Function at 0x5d3310
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x95a4b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0x88]
call fcn.00911f0c
xor ebx, ebx
lea ecx, [esp + 0x58]
mov dword [esp + 0xa8], ebx
call fcn.00911f0c
lea ecx, [esp + 0x50]
mov byte [esp + 0xa8], 1
call fcn.00911f0c
lea eax, [esi + 0x2d2c]
lea ecx, [esp + 0x50]
push eax
mov byte [esp + 0xac], 2
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
call fcn.00911f06
lea ecx, [esi + 0x2d91]
push ecx
lea ecx, [esp + 0x5c]
call fcn.00911f06
mov eax, dword [ebp + 8]
movsx edx, word [esi + 0x2d0a]
fild dword [esi + 0x2d24]
lea edi, [eax + 1]
mov eax, dword [esi + 0x2058]
fstp qword [esp + 0x8c]
cmp edi, eax
mov dword [esp + 0x84], edx
mov dword [esp + 0x54], edi
jge 0x5d3c1d
push edi
mov ecx, esi
call fcn.005c3100
cmp word [esi + 0x2da6], 0x11
jl 0x5d3442
mov eax, dword [esi + 0x2058]
inc ebx
inc edi
cmp edi, eax
jl 0x5d3424
test ebx, ebx
jle 0x5d3c1d
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x54]
mov ecx, esi
push edx
call fcn.005c3100
fld qword [esi + 0x2d10]
call fcn.00912a20
mov ecx, dword [esi + 0x2d1c]
mov edi, eax
mov eax, dword [esi + 0x2d18]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
mov eax, dword [0xa8e7a0]
cmp edi, eax
jle 0x5d34b8
mov edx, edi
mov ecx, esi
sub edx, eax
push edx
call fcn.005c3340
mov ecx, dword [0xa8e7a0]
mov eax, edi
sub eax, ecx
mov ecx, esi
push eax
call fcn.005c33c0
mov ecx, dword [0xa8e7a0]
sub edi, ecx
mov ecx, esi
push edi
call fcn.005cf7e0
jmp 0x5d34d0
push edi
mov ecx, esi
call fcn.005c3300
push edi
mov ecx, esi
call fcn.005c3380
push edi
mov ecx, esi
call fcn.005cf440
cmp word [esi + 0x2da6], 0x11
jne 0x5d3524
fld qword [esp + 0x8c]
fcomp qword [0x9cb958]
fnstsw ax
test ah, 0x41
jne 0x5d3524
fild dword [esi + 0x20ac]
fsub qword [esp + 0x8c]
fdiv qword [esp + 0x8c]
fadd qword [0x9cb960]
fld st(0)
fmul qword [esi + 0x2ce0]
fmul qword [esp + 0x34]
fstp qword [esp + 0x24]
fmul qword [esi + 0x2ce8]
fmul qword [esp + 0x34]
jmp 0x5d353c
fld qword [esp + 0x34]
fmul qword [esi + 0x2ce0]
fstp qword [esp + 0x24]
fld qword [esp + 0x34]
fmul qword [esi + 0x2ce8]
mov eax, dword [esi + 0x2094]
fstp qword [esp + 0x3c]
test eax, eax
jle 0x5d3581
cmp eax, 6
jge 0x5d3581
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push eax
push ecx
push edx
mov ecx, esi
call fcn.005c0970
mov eax, dword [esi + 0x2094]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push eax
fstp qword [esp + 0x28]
push ecx
push edx
mov ecx, esi
call fcn.005c0970
fstp qword [esp + 0x3c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
push eax
push ecx
mov ecx, esi
call fcn.008f5ce0
fcomp qword [0x9ccd50]
fnstsw ax
test ah, 0x41
jne 0x5d35af
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
push edx
push eax
mov ecx, esi
call fcn.008f5ce0
fcomp qword [0x9ccd50]
fnstsw ax
test ah, 0x41
jne 0x5d35dd
