Function at 0x6c0498
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffec8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
xor eax, eax
push ebp
push 0x6c0936
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7f0084], 0xfffffffe
je 0x6c04da
mov ebx, dword [0x7f0084]
jmp 0x6c090b
mov dword [ebp - 0x11c], 0x11c
lea eax, [ebp - 0x11c]
push eax
call sub.KERNEL32.DLL_GetVersionExW
test eax, eax
je 0x6c0845
mov esi, dword [ebp - 0x118]
mov edi, dword [ebp - 0x114]
mov eax, dword [ebp - 0x110]
mov dword [0x7f0064], eax
mov dword [0x7f0070], esi
mov dword [0x7f0074], edi
cmp byte [ebp - 2], 1
setne byte [0x7f0078]
movzx eax, word [ebp - 8]
mov word [0x7f0068], ax
mov eax, dword [ebp - 0x10c]
dec eax
je 0x6c07fb
dec eax
jne 0x6c0840
cmp esi, 4
jg 0x6c0553
mov ebx, 4
jmp 0x6c0857
cmp esi, 5
jne 0x6c0566
test edi, edi
jne 0x6c0566
mov ebx, 5
jmp 0x6c0857
cmp esi, 5
jne 0x6c057a
cmp edi, 1
jne 0x6c057a
mov ebx, 6
jmp 0x6c0857
cmp esi, 5
jne 0x6c058e
cmp edi, 2
jne 0x6c058e
mov ebx, 7
jmp 0x6c0857
cmp esi, 6
jne 0x6c05ba
test edi, edi
jne 0x6c05ba
cmp byte [ebp - 2], 1
jne 0x6c05ba
cmp dword [0x7f0080], 0
je 0x6c05b0
mov ebx, 9
jmp 0x6c0857
mov ebx, 8
jmp 0x6c0857
cmp esi, 6
jne 0x6c0686
mov eax, edi
sub eax, 4
jae 0x6c0686
cmp byte [ebp - 2], 1
je 0x6c0686
cmp edi, 3
jne 0x6c05fa
cmp dword [0x7f0080], 0
je 0x6c05f0
mov ebx, 0x19
jmp 0x6c0857
mov ebx, 0x18
jmp 0x6c0857
cmp edi, 2
jne 0x6c061c
cmp dword [0x7f0080], 0
je 0x6c0612
mov ebx, 0x15
jmp 0x6c0857
mov ebx, 0x14
jmp 0x6c0857
movzx eax, word [ebp - 4]
and ax, 0x8000
cmp ax, 0x8000
jne 0x6c0647
cmp dword [0x7f0080], 0
je 0x6c063d
mov ebx, 0x11
jmp 0x6c0857
mov ebx, 0x10
jmp 0x6c0857
cmp edi, 1
jne 0x6c0669
cmp dword [0x7f0080], 0
je 0x6c065f
mov ebx, 0xf
jmp 0x6c0857
mov ebx, 0xe
jmp 0x6c0857
cmp dword [0x7f0080], 0
je 0x6c067c
mov ebx, 0xb
jmp 0x6c0857
mov ebx, 0xa
jmp 0x6c0857
cmp esi, 6
jne 0x6c06ff
cmp byte [ebp - 2], 1
jne 0x6c06ff
mov eax, edi
dec eax
je 0x6c069e
dec eax
je 0x6c06bb
dec eax
je 0x6c06d8
jmp 0x6c06f5
cmp dword [0x7f0080], 0
je 0x6c06b1
mov ebx, 0xd
jmp 0x6c0857
mov ebx, 0xc
jmp 0x6c0857
cmp dword [0x7f0080], 0
je 0x6c06ce
mov ebx, 0x13
jmp 0x6c0857
mov ebx, 0x12
jmp 0x6c0857
cmp dword [0x7f0080], 0
je 0x6c06eb
mov ebx, 0x17
jmp 0x6c0857
mov ebx, 0x16
jmp 0x6c0857
mov ebx, 0x80
