Function at 0x1005f050
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10179be9
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x101ce2ac]
xor eax, esp
mov dword [esp + 0x80], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101ce2ac]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov edi, dword [esp + 0xc0]
lea eax, [esp + 0x3c]
xor ecx, ecx
mov dword [esp + 0x28], ecx
mov edx, eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x38], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
mov dword [esp + 0xa0], 1
mov eax, dword [esp + 0x4c]
mov byte [eax], cl
mov dword [esp + 0xa0], 2
xchg ebx, eax
xchg ebx, eax
test bh, bh
mov eax, dword [ebx + 0x224]
cmp eax, ecx
je 0x1005f0fc
mov dword [ebx + 0x220], 0x101d7fe0
mov bl, bl
mov dword [ebx + 0x224], eax
test ch, ch
jmp 0x1005f112
lea edx, [ebx + 0x8c]
mov dword [ebx + 0x220], edx
test dh, dh
mov dword [ebx + 0x224], ecx
test cl, cl
push ebx
pop ebx
mov esi, dword [ebx + 0x88]
test edx, edx
fld qword [0x10182928]
fld qword [esp + 0xc4]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x1005fa4c
fld1
fcomp st(1)
fnstsw ax
test ah, 5
jnp 0x1005fa4c
mov eax, dword [ebx + 0x220]
cmp dword [eax + esi*4], ecx
jne 0x1005f165
lea ecx, [esp + 0x3c]
fstp st(0)
push ecx
mov ecx, ebp
call fcn.1000cf10
jmp 0x1005fa5a
fld qword [0x101828d0]
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
fmul st(1)
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp dword [esp + 0x20]
mov dx, word [esp + 0x20]
mov word [ebx + esi*4 + 0x228], dx
fldcw word [esp + 0x1c]
test esi, esi
mov dx, 0xb
fmul qword [0x10182920]
fnstcw word [esp + 0x1c]
fadd qword [0x101828b8]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp dword [esp + 0x20]
mov ax, word [esp + 0x20]
sub dx, ax
mov word [ebx + esi*4 + 0x22a], dx
fldcw word [esp + 0x1c]
mov ah, ah
movzx eax, word [ebx + esi*4 + 0x22a]
cmp ax, cx
ja 0x1005f1f3
mov word [ebx + esi*4 + 0x22a], cx
test ebx, ebx
jmp 0x1005f205
cmp ax, 3
jb 0x1005f205
mov word [ebx + esi*4 + 0x22a], 3
mov ebp, ebp
mov esi, esi
push 0x4e21
call fcn.1011671b
mov ebp, eax
add esp, 4
mov dword [esp + 0x34], ebp
test dl, dl
test ebp, ebp
jne 0x1005f250
lea eax, [esp + 0x3c]
push eax
mov esi, dword [esp + 0x34]
mov ecx, esi
call fcn.1000cf10
mov dword [esp + 0x28], 1
mov byte [esp + 0xa0], 0
lea ecx, [esp + 0x3c]
call fcn.10006e00
mov eax, esi
jmp 0x1005fa75
mov dword [esp + 0x20], 0
mov dh, dh
push 0xbb80
call fcn.1011671b
add esp, 4
mov dword [esp + 0x2c], eax
mov ebx, ebx
test eax, eax
jne 0x1005f288
push ebp
call fcn.101167de
add esp, 4
mov ah, ah
test eax, 0x3b68
lea ecx, [esp + 0x3c]
push ecx
jmp 0x1005f225
push 0x4e21
push 0
push ebp
call fcn.10117df0
add esp, 0xc
push ebx
pop ebx
mov edx, dword [esp + 0x2c]
push 0xbb80
push 0
push edx
call fcn.10117df0
add esp, 0xc
nop
mov esi, esi
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0xc0]
push edx
mov edx, dword [esp + 0xc0]
push edi
push eax
mov eax, dword [esp + 0xc4]
push ecx
push edx
push eax
push esi
lea ecx, [esp + 0x38]
mov esi, ebx
call fcn.1005adf0
add esp, 0x24
test eax, eax
jne 0x1005f31a
test cl, cl
push ebp
call fcn.101167de
add esp, 4
mov dl, dl
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.101167de
add esp, 4
test bh, bh
lea edx, [esp + 0x3c]
push edx
jmp 0x1005f225
mov esi, dword [ebx + 0x18]
test edx, edx
test ecx, ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowDC]
mov dword [esp + 0x24], eax
test ebx, ebx
mov ch, ch
mov edx, edx
test esi, esi
jne 0x1005f371
mov ebp, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x4e
call ebp
mov esi, eax
test eax, eax
push 0x4f
call ebp
mov edi, eax
test bl, bl
push 0x4c
call ebp
mov ebx, eax
test eax, 0x1103
push 0x4d
call ebp
test edx, edx
add esi, ebx
test ecx, ecx
add edi, eax
mov cl, cl
mov ebp, dword [esp + 0x34]
jmp 0x1005f3c7
test ch, ch
lea eax, [esp + 0x54]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
test ecx, ecx
push esi
call fcn.10052b50
add esp, 4
mov ecx, ecx
cmp dword [ebx + 0x34], 5
jne 0x1005f3a9
push eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x1005f3a9
mov esi, dword [ebx + 0x2c]
test dh, dh
mov edi, dword [ebx + 0x30]
xchg ebx, eax
xchg ebx, eax
jmp 0x1005f3c7
mov esi, dword [esp + 0x5c]
sub esi, dword [esp + 0x54]
push eax
pop eax
mov edi, dword [esp + 0x60]
sub edi, dword [esp + 0x58]
mov ecx, ecx
mov dword [ebx + 0x2c], esi
mov ch, ch
mov dword [ebx + 0x30], edi
test cl, cl
mov ecx, dword [esp + 0x24]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
test dl, dl
cmp dword [esp + 0xb8], esi
jle 0x1005f3ed
mov dword [esp + 0xb8], esi
push ecx
pop ecx
cmp dword [esp + 0xbc], edi
jle 0x1005f3f8
mov ebp, ebp
push 0x1772
call fcn.1011671b
mov edi, eax
add esp, 4
mov dword [esp + 0x24], edi
mov ebp, ebp
push 0x1772
call fcn.1011671b
mov esi, eax
add esp, 4
mov dword [esp + 0x1c], esi
nop
test edi, edi
je 0x1005fa33
test esi, esi
je 0x1005fa1e
push 0x1772
push 0
push edi
call fcn.10117df0
add esp, 0xc
test edx, edx
push 0x1772
push 0
push esi
call fcn.10117df0
add esp, 0xc
test edx, edx
