Function at 0x6907fc24
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffec8
xor eax, eax
mov dword [ebp - 0x138], eax
xor eax, eax
push ebp
push 0x69080bf6
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov dword [ebp - 0x98], 0x94
lea eax, [ebp - 0x98]
push eax
call sub.kernel32.dll_GetVersionExA
mov eax, dword [ebp - 0x94]
sub eax, 4
je 0x6907fc88
dec eax
je 0x6907fcf3
dec eax
je 0x6908013b
sub eax, 4
je 0x6907fe4b
jmp 0x69080bdd
mov eax, dword [ebp - 0x90]
sub eax, 1
jb 0x6907fca2
sub eax, 9
je 0x6907fce1
sub eax, 0x50
je 0x6907fcea
jmp 0x69080bdd
cmp dword [ebp - 0x88], 1
jne 0x6907fcb4
mov byte [ebp - 2], 1
jmp 0x69080bdd
mov byte [ebp - 2], 4
lea eax, [ebp - 0x138]
lea edx, [ebp - 0x84]
mov ecx, 0x80
call fcn.69005484
mov eax, dword [ebp - 0x138]
call fcn.69080c08
mov byte [ebp - 1], al
jmp 0x69080bdd
mov byte [ebp - 2], 2
jmp 0x69080bdd
mov byte [ebp - 2], 3
jmp 0x69080bdd
mov eax, dword [ebp - 0x90]
sub eax, 1
jb 0x6907fd0c
je 0x6907fd35
dec eax
je 0x6907fdb4
jmp 0x69080bdd
mov byte [ebp - 2], 5
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
jmp 0x69080bdd
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x6907fd69
mov byte [ebp - 2], 0x10
jmp 0x69080bdd
push 0x58
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x6907fd7d
mov byte [ebp - 2], 0x11
jmp 0x69080bdd
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x6907fd91
mov byte [ebp - 2], 0xf
jmp 0x69080bdd
movzx eax, word [ebp - 0x9c]
and ax, 0x200
cmp ax, 0x200
jne 0x6907fdab
mov byte [ebp - 2], 6
jmp 0x69080bdd
mov byte [ebp - 2], 7
jmp 0x69080bdd
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
cmp byte [ebp - 0x9a], 1
jne 0x6907fde6
mov byte [ebp - 2], 8
jmp 0x69080bdd
push 0x59
call sub.user32.dll_GetSystemMetrics
movzx edx, word [ebp - 0x9c]
mov ecx, edx
and cx, 0x80
cmp cx, 0x80
jne 0x6907fe17
mov byte [ebp - 2], 0x12
test eax, eax
je 0x69080bdd
mov byte [ebp - 2], 0x15
jmp 0x69080bdd
and dx, 2
cmp dx, 2
jne 0x6907fe36
mov byte [ebp - 2], 0x13
test eax, eax
je 0x69080bdd
mov byte [ebp - 2], 0x16
jmp 0x69080bdd
mov byte [ebp - 2], 9
test eax, eax
je 0x69080bdd
mov byte [ebp - 2], 0x14
jmp 0x69080bdd
mov eax, dword [ebp - 0x90]
sub eax, 1
jae 0x69080bdd
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
lea eax, [ebp - 0x134]
call fcn.6907fb74
cmp eax, 0xf
jg 0x6907ff1e
je 0x6908005a
cmp eax, 7
jg 0x6907feef
je 0x690800ab
cmp eax, 3
jg 0x6907fed3
je 0x69080075
sub eax, 0xabcdabcd
je 0x6908010e
