Function at 0x5ca28c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x5ca294
push ecx
push ebx
push esi
push edi
mov eax, 0x5c9d7c
call fcn.00406eb8
mov ebx, dword [0x5d560c]
mov esi, 0x5d6668
mov edi, dword [0x5d4abc]
xor eax, eax
push ebp
push 0x5cae54
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5d4d8c]
mov byte [eax], 1
mov eax, dword [0x5d549c]
mov byte [eax], 1
mov dword [0xc4a38c], 0x94
push 0xc4a38c
call sub.kernel32.dll_GetVersionExA
test eax, eax
je 0x5ca328
cmp dword [0xc4a39c], 2
mov eax, dword [0x5d4d8c]
setb byte [eax]
cmp dword [0xc4a390], 6
ja 0x5ca31e
cmp dword [0xc4a390], 6
jne 0x5ca31a
cmp dword [0xc4a394], 1
ja 0x5ca31e
xor eax, eax
jmp 0x5ca320
mov al, 1
mov edx, dword [0x5d549c]
mov byte [edx], al
mov eax, dword [0x5d4b40]
mov byte [eax], 0
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a215c
mov eax, dword [0x5d5198]
mov edx, 0x5cae6c
call fcn.00404a84
mov byte [0xc4a37a], 0
mov byte [0xc4a379], 0
mov eax, dword [0x5d5564]
mov byte [eax], 0
mov eax, dword [0x5d4d70]
mov byte [eax], 0
mov eax, dword [0x5d4dc4]
mov byte [eax], 0
mov eax, dword [0x5d5318]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d4f54]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x5d4ac0]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0x18]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2804
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.0040a080
mov edx, dword [ebp - 0x14]
mov eax, edi
call fcn.00404a84
cmp dword [edi], 0
je 0x5ca3da
mov eax, dword [edi]
call fcn.00404cf0
mov edx, dword [edi]
cmp byte [edx + eax - 1], 0x5c
jne 0x5ca3da
mov eax, dword [edi]
call fcn.00404cf0
mov edx, eax
mov eax, edi
mov ecx, 1
call fcn.00404f90
call fcn.004fb924
lea edx, [ebp - 0x24]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2804
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.004fcab8
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00409448
mov edx, dword [ebp - 0x1c]
mov eax, 0xc4a37c
call fcn.00404a84
lea edx, [ebp - 0x30]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2804
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call fcn.0040a19c
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.00409448
mov edx, dword [ebp - 0x28]
mov eax, 0xc4a388
call fcn.00404a84
mov eax, dword [0xc4a37c]
mov edx, 0x5cae80
call fcn.00404e3c
jne 0x5ca47d
lea edx, [ebp - 0x34]
mov eax, 0x5cae98
call fcn.004091f8
mov eax, dword [ebp - 0x34]
push eax
lea edx, [ebp - 0x38]
mov eax, dword [0xc4a388]
call fcn.004091f8
mov edx, dword [ebp - 0x38]
pop eax
call fcn.00404e3c
je 0x5ca495
mov eax, dword [0x5d4bf4]
mov byte [eax], 0
cmp dword [0xc4a37c], 0
sete byte [0xc4a37a]
jmp 0x5ca4ae
mov eax, dword [0x5d4bf4]
mov byte [eax], 1
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, 0x5caeb0
call fcn.004a1d54
push 0x5caecc
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 1
call fcn.004a014c
push 0x5caed4
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 2
call fcn.004a014c
push 0x5caedc
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 3
call fcn.004a014c
push 0x5caee4
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 4
call fcn.004a014c
push 0x5caeec
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 5
call fcn.004a014c
push 0x5caef4
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 6
call fcn.004a014c
push 0x5caefc
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 7
call fcn.004a014c
push 0x5caf04
