Function at 0x5c9fa0
Capabilities:
Check os version

Disassembly:
push ebp
lea ebp, [esp - 0x320]
sub esp, 0x320
push 0xffffffffffffffff
push 0x65c280
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x74d890]
xor eax, ebp
mov dword [ebp + 0x31c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x11], 0
mov dword [ebp], 0x94
lea eax, [ebp]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x5ca02e
mov eax, dword [ebp + 0x10]
cmp eax, 2
jne 0x5ca029
mov eax, dword [ebp + 4]
cmp eax, 4
jne 0x5ca035
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + str.security.dll]
mov word [ebp + eax + 0x94], cx
add eax, 2
test cx, cx
jne 0x5ca010
jmp 0x5ca098
cmp eax, 1
je 0x5ca03a
xor eax, eax
jmp 0x5ca20d
cmp eax, 5
jae 0x5ca075
mov dword [ebp - 4], 0
mov ecx, ebx
call fcn.005c8850
test al, al
je 0x5ca02e
push str.CheckRegSecurityProvider___OK._r_n
mov ecx, dword [ebx + 0x474]
call fcn.00561720
mov dword [ebp - 4], 0xffffffff
jmp 0x5ca075
cmp dword [ebp + 4], 6
jae 0x5ca07f
mov byte [ebp - 0x11], 1
xor eax, eax
movzx ecx, word [eax + str.secur32.dll]
mov word [ebp + eax + 0x94], cx
add eax, 2
test cx, cx
jne 0x5ca081
cmp dword [ebx + 0x1b4], 0
jne 0x5ca0b6
lea ecx, [ebp + 0x94]
push ecx
call fcn.00447330
add esp, 4
mov dword [ebx + 0x1b4], eax
mov eax, dword [ebx + 0x1b4]
test eax, eax
jne 0x5ca10f
lea ecx, [ebp - 0x18]
call fcn.00402500
mov dword [ebp - 4], 2
lea edx, [ebp + 0x94]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error_0x_x_loading__s._n
lea eax, [ebp - 0x18]
push eax
call fcn.00402f70
add esp, 0x10
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, ebx
call fcn.005c0e70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00402570
xor eax, eax
jmp 0x5ca20d
push str.InitSecurityInterfaceA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x5ca14f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error_0x_x_reading_InitSecurityInterface_entry_point._n
lea edx, [ebp + 0x29c]
push edx
call fcn.006186ab
add esp, 0xc
lea eax, [ebp + 0x29c]
push eax
mov ecx, ebx
call fcn.005c0e70
xor eax, eax
jmp 0x5ca20d
call eax
test eax, eax
jne 0x5ca185
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error_0x_x_reading_security_interface._n
lea ecx, [ebp + 0x29c]
push ecx
call fcn.006186ab
add esp, 0xc
lea edx, [ebp + 0x29c]
push edx
mov ecx, ebx
call fcn.005c0e70
xor eax, eax
jmp 0x5ca20d
lea edi, [ebx + 0x3fc]
mov ecx, 0x1e
mov esi, eax
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x1c]
call fcn.00402500
mov dword [ebp - 4], 3
mov eax, dword [ebx + 0x448]
push eax
mov ecx, dword [ebx + 0x464]
push ecx
mov edx, dword [ebx + 0x444]
push edx
mov eax, dword [ebx + 0x460]
push eax
push str.EM__0x_x__0x_x__r_nDM__0x_x__0x_x._r_n
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00402f70
add esp, 0x18
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, ebx
call fcn.005c0e70
cmp byte [ebp - 0x11], 0
je 0x5ca1f9
mov eax, dword [ebx + 0x444]
mov dword [ebx + 0x460], eax
mov ecx, dword [ebx + 0x448]
mov dword [ebx + 0x464], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00402570
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x31c]
xor ecx, ebp
call fcn.006157d3
add ebp, 0x320
mov esp, ebp
pop ebp
ret