sub eax, 0x54325433
je 0x690800ea
dec eax
je 0x690800f3
dec eax
je 0x69080063
jmp case.0x6907ff2a.29
sub eax, 4
je 0x69080036
dec eax
je 0x6908006c
dec eax
je 0x69080009
jmp case.0x6907ff2a.29
add eax, 0xfffffff8
cmp eax, 6
ja case.0x6907ff2a.29
jmp dword [eax*4 + 0x6907ff02]
add eax, 0xfffffff0
cmp eax, 0x35
ja case.0x6907ff2a.29
jmp dword [eax*4 + 0x6907ff31]
mov byte [ebp - 2], 0x9b
jmp 0x69080bdd
mov byte [ebp - 2], 0x9c
jmp 0x69080bdd
mov byte [ebp - 2], 0x9d
jmp 0x69080bdd
mov byte [ebp - 2], 0x9e
jmp 0x69080bdd
mov byte [ebp - 2], 0x9f
jmp 0x69080bdd
mov byte [ebp - 2], 0xa0
jmp 0x69080bdd
mov byte [ebp - 2], 0xa1
jmp 0x69080bdd
mov byte [ebp - 2], 0xa2
jmp 0x69080bdd
mov byte [ebp - 2], 0xa3
jmp 0x69080bdd
mov byte [ebp - 2], 0xa4
jmp 0x69080bdd
mov byte [ebp - 2], 0xa5
jmp 0x69080bdd
mov byte [ebp - 2], 0xa6
jmp 0x69080bdd
mov byte [ebp - 2], 0xa7
jmp 0x69080bdd
mov byte [ebp - 2], 0xa7
jmp 0x69080bdd
mov byte [ebp - 2], 0xa9
jmp 0x69080bdd
mov byte [ebp - 2], 0xaa
jmp 0x69080bdd
mov byte [ebp - 2], 0xab
jmp 0x69080bdd
mov byte [ebp - 2], 0xac
jmp 0x69080bdd
mov byte [ebp - 2], 0xad
jmp 0x69080bdd
mov byte [ebp - 2], 0xae
jmp 0x69080bdd
mov byte [ebp - 2], 0xaf
jmp 0x69080bdd
mov byte [ebp - 2], 0xb0
jmp 0x69080bdd
mov byte [ebp - 2], 0xb1
jmp 0x69080bdd
mov byte [ebp - 2], 0xb2
jmp 0x69080bdd
mov byte [ebp - 2], 0xb3
jmp 0x69080bdd
mov byte [ebp - 2], 0xb4
jmp 0x69080bdd
mov byte [ebp - 2], 0xb5
jmp 0x69080bdd
mov byte [ebp - 2], 0xb6
jmp 0x69080bdd
mov byte [ebp - 2], 0xb7
jmp 0x69080bdd
mov byte [ebp - 2], 0xb8
jmp 0x69080bdd
mov byte [ebp - 2], 0xb9
jmp 0x69080bdd
mov byte [ebp - 2], 0xba
jmp 0x69080bdd
mov byte [ebp - 2], 0xbb
jmp 0x69080bdd
mov byte [ebp - 2], 0x9a
jmp 0x69080bdd
mov eax, dword [ebp - 0x90]
sub eax, 1
jb 0x6908015f
je 0x6908037e
dec eax
je 0x6908065f
dec eax
je 0x69080940
jmp 0x69080bdd
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
lea eax, [ebp - 0x134]
call fcn.6907fb74
cmp eax, 0xe
jg 0x6908021c
je 0x690802af
cmp eax, 6
jg 0x690801ed
je 0x69080267
cmp eax, 2
jg 0x690801d1
je 0x690802c1
sub eax, 0xabcdabcd
je 0x6908036c
sub eax, 0x54325433
je 0x69080348
dec eax
je 0x69080351
jmp case.default.0x69080228
sub eax, 3
je 0x690802d3
dec eax
je 0x69080294
dec eax
je 0x690802ca
jmp case.default.0x69080228
add eax, 0xfffffff9
cmp eax, 6
ja case.default.0x69080228
jmp dword [eax*4 + 0x69080200]
add eax, 0xfffffff1
cmp eax, 0xd
ja case.default.0x69080228
jmp dword [eax*4 + 0x6908022f]