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 8
call fcn.004a014c
push 0x5caf0c
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 9
call fcn.004a014c
push 0x5caf14
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xa
call fcn.004a014c
push 0x5caf20
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xb
call fcn.004a014c
push 0x5caf2c
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xc
call fcn.004a014c
push 0x5caf38
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xd
call fcn.004a014c
push 0x5caf44
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xe
call fcn.004a014c
push 0x5caf50
mov eax, dword [esi]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [ebx]
mov edx, 0xf
call fcn.004a014c
mov eax, dword [0x5d4bf4]
cmp byte [eax], 0
jne 0x5ca681
cmp byte [0xc4a37a], 0
je 0x5ca670
lea eax, [ebp - 0x3c]
call fcn.0052def4
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x5d5508]
call fcn.00404a84
jmp 0x5ca993
mov eax, dword [0x5d5508]
mov edx, dword [edi]
call fcn.00404a84
jmp 0x5ca993
mov eax, dword [0x5d5508]
call fcn.00404a30
lea edx, [ebp - 0x40]
mov al, 5
call fcn.004fc368
mov edx, dword [ebp - 0x40]
mov eax, 0xc4a380
call fcn.00404a84
cmp dword [0xc4a380], 0
je 0x5ca6dd
mov eax, dword [0xc4a380]
call fcn.00404cf0
mov edx, dword [0xc4a380]
cmp byte [edx + eax - 1], 0x5c
jne 0x5ca6dd
mov eax, dword [0xc4a380]
call fcn.00404cf0
mov edx, eax
mov eax, 0xc4a380
mov ecx, 1
call fcn.00404f90
mov edx, dword [edi]
lea eax, [ebp - 0x44]
mov ecx, 0x5caf64
call fcn.00404d3c
mov eax, dword [ebp - 0x44]
call fcn.00409c9c
test al, al
je 0x5ca7af
mov edx, dword [edi]
lea eax, [ebp - 0x48]
mov ecx, 0x5caf64
call fcn.00404d3c
mov ecx, dword [ebp - 0x48]
mov dl, 1
mov eax, dword [0x443a48]
call fcn.00443af8
mov ebx, eax
push 0
lea eax, [ebp - 0x4c]
push eax
mov ecx, 0x5caf7c
mov edx, 0x5caf90
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x4c]
mov eax, dword [0x5d5508]
call fcn.00404a84
push 0
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x5cafa0
mov edx, 0x5cafb0
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x50]
mov eax, dword [0x5d5344]
call fcn.00404a84
push 0
lea eax, [ebp - 0x54]
push eax
mov ecx, 0x5cafc8
mov edx, 0x5cafb0
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x54]
mov eax, dword [0x5d4bc4]
call fcn.00404a84
push 0
lea eax, [ebp - 0x58]
push eax
mov ecx, 0x5cafd8
mov edx, 0x5cafb0
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x58]
mov eax, dword [0x5d514c]
call fcn.00404a84
mov eax, ebx
call fcn.00403bfc
mov ecx, dword [0x5d514c]
mov ecx, dword [ecx]
mov edx, dword [0x5d4bc4]
mov edx, dword [edx]
mov eax, dword [0x5d5344]
mov eax, dword [eax]
call fcn.004fcb68
test al, al
jne 0x5ca809
mov eax, dword [0x5d5344]
call fcn.00404a30
mov eax, dword [0x5d4bc4]
call fcn.00404a30
mov eax, dword [0x5d514c]
call fcn.00404a30
mov al, 1
call fcn.00561b10
test al, al
jne 0x5ca809
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a22e0
jmp 0x5cae39
call fcn.005611f8
call fcn.00402c18
dec eax
jl 0x5ca89e
mov eax, 0xc4a388
mov edx, dword [0x5d5508]
mov edx, dword [edx]
call fcn.00404a84
mov edx, dword [0x5d5508]
mov eax, 1
call fcn.00402c78
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00409cac
test al, al
jne 0x5ca884
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00409c9c
test al, al
je 0x5ca87a
lea edx, [ebp - 0x5c]
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.0040a080
