Function at 0x5edb34
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x2d
push 0
push 0
dec ecx
jne 0x5edb3d
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x5edead
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x134]
xor ecx, ecx
mov edx, 0x114
call fcn.00403bd8
mov dword [ebp - 0x134], 0x114
lea eax, [ebp - 0x134]
push eax
call sub.kernel32.dll_GetVersionExW
mov eax, dword [ebp - 0x130]
cmp eax, 6
jb 0x5edb9d
cmp dword [ebp - 0x12c], 1
jae 0x5edba2
cmp eax, 0xa
jne 0x5edc0d
mov byte [ebp - 0x1d], 1
lea ecx, [ebp - 0x140]
mov edx, 0x1a
xor eax, eax
call fcn.0051523c
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x13c]
call fcn.0047a824
push dword [ebp - 0x13c]
push 0x5edecc
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x14]
call fcn.00406d64
push dword [ebp - 0x144]
push 0x5edf58
lea eax, [ebp - 0x138]
mov edx, 4
call fcn.0040705c
mov edx, dword [ebp - 0x138]
lea eax, [ebp - 0x10]
call fcn.00406e34
jmp 0x5edc11
mov byte [ebp - 0x1d], 0
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x14]
call fcn.00406d64
cmp byte [ebp - 0x1d], 0
je 0x5edd1a
mov eax, dword [ebp - 8]
call fcn.005ec58c
test al, al
je 0x5edd1a
cmp dword [ebp - 0x18], 0
jne 0x5edcab
mov eax, dword [ebp - 8]
call fcn.005ec58c
test al, al
je 0x5edd1a
lea eax, [ebp - 0x148]
mov edx, dword [ebp - 0x10]
call fcn.00406e20
mov eax, dword [ebp - 0x148]
call fcn.00471a44
test al, al
je 0x5edd1a
lea eax, [ebp - 0x14c]
mov edx, dword [ebp - 0x14]
call fcn.00406d64
mov eax, dword [ebp - 0x14c]
call fcn.005ed048
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x150]
mov edx, dword [ebp - 0x10]
call fcn.00406e20
mov eax, dword [ebp - 0x150]
push eax
mov eax, dword [0x69a388]
mov eax, dword [eax]
call eax
test eax, eax
jmp 0x5edd1a
cmp dword [ebp - 0x18], 1
jne 0x5edd1a
lea eax, [ebp - 0x154]
mov edx, dword [ebp - 0x14]
call fcn.00406d64
mov eax, dword [ebp - 0x154]
call fcn.005ed048
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x158]
mov ecx, dword [ebp - 0x10]
mov edx, 0x5edf68
call fcn.00406958
mov eax, dword [ebp - 0x158]
call fcn.0040688c
push eax
mov eax, dword [0x69a164]
mov eax, dword [eax]
call eax
lea eax, [ebp - 0x15c]
mov edx, dword [ebp - 0x10]
call fcn.00406e20
mov eax, dword [ebp - 0x15c]
push eax
mov eax, dword [0x69a388]
mov eax, dword [eax]
call eax
test eax, eax
jmp 0x5ede44
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x18]
call fcn.005ec6cc
cmp dword [ebp - 0xc], 0
je 0x5ede3d
cmp dword [ebp - 8], 0
je 0x5edda2
cmp byte [ebp - 0x1d], 0
je 0x5edd47
lea eax, [ebp - 4]
mov edx, ebx
call fcn.00406d64
jmp 0x5eddac
push 1
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x164]
mov edx, dword [ebp - 0x14]
call fcn.00406824
mov eax, dword [ebp - 0x164]
push eax
lea eax, [ebp - 0x168]
mov edx, ebx
call fcn.00406824
mov eax, dword [ebp - 0x168]
mov edx, dword [ebp - 0x18]
and edx, 0x80000001
jns 0x5edd88
dec edx
or edx, 0xfffffffe
inc edx
dec edx
sete cl
pop edx
call fcn.005ec3a4
mov edx, dword [ebp - 0x160]
lea eax, [ebp - 4]
call fcn.00406e20
jmp 0x5eddac
lea eax, [ebp - 4]
mov edx, ebx
call fcn.00406d64
xor eax, eax
push ebp
push 0x5eddd2
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.005ec7e0
mov dword [ebp - 0x1c], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5ede12
cmp dword [ebp - 0x1c], 0
jne 0x5ede44
cmp dword [ebp - 0x18], 0
jne 0x5ede44
lea eax, [ebp - 0x170]
mov edx, dword [ebp - 0x14]
call fcn.00406d64
mov eax, dword [ebp - 0x170]
movzx edx, byte [ebp - 0x1d]
call fcn.005ed540
jmp 0x5ede44
mov dword [ebp - 0x1c], 0xfffffffe
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5edeb4
lea eax, [ebp - 0x170]
mov edx, 2
call fcn.00406ba0
lea eax, [ebp - 0x168]
mov edx, 3
call fcn.004066c0
lea eax, [ebp - 0x15c]
call fcn.00406b98
lea eax, [ebp - 0x158]
call fcn.004066a8
lea eax, [ebp - 0x154]
mov edx, 8
call fcn.00406ba0
lea eax, [ebp - 0x10]
call fcn.004066a8
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00406ba0
ret