mov byte [ebp - 2], 0x17
jmp 0x69080bdd
mov byte [ebp - 2], 0x18
jmp 0x69080bdd
mov byte [ebp - 2], 0x19
jmp 0x69080bdd
mov byte [ebp - 2], 0x1a
jmp 0x69080bdd
mov byte [ebp - 2], 0x1b
jmp 0x69080bdd
mov byte [ebp - 2], 0x1c
jmp 0x69080bdd
mov byte [ebp - 2], 0x1d
jmp 0x69080bdd
mov byte [ebp - 2], 0x1e
jmp 0x69080bdd
mov byte [ebp - 2], 0x1f
jmp 0x69080bdd
mov byte [ebp - 2], 0x20
jmp 0x69080bdd
mov byte [ebp - 2], 0x21
jmp 0x69080bdd
mov byte [ebp - 2], 0x22
jmp 0x69080bdd
mov byte [ebp - 2], 0x23
jmp 0x69080bdd
mov byte [ebp - 2], 0x23
jmp 0x69080bdd
mov byte [ebp - 2], 0x25
jmp 0x69080bdd
mov byte [ebp - 2], 0x26
jmp 0x69080bdd
mov byte [ebp - 2], 0x27
jmp 0x69080bdd
mov byte [ebp - 2], 0x28
jmp 0x69080bdd
mov byte [ebp - 2], 0x29
jmp 0x69080bdd
mov byte [ebp - 2], 0x2a
jmp 0x69080bdd
mov byte [ebp - 2], 0x2b
jmp 0x69080bdd
mov byte [ebp - 2], 0x2c
jmp 0x69080bdd
mov byte [ebp - 2], 0x2d
jmp 0x69080bdd
mov byte [ebp - 2], 0x2e
jmp 0x69080bdd
mov byte [ebp - 2], 0x2f
jmp 0x69080bdd
mov byte [ebp - 2], 0x30
jmp 0x69080bdd
mov byte [ebp - 2], 0x31
jmp 0x69080bdd
mov byte [ebp - 2], 0x32
jmp 0x69080bdd
mov byte [ebp - 2], 0x33
jmp 0x69080bdd
mov byte [ebp - 2], 0x34
jmp 0x69080bdd
mov byte [ebp - 2], 0xb
jmp 0x69080bdd
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
lea eax, [ebp - 0x134]
call fcn.6907fb74
cmp eax, 0xf
jg 0x69080442
je 0x6908057e
cmp eax, 7
jg 0x69080413
je 0x690805cf
cmp eax, 3
jg 0x690803f7
je 0x69080599
sub eax, 0xabcdabcd
je 0x69080632
sub eax, 0x54325433
je 0x6908060e
dec eax
je 0x69080617
dec eax
je 0x69080587
jmp case.0x6908044e.29
sub eax, 4
je 0x6908055a
dec eax
je 0x69080590
dec eax
je 0x6908052d
jmp case.0x6908044e.29
add eax, 0xfffffff8
cmp eax, 6
ja case.0x6908044e.29
jmp dword [eax*4 + 0x69080426]
add eax, 0xfffffff0
cmp eax, 0x35
ja case.0x6908044e.29
jmp dword [eax*4 + 0x69080455]
mov byte [ebp - 2], 0x35
jmp 0x69080bdd
mov byte [ebp - 2], 0x36
jmp 0x69080bdd
mov byte [ebp - 2], 0x37
jmp 0x69080bdd
mov byte [ebp - 2], 0x38
jmp 0x69080bdd
mov byte [ebp - 2], 0x39
jmp 0x69080bdd
mov byte [ebp - 2], 0x3a
jmp 0x69080bdd
mov byte [ebp - 2], 0x3b
jmp 0x69080bdd
mov byte [ebp - 2], 0x3c
jmp 0x69080bdd
mov byte [ebp - 2], 0x3d
jmp 0x69080bdd
mov byte [ebp - 2], 0x3e
jmp 0x69080bdd
mov byte [ebp - 2], 0x3f
jmp 0x69080bdd
mov byte [ebp - 2], 0x40
jmp 0x69080bdd
mov byte [ebp - 2], 0x41
jmp 0x69080bdd
mov byte [ebp - 2], 0x41
jmp 0x69080bdd
mov byte [ebp - 2], 0x43
