Function at 0xa36890
Capabilities:
Check os version

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0xa8d25d
push eax
mov dword fs:[0], esp
sub esp, 0x31c
push ebx
push ebp
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor edi, edi
mov ebp, eax
push edi
call fcn.009e4180
mov esi, dword [esp + 0x340]
add esp, 4
lea eax, [esp + 0x7c]
lea ecx, [esp + 0x124]
push eax
push ecx
push 0x104
push edi
push esi
push edi
call fcn.009e9260
test eax, eax
jne 0xa36905
push 0x103
lea edx, [esp + 0x128]
push esi
push edx
call fcn.00a7e178
add esp, 0xc
mov word [esp + 0x32a], di
push 1
call fcn.009e4180
add esp, 4
lea eax, [esp + 0x48]
lea ecx, [esp + 0x124]
push edi
push eax
push edi
push edi
push 3
push edi
push 1
push 1
push ecx
call fcn.00a2b060
test al, al
je 0xa3706d
cmp dword [esp + 0x48], 0xffffffff
je 0xa3706d
lea edx, [esp + 0x90]
mov dword [esp + 0x90], 0x94
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0xa3696a
cmp dword [esp + 0x94], 6
jae 0xa3696a
mov edi, 1
mov eax, dword [esp + 0x48]
mov esi, eax
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 0x370]
mov ebx, dword [esp + 0x344]
mov dword [esp + 0x334], 0
mov dword [ecx], 0
mov ecx, dword [esp + 0x340]
cmp ecx, 0xffffffff
je 0xa369f9
test ebx, ebx
jne 0xa369ae
mov ecx, dword [esp + 0x354]
test ecx, ecx
je 0xa369f9
mov ecx, dword [esp + 0x364]
test ecx, ecx
jne 0xa369f9
mov edx, str._No_output_requested_
test edx, edx
je 0xa369cd
push edx
call fcn.00a7e07a
add esp, 4
jmp 0xa369cf
xor eax, eax
mov ecx, dword [esp + 0x36c]
push eax
push str._No_output_requested_
call fcn.00a15880
test edi, edi
jne 0xa3700b
push 0x3b02
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0xa3700b
push eax
lea ecx, [esp + 0x28]
call fcn.00a36490
lea ecx, [esp + 0x24]
mov byte [esp + 0x334], 1
call fcn.00a363a0
test eax, eax
jne 0xa36af6
mov eax, str._Not_a_PE_file_
test eax, eax
je 0xa36a30
push eax
call fcn.00a7e07a
add esp, 4
jmp 0xa36a32
xor eax, eax
mov ecx, dword [esp + 0x36c]
push eax
push str._Not_a_PE_file_
call fcn.00a15880
cmp esi, 0xffffffff
je 0xa36a57
push esi
call fcn.00a2aff0
mov dword [esp + 0x10], 0xffffffff
mov esi, dword [esp + 0x368]
test ebx, ebx
je 0xa36a9e
mov edx, dword [esp + 0x350]
mov eax, dword [esp + 0x34c]
mov ecx, esi
or ecx, 0x10
push ecx
push edx
push eax
lea ecx, [esp + 0x130]
push 1
push ecx
push 0
call fcn.00a4dc20
mov ebp, dword [esp + 0x388]
add esp, 0x18
test eax, eax
mov dword [ebx], eax
je 0xa36aa5
inc dword [ebp]
jmp 0xa36aa5
mov ebp, dword [esp + 0x370]
mov edi, dword [esp + 0x354]
test edi, edi
je 0xa36ae9
mov edx, dword [esp + 0x360]
mov eax, dword [esp + 0x35c]
or esi, 0x10
lea ecx, [esp + 0x124]
push esi
push edx
push eax
push 1
push ecx
push 0
call fcn.00a4dc20
add esp, 0x18
xor edx, edx
cmp ebx, edi
sete dl
test eax, eax
mov dword [edi + edx*4], eax
je 0xa36ae9
inc dword [ebp]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0xa36d71
mov eax, edi
mov esi, dword [sym.imp.KERNEL32.dll_SetLastError]
neg eax
sbb eax, eax
not eax
and eax, ebp
push eax
call esi
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x50]
call fcn.00a365f0
push 0
lea ecx, [esp + 0x50]
mov byte [esp + 0x338], 2
call fcn.00a36610
test eax, eax
jne 0xa36b70
mov edx, str._Unable_to_load_resource_dir_
test edx, edx
je 0xa36b57
push edx
call fcn.00a7e07a
mov ecx, dword [esp + 0x370]
add esp, 4
push eax
push str._Unable_to_load_resource_dir_