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x5d5508]
call fcn.00404a84
jmp 0x5ca884
mov eax, dword [0x5d5508]
call fcn.00404a30
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca89e
mov eax, dword [0x5d5508]
mov edx, dword [0xc4a388]
call fcn.00404a84
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca8dc
lea eax, [ebp - 0x60]
mov ecx, 0x5cafe4
mov edx, dword [0xc4a380]
call fcn.00404d3c
mov eax, dword [ebp - 0x60]
call fcn.00409cac
test al, al
je 0x5ca8dc
mov eax, dword [0x5d5508]
mov ecx, 0x5cafe4
mov edx, dword [0xc4a380]
call fcn.00404d3c
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00409cac
test al, al
jne 0x5ca8f6
mov eax, dword [0x5d5508]
call fcn.00404a30
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca993
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov edx, 0xffffffec
mov eax, ebx
call fcn.00480428
mov eax, ebx
call fcn.0049eaac
push 0x40
mov ecx, 0x5cb010
mov edx, 0x5cb020
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2384
mov eax, dword [0x5d5508]
call fcn.004fb8f4
mov byte [0xc4a379], 1
mov eax, ebx
call fcn.00403bfc
mov eax, dword [0x5d5508]
cmp dword [eax], 0
jne 0x5ca993
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a22e0
jmp 0x5cae39
xor ecx, ecx
mov dl, 1
mov eax, dword [0x51e6b4]
call fcn.0049a754
mov edx, dword [0x5d53ac]
mov dword [edx], eax
mov eax, dword [0x5d53ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x304]
mov edx, dword [0x5d4f70]
mov dword [edx], eax
mov eax, dword [0x5d53ac]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
mov eax, dword [eax + 0x68]
mov edx, dword [0x5d54b8]
mov dword [edx], eax
mov eax, dword [0x5d5508]
cmp dword [eax], 0
je 0x5caa18
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00404cf0
mov edx, dword [0x5d5508]
mov edx, dword [edx]
cmp byte [edx + eax - 1], 0x5c
jne 0x5caa18
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.00404cf0
mov edx, eax
mov eax, dword [0x5d5508]
mov ecx, 1
call fcn.00404f90
mov byte [0xc4a378], 0
lea eax, [ebp - 0x64]
call fcn.004fc488
mov eax, dword [ebp - 0x64]
call fcn.00409c9c
test al, al
je 0x5caa62
lea eax, [ebp - 0x68]
call fcn.004fc488
mov eax, dword [ebp - 0x68]
call fcn.00409c34
mov edx, dword [0x5d4ad8]
mov dword [edx], eax
lea eax, [ebp - 0x6c]
call fcn.004fc488
mov eax, dword [ebp - 0x6c]
call fcn.00530510
mov byte [0xc4a378], al
jmp 0x5caace
cmp byte [0xc4a379], 0
jne 0x5caace
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov edx, 0xffffffec
mov eax, ebx
call fcn.00480428
mov eax, ebx
call fcn.0049eaac
push 0x40
mov ecx, 0x5cb04c
mov edx, 0x5cb058
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2384
mov eax, ebx
call fcn.00403bfc
mov eax, dword [0x5d4bf4]
cmp byte [eax], 0
je 0x5cabbf
mov ecx, dword [0x5d4cf0]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x58d810]
call fcn.004a2174
mov ecx, dword [0x5d4efc]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x526890]
call fcn.004a2174
mov ecx, dword [0x5d54f0]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x55c358]
call fcn.004a2174
mov ecx, dword [0x5d4f54]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x51d768]
call fcn.004a2174
mov ecx, dword [0x5d49e4]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x56344c]
call fcn.004a2174
mov ecx, dword [0x5d4fc8]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x563d98]
call fcn.004a2174
mov eax, dword [0x5d49e4]
mov eax, dword [eax]
mov eax, dword [eax + 0x30c]
