ebp - 0x5c4]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.00407484
mov ebx, dword [ebp - 0x5c8]
mov esi, eax
mov ecx, dword [ebx + 4]
mov edx, dword [esi + 4]
mov dword [esi + 4], ecx
mov dword [ebx + 4], edx
mov ecx, dword [esi]
mov eax, dword [ebx]
mov dword [esi], eax
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x5cc]
test ecx, ecx
je 0x406ac5
call fcn.00403b7e
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x5d4]
test ecx, ecx
je 0x406ad8
call fcn.00403b7e
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x5c0]
test ecx, ecx
je 0x406aeb
call fcn.00403b7e
mov eax, edi
call fcn.00412968
ret 0x18