Function at 0xc5e73c
Capabilities:
Check os version

Disassembly:
push 0x194
push 0xc8f100
call fcn.00af90a0
mov dword [ebp - 0x16c], edx
mov esi, ecx
mov dword [ebp - 0x178], esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x184], eax
xor ebx, ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x154], ebx
push 8
pop ecx
xor eax, eax
lea edi, [ebp - 0x1a4]
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x160]
mov eax, dword [edi + 0x2c]
test eax, eax
je 0xc5e7b8
lea ecx, [eax + 0x28]
cmp word [eax + 2], 0x34
sbb eax, eax
not eax
and eax, ecx
mov dword [edx], eax
mov eax, dword [edi + 0x2c]
mov dword [esi], eax
mov esi, ebx
mov dword [ebp - 0x150], esi
jmp 0xc5ec1e
mov ecx, edi
call fcn.00c5ce60
mov esi, eax
mov dword [ebp - 0x150], esi
test esi, esi
jns 0xc5e7ea
push esi
push 0xa29128
push 0x530
push 0xa29574
push 1
call fcn.00a32ac8
add esp, 0x14
jmp 0xc5ec1e
cmp dword [edi + 0x28], 6
je 0xc5e7f7
mov esi, 0xc0000089
jmp 0xc5e7ad
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], 0x10
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x24], ebx
mov eax, dword [edi + 0x18]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x170], eax
mov ecx, dword [edi + 0x1c]
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x174], ecx
cmp byte [edi + 0x23], 0
mov ecx, ebx
jne 0xc5e836
mov ecx, 0x200
push ebx
push ebx
lea edx, [ebp - 0x154]
push edx
lea edx, [ebp - 0x158]
push edx
push ecx
push 3
lea ecx, [ebp - 0x2c]
push ecx
push eax
call dword [sym.imp.ntdll.dll_LdrResSearchResource]
mov esi, eax
mov dword [ebp - 0x150], esi
test esi, esi
jns 0xc5e9f7
mov ecx, esi
call fcn.00c5c55d
test eax, eax
jne 0xc5ebb4
cmp esi, 0xc000007b
jne 0xc5ea1f
cmp byte [edi + 0x23], al
jne 0xc5ea1f
cmp dword [edi + 0x34], ebx
jne 0xc5ea1f
mov esi, 0x11c
push esi
push ebx
lea eax, [ebp - 0x14c]
push eax
call fcn.00ab4bf6
add esp, 0xc
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0x148], 6
push 2
pop eax
mov dword [ebp - 0x144], eax
push 3
push eax
push ebx
push ebx
call dword [sym.imp.ntdll.dll_VerSetConditionMask]
push 3
push 1
push edx
push eax
call dword [sym.imp.ntdll.dll_VerSetConditionMask]
push edx
push eax
push 3
lea eax, [ebp - 0x14c]
push eax
call dword [sym.imp.ntdll.dll_RtlVerifyVersionInfo]
mov dword [ebp - 0x150], eax
test eax, eax
jns 0xc5e902
mov esi, 0xc0000089
mov dword [ebp - 0x150], esi
jmp 0xc5ebb4
mov eax, dword [edi + 8]
mov byte [ebp - 0x18c], bl
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x150], ebx
mov dl, 1
lea ecx, [ebp - 0x1a4]
call fcn.00a320b0
mov esi, eax
mov dword [ebp - 0x150], esi
test esi, esi
jns 0xc5e94f
push esi
push 0xa294f0
push 0x58c
push 0xa29574
push 1
call fcn.00a32ac8
add esp, 0x14
jmp 0xc5ebb4
push dword [edi]
push 0xa29510
push 0x595
push 0xa29574
push 3
call fcn.00a32ac8
add esp, 0x14
push ebx
push ebx