jmp 0x6c0857
cmp esi, 0xa
jne 0x6c079b
cmp byte [ebp - 2], 1
je 0x6c079b
mov eax, edi
sub eax, 1
jae 0x6c0791
cmp dword [0x7f0064], 0x4268
jge 0x6c0745
cmp dword [0x7f0080], 1
sbb eax, eax
inc eax
mov ecx, 0x1c
mov edx, 0x1d
call fcn.00440cf0
mov ebx, eax
jmp 0x6c0857
cmp dword [0x7f0064], 0x55f0
jge 0x6c0771
cmp dword [0x7f0080], 1
sbb eax, eax
inc eax
mov ecx, 0x1e
mov edx, 0x1f
call fcn.00440cf0
mov ebx, eax
jmp 0x6c0857
cmp dword [0x7f0080], 1
sbb eax, eax
inc eax
mov ecx, 0x22
mov edx, 0x23
call fcn.00440cf0
mov ebx, eax
jmp 0x6c0857
mov ebx, 0x80
jmp 0x6c0857
cmp esi, 0xa
jne 0x6c07f4
cmp byte [ebp - 2], 1
jne 0x6c07f4
mov eax, edi
sub eax, 1
jae 0x6c07ed
cmp dword [0x7f0064], 0x55f0
jge 0x6c07d6
cmp dword [0x7f0080], 0
je 0x6c07cc
mov ebx, 0x1b
jmp 0x6c0857
mov ebx, 0x1a
jmp 0x6c0857
cmp dword [0x7f0080], 0
je 0x6c07e6
mov ebx, 0x21
jmp 0x6c0857
mov ebx, 0x20
jmp 0x6c0857
mov ebx, 0x80
jmp 0x6c0857
mov ebx, 0x80
jmp 0x6c0857
cmp esi, 4
jne 0x6c0808
test edi, edi
jne 0x6c0808
xor ebx, ebx
jmp 0x6c0857
cmp esi, 4
jne 0x6c082a
cmp edi, 0xa
jne 0x6c082a
cmp word [ebp - 0x106], 0x41
jne 0x6c0823
mov ebx, 2
jmp 0x6c0857
mov ebx, 1
jmp 0x6c0857
cmp esi, 4
jne 0x6c083b
cmp edi, 0x5a
jne 0x6c083b
mov ebx, 3
jmp 0x6c0857
or ebx, 0xffffffff
jmp 0x6c0857
or ebx, 0xffffffff
jmp 0x6c0857
or ebx, 0xffffffff
mov dword [0x7f0084], 0xfffffffe
jmp 0x6c090b
mov dword [0x7f0084], ebx
lea edx, [ebp - 0x120]
mov eax, ebx
call fcn.006c2728
mov edx, dword [ebp - 0x120]
mov eax, dword [0x7f5b90]
call fcn.0040ab8c
mov eax, dword [0x7f5b90]
mov eax, dword [eax]
mov edx, dword [0x7effbc]
call fcn.0040b5d0
jne 0x6c08d4
lea eax, [ebp - 0x124]
push eax
mov dword [ebp - 0x134], esi
mov byte [ebp - 0x130], 0
mov dword [ebp - 0x12c], edi
mov byte [ebp - 0x128], 0
lea edx, [ebp - 0x134]
mov ecx, 1
mov eax, 0x6c0954
call fcn.00427838
mov edx, dword [ebp - 0x124]
mov eax, dword [0x7f5b90]
call fcn.0040ab8c
mov eax, dword [0x7f5b90]
push dword [eax]
push 0x6c0980
lea eax, [ebp - 0x138]
lea edx, [ebp - 0x108]
mov ecx, 0x80
call fcn.0040b2e8
push dword [ebp - 0x138]
mov eax, dword [0x7f5b90]
mov edx, 3
call fcn.0040b520
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6c093d
lea eax, [ebp - 0x138]
call fcn.0040a7ac
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.0040a80c
pop eax
jmp eax