call fcn.00a15880
jmp 0xa36d60
mov ecx, dword [esp + 0x36c]
xor eax, eax
push eax
push str._Unable_to_load_resource_dir_
call fcn.00a15880
jmp 0xa36d60
lea eax, [esp + 0x24]
lea ecx, [esp + 0x38]
push eax
call fcn.00a365f0
lea ecx, [esp + 0x4c]
push 0xe
push ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x33c], 3
call fcn.00a36680
test eax, eax
jne 0xa36bdc
mov edx, str._No_icongroups_resources_
test edx, edx
je 0xa36bc3
push edx
call fcn.00a7e07a
mov ecx, dword [esp + 0x370]
add esp, 4
push eax
push str._No_icongroups_resources_
call fcn.00a15880
jmp 0xa36d4f
mov ecx, dword [esp + 0x36c]
xor eax, eax
push eax
push str._No_icongroups_resources_
call fcn.00a15880
jmp 0xa36d4f
mov eax, dword [esp + 0x340]
cmp eax, 0xffffffff
je 0xa37025
mov ebp, dword [esp + 0x354]
test ebx, ebx
jne 0xa36bff
test ebp, ebp
je 0xa37025
test eax, eax
jge 0xa36c64
mov eax, dword [esp + 0x340]
lea ecx, [esp + 0x38]
neg eax
push eax
call fcn.00a36730
cmp eax, 0xffffffff
mov dword [esp + 0x340], eax
jne 0xa36c64
mov ecx, str._Loading_by_resource_id_but_id_not_found_
test ecx, ecx
je 0xa36c4b
push ecx
call fcn.00a7e07a
mov ecx, dword [esp + 0x370]
add esp, 4
push eax
push str._Loading_by_resource_id_but_id_not_found_
call fcn.00a15880
jmp 0xa36d4f
mov ecx, dword [esp + 0x36c]
xor eax, eax
push eax
push str._Loading_by_resource_id_but_id_not_found_
call fcn.00a15880
jmp 0xa36d4f
mov eax, dword [esp + 0x40]
xor edx, edx
xor ecx, ecx
mov dx, word [eax + 0xe]
mov cx, word [eax + 0xc]
lea eax, [edx + ecx]
mov ecx, dword [esp + 0x340]
cmp eax, ecx
ja 0xa36cc4
mov edx, str._Start_index_out_of_range_
test edx, edx
je 0xa36cab
push edx
call fcn.00a7e07a
mov ecx, dword [esp + 0x370]
add esp, 4
push eax
push str._Start_index_out_of_range_
call fcn.00a15880
jmp 0xa36d4f
mov ecx, dword [esp + 0x36c]
xor eax, eax
push eax
push str._Start_index_out_of_range_
call fcn.00a15880
jmp 0xa36d4f
mov edx, dword [esp + 0x364]
mov dword [esp + 0x18], edx
add edx, ecx
cmp eax, edx
jae 0xa36cdd
sub eax, ecx
mov dword [esp + 0x18], eax
jmp 0xa36ce8
test edi, edi
jne 0xa36ce8
push 0x3b02
call esi
lea eax, [esp + 0x24]
lea ecx, [esp + 0x5c]
push eax
call fcn.00a365f0
lea ecx, [esp + 0x4c]
push 3
push ecx
lea ecx, [esp + 0x64]
mov byte [esp + 0x33c], 4
call fcn.00a36680
test eax, eax
jne 0xa36da3
mov edx, str._No_icon_resources_
test edx, edx
je 0xa36d2a
push edx
call fcn.00a7e07a
add esp, 4
jmp 0xa36d2c
xor eax, eax
mov ecx, dword [esp + 0x36c]
push eax
push str._No_icon_resources_
call fcn.00a15880
lea ecx, [esp + 0x5c]
mov byte [esp + 0x334], 3
call fcn.00a36760
lea ecx, [esp + 0x38]
mov byte [esp + 0x334], 2
call fcn.00a36760
lea ecx, [esp + 0x4c]
mov byte [esp + 0x334], 1
call fcn.00a36760
lea ecx, [esp + 0x24]
mov byte [esp + 0x334], 0
call fcn.00a364d0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x334], 0xffffffff
cmp eax, 0xffffffff
je 0xa36d9c
push eax
call fcn.00a2aff0
mov al, 1
jmp 0xa37076
mov eax, dword [esp + 0x18]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x1c], esi
jbe 0xa36f7f
xor edi, edi
mov dword [esp + 0x14], esi
test ebx, ebx
je 0xa36dce
cmp ebp, ebx
mov eax, esi
je 0xa36dc7
mov eax, edi
mov dword [eax + ebx], 0
test ebp, ebp
je 0xa36de2
cmp ebp, ebx
lea eax, [esi + 4]
je 0xa36ddb
mov eax, edi
mov dword [eax + ebp], 0
lea eax, [esp + 0x24]
lea ecx, [esp + 0x80]
push eax
call fcn.00a365f0
mov ecx, dword [esp + 0x340]