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0x158]
push eax
push ebx
push 3
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x164], eax
push eax
call dword [sym.imp.ntdll.dll_LdrResSearchResource]
mov esi, eax
mov dword [ebp - 0x150], esi
test esi, esi
mov eax, 0xa295e0
jns 0xc5e9aa
mov eax, 0xa295ec
push esi
push eax
push 0xa2958c
push 0x5a2
push 0xa29574
push 2
call fcn.00a32ac8
add esp, 0x18
test esi, esi
jns 0xc5e9d9
push esi
push 0xa295c0
push 0x5a5
jmp 0xc5e93b
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x158], 0
jne 0xc5ea40
push esi
push 0xa29460
push 0x5b4
push 0xa29574
push 1
call fcn.00a32ac8
add esp, 0x14
jmp 0xc5e8f2
push esi
push dword [edi]
push 0xa2943c
push 0x5ad
push 0xa29574
push 1
call fcn.00a32ac8
add esp, 0x18
jmp 0xc5ebb4
lea eax, [ebp - 0x160]
push eax
mov edx, dword [ebp - 0x154]
mov esi, dword [ebp - 0x158]
mov ecx, esi
call fcn.00bf11fc
mov dword [ebp - 0x150], eax
test eax, eax
jns 0xc5ea73
push 0xa29404
push 0x5c2
jmp 0xc5eb9a
mov ecx, dword [ebp - 0x164]
cmp esi, ecx
jb 0xc5eb90
mov eax, dword [ebp - 0x168]
add eax, ecx
cmp dword [ebp - 0x160], eax
ja 0xc5eb90
cmp byte [edi + 0x23], 0
jne 0xc5eac9
cmp dword [ebp - 0x1a0], 0
jne 0xc5eac9
xor eax, eax
add ecx, dword [edi + 0x10]
adc eax, dword [edi + 0x14]
cmp ebx, eax
jb 0xc5eac9
ja 0xc5eaba
cmp dword [ebp - 0x160], ecx
jbe 0xc5eac9
push 0xa29420
push 0x5e0
jmp 0xc5eb9a
cmp dword [ebp - 0x154], 0x26
jb 0xc5eb7f
push 0xa289e0
lea eax, [esi + 6]
push eax
call fcn.00ab4bb4
pop ecx
pop ecx
test eax, eax
jne 0xc5eb7f
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x168], eax
push dword [ebp - 0x154]
push 8
push eax
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov esi, eax
mov dword [ebp - 0x15c], esi
test esi, esi
jne 0xc5eb29
mov esi, 0xc0000017
push 0xa1db10
push 0x5f6
jmp 0xc5eb9f
push dword [ebp - 0x154]
push dword [ebp - 0x158]
push esi
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
add esp, 0xc
movzx eax, word [esi]
mov ecx, dword [ebp - 0x154]
cmp ecx, eax
jae 0xc5eb4e
mov word [esi], cx
mov dword [edi + 0x2c], esi
mov dword [ebp - 0x15c], ebx
mov ecx, dword [ebp - 0x16c]
cmp word [esi + 2], 0x34
jae 0xc5eb68
mov dword [ecx], ebx
jmp 0xc5eb6d
lea eax, [esi + 0x28]
mov dword [ecx], eax
mov eax, dword [edi + 0x2c]
mov ecx, dword [ebp - 0x178]
mov dword [ecx], eax
mov esi, ebx
jmp 0xc5e8f7
mov esi, 0xc00000e5
push 0xa294a4
push 0x5eb
jmp 0xc5eb9f
push 0xa29420
push 0x5ce
mov esi, 0xc0000089
push 0xa29574
push 1
mov dword [ebp - 0x150], esi
call fcn.00a32ac8
add esp, 0x10
mov dword [ebp - 4], 0xfffffffe
jmp 0xc5ec1e
cmp dword [ebp - 0x15c], 0
je 0xc5ec43
push dword [ebp - 0x15c]
push ebx
mov eax, dword fs:[0x30]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
mov esi, dword [ebp - 0x150]
lea ecx, [ebp - 0x1a4]
call fcn.00a32a51
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 4