jmp 0x69080bdd
mov byte [ebp - 2], 0x44
jmp 0x69080bdd
mov byte [ebp - 2], 0x45
jmp 0x69080bdd
mov byte [ebp - 2], 0x46
jmp 0x69080bdd
mov byte [ebp - 2], 0x47
jmp 0x69080bdd
mov byte [ebp - 2], 0x48
jmp 0x69080bdd
mov byte [ebp - 2], 0x49
jmp 0x69080bdd
mov byte [ebp - 2], 0x4a
jmp 0x69080bdd
mov byte [ebp - 2], 0x4b
jmp 0x69080bdd
mov byte [ebp - 2], 0x4c
jmp 0x69080bdd
mov byte [ebp - 2], 0x4d
jmp 0x69080bdd
mov byte [ebp - 2], 0x4e
jmp 0x69080bdd
mov byte [ebp - 2], 0x4f
jmp 0x69080bdd
mov byte [ebp - 2], 0x50
jmp 0x69080bdd
mov byte [ebp - 2], 0x51
jmp 0x69080bdd
mov byte [ebp - 2], 0x52
jmp 0x69080bdd
mov byte [ebp - 2], 0x53
jmp 0x69080bdd
mov byte [ebp - 2], 0x54
jmp 0x69080bdd
mov byte [ebp - 2], 0x55
jmp 0x69080bdd
mov byte [ebp - 2], 0xd
jmp 0x69080bdd
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
lea eax, [ebp - 0x134]
call fcn.6907fb74
cmp eax, 0xf
jg 0x69080723
je 0x6908085f
cmp eax, 7
jg 0x690806f4
je 0x690808b0
cmp eax, 3
jg 0x690806d8
je 0x6908087a
sub eax, 0xabcdabcd
je 0x69080913
sub eax, 0x54325433
je 0x690808ef
dec eax
je 0x690808f8
dec eax
je 0x69080868
jmp case.0x6908072f.29
sub eax, 4
je 0x6908083b
dec eax
je 0x69080871
dec eax
je 0x6908080e
jmp case.0x6908072f.29
add eax, 0xfffffff8
cmp eax, 6
ja case.0x6908072f.29
jmp dword [eax*4 + 0x69080707]
add eax, 0xfffffff0
cmp eax, 0x35
ja case.0x6908072f.29
jmp dword [eax*4 + 0x69080736]
mov byte [ebp - 2], 0x57
jmp 0x69080bdd
mov byte [ebp - 2], 0x58
jmp 0x69080bdd
mov byte [ebp - 2], 0x59
jmp 0x69080bdd
mov byte [ebp - 2], 0x5a
jmp 0x69080bdd
mov byte [ebp - 2], 0x5b
jmp 0x69080bdd
mov byte [ebp - 2], 0x5c
jmp 0x69080bdd
mov byte [ebp - 2], 0x5d
jmp 0x69080bdd
mov byte [ebp - 2], 0x5e
jmp 0x69080bdd
mov byte [ebp - 2], 0x5f
jmp 0x69080bdd
mov byte [ebp - 2], 0x60
jmp 0x69080bdd
mov byte [ebp - 2], 0x61
jmp 0x69080bdd
mov byte [ebp - 2], 0x62
jmp 0x69080bdd
mov byte [ebp - 2], 0x63
jmp 0x69080bdd
mov byte [ebp - 2], 0x63
jmp 0x69080bdd
mov byte [ebp - 2], 0x65
jmp 0x69080bdd
mov byte [ebp - 2], 0x66
jmp 0x69080bdd
mov byte [ebp - 2], 0x67
jmp 0x69080bdd
mov byte [ebp - 2], 0x68
jmp 0x69080bdd
mov byte [ebp - 2], 0x69
jmp 0x69080bdd
mov byte [ebp - 2], 0x6a
jmp 0x69080bdd
mov byte [ebp - 2], 0x6b
jmp 0x69080bdd
mov byte [ebp - 2], 0x6c
jmp 0x69080bdd
mov byte [ebp - 2], 0x6d
jmp 0x69080bdd
mov byte [ebp - 2], 0x6e
jmp 0x69080bdd
mov byte [ebp - 2], 0x6f
jmp 0x69080bdd
mov byte [ebp - 2], 0x70
jmp 0x69080bdd
mov byte [ebp - 2], 0x71
