Function at 0x100027c3
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xe0
mov eax, dword [0x1002a4fc]
cmp dword [esp + 0xf4], 0
mov ecx, dword [0x1002a4f8]
mov ebx, 0x1a83ec4
mov ebp, 0x4015e30d
mov edi, 0x9938180d
lea edx, [eax - 1]
sete byte [esp + 0xb]
imul edx, eax
xor eax, eax
mov esi, edx
dec eax
xor edx, 1
xor esi, eax
and esi, 0xfffffffe
or edx, esi
mov esi, 0xebcf3ca5
xor eax, edx
and edx, esi
and eax, 0x1430c35a
or edx, eax
xor edx, esi
mov esi, 0x3bf660f
sete al
setne dl
cmp ecx, 9
setg ah
cmp ecx, 0xa
setl cl
and al, ah
and cl, dl
or al, cl
mov cl, ah
xor ah, dl
and cl, dl
mov edx, 0x5a19b103
or ah, cl
mov ecx, eax
xor ah, 1
and cl, ah
xor ah, al
or ah, cl
mov ecx, 0x319d77ac
mov eax, 0xfed5e54
cmove ecx, eax
mov dword [esp + 0xac], ecx
mov ecx, 0x946adb1f
cmove ecx, eax
mov eax, 0x78442fd
mov dword [esp + 0xb8], ecx
mov ecx, 0xe621733b
cmove ecx, eax
mov dword [esp + 0xb4], ecx
mov ecx, 0xe74d8989
cmove ecx, eax
mov eax, 0x9afcc2a9
mov dword [esp + 0xb0], ecx
mov ecx, 0x16368312
cmove ecx, eax
mov dword [esp + 0xa8], ecx
mov ecx, 0xac4099b
cmove ecx, eax
mov eax, 0xf14a053d
mov dword [esp + 0xa4], ecx
mov ecx, 0x568cb445
cmove ebx, ecx
cmove eax, ecx
mov ecx, 0x5a283aa
cmove edx, ecx
mov dword [esp + 0xa0], edx
mov edx, 0x150bddc4
cmove edx, ecx
mov ecx, 0x589b5139
mov dword [esp + 0x9c], edx
mov edx, 0x573e6e13
cmove ecx, edx
mov dword [esp + 0x98], ecx
mov ecx, 0x94469083
cmove ecx, edx
mov edx, 0x9d68cf74
cmove esi, edx
cmove ebp, edx
mov edx, 0xfaebc731
mov dword [esp + 0x94], esi
mov esi, 0x7f70a6ab
cmove esi, edx
mov dword [esp + 0x90], esi
mov esi, 0x2ff88fa3
cmove esi, edx
mov edx, 0xb6063d30
mov dword [esp + 0x8c], esi
mov esi, 0x59d4a456
cmove esi, edx
mov dword [esp + 0x88], esi
mov esi, 0x8dc3aff9
cmove esi, edx
mov edx, 0xd0a8b0dd
mov dword [esp + 0x84], esi
mov esi, 0x60ae78fb
cmove esi, edx
mov dword [esp + 0x80], esi
mov esi, 0x2fca10cc
cmove esi, edx
mov edx, 0x649d513b
cmove edi, edx
mov dword [esp + 0x7c], edi
mov edi, 0xa664206a
cmove edi, edx
mov dword [esp + 0x78], edi
mov edi, 0xfea8fe81
mov edx, edi
cmp edi, 0x5cfc3da
jle 0x100029f9
cmp edx, 0x4015e30c
jg 0x10002a5b
cmp edx, 0x16368311
jle 0x10002b28
cmp edx, 0x2fca10cb
jg 0x10002c69
cmp edx, 0x1b2c75e8
jle 0x10002e7c
cmp edx, 0x1b2c75e9
je 0x10003151
cmp edx, 0x239379e2
je 0x10003179
cmp edx, 0x2bff658f
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0xa4]
jmp 0x10002994
cmp edx, 0xc48d62fa
jle 0x10002ac0
cmp edx, 0xee8789de
jle 0x10002b7c
cmp edx, 0xfea8fe80
jg 0x10002cb2
cmp edx, 0xf14a053c
jle 0x10002eab
cmp edx, 0xf14a053d
mov edi, ebx
je 0x10002994
cmp edx, 0xf289f91c
je 0x100031b0
cmp edx, 0xfaebc731
mov edi, edx
jne 0x10002994
mov edi, 0x2ff88fa3
jmp 0x10002994
cmp edx, 0x5a19b102
jle 0x10002bd9
cmp edx, 0x68a3753f
jg 0x10002cf4
cmp edx, 0x60ae78fa
jle 0x10002ed1
cmp edx, 0x60ae78fb
je 0x100031ca
cmp edx, 0x649d513b
je 0x100031d4
cmp edx, 0x67eaa2b5
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0xbc]
mov edi, 0xd470c9dd
mov edx, dword [edx + 0xc]
add edx, 0x14
mov dword [esp + 0x58], edx
jmp 0x10002994
cmp edx, 0xa26b7548
jle 0x10002c21
cmp edx, 0xab468101
jg 0x10002d3a
cmp edx, 0xab03eaef
jg 0x10002e69
cmp edx, 0xa26b7549
mov edi, eax
je 0x10002994
