Function at 0x6f4540
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x848a48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push esi
mov esi, dword [esp + 0xb0]
push edi
mov edi, dword [esp + 0xc0]
mov ebx, ecx
sub esp, 0xc
mov eax, edi
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
call fcn.00542ce0
mov edx, dword [esp + 0xbc]
push edi
push edx
lea eax, [esp + 0x14]
push eax
call fcn.0059c730
fld dword [eax + 8]
mov ecx, dword [esp + 0xc4]
fadd dword [ecx + 8]
add esp, 0xc
fld dword [eax + 4]
fadd dword [ecx + 4]
fstp dword [esp + 0x24]
fld dword [ecx]
lea ecx, [esp + 0x5c]
fadd dword [eax]
mov eax, dword [esi + 0x14]
push eax
fstp dword [esp + 0x10]
fsubr dword [esp + 0x44]
fld dword [esp + 0x40]
fsub dword [esp + 0x28]
fld dword [esp + 0x3c]
fsub dword [esp + 0x10]
fstp dword [esp + 0x30]
fstp dword [esp + 0x34]
fstp dword [esp + 0x38]
call fcn.0059bcf0
mov al, byte [ebx + 8]
and al, 0xf
movzx eax, al
cmp eax, 5
mov dword [esp + 0xac], 0
ja case.default.0x6f460f
jmp dword [eax*4 + 0x6f4770]
mov esi, dword [esi + 0x14]
mov ecx, dword [esi]
mov dword [esp + 0x18], ecx
mov edx, dword [esi + 4]
mov dword [esp + 0x1c], edx
mov eax, dword [esi + 8]
jmp 0x6f46a0
mov esi, dword [esi + 0x14]
fld dword [esi + 8]
fchs
fld dword [esi + 4]
fchs
fld dword [esi]
jmp 0x6f467e
mov esi, dword [esi + 0x14]
add esi, 0x10
jmp 0x6f465c
mov esi, dword [esi + 0x14]
fld dword [esi + 0x18]
fchs
fld dword [esi + 0x14]
fchs
fld dword [esi + 0x10]
jmp 0x6f467e
mov esi, dword [esi + 0x14]
add esi, 0x20
mov ecx, dword [esi]
mov dword [esp + 0x18], ecx
mov edx, dword [esi + 4]
mov dword [esp + 0x1c], edx
mov eax, dword [esi + 8]
jmp 0x6f46a0
mov esi, dword [esi + 0x14]
fld dword [esi + 0x28]
fchs
fld dword [esi + 0x24]
fchs
fld dword [esi + 0x20]
fchs
fstp dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x18], ecx
fstp dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x1c], edx
fstp dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], eax
movzx eax, byte [ebx + 0xa]
sub eax, 0
je 0x6f46cf
sub eax, 2
jne 0x6f46ec
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x4c]
push eax
call fcn.0059c730
mov ecx, dword [eax + 8]
mov dword [esp + 0x30], ecx
jmp 0x6f46e9
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x58]
push ecx
call fcn.0059c730
mov edx, dword [eax]
mov dword [esp + 0x30], edx
add esp, 0xc
call fcn.00821b1e
mov dword [esp + 0x28], eax
fild dword [esp + 0x28]
fmul dword [0x858c7c]
fmul dword [0x858f34]
fadd dword [0x858f34]
fmul dword [0x8d3968]
fld dword [ebx]
fcomp dword [ebx + 4]
fnstsw ax
test ah, 5
jnp 0x6f4727
fld dword [esp + 0x24]
fcomp st(1)
fstp st(0)
jmp 0x6f472d
fchs
fcomp dword [esp + 0x24]
fnstsw ax
lea ecx, [esp + 0x5c]
mov dword [esp + 0xac], 0xffffffff
test ah, 0x41
jne 0x6f474c
call fcn.0059acd0
mov al, 1
jmp 0x6f4753
call fcn.0059acd0
xor al, al
mov ecx, dword [esp + 0xa4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0xa4
ret 0x10