Function at 0x5ca284
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x5ca28c
push ecx
push ebx
push esi
push edi
mov eax, 0x5c9d74
call fcn.00406eb8
mov ebx, dword [0x5d560c]
mov esi, 0x5d6668
mov edi, dword [0x5d4abc]
xor eax, eax
push ebp
push 0x5cae4c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4d8c]
mov byte [eax], 1
mov eax, dword [0x5d549c]
mov byte [eax], 1
mov dword [0xc4a38c], 0x94
push 0xc4a38c
call sub.kernel32.dll_GetVersionExA
test eax, eax
je 0x5ca320
cmp dword [0xc4a39c], 2
mov eax, dword [0x5d4d8c]
setb byte [eax]
cmp dword [0xc4a390], 6
ja 0x5ca316
cmp dword [0xc4a390], 6
jne 0x5ca312
cmp dword [0xc4a394], 1
ja 0x5ca316
xor eax, eax
jmp 0x5ca318
mov al, 1
mov edx, dword [0x5d549c]
mov byte [edx], al
mov eax, dword [0x5d4b40]
mov byte [eax], 0
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a215c
mov eax, dword [0x5d5198]
mov edx, 0x5cae64
call fcn.00404a84
mov byte [0xc4a37a], 0
mov byte [0xc4a379], 0
mov eax, dword [0x5d5564]
mov byte [eax], 0
mov eax, dword [0x5d4d70]
mov byte [eax], 0
mov eax, dword [0x5d4dc4]
mov byte [eax], 0
mov eax, dword [0x5d5318]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d4f54]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d4ac0]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x18]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2804
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.0040a080
mov edx, dword [ebp - 0x14]
mov eax, edi
call fcn.00404a84
cmp dword [edi], 0
je 0x5ca3d2
mov eax, dword [edi]
call fcn.00404cf0
mov edx, dword [edi]
cmp byte [edx + eax - 1], 0x5c
jne 0x5ca3d2
mov eax, dword [edi]
call fcn.00404cf0
mov edx, eax
mov eax, edi
mov ecx, 1
call fcn.00404f90
call fcn.004fb924
lea edx, [ebp - 0x24]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2804
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.004fcab8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00409448
mov edx, dword [ebp - 0x1c]
mov eax, 0xc4a37c
call fcn.00404a84
lea edx, [ebp - 0x30]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2804
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.0040a19c
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.00409448
mov edx, dword [ebp - 0x28]
mov eax, 0xc4a388
call fcn.00404a84
mov eax, dword [0xc4a37c]
mov edx, 0x5cae78
call fcn.00404e3c
jne 0x5ca475
lea edx, [ebp - 0x34]
mov eax, 0x5cae90
call fcn.004091f8
mov eax, dword [ebp - 0x34]
push eax
lea edx, [ebp - 0x38]
mov eax, dword [0xc4a388]
call fcn.004091f8
mov edx, dword [ebp - 0x38]
pop eax
call fcn.00404e3c
je 0x5ca48d
mov eax, dword [0x5d4bf4]
mov byte [eax], 0
cmp dword [0xc4a37c], 0
sete byte [0xc4a37a]
jmp 0x5ca4a6
mov eax, dword [0x5d4bf4]
mov byte [eax], 1
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, 0x5caea8
call fcn.004a1d54
push 0x5caec4
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 1
call fcn.004a014c
push 0x5caecc
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 2
call fcn.004a014c
push 0x5caed4
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 3
call fcn.004a014c
push 0x5caedc
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 4
call fcn.004a014c
push 0x5caee4
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 5
call fcn.004a014c
push 0x5caeec
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 6
call fcn.004a014c
push 0x5caef4
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 7
call fcn.004a014c
push 0x5caefc
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 8
call fcn.004a014c
push 0x5caf04
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 9
call fcn.004a014c
push 0x5caf0c
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xa
call fcn.004a014c
push 0x5caf18
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xb
call fcn.004a014c
push 0x5caf24
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xc
call fcn.004a014c
push 0x5caf30
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xd
call fcn.004a014c
push 0x5caf3c
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xe
call fcn.004a014c
push 0x5caf48
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xf
call fcn.004a014c
mov eax, dword [0x5d4bf4]
cmp byte [eax], 0
jne 0x5ca679
cmp byte [0xc4a37a], 0
je 0x5ca668
lea eax, [ebp - 0x3c]
call fcn.0052def4
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x5d5508]
call fcn.00404a84
jmp 0x5ca98b
mov eax, dword [0x5d5508]
mov edx, dword [edi]
call fcn.00404a84
jmp 0x5ca98b
mov eax, dword [0x5d5508]
call fcn.00404a30
lea edx, [ebp - 0x40]