cmp edx, 0xa664206a
je 0x100031e6
cmp edx, 0xa9a9e4e0
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x9c]
mov dword [esp + 0x64], edx
jmp 0x10002994
cmp edx, 0xccc2581
jle 0x10002d83
cmp edx, 0xfed5e53
jle 0x10002f1a
cmp edx, 0xfed5e54
je 0x10003203
cmp edx, 0x14b544d3
je 0x1000320d
cmp edx, 0x150bddc4
mov edi, edx
jne 0x10002994
cmp dword [esp + 0x64], 0
mov edi, dword [esp + 0xa0]
sete byte [esp + 0xe]
jmp 0x10002994
cmp edx, 0xd7f60fa9
jle 0x10002db5
cmp edx, 0xe621733a
jle 0x10002f4d
cmp edx, 0xe621733b
je 0x10003221
mov edi, dword [esp + 0xb4]
cmp edx, 0xe74d8989
je 0x10002994
cmp edx, 0xee67eb3b
mov edi, edx
jne 0x10002994
mov edx, dword fs:[0x30]
mov edi, 0x67eaa2b5
mov dword [esp + 0xbc], edx
jmp 0x10002994
cmp edx, 0x568cb444
jle 0x10002deb
cmp edx, 0x57781f39
jle 0x10002f73
cmp edx, 0x57781f3a
je 0x10003248
cmp edx, 0x589b5139
je 0x1000325a
cmp edx, 0x59d4a456
mov edi, edx
jne 0x10002994
mov edi, 0xdcd0d649
jmp 0x10002994
cmp edx, 0x963d6fa2
jle 0x10002e2b
cmp edx, 0x9938180c
jle 0x10002fa3
cmp edx, 0x9938180d
je 0x10003264
cmp edx, 0x9afcc2a9
je 0x1000326e
cmp edx, 0x9d68cf74
mov edi, edx
jne 0x10002994
mov edi, 0x3bf660f
jmp 0x10002994
cmp edx, 0x319d77ab
jle 0x10002fdc
cmp edx, 0x319d77ac
je 0x10003278
cmp edx, 0x319e6df5
je 0x1000328a
cmp edx, 0x351108c3
mov edi, edx
jne 0x10002994
cmp byte [esp + 0xd], 0
mov edi, 0x68a37540
mov edx, 0x7e909e8
cmovne edi, edx
jmp 0x10003069
cmp edx, 0x1a83ec3
jle 0x10003002
cmp edx, 0x1a83ec4
je 0x100032a0
cmp edx, 0x3bf660f
mov edi, ebp
je 0x10002994
cmp edx, 0x5a283aa
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x64]
mov edi, 0x150bddc4
jmp 0x10002994
cmp edx, 0x7c554bc1
jle 0x10003028
cmp edx, 0x7c554bc2
je 0x100032bd
cmp edx, 0x7d8cf175
je 0x100032d3
cmp edx, 0x7f70a6ab
mov edi, edx
jne 0x10002994
cmp byte [esp + 0xc], 0
mov edi, 0x7728b814
mov edx, 0x96ef4411
cmovne edi, edx
jmp 0x10002d74
cmp edx, 0xb6063d2f
jg 0x10003078
cmp edx, 0xab468102
je 0x100032ed
cmp edx, 0xaf203c0b
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x18]
mov edi, 0x7728b814
cmp edx, 0x40
mov edx, 0xffcc7edb
cmovg edi, edx
movzx edx, word [esp + 2]
mov word [esp + 6], dx
jmp 0x10002994
cmp edx, 0x7e909e7
jg 0x100030a4
cmp edx, 0x5cfc3db
mov edi, esi
je 0x10002994
cmp edx, 0x78442fd
mov edi, edx
jne 0x10002994
mov edi, 0xe74d8989
jmp 0x10002994
cmp edx, 0xd0a8b0dc
jg 0x100030cc
mov edi, dword [esp + 0xb8]
cmp edx, 0xc48d62fb
je 0x10002994
cmp edx, 0xcb87deea
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0x78]
jmp 0x10002994
cmp edx, 0x43b61c53
jg 0x100030fa
cmp edx, 0x4015e30d
je 0x10003329
cmp edx, 0x42bda690
mov edi, edx
jne 0x10002994
mov edi, 0xa9a9e4e0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 4
jmp 0x10002994
cmp edx, 0x94469082
jg 0x1000312b
cmp edx, 0x80a9187d
je 0x1000333d
cmp edx, 0x8dc3aff9
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x88]
cmp edx, 0x5b
setl byte [esp + 0xc]
jmp 0x10002994
cmp edx, 0xab03eaf0
mov edi, edx
je 0x10003491
jmp 0x10002994
cmp edx, 0x16368312
je 0x1000334f
cmp edx, 0x1882efc2
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x20]
mov edi, 0x7d8cf175
mov dword [esp + 0xd4], edx
jmp 0x10002994
cmp edx, 0xee8789df
je 0x10003373
cmp edx, 0xef72e722
