Function at 0x1c90ac0
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x1d4da2a
mov eax, dword fs:[0]
push eax
sub esp, 0x104
mov eax, dword [0x1d9682c]
xor eax, esp
mov dword [esp + 0x100], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1d9682c]
xor eax, esp
push eax
lea eax, [esp + 0x118]
mov dword fs:[0], eax
mov eax, dword [esp + 0x12c]
mov ebp, dword [esp + 0x128]
mov edx, dword [esp + 0x130]
mov edi, dword [esp + 0x134]
mov esi, dword [esp + 0x138]
mov dword [esp + 0x1c], eax
xor eax, eax
xor bl, bl
mov dword [esp + 0x30], ecx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x18], edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], eax
mov byte [esp + 0x16], 1
cmp dword [ecx], eax
je 0x1c90b4c
cmp dword [ecx + 8], 0x80000000
jne 0x1c90b4e
mov bl, 1
lea ecx, [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x40]
push edx
push esi
push edi
xor eax, eax
push ecx
push eax
push ebp
mov dword [esp + 0x5c], eax
mov dword [esp + 0x50], eax
call fcn.01c84520
add esp, 0x1c
mov dword [esp + 0x40], eax
cmp eax, 1
jne 0x1c90b83
xor al, al
jmp 0x1c91162
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1c90bbc
push 0
push eax
mov ecx, ebp
call fcn.01c6edf0
cmp dword [esp + 0x40], 0
jne 0x1c90bab
mov edx, dword [eax]
and dl, 7
cmp dl, 4
jne 0x1c90bab
mov byte [esp + 0x16], 0
mov eax, dword [eax]
and eax, 7
cmp eax, 3
je 0x1c90bba
cmp eax, 4
jne 0x1c90bbc
xor bl, bl
cmp byte [esp + 0x16], 0
mov dword [esp + 0x48], 3
je 0x1c90c12
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x3c]
push ecx
push esi
push edi
push edx
push 1
push ebp
call fcn.01c84520
add esp, 0x1c
mov dword [esp + 0x48], eax
test bl, bl
je 0x1c90c12
mov eax, dword [esp + 0x38]
test eax, eax
je 0x1c90c12
push 1
push eax
mov ecx, ebp
call fcn.01c6edf0
mov eax, dword [eax]
and eax, 7
cmp eax, 3
je 0x1c90c10
cmp eax, 4
jne 0x1c90c12
xor bl, bl
cmp dword [esp + 0x3c], 0
jne 0x1c90c38
cmp dword [esp + 0x38], 0
jne 0x1c90c38
mov ecx, ebp
call fcn.01c81be0
cmp eax, 3
je 0x1c90c36
call fcn.01c81be0
cmp eax, 4
jne 0x1c90c38
xor bl, bl
mov ebp, dword [esp + 0x30]
lea eax, [ebp + 0x10]
push eax
mov dword [ebp + 0x40], 1
call dword [0x1d800b0]
test byte [ebp + 0x38], 4
je 0x1c910db
test bl, bl
je 0x1c910db
cmp dword [esp + 0x18], 0x80000001
jne 0x1c90cb5
lea ecx, [esp + 0x70]
call fcn.01d0fdc0
mov dword [esp + 0x120], 0
lea ecx, [esp + 0x70]
push ecx
push esi
push edi
call fcn.01c81ae0
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x50]
push edx
push eax
call fcn.01c84f40
add esp, 0x14
test al, al
je 0x1c90ca1
xor bl, bl
mov dword [esp + 0x120], 0xffffffff
lea ecx, [esp + 0x70]
call fcn.01d0f660
test bl, bl
je 0x1c910db
mov eax, dword [esp + 0x1c]
mov ebp, dword [0x1d800c4]
test eax, eax
je 0x1c90cf1
push 0
push 0
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x5c]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push eax
call ebp
mov ebx, eax
jmp 0x1c90cf5
mov ebx, dword [esp + 0x4c]
cmp dword [esp + 0x1c], 0
mov byte [esp + 0x17], 0
je 0x1c90d06
cmp ebx, 5
jne 0x1c90d81
lea ecx, [esp + 0x70]
call fcn.01d0fdc0
mov dword [esp + 0x120], 1
lea edx, [esp + 0x70]
push edx