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov al, byte [0xa8e771]
test al, al
je 0x5d3616
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
mov ecx, esi
call fcn.008f5ce0
fld dword [esi + 0xe4]
fcompp
fnstsw ax
test ah, 0x41
jne 0x5d3616
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov ax, word [esi + 0x2da6]
cmp ax, 0x11
jne 0x5d3640
fld qword [esp + 0x24]
fadd qword [esp + 0x2c]
fstp qword [esp + 0x2c]
fld qword [esp + 0x3c]
fadd qword [esp + 0x7c]
fstp qword [esp + 0x7c]
jmp 0x5d3955
mov edx, dword [esi + 0x90]
movsx ecx, ax
cmp ecx, edx
je 0x5d3925
cmp ax, 0x15
je 0x5d3925
cmp ax, 0x17
je 0x5d3925
cmp ax, 0x18
je 0x5d3925
cmp ax, 0x1a
je 0x5d3925
cmp ax, 0x13
jne 0x5d369c
fld qword [esp + 0x24]
fadd qword [esp + 0x1c]
fstp qword [esp + 0x1c]
fld qword [esp + 0x3c]
fadd qword [esp + 0xc]
fstp qword [esp + 0xc]
jmp 0x5d3955
cmp ecx, dword [esi + 0x94]
jne 0x5d36bb
fld qword [esp + 0x94]
fadd qword [esp + 0x24]
fstp qword [esp + 0x94]
jmp 0x5d3955
cmp ecx, dword [esi + 0x98]
jne 0x5d36d4
fld qword [esp + 0x24]
fadd qword [esp + 0x64]
fstp qword [esp + 0x64]
jmp 0x5d3955
cmp ax, 0x21
jne 0x5d36eb
fld qword [esp + 0x24]
fadd qword [esp + 0x5c]
fstp qword [esp + 0x5c]
jmp 0x5d3955
cmp ecx, dword [esi + 0x9c]
jne 0x5d3724
fild dword [esi + 0xc8]
fld qword [esp + 0x34]
fmul qword [esp + 0x6c]
fdiv st(1)
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x34]
fmul qword [esp + 0x74]
fdiv st(1)
fadd qword [esp + 0x44]
fstp qword [esp + 0x44]
fstp st(0)
jmp 0x5d3955
cmp ax, 0x1c
jne 0x5d375b
fild dword [esi + 0xc8]
fld qword [esp + 0x34]
fmul qword [esp + 0x1c]
fdiv st(1)
fadd qword [esp + 0x1c]
fstp qword [esp + 0x1c]
fld qword [esp + 0x34]
fmul qword [esp + 0xc]
fdiv st(1)
fadd qword [esp + 0xc]
fstp qword [esp + 0xc]
fstp st(0)
jmp 0x5d3955
cmp ax, 0x1d
jne 0x5d3792
fild dword [esi + 0xc8]
fld qword [esp + 0x34]
fmul qword [esp + 0x6c]
fdiv st(1)
fadd qword [esp + 0x1c]
fstp qword [esp + 0x1c]
fld qword [esp + 0x34]
fmul qword [esp + 0x74]
fdiv st(1)
fadd qword [esp + 0xc]
fstp qword [esp + 0xc]
fstp st(0)
jmp 0x5d3955
cmp ax, 0x1e
jne 0x5d37c9
fild dword [esi + 0xc8]
fld qword [esp + 0x34]
fmul qword [esp + 0x1c]
fdiv st(1)
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x34]
fmul qword [esp + 0xc]
fdiv st(1)
fadd qword [esp + 0x44]
fstp qword [esp + 0x44]
fstp st(0)
jmp 0x5d3955
cmp ax, 0x1f
jne 0x5d37f4
fld qword [esp + 0x34]
fmul qword [esp + 0x2c]
fidiv dword [esi + 0xc8]
fld st(0)
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fadd qword [esp + 0x44]
fstp qword [esp + 0x44]
jmp 0x5d3955
cmp ax, 0x20
jne 0x5d381f
fld qword [esp + 0x34]
fmul qword [esp + 0x2c]
fidiv dword [esi + 0xc8]
fld st(0)
fadd qword [esp + 0x1c]
fstp qword [esp + 0x1c]
fadd qword [esp + 0xc]
fstp qword [esp + 0xc]
jmp 0x5d3955
cmp ax, 0x23
jne 0x5d3866
fild dword [esi + 0xc8]
fld qword [esp + 0x1c]
