Function at 0x4da9f0
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x6713d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
mov esi, dword [esp + 0x4c]
mov ebx, ecx
push edi
mov ecx, esi
mov dword [esp + 0x10], ebx
call fcn.0049e390
mov ecx, esi
call fcn.0049d720
lea ecx, [esp + 0x2c]
call fcn.00473110
push 0xa
push 0
lea ecx, [esp + 0x34]
mov dword [esp + 0x50], 0
mov dword [esp + 0x34], 0x69db4c
call fcn.0048b670
mov edi, dword [ebx + 0xb4]
xor esi, esi
test edi, edi
mov dword [esp + 0x48], 1
jle 0x4daa8e
mov eax, dword [ebx + 0xb0]
mov ecx, dword [eax + esi*4]
call fcn.0048ee40
cmp eax, 2
je 0x4daa89
mov ecx, dword [ebx + 0xb0]
mov edx, dword [esp + 0x34]
mov eax, dword [ecx + esi*4]
lea ecx, [esp + 0x2c]
push eax
push edx
call fcn.004ea3d0
inc esi
cmp esi, edi
jl 0x4daa5e
lea esi, [ebx + 0xac]
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.0048b670
mov eax, dword [esp + 0x34]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.0048b670
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov eax, dword [esi + 4]
test edx, edx
je 0x4daac9
mov edi, dword [ecx]
add ecx, 4
mov dword [eax], edi
add eax, 4
dec edx
jne 0x4daabc
mov ebp, dword [ebx + 0xb4]
test ebp, ebp
je 0x4dab9e
lea ecx, [esp + 0x18]
call fcn.00473110
push 0xa
push 0
lea ecx, [esp + 0x20]
mov byte [esp + 0x50], 2
mov dword [esp + 0x20], 0x69db4c
call fcn.0048b670
mov ecx, dword [esi + 8]
push 0xffffffffffffffff
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x50], 3
call fcn.0048b670
mov eax, dword [esi + 8]
mov edx, dword [esi + 4]
mov ecx, dword [esp + 0x1c]
mov edi, eax
dec eax
test edi, edi
je 0x4dab2d
inc eax
mov edi, dword [edx]
add edx, 4
mov dword [ecx], edi
add ecx, 4
dec eax
jne 0x4dab20
xor edi, edi
test ebp, ebp
jle 0x4dab4b
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x50]
push 0
push edx
mov ecx, dword [eax + edi*4]
call fcn.004933f0
inc edi
cmp edi, ebp
jl 0x4dab33
mov eax, dword [esp + 0x20]
xor edi, edi
test eax, eax
jle 0x4dab70
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + edi*4]
test ecx, ecx
je 0x4dab67
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov eax, dword [esp + 0x20]
inc edi
cmp edi, eax
jl 0x4dab55
push 0xa
push 0
lea ecx, [esp + 0x20]
call fcn.0048b670
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.0048b670
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 1
mov dword [esp + 0x18], 0x69db4c
call fcn.004602f0
mov ebx, dword [ebx + 0xc8]
test ebx, ebx
je 0x4dac94
lea ecx, [esp + 0x18]
xor ebp, ebp
call fcn.0049ce90
push 0xa
push ebp
lea ecx, [esp + 0x20]
mov byte [esp + 0x50], 4
mov dword [esp + 0x20], 0x69dcec
call fcn.0048b670
mov eax, dword [esp + 0x10]
push 0xffffffffffffffff
mov byte [esp + 0x4c], 5
mov ecx, dword [eax + 0xc8]
lea esi, [eax + 0xc0]
push ecx
lea ecx, [esp + 0x20]
call fcn.0048b670
mov eax, dword [esi + 8]
mov edx, dword [esi + 4]
mov ecx, dword [esp + 0x1c]
mov edi, eax
dec eax
test edi, edi
je 0x4dac10
inc eax
mov edi, dword [edx]
add edx, 4
mov dword [ecx], edi
add ecx, 4
dec eax
jne 0x4dac03
xor edi, edi
test ebx, ebx
jle 0x4dac3d