mov edx, dword [esp + 0x1c]
add edx, ecx
lea eax, [esp + 0x38]
push edx
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x33c], 5
call fcn.00a366b0
test eax, eax
je 0xa36f4c
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x70]
call fcn.00a365f0
lea edx, [esp + 0x80]
push 0
push edx
lea ecx, [esp + 0x74]
mov byte [esp + 0x33c], 6
call fcn.00a367d0
test eax, eax
je 0xa36f37
test ebx, ebx
je 0xa36ec0
mov esi, dword [esp + 0x14]
cmp ebp, ebx
je 0xa36e61
mov esi, edi
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x350]
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x350]
push ecx
push edx
lea ecx, [esp + 0x30]
push eax
lea edx, [esp + 0x6c]
push ecx
lea eax, [esp + 0x80]
push edx
push eax
call fcn.00a370b0
mov dword [esi + ebx], eax
mov eax, dword [esp + 0x364]
add esp, 0x1c
test eax, eax
je 0xa36ec0
mov ecx, eax
mov eax, dword [esp + 0x358]
cmp eax, ecx
mov eax, dword [esp + 0x14]
je 0xa36eb9
mov eax, edi
mov edx, dword [esp + 0x20]
mov dword [eax + ecx], edx
test ebp, ebp
je 0xa36f37
cmp ebp, ebx
jne 0xa36ed1
mov eax, dword [esp + 0x14]
lea esi, [eax + 4]
jmp 0xa36ed3
mov esi, edi
mov edx, dword [esp + 0x368]
mov eax, dword [esp + 0x360]
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x360]
push edx
push eax
lea edx, [esp + 0x30]
push ecx
lea eax, [esp + 0x6c]
push edx
lea ecx, [esp + 0x80]
push eax
push ecx
call fcn.00a370b0
mov dword [esi + ebp], eax
mov eax, dword [esp + 0x374]
add esp, 0x1c
test eax, eax
je 0xa36f37
mov ecx, eax
mov eax, dword [esp + 0x348]
cmp ecx, eax
jne 0xa36f2e
mov edx, dword [esp + 0x14]
lea eax, [edx + 4]
jmp 0xa36f30
mov eax, edi
mov edx, dword [esp + 0x20]
mov dword [eax + ecx], edx
lea ecx, [esp + 0x6c]
mov byte [esp + 0x334], 5
call fcn.00a36760
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x80]
mov byte [esp + 0x334], 4
call fcn.00a36760
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
inc eax
add edi, 4
add esi, 8
cmp eax, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], esi
jb 0xa36dbb
cmp dword [esp + 0x364], 1
jne 0xa36fa4
xor eax, eax
mov edx, dword [esp + 0x370]
test ebx, ebx
setne al
xor ecx, ecx
test ebp, ebp
setne cl
add eax, ecx
mov dword [edx], eax
jmp 0xa36fb1
mov eax, dword [esp + 0x370]
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
mov esi, dword [esp + 0x10]
cmp esi, 0xffffffff
je 0xa36fc7
push esi
call fcn.00a2aff0
or esi, 0xffffffff
mov dword [esp + 0x10], esi
lea ecx, [esp + 0x5c]
mov byte [esp + 0x334], 3
call fcn.00a36760
lea ecx, [esp + 0x38]
mov byte [esp + 0x334], 2
call fcn.00a36760
lea ecx, [esp + 0x4c]
mov byte [esp + 0x334], 1
call fcn.00a36760
lea ecx, [esp + 0x24]
mov byte [esp + 0x334], 0
call fcn.00a364d0
cmp esi, 0xffffffff
mov dword [esp + 0x334], 0xffffffff
je 0xa37021
push esi
call fcn.00a2aff0
mov al, 1
jmp 0xa37076
mov edx, str._Requested_number_of_entries_only_
test edx, edx
je 0xa37039
push edx
call fcn.00a7e07a
add esp, 4
jmp 0xa3703b
xor eax, eax
mov ecx, dword [esp + 0x36c]
push eax
push str._Requested_number_of_entries_only_
call fcn.00a15880
mov eax, dword [esp + 0x40]
xor ecx, ecx
xor edx, edx
mov cx, word [eax + 0xe]
mov dx, word [eax + 0xc]
mov eax, dword [esp + 0x370]
add ecx, edx
mov dword [eax], ecx
jmp 0xa36d4f
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor al, al
mov ecx, dword [esp + 0x32c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x328
ret