fadd qword [esp + 0x14]
fadd qword [esp + 0x2c]
fmul qword [esp + 0x34]
fdiv st(1)
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0xc]
fadd qword [esp + 0x44]
fadd qword [esp + 0x7c]
fmul qword [esp + 0x34]
fdiv st(1)
fadd qword [esp + 0x44]
fstp qword [esp + 0x44]
fstp st(0)
jmp 0x5d3955
cmp ax, 0x24
jne 0x5d38ad
fild dword [esi + 0xc8]
fld qword [esp + 0x1c]
fadd qword [esp + 0x14]
fadd qword [esp + 0x2c]
fmul qword [esp + 0x34]
fdiv st(1)
fadd qword [esp + 0x1c]
fstp qword [esp + 0x1c]
fld qword [esp + 0xc]
fadd qword [esp + 0x44]
fadd qword [esp + 0x7c]
fmul qword [esp + 0x34]
fdiv st(1)
fadd qword [esp + 0xc]
fstp qword [esp + 0xc]
fstp st(0)
jmp 0x5d3955
cmp ax, 0x28
jne 0x5d38e9
fild dword [esi + 0xc8]
fld qword [esp + 0x1c]
fadd qword [esp + 0x2c]
fmul qword [esp + 0x34]
fdiv st(1)
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0xc]
fadd qword [esp + 0x7c]
fmul qword [esp + 0x34]
fdiv st(1)
fadd qword [esp + 0x44]
fstp qword [esp + 0x44]
fstp st(0)
jmp 0x5d3955
cmp ax, 0x25
jne 0x5d38fd
fld qword [esp + 0x24]
fadd qword [esp + 0x2c]
fstp qword [esp + 0x2c]
jmp 0x5d3955
cmp ax, 0x26
jne 0x5d3911
fld qword [esp + 0x24]
fadd qword [esp + 0x2c]
fstp qword [esp + 0x2c]
jmp 0x5d3955
fld qword [esp + 0x24]
cmp ax, 0x27
jne 0x5d3929
fadd qword [esp + 0x2c]
fstp qword [esp + 0x2c]
jmp 0x5d3955
fld qword [esp + 0x24]
fadd qword [esp + 0x14]
fstp qword [esp + 0x14]
fld qword [esp + 0x3c]
fadd qword [esp + 0x44]
fstp qword [esp + 0x44]
fld qword [esp + 0x24]
fadd qword [esp + 0x6c]
fstp qword [esp + 0x6c]
fld qword [esp + 0x3c]
fadd qword [esp + 0x74]
fstp qword [esp + 0x74]
mov ecx, dword [esp + 0x54]
inc ecx
dec ebx
mov dword [esp + 0x54], ecx
jne 0x5d3452
mov eax, dword [esp + 0x84]
test eax, eax
jle 0x5d3a11
mov eax, dword [esi + 0x209c]
test eax, eax
jle 0x5d3a11
cmp eax, 6
jge 0x5d3a11
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x30]
push edx
push eax
mov ecx, esi
call fcn.005c0970
mov ecx, dword [esi + 0x209c]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push ecx
fstp qword [esp + 0x30]
push edx
push eax
mov ecx, esi
call fcn.005c0970
mov ecx, dword [esi + 0x209c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push ecx
fstp qword [esp + 0x18]
push edx
push eax
mov ecx, esi
call fcn.005c0970
mov ecx, dword [esi + 0x209c]
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
push ecx
fstp qword [esp + 0x20]
push edx
push eax
mov ecx, esi
call fcn.005c0970
mov ecx, dword [esi + 0x209c]
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x5c]
push ecx
fstp qword [esp + 0x68]
push edx
push eax
mov ecx, esi
call fcn.005c0970
fstp qword [esp + 0x5c]
fld qword [esp + 0x5c]
fadd qword [esp + 0x64]
mov eax, dword [esp + 0x84]
test eax, eax
fadd qword [esp + 0x1c]
fadd qword [esp + 0x14]
fadd qword [esp + 0x2c]
fstp qword [esp + 0xc]
jne 0x5d3a6e