jmp 0x69080bdd
mov byte [ebp - 2], 0x72
jmp 0x69080bdd
mov byte [ebp - 2], 0x73
jmp 0x69080bdd
mov byte [ebp - 2], 0x74
jmp 0x69080bdd
mov byte [ebp - 2], 0x75
jmp 0x69080bdd
mov byte [ebp - 2], 0x76
jmp 0x69080bdd
mov byte [ebp - 2], 0x77
jmp 0x69080bdd
mov byte [ebp - 2], 0x56
jmp 0x69080bdd
mov dword [ebp - 0x134], 0x9c
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExA_1
movzx eax, byte [ebp - 0xa0]
mov byte [ebp - 1], al
lea eax, [ebp - 0x134]
call fcn.6907fb74
cmp eax, 0xf
jg 0x69080a04
je 0x69080b40
cmp eax, 7
jg 0x690809d5
je 0x69080b7f
cmp eax, 3
jg 0x690809b9
je 0x69080b5b
sub eax, 0xabcdabcd
je 0x69080bc1
sub eax, 0x54325433
je 0x69080ba9
dec eax
je 0x69080baf
dec eax
je 0x69080b49
jmp case.0x69080a10.29
sub eax, 4
je 0x69080b1c
dec eax
je 0x69080b52
dec eax
je 0x69080aef
jmp case.0x69080a10.29
add eax, 0xfffffff8
cmp eax, 6
ja case.0x69080a10.29
jmp dword [eax*4 + 0x690809e8]
add eax, 0xfffffff0
cmp eax, 0x35
ja case.0x69080a10.29
jmp dword [eax*4 + 0x69080a17]
mov byte [ebp - 2], 0x79
jmp 0x69080bdd
mov byte [ebp - 2], 0x7a
jmp 0x69080bdd
mov byte [ebp - 2], 0x7b
jmp 0x69080bdd
mov byte [ebp - 2], 0x7c
jmp 0x69080bdd
mov byte [ebp - 2], 0x7d
jmp 0x69080bdd
mov byte [ebp - 2], 0x7e
jmp 0x69080bdd
mov byte [ebp - 2], 0x7f
jmp 0x69080bdd
mov byte [ebp - 2], 0x80
jmp 0x69080bdd
mov byte [ebp - 2], 0x81
jmp 0x69080bdd
mov byte [ebp - 2], 0x82
jmp 0x69080bdd
mov byte [ebp - 2], 0x83
jmp 0x69080bdd
mov byte [ebp - 2], 0x84
jmp 0x69080bdd
mov byte [ebp - 2], 0x85
jmp 0x69080bdd
mov byte [ebp - 2], 0x85
jmp 0x69080bdd
mov byte [ebp - 2], 0x87
jmp 0x69080bdd
mov byte [ebp - 2], 0x88
jmp 0x69080bdd
mov byte [ebp - 2], 0x89
jmp 0x69080bdd
mov byte [ebp - 2], 0x8a
jmp 0x69080bdd
mov byte [ebp - 2], 0x8b
jmp 0x69080bdd
mov byte [ebp - 2], 0x8c
jmp 0x69080bdd
mov byte [ebp - 2], 0x8d
jmp 0x69080bdd
mov byte [ebp - 2], 0x8e
jmp 0x69080bdd
mov byte [ebp - 2], 0x8f
jmp 0x69080bdd
mov byte [ebp - 2], 0x90
jmp 0x69080bdd
mov byte [ebp - 2], 0x91
jmp 0x69080bdd
mov byte [ebp - 2], 0x92
jmp 0x69080bdd
mov byte [ebp - 2], 0x93
jmp 0x69080bdd
mov byte [ebp - 2], 0x94
jmp 0x69080bdd
mov byte [ebp - 2], 0x95
jmp 0x69080bdd
mov byte [ebp - 2], 0x96
jmp 0x69080bdd
mov byte [ebp - 2], 0x97
jmp 0x69080bdd
mov byte [ebp - 2], 0x98
jmp 0x69080bdd
mov byte [ebp - 2], 0x99
jmp 0x69080bdd
mov byte [ebp - 2], 0x78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x69080bfd
lea eax, [ebp - 0x138]
call fcn.69005214
ret