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0x94]
jmp 0x10002994
cmp edx, 0x5a19b103
je 0x10003389
cmp edx, 0x5a489de2
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x50]
cmp dword [esp + 0x44], 0
mov edi, 0xc13e2f21
mov dword [esp + 0x6c], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x70], edx
mov edx, 0xe186ae8
cmove edi, edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x4c], edx
jmp 0x10002994
cmp edx, 0xccc2582
je 0x100033a8
cmp edx, 0xe186ae8
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x58]
mov edi, dword [esp + 0x6c]
cmp edi, edx
mov edi, 0x963d6fa3
setne byte [esp + 0xf]
jmp 0x10002994
cmp edx, 0xd7f60faa
je 0x100033c0
cmp edx, 0xdcd0d649
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0x8c]
jmp 0x10002994
cmp edx, 0x568cb445
je 0x100033d6
cmp edx, 0x573e6e13
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov edi, 0x94469083
jmp 0x10002994
mov edi, dword [esp + 0xb0]
cmp edx, 0x963d6fa3
je 0x10002994
cmp edx, 0x96ef4411
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x18]
mov edi, 0x7c554bc2
add edx, 0x20
mov dword [esp + 0xc0], edx
jmp 0x10002994
cmp edx, 0x2fca10cc
je 0x100033e0
cmp edx, 0x2ff88fa3
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0x90]
jmp 0x10002994
cmp edx, 0xfea8fe81
je 0x10003409
cmp edx, 0xffcc7edb
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0x84]
jmp 0x10002994
cmp edx, 0x68a37540
je 0x10003420
cmp edx, 0x7728b814
mov edi, edx
jne 0x10002994
movzx edx, word [esp + 6]
mov edi, 0x68a37540
mov word [esp + 0x2a], dx
movzx edx, word [esp + 8]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x10]
cmp edx, 0x40
mov edx, 0xee8789df
cmovg edi, edx
movzx edx, word [esp + 8]
mov word [esp + 4], dx
jmp 0x10002994
cmp edx, 0xb6063d30
je 0x1000343c
cmp edx, 0xc13e2f21
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x4c]
mov edi, 0xab03eaf0
mov dword [esp + 0x54], edx
jmp 0x10002994
cmp edx, 0x7e909e8
mov edi, ecx
je 0x10002994
cmp edx, 0xac4099b
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0xa8]
jmp 0x10002994
cmp edx, 0xd0a8b0dd
je 0x1000344a
cmp edx, 0xd470c9dd
mov edi, edx
jne 0x10002994
mov edx, dword [esp + 0x58]
mov edi, 0x239379e2
mov edx, dword [edx]
mov dword [esp + 0x30], edx
jmp 0x10002994
cmp edx, 0x43b61c54
je 0x1000345d
cmp edx, 0x5219f80b
mov edi, edx
jne 0x10002994
cmp dword [esp + 0x40], 0
mov edi, 0xccc2582
mov edx, 0x1882efc2
cmove edi, edx
jmp 0x10002994
cmp edx, 0x94469083
je 0x10003477
cmp edx, 0x946adb1f
mov edi, edx
jne 0x10002994
mov edi, dword [esp + 0xac]
jmp 0x10002994
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x44], 0
mov edi, 0x5a489de2
mov dword [esp + 0x50], edx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x48], edx
jmp 0x10002994
mov edx, dword [esp + 0x30]
mov edi, 0xab468102
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x74]
mov dword [esp + 0xdc], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x34], 0
add edx, 0xfffffff8
mov dword [esp + 0x5c], edx
xor edx, edx
inc edx
mov dword [esp + 0x2c], edx
jmp 0x10002994
mov dword [esp + 0x3c], 0
mov edi, 0xa9a9e4e0
mov edx, dword [esp + 0x60]
mov dword [esp + 0x38], edx
jmp 0x10002994
mov edi, 0xaf203c0b
jmp 0x10002994
mov edx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov edi, 0xa664206a