push esi
push edi
call fcn.01c81ae0
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x24]
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 9
push 0
push ecx
push edx
call dword [0x1d80004]
mov ebx, eax
test ebx, ebx
jne 0x1c90d6d
push eax
push eax
lea eax, [esp + 0x30]
push eax
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x5c]
push edx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
mov byte [esp + 0x47], 1
call ebp
mov ebx, eax
mov dword [esp + 0x120], 0xffffffff
lea ecx, [esp + 0x70]
call fcn.01d0f660
test ebx, ebx
jne 0x1c910c9
inc dword [esp + 0x2c]
lea ecx, [esp + 0x70]
call fcn.01d0fdc0
mov dword [esp + 0x120], 2
lea ecx, [esp + 0x58]
call fcn.01cf9be0
mov byte [esp + 0x120], 3
mov ecx, dword [esp + 0x2c]
inc ecx
push ecx
lea ecx, [esp + 0x74]
call fcn.01d0fb00
mov edx, dword [esp + 0x28]
push ebx
push edx
lea ecx, [esp + 0x60]
call fcn.01c57a30
mov esi, dword [0x1d80044]
xor ebp, ebp
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x20], eax
test eax, eax
je 0x1c90e20
mov eax, dword [esp + 0x64]
mov ebx, eax
cmp eax, dword [esp + 0x68]
jbe 0x1c90e01
call fcn.01d21b13
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x1c90f84
call fcn.01d21b13
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x1c90e1e
call fcn.01d21b13
mov eax, ebx
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x74]
push eax
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x28]
push 0
lea eax, [esp + 0x28]
push eax
push ecx
push ebp
push edx
call esi
mov ebx, eax
mov dword [esp + 0x50], ebx
cmp ebx, 0xea
jne 0x1c90eba
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x28]
jbe 0x1c90eba
push 0
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x30], eax
call fcn.01c57a30
mov eax, dword [esp + 0x64]
mov ebx, eax
cmp eax, dword [esp + 0x68]
jbe 0x1c90e78
call fcn.01d21b13
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x1c90f8b
call fcn.01d21b13
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x1c90e95
call fcn.01d21b13
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x74]
push ebx
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x28]
push 0
lea edx, [esp + 0x28]
push edx
push eax
push ebp
push ecx
call esi
mov ebx, eax
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x18]
push edx
lea ecx, [esp + 0x74]
call fcn.01d0fbb0
test ebx, ebx
jne 0x1c91093
mov esi, dword [esp + 0x30]
mov eax, dword [esi + 0x58]
sub eax, dword [esi + 0x54]
add esi, 0x48
sar eax, 2
xor edi, edi
mov dword [esp + 0x24], 0xffffffff
test eax, eax
jbe 0x1c90f92
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
sar ecx, 2
cmp edi, ecx
jb 0x1c90f04
call fcn.01d21b13
mov edx, dword [esi + 0xc]
mov eax, dword [edx + edi*4]
mov ecx, dword [esp + 0x18]
lea ebp, [edi*4]
cmp dword [eax + 4], ecx
jne 0x1c90f53
mov edx, dword [esi + 0x10]
sub edx, dword [esi + 0xc]
mov ebx, dword [esp + 0x70]
sar edx, 2
cmp edi, edx
jb 0x1c90f30
call fcn.01d21b13
mov eax, dword [esi + 0xc]
mov ecx, dword [esp + 0x18]
add eax, ebp
mov eax, dword [eax]
mov eax, dword [eax]
lea edx, [ecx + ecx]
push edx
push ebx
push eax
call fcn.01d2232e
add esp, 0xc
test eax, eax
jne 0x1c90f53