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + edi*4]
mov eax, dword [ecx + 0x10]
cmp eax, 6
je 0x4dac2a
cmp eax, 7
jne 0x4dac38
mov edx, dword [esp + 0x50]
mov eax, dword [ecx]
push edx
call dword [eax + 0x88]
inc ebp
inc edi
cmp edi, ebx
jl 0x4dac16
cmp ebp, ebx
jne 0x4dac73
mov eax, dword [esp + 0x20]
xor edi, edi
test eax, eax
jle 0x4dac66
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x4dac5d
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov eax, dword [esp + 0x20]
inc edi
cmp edi, eax
jl 0x4dac4b
push 0xa
push 0
lea ecx, [esp + 0x20]
call fcn.0048b670
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.0048b670
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 1
mov dword [esp + 0x18], 0x69dcec
call fcn.0048b7b0
mov ebx, dword [esp + 0x10]
mov ebp, dword [ebx + 0xf0]
test ebp, ebp
jle 0x4dace7
mov ecx, dword [esp + 0x50]
call fcn.0049f3e0
xor esi, esi
mov edi, eax
test ebp, ebp
jle 0x4dacd8
mov eax, dword [ebx + 0xec]
mov ecx, edi
mov eax, dword [eax + esi*4]
push eax
call fcn.0049c710
cmp eax, 0xffffffff
je 0x4dacd3
push 1
push eax
mov ecx, edi
call fcn.004ea170
inc esi
cmp esi, ebp
jl 0x4dacb3
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0xe8]
call fcn.0048b670
mov edi, dword [ebx + 0xdc]
test edi, edi
mov dword [esp + 0x10], edi
jle 0x4dad50
mov ecx, dword [esp + 0x50]
call fcn.0049fd80
xor ebp, ebp
mov esi, eax
test edi, edi
jle 0x4dad41
mov ecx, dword [ebx + 0xd8]
xor eax, eax
mov edi, dword [ecx + ebp*4]
mov ecx, dword [esi + 8]
test ecx, ecx
jle 0x4dad38
mov edx, dword [esi + 4]
cmp edi, dword [edx]
je 0x4dad29
inc eax
add edx, 4
cmp eax, ecx
jl 0x4dad1b
jmp 0x4dad38
cmp eax, 0xffffffff
je 0x4dad38
push 1
push eax
mov ecx, esi
call fcn.004ea170
mov eax, dword [esp + 0x10]
inc ebp
cmp ebp, eax
jl 0x4dad06
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0xd4]
call fcn.0048b670
mov esi, dword [ebx + 0x104]
test esi, esi
mov dword [esp + 0x10], esi
jle 0x4daddd
mov ecx, dword [esp + 0x50]
call fcn.0049f720
xor edi, edi
mov ebp, eax
test esi, esi
mov dword [esp + 0x14], edi
jle 0x4dadce
mov edx, dword [ebx + 0x100]
mov eax, dword [ebp + 8]
xor esi, esi
mov edx, dword [edx + edi*4]
test eax, eax
jle 0x4dadc1
mov ecx, dword [ebp + 4]
cmp edx, dword [ecx]
je 0x4dad96
inc esi
add ecx, 4
cmp esi, eax
jl 0x4dad88
jmp 0x4dadc1
cmp esi, 0xffffffff
je 0x4dadc1
mov edi, esi
mov eax, dword [ebp + 4]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x4dadae
mov edx, dword [ecx]
push 1
call dword [edx + 4]
dec edi
cmp edi, esi
jge 0x4dad9d
push 1
push esi
mov ecx, ebp
call fcn.005f7dc0
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
inc edi
cmp edi, eax
mov dword [esp + 0x14], edi
jl 0x4dad73
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0xfc]
call fcn.0048b670
mov ecx, dword [esp + 0x50]
push ebx
call fcn.0049eb40
mov dword [esp + 0x2c], 0x69db38
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
test eax, eax
mov dword [esp + 0x3c], 6
pop ebx
je 0x4dae0c
push eax
call fcn.0065e732
add esp, 4
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 4