mov eax, dword [eax + 0x22c]
call fcn.0045f470
call fcn.0045ee2c
mov eax, dword [0x5d49e4]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
mov eax, dword [eax + 0x22c]
call fcn.0045f470
call fcn.0045ee2c
cmp byte [0xc4a378], 0
jne 0x5cadf6
mov al, 1
call fcn.0052f1e8
jmp 0x5cadf6
cmp byte [0xc4a378], 0
jne 0x5cabd9
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a22e0
jmp 0x5cae39
mov byte [0xc4a384], 0
mov eax, dword [0x5d537c]
mov al, byte [eax + 4]
cmp al, 1
jne 0x5cac07
call fcn.0040bba4
mov eax, dword [0x5d537c]
fcomp qword [eax + 8]
fnstsw ax
sahf
jbe 0x5cac19
mov byte [0xc4a384], 1
jmp 0x5cac19
mov edx, dword [0x5d537c]
cmp al, 2
je 0x5cac19
mov edx, dword [0x5d537c]
cmp al, 3
mov eax, dword [0x5d537c]
mov eax, dword [eax]
call fcn.004fb444
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov edx, 0xffffffec
mov eax, ebx
call fcn.00480428
mov eax, ebx
call fcn.0049eaac
cmp byte [0xc4a384], 0
je 0x5caca9
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x4c]
call fcn.00405d58
mov esi, eax
dec esi
test esi, esi
jl 0x5caca9
inc esi
xor edi, edi
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5caca9
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + edi*4]
xor edx, edx
call fcn.0052804c
inc edi
dec esi
jne 0x5cac89
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5cacbd
call fcn.00526bbc
call fcn.00526be0
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x44]
call fcn.00405d58
mov esi, eax
dec esi
test esi, esi
jl 0x5cacf4
inc esi
xor edi, edi
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5cacf4
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + edi*4]
xor edx, edx
call fcn.0052804c
inc edi
dec esi
jne 0x5cacd4
mov eax, ebx
call fcn.00403bfc
mov eax, dword [0x5d4d70]
cmp byte [eax], 0
jne 0x5cadeb
mov ecx, dword [0x5d4efc]
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov edx, dword [0x526890]
call fcn.004a2174
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x50]
call fcn.00405d58
test eax, eax
je 0x5cad87
mov edx, dword [0x5d4efc]
mov edx, dword [edx]
mov eax, dword [0x5d537c]
mov eax, dword [eax + 0x50]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00530b58
mov eax, dword [0x5d4efc]
mov eax, dword [eax]
call fcn.00530f68
mov eax, dword [0x5d4efc]
mov eax, dword [eax]
xor edx, edx
mov dword [eax + 0x340], edx
mov eax, dword [0x5d4efc]
mov eax, dword [eax]
mov edx, dword [0x5d51bc]
mov edx, dword [edx]
mov dword [edx + 0x114], eax
mov dword [edx + 0x110], 0x530eb0
jmp 0x5cadf6
xor ecx, ecx
mov dl, 1
mov eax, dword [0x497b8c]
call fcn.0049a754
mov ebx, eax
xor edx, edx
mov eax, ebx
call fcn.0049bf18
mov edx, 1
mov eax, ebx
call fcn.00480474
mov edx, 1
mov eax, ebx
call fcn.00480498
mov eax, ebx
call fcn.0049eaac
push 0x40
mov ecx, 0x5cb080
mov edx, 0x5cb088
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a2384
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, ebx
call fcn.00403bfc
jmp 0x5cadf6
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5d51bc]
mov eax, dword [eax]
call fcn.004a21f4
xor eax, eax
call fcn.0052f1e8
mov eax, dword [0x5d53ac]
mov eax, dword [eax]
call fcn.00403bfc
cmp byte [0xc4a37a], 0
je 0x5cae2a
mov eax, dword [0x5d5508]
mov eax, dword [eax]
call fcn.004fb5c8
mov eax, dword [0x5d4b40]
cmp byte [eax], 0
je 0x5cae39
call sub.ole32.dll_CoFreeUnusedLibraries
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5cae5b
lea eax, [ebp - 0x6c]
mov edx, 0x17
call fcn.00404a54
ret