mov esi, esi
cmp dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
jle 0x1005f984
lea ebx, [ebx]
xor eax, eax
mov byte [esp + 0x54], 0
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov dword [esp + 0x69], eax
mov dword [esp + 0x6d], eax
mov word [esp + 0x71], ax
mov byte [esp + 0x73], al
push eax
pop eax
mov byte [esp + 0x74], al
mov dword [esp + 0x75], eax
mov dword [esp + 0x79], eax
mov dword [esp + 0x7d], eax
mov dword [esp + 0x81], eax
mov dword [esp + 0x85], eax
mov dword [esp + 0x89], eax
mov dword [esp + 0x8d], eax
mov word [esp + 0x91], ax
mov byte [esp + 0x93], al
test cl, cl
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
lea edx, [edi + edi*2]
lea ebx, [eax + edx*8]
movzx eax, word [ebx]
add eax, dword [esp + 0x14]
test eax, eax
movzx esi, word [ebx + 2]
add esi, dword [esp + 0x18]
test eax, 0x1808
test ah, ah
mov eax, eax
push eax
lea ecx, [esp + 0x58]
push 0x10182618
push ecx
call fcn.10118d49
add esp, 0xc
test eax, eax
push esi
lea edx, [esp + 0x78]
push 0x10182618
push edx
call fcn.10118d49
add esp, 0xc
test edx, edx
test edi, edi
jne 0x1005f5af
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x54]
mov ecx, eax
sub edx, ecx
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x1005f540
mov ah, ah
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x74]
mov ecx, eax
sub edx, ecx
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x1005f560
test dh, dh
mov eax, dword [esp + 0x2c]
add eax, 8
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f577
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
lea esp, [esp]
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f590
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test dl, dl
jmp 0x1005f96f
movzx edx, word [ebx - 0x16]
movzx eax, word [ebx - 0x12]
mov esi, dword [esp + 0x38]
mov ecx, dword [esi + 0x78]
add eax, edx
movzx edx, word [ebx + 2]
lea edi, [ecx + eax]
cmp edx, edi
jge 0x1005f717
movzx ecx, word [ebx - 0x18]
movzx edx, word [ebx - 0x14]
movzx eax, word [ebx]
add ecx, edx
add ecx, dword [esi + 0x84]
cmp eax, ecx
jle 0x1005f6e1
mov edi, dword [esp + 0x24]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f5f1
mov cx, word [0x1018291c]
mov word [edi], cx
test ebx, ebx
lea eax, [esp + 0x54]
mov ecx, eax
lea ecx, [ecx]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f610
mov edi, dword [esp + 0x24]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f624
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ebx
pop ebx
mov edi, dword [esp + 0x1c]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f645
mov dx, word [0x1018291c]
mov word [edi], dx
mov ah, ah
lea eax, [esp + 0x74]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f661
mov edi, dword [esp + 0x1c]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f675
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov bl, bl
mov edi, ebp
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f694
mov ax, word [0x10182558]
mov word [edi], ax
mov bl, bl
lea eax, [ebx + 8]
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f6b0
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f6c2
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push edx
pop edx
jmp 0x1005f96f
lea eax, [ebx + 8]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f6e6
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f6f8
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test bh, bh
jmp 0x1005f96f
mov edi, dword [esi + 0x80]
add edi, ecx
add edi, eax
cmp edx, edi
jle 0x1005f821
mov edi, dword [esp + 0x24]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f730
mov cx, word [0x1018291c]
mov word [edi], cx
push ecx
pop ecx
lea eax, [esp + 0x54]
mov ecx, eax
lea esp, [esp]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f750
mov edi, dword [esp + 0x24]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f764
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ah, ah
mov edi, dword [esp + 0x1c]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f785
mov dx, word [0x1018291c]
mov word [edi], dx
test esi, esi
lea eax, [esp + 0x74]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f7a1
mov edi, dword [esp + 0x1c]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f7b5
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
nop
mov edi, ebp
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f7d3
mov ax, word [0x10182558]
mov word [edi], ax
xchg ebx, eax
xchg ebx, eax
lea eax, [ebx + 8]
mov ecx, eax
lea ecx, [ecx]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f7f0
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f802
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ebx, ebx
jmp 0x1005f96f
movzx ecx, word [ebx - 0x18]
movzx edx, word [ebx]
movzx eax, word [ebx - 0x14]
sub edx, ecx
sub edx, eax
sub edx, dword [esp + 0x14]
add edx, dword [esp + 0xb8]
cmp edx, dword [esi + 0x84]
jle 0x1005f93e
mov edi, dword [esp + 0x24]
add edi, 0xffffffff
mov edi, edi
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f850
mov cx, word [0x1018291c]
mov word [edi], cx
mov esi, