Function at 0x10034b40
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d30fb
mov eax, dword fs:[0]
push eax
sub esp, 0x324
mov eax, dword [0x10111404]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x200], ecx
call fcn.10060490
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10034cf6
push 0x7e
push str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145in_helperdesk_band_helperdesk_band_ex.cc
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], al
call fcn.100057a0
push 3
push 0x100e01bc
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
call fcn.100057a0
mov byte [ebp - 4], 1
call fcn.10060490
push str.CDeskBandExt::Initialize__
mov edi, eax
lea eax, [ebp - 0x1f0]
push 0
push eax
call fcn.100600b0
add esp, 0xc
push 0xc9
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x298]
call fcn.10008360
mov esi, eax
mov ecx, dword [ebp - 0x1f0]
mov edx, 0x100dffb4
test ecx, ecx
mov byte [ebp - 4], 3
cmovne edx, ecx
push edx
push esi
call fcn.10006d80
mov eax, dword [edi]
add esp, 8
mov ecx, edi
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x298]
call fcn.10009f30
mov edx, dword [ebp - 0x1f0]
or eax, 0xffffffff
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10034c6e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov byte [ebp - 4], 0
cmp edx, 0x10
jb 0x10034ca6
mov ecx, dword [ebp - 0x78]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034c9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034f58
push edx
push ecx
call fcn.1007f042
add esp, 8
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov dword [ebp - 4], 0xffffffff
cmp edx, 0x10
jb 0x10034cf6
mov ecx, dword [ebp - 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034cec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034f5d
push edx
push ecx
call fcn.1007f042
add esp, 8
lea eax, [ebp - 0xd0]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0xd0], xmm0
call fcn.10053ea0
add esp, 4
test al, al
je 0x10034f3d
push 0x118
lea eax, [ebp - 0x1e8]
push 0
push eax
call fcn.100a5d20
add esp, 0xc
mov dword [ebp - 0x1ec], 0x11c
lea eax, [ebp - 0x1ec]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x1e8], 6
jae 0x10034f3d
push 0x4e
lea eax, [ebp - 0x60]
push 0
push eax
call fcn.100a5d20
add esp, 0xc
lea eax, [ebp - 0x60]
push 0x27
push eax
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
movzx esi, ax
mov dword [ebp - 0x1f0], esi
test si, si
je 0x10034f3d
mov dword [ebp - 0x1f8], 0
lea eax, [ebp - 0x1f8]
mov dword [ebp - 4], 4
push eax
push 0x100e32d4
push 0x17
push 0
push 0x100e65bc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov eax, dword [ebp - 0x1f8]
test eax, eax
je 0x10034f1f
mov dword [ebp - 0x1f4], 0
mov ecx, dword [eax]
lea edx, [ebp - 0x1f4]
push edx
push 0x100e65ac
push eax
mov byte [ebp - 4], 5
call dword [ecx]
test eax, eax
js 0x10034f0b
call fcn.10060490
mov ecx, eax
push 1
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
movzx eax, al
sub eax, 1
jne 0x10034ef9
push 0x7e
push str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145in_helperdesk_band_helperdesk_band_ex.cc
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], al
call fcn.100057a0
push 3
push 0x100e01bc
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 6
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
call fcn.100057a0
mov byte [ebp - 4], 7
call fcn.10060490
push str.spBandSite__AddBand
mov edi, eax
lea eax, [ebp - 0x1fc]
push 0
push eax
call fcn.100600b0
add esp, 0xc
push 0xdf
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x330]
call fcn.10008360
mov esi, dword [edi]
lea ecx, [ebp - 0x1fc]
push ecx
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.10017f90
push eax
mov ecx, edi
call dword [esi + 0x1c]
lea ecx, [ebp - 0x330]
call fcn.10009f30
lea ecx, [ebp - 0x1fc]
call fcn.10003e10
lea ecx, [ebp - 0xa8]
call fcn.10003e30
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 5
call fcn.10003e30
mov esi, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x1f4]
push dword [ebp - 0x200]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x1f4]
mov byte [ebp - 4], 4
test eax, eax
je 0x10034f1f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x10034f3d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007f3c1
mov esp, ebp
pop ebp
ret
call fcn.100a9b45
call fcn.100a9b45
int3