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
push 2
push ecx
push edx
mov ecx, esi
call fcn.005c0970
fstp qword [esp + 0xc]
push 0xa7e908
lea ecx, [esp + 0x54]
call fcn.009121e8
cmp eax, 0xffffffff
jne 0x5d3a8f
push 0xa7e8f8
lea ecx, [esp + 0x54]
call fcn.009121e8
jmp 0x5d3a8f
mov eax, dword [esi + 0x20a0]
test eax, eax
jle 0x5d3a8f
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
push 2
push eax
push ecx
mov ecx, esi
call fcn.005c0970
fstp qword [esp + 0xc]
mov eax, dword [esp + 0x58]
mov edi, 0xa7a6f8
mov ecx, eax
mov bl, byte [ecx]
mov dl, bl
cmp bl, byte [edi]
jne 0x5d3abe
test dl, dl
je 0x5d3aba
mov bl, byte [ecx + 1]
mov dl, bl
cmp bl, byte [edi + 1]
jne 0x5d3abe
add ecx, 2
add edi, 2
test dl, dl
jne 0x5d3a9a
xor ecx, ecx
jmp 0x5d3ac3
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x5d3b7b
mov edi, 0xa7a6f8
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x5d3af8
test cl, cl
je 0x5d3af4
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x5d3af8
add eax, 2
add edi, 2
test cl, cl
jne 0x5d3ad0
xor eax, eax
jmp 0x5d3afd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x5d3b7b
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
mov dword [esi + 0x3e90], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x3e94], ecx
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x3e98], edx
mov edx, dword [esp + 0x18]
mov dword [esi + 0x3e9c], eax
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x3ea0], ecx
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x3ea4], edx
mov edx, dword [esp + 0x64]
mov dword [esi + 0x3ea8], eax
mov eax, dword [esp + 0x68]
mov dword [esi + 0x3eac], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esi + 0x3eb8], edx
mov edx, dword [esp + 0x60]
mov dword [esi + 0x3ec0], ecx
mov dword [esi + 0x3ebc], eax
mov dword [esi + 0x3ec4], edx
jmp 0x5d3bcb
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
mov dword [esi + 0x3e90], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x3e94], ecx
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x3e98], edx
mov edx, dword [esp + 0x18]
mov dword [esi + 0x3e9c], eax
mov eax, dword [esp + 0x1c]
mov dword [esi + 0x3ea0], ecx
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x3ea8], eax
mov dword [esi + 0x3ea4], edx
mov dword [esi + 0x3eac], ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0xa8], 1
call fcn.00911ee2
lea ecx, [esp + 0x58]
mov byte [esp + 0xa8], 0
call fcn.00911ee2
lea ecx, [esp + 0x88]
mov dword [esp + 0xa8], 0xffffffff
call fcn.00911ee2
mov al, 1
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [esp + 0x50]
mov byte [esp + 0xa8], 1
call fcn.00911ee2
lea ecx, [esp + 0x58]
mov byte [esp + 0xa8], 0
call fcn.00911ee2
lea ecx, [esp + 0x88]
mov dword [esp + 0xa8], 0xffffffff
call fcn.00911ee2
mov ecx, dword [esp + 0xa0]
pop edi
pop esi
xor al, al
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4