jmp 0x10002994
mov edx, dword [esp + 0x1c]
mov edx, dword [edx + 4]
mov edi, dword [esp + 0x14]
movzx edx, word [edx + edi*2]
mov edi, dword [esp + 0x7c]
mov word [esp + 2], dx
jmp 0x10002994
mov edi, 0x946adb1f
jmp 0x10002994
movzx edx, word [esp + 0x28]
mov edi, 0x68a37540
mov word [esp + 4], dx
jmp 0x10002994
cmp byte [esp + 0xf], 0
mov edi, 0xc48d62fb
mov edx, 0x239379e2
cmovne edi, edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x74], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x30], edx
jmp 0x10002994
mov edx, dword [esp + 0x60]
mov edi, 0x5219f80b
mov dword [esp + 0x40], edx
jmp 0x10002994
mov edi, 0x319e6df5
jmp 0x10002994
mov edi, 0x5cfc3db
jmp 0x10002994
mov edi, 0xac4099b
jmp 0x10002994
mov edi, 0xc13e2f21
mov dword [esp + 0x4c], 0
jmp 0x10002994
mov edx, dword [esp + 0xc4]
mov edi, 0x14b544d3
mov word [esp + 0x28], dx
jmp 0x10002994
mov edx, dword [esp + 0xc8]
mov edi, 0xab468102
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 0x2c], edx
jmp 0x10002994
mov edx, dword [esp + 0xc0]
mov edi, 0xef72e722
mov word [esp + 0x26], dx
jmp 0x10002994
mov edx, dword [esp + 0xd4]
mov edi, 0x1b2c75e9
mov edx, dword [edx]
mov dword [esp + 0xd8], edx
jmp 0x10002994
mov edx, dword [esp + 0x34]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x5c]
add edx, 0x2c
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x1c]
movzx edx, word [edx]
mov edi, dword [esp + 0x14]
shr edx, 1
cmp edi, edx
mov edi, 0x57781f3a
mov edx, 0xcb87deea
cmovl edi, edx
jmp 0x10002994
movzx edx, word [esp + 0x26]
mov edi, 0x7728b814
mov word [esp + 6], dx
jmp 0x10002994
mov edi, 0xab03eaf0
mov dword [esp + 0x54], 0
jmp 0x10002994
mov edx, dword [esp + 0xd0]
mov edi, 0x5a489de2
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x50], edx
xor edx, edx
inc edx
mov dword [esp + 0x44], edx
jmp 0x10002994
mov edx, dword [esp + 0x10]
mov edi, 0x351108c3
cmp edx, 0x5b
setl byte [esp + 0xd]
jmp 0x10002994
cmp byte [esp + 0xe], 0
mov edi, 0x5219f80b
mov edx, 0xd7f60faa
cmovne edi, edx
mov edx, dword [esp + 0x68]
mov dword [esp + 0x40], edx
jmp 0x10002994
mov edx, dword [esp + 0x5c]
mov edi, 0x43b61c54
add edx, 0x18
mov dword [esp + 0xcc], edx
jmp 0x10002994
mov edx, dword [esp + 0x14]
mov edi, 0xa26b7549
inc edx
mov dword [esp + 0xc8], edx
jmp 0x10002994
mov edi, 0xf14a053d
jmp 0x10002994
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0xf4]
movzx edx, word [edi + edx*2]
mov word [esp + 8], dx
movzx edx, word [esp + 2]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x18], edx
jmp 0x10002994
cmp byte [esp + 0xb], 0
mov edi, 0xee67eb3b
mov edx, 0x80a9187d
cmovne edi, edx
jmp 0x10002994
movzx edx, word [esp + 0x2a]
mov edi, 0x42bda690
cmp dx, word [esp + 4]
mov edx, 0xf289f91c
cmove edi, edx
jmp 0x10002994
mov edx, dword [esp + 0x18]
mov edi, 0x8dc3aff9
jmp 0x10002994
mov edx, dword [esp + 0x14]
movzx edx, word [esp + 2]
mov edi, 0x2fca10cc
jmp 0x10002994
mov edx, dword [esp + 0xcc]
mov edi, 0x2bff658f
mov edx, dword [edx]
mov dword [esp + 0xd0], edx
jmp 0x10002994
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x98]
add edx, 0x20
mov dword [esp + 0xc4], edx
jmp 0x10002994
mov eax, dword [esp + 0x54]
add esp, 0xe0
pop esi
pop edi
pop ebx
pop ebp
ret