mov dword [esp + 0x24], edi
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
inc edi
sar eax, 2
cmp edi, eax
jb 0x1c90ef2
mov edi, dword [esp + 0x24]
cmp edi, 0xffffffff
je 0x1c90f92
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
sar ecx, 2
cmp edi, ecx
jb 0x1c90f7c
call fcn.01d21b13
mov edx, dword [esi + 0xc]
mov edi, dword [edx + edi*4]
jmp 0x1c90fd4
mov eax, dword [eax]
jmp 0x1c90e14
mov eax, dword [eax]
jmp 0x1c90e8b
push 0xc0
call fcn.01c5d940
add esp, 4
mov dword [esp + 0x24], eax
mov byte [esp + 0x120], 4
test eax, eax
je 0x1c90fb8
mov ecx, eax
call fcn.01c8f280
jmp 0x1c90fba
xor eax, eax
mov byte [esp + 0x120], 3
mov edi, eax
lea eax, [esp + 0x24]
push eax
mov ecx, esi
mov dword [esp + 0x28], edi
call fcn.01c69af0
mov ecx, dword [esp + 0x20]
push 0
lea esi, [edi + 0xa8]
push ecx
mov ecx, esi
call fcn.01c57a30
cmp dword [esp + 0x20], 0
je 0x1c91054
mov eax, dword [esp + 0x64]
mov ebp, eax
cmp eax, dword [esp + 0x68]
jbe 0x1c91000
call fcn.01d21b13
mov eax, dword [esp + 0x58]
test eax, eax
jne 0x1c9118c
call fcn.01d21b13
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x1c9101d
call fcn.01d21b13
mov ebx, dword [esi + 0xc]
cmp ebx, dword [esi + 0x10]
jbe 0x1c9102a
call fcn.01d21b13
mov eax, dword [esi]
test eax, eax
jne 0x1c91193
call fcn.01d21b13
xor eax, eax
cmp ebx, dword [eax + 0x10]
jb 0x1c91045
call fcn.01d21b13
mov edx, dword [esp + 0x20]
push edx
push ebp
push ebx
call fcn.01d214a0
add esp, 0xc
mov eax, dword [esp + 0x70]
mov ecx, dword [0x1d76b80]
mov esi, eax
neg eax
sbb eax, eax
not eax
and eax, ecx
mov ebx, ecx
push eax
mov ecx, edi
call fcn.01d0fbb0
push ebx
push esi
mov ecx, edi
call fcn.01d0fdd0
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x34]
mov esi, dword [0x1d80044]
mov dword [edi + 0xa4], eax
inc ebp
mov dword [esp + 0x34], ebp
cmp ebx, 0x103
jne 0x1c90ddc
mov byte [esp + 0x120], 2
lea ecx, [esp + 0x58]
call fcn.01cb9990
mov dword [esp + 0x120], 0xffffffff
lea ecx, [esp + 0x70]
call fcn.01d0f660
cmp byte [esp + 0x17], 0
je 0x1c910db
mov ecx, dword [esp + 0x1c]
push ecx
call dword [0x1d80088]
cmp byte [esp + 0x16], 0
je 0x1c91121
cmp dword [esp + 0x48], 0
jne 0x1c91121
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x44]
push 1
push edx
mov ecx, esi
call fcn.01c6edf0
mov edi, dword [esp + 0x30]
mov ebx, eax
mov eax, dword [ebx + 0x34]
push eax
push 1
push esi
mov ecx, edi
call fcn.01c88be0
mov ecx, dword [ebx + 0x24]
mov edx, dword [ebx + 0x28]
push ecx
push edx
push 1
push esi
mov ecx, edi
call fcn.01c8fcc0
cmp dword [esp + 0x40], 0
jne 0x1c91160
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x44]
push 0
push eax
mov ecx, esi
call fcn.01c6edf0
mov edi, dword [esp + 0x30]
mov ebx, eax
mov ecx, dword [ebx + 0x34]
push ecx
push 0
push esi
mov ecx, edi
call fcn.01c88be0
mov edx, dword [ebx + 0x24]
mov eax, dword [ebx + 0x28]
push edx
push eax
push 0
push esi
mov ecx, edi
call fcn.01c8fcc0
mov al, 1
mov ecx, dword [esp + 0x118]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x100]
xor ecx, esp
call fcn.01d20f6a
add esp, 0x110
ret 0x14
mov eax, dword [eax]
jmp 0x1c91013
mov eax, dword [eax]
jmp 0x1c9103b