mov al, 5
call fcn.004fc368
mov edx, dword [ebp - 0x40]
mov eax, 0xc4a380
call fcn.00404a84
cmp dword [0xc4a380], 0
je 0x5ca6d5
mov eax, dword [0xc4a380]
call fcn.00404cf0
mov edx, dword [0xc4a380]
cmp byte [edx + eax - 1], 0x5c
jne 0x5ca6d5
mov eax, dword [0xc4a380]
call fcn.00404cf0
mov edx, eax
mov eax, 0xc4a380
mov ecx, 1
call fcn.00404f90
mov edx, dword [edi]
lea eax, [ebp - 0x44]
mov ecx, 0x5caf5c
call fcn.00404d3c
mov eax, dword [ebp - 0x44]
call fcn.00409c9c
test al, al
je 0x5ca7a7
mov edx, dword [edi]
lea eax, [ebp - 0x48]
mov ecx, 0x5caf5c
call fcn.00404d3c
mov ecx, dword [ebp - 0x48]
mov dl, 1
mov eax, dword [0x443a48]
call fcn.00443af8
mov ebx, eax
push 0
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x5caf74
mov edx, 0x5caf88
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x5d5508]
call fcn.00404a84
push 0
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x5caf98
mov edx, 0x5cafa8
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x50]
mov eax, dword [0x5d5344]
call fcn.00404a84
push 0
lea eax, [ebp - 0x54]
push eax
mov ecx, 0x5cafc0
mov edx, 0x5cafa8
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x54]
mov eax, dword [0x5d4bc4]
call fcn.00404a84
push 0
lea eax, [ebp - 0x58]
push eax
mov ecx, 0x5cafd0
mov edx, 0x5cafa8
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x58]
mov eax, dword [0x5d514c]
call fcn.00404a84
mov eax, ebx
call fcn.00403bfc
mov ecx, dword [0x5d514c]
mov ecx, dword [ecx]
mov edx, dword [0x5d4bc4]
mov edx, dword [edx]
mov eax, dword [0x5d5344]
mov eax, dword [eax]
call fcn.004fcb68
test al, al
jne 0x5ca801
mov eax, dword [0x5d5344]
call fcn.00404a30
mov eax, dword [0x5d4bc4]
call fcn.00404a30
mov eax, dword [0x5d514c]
call fcn.00404a30
mov al, 1
call fcn.00561b10
test al, al
jne 0x5ca801
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a22e0
jmp 0x5cae31
call fcn.005611f8
call fcn.00402c18
dec eax
jl 0x5ca896
mov eax, 0xc4a388
mov edx, dword [0x5d5508]
mov edx, dword [edx]
call fcn.00404a84
mov edx, dword [0x5d5508]
mov eax, 1
call fcn.00402c78
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00409cac
test al, al
jne 0x5ca87c
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00409c9c
test al, al
je 0x5ca872
lea edx, [ebp - 0x5c]
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.0040a080
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x5d5508]
call fcn.00404a84
jmp 0x5ca87c
mov eax, dword [0x5d5508]
call fcn.00404a30
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca896
mov eax, dword [0x5d5508]
mov edx, dword [0xc4a388]
call fcn.00404a84
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca8d4
lea eax, [ebp - 0x60]
mov ecx, 0x5cafdc
mov edx, dword [0xc4a380]
call fcn.00404d3c
mov eax, dword [ebp - 0x60]
call fcn.00409cac
test al, al
je 0x5ca8d4
mov eax, dword [0x5d5508]
mov ecx, 0x5cafdc
mov edx, dword [0xc4a380]
call fcn.00404d3c
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00409cac
test al, al
jne 0x5ca8ee
mov eax, dword [0x5d5508]
call fcn.00404a30
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca98b
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov edx, 0xffffffec
mov eax, ebx
call fcn.00480428
mov eax, ebx
call fcn.0049eaac
push 0x40
mov ecx, 0x5cb008
mov edx, 0x5cb018
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2384
mov eax, dword [0x5d5508]
call fcn.004fb8f4
mov byte [0xc4a379], 1
mov eax, ebx
call fcn.00403bfc
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca98b
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a22e0
jmp 0x5cae31
xor ecx, ecx
mov dl, 1
mov eax, dword [0x51e6b4]
call fcn.0049a754
mov edx, dword [0x5d53ac]
mov dword [edx], eax
mov eax, dword [0x5d53ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
mov edx, dword [0x5d4f70]
mov dword [edx], eax
mov eax, dword [0x5d53ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
mov eax, dword [eax + 0x68]
mov edx, dword [0x5d54b8]
mov dword [edx], eax
mov eax, dword [0x5d5508]
cmp dword [eax], 0
je 0x5caa10
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00404cf0
mov edx, dword [0x5d5508]
mov edx, dword [edx]
cmp byte [edx + eax - 1], 0x5c
jne 0x5caa10
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00404cf0
mov edx, eax
mov eax, dword [0x5d5508]
mov ecx, 1
call fcn.00404f90
mov byte [0xc4a378], 0
lea eax, [ebp - 0x64]
call fcn.004fc488
mov eax, dword [ebp - 0x64]
call fcn.00409c9c
test al, al
je 0x5caa5a
lea eax, [ebp - 0x68]
call fcn.004fc488
mov eax, dword [ebp - 0x68]
call fcn.00409c34
mov edx, dword [0x5d4ad8]
mov dword [edx], eax
lea eax, [ebp - 0x6c]
call fcn.004fc488
mov eax, dword [ebp - 0x6c]
call fcn.00530510
mov byte [0xc4a378], al
jmp 0x5caac6
cmp byte [0xc4a379], 0
jne 0x5caac6
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov edx, 0xffffffec
mov eax, ebx
call fcn.00480428
mov eax, ebx
call fcn.0049eaac
push 0x40
mov ecx, 0x5cb044
mov edx, 0x5cb050
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2384
mov eax, ebx
call fcn.00403bfc
mov eax, dword [0x5d4bf4]
cmp byte [eax], 0
je 0x5cabb7
mov ecx, dword [0x5d4cf0]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x58d810]
call fcn.004a2174
mov ecx, dword [0x5d4efc]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x526890]
call fcn.004a2174
mov ecx, dword [0x5d54f0]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x55c358]
call fcn.004a2174
mov ecx, dword [0x5d4f54]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x51d768]
call fcn.004a2174
mov ecx, dword [0x5d49e4]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x56344c]
call fcn.004a2174
mov ecx, dword [0x5d4fc8]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x563d98]
call fcn.004a2174
mov eax, dword [0x5d49e4]
mov eax, dword [eax]
mov eax, dword [eax + 0x30c]
mov eax, dword [eax + 0x22c]
call fcn.0045f470
call fcn.0045ee2c
mov eax, dword [0x5d49e4]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
mov eax, dword [eax + 0x22c]
call fcn.0045f470
call fcn.0045ee2c
cmp byte [0xc4a378], 0
jne 0x5cadee
mov al, 1
call fcn.0052f1e8
jmp 0x5cadee
cmp byte [0xc4a378], 0
jne 0x5cabd1
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a22e0
jmp 0x5cae31
mov byte [0xc4a384], 0
mov eax, dword [0x5d537c]
mov al, byte [eax + 4]
cmp al, 1
jne 0x5cabff
call fcn.0040bba4
mov eax, dword [0x5d537c]
fcomp qword [eax + 8]
fnstsw ax
sahf
jbe 0x5cac11
mov byte [0xc4a384], 1
jmp 0x5cac11
mov edx, dword [0x5d537c]
cmp al, 2
je 0x5cac11
mov edx, dword [0x5d537c]
cmp al, 3
mov eax, dword [0x5d537c]
mov eax, dword [eax]
call fcn.004fb444
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov edx, 0xffffffec
mov eax, ebx
call fcn.00480428
mov eax, ebx
call fcn.0049eaac
cmp byte [0xc4a384], 0
je 0x5caca1
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x4c]
call fcn.00405d58
mov esi, eax
dec esi
test esi, esi
jl 0x5caca1
inc esi
xor edi, edi
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5caca1
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + edi*4]
xor edx, edx
call fcn.0052804c
inc edi
dec esi
jne 0x5cac81
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5cacb5
call fcn.00526bbc
call fcn.00526be0
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x44]
call fcn.00405d58
mov esi, eax
dec esi
test esi, esi
jl 0x5cacec
inc esi
xor edi, edi
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5cacec
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + edi*4]
xor edx, edx
call fcn.0052804c
inc edi
dec esi
jne 0x5caccc
mov eax, ebx
call fcn.00403bfc
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5cade3
mov ecx, dword [0x5d4efc]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x526890]
call fcn.004a2174
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x50]
call fcn.00405d58
test eax, eax
je 0x5cad7f
mov edx, dword [0x5d4efc]
mov edx, dword [edx]
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x50]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00530b58
mov eax, dword [0x5d4efc]
mov eax, dword [eax]
call fcn.00530f68
mov eax, dword [0x5d4efc]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x340], edx
mov eax, dword [0x5d4efc]
mov eax, dword [eax]
mov edx, dword [0x5d51bc]
mov edx, dword [edx]
mov dword [edx + 0x114], eax
mov dword [edx + 0x110], 0x530eb0
jmp 0x5cadee
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov eax, ebx
call fcn.0049eaac
push 0x40
mov ecx, 0x5cb078
mov edx, 0x5cb080
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2384
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, ebx
call fcn.00403bfc
jmp 0x5cadee
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a21f4
xor eax, eax
call fcn.0052f1e8
mov eax, dword [0x5d53ac]
mov eax, dword [eax]
call fcn.00403bfc
cmp byte [0xc4a37a], 0
je 0x5cae22
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.004fb5c8
mov eax, dword [0x5d4b40]
cmp byte [eax], 0
je 0x5cae31
call sub.ole32.dll_CoFreeUnusedLibraries
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5cae53
lea eax, [ebp - 0x6c]
mov edx, 0x17
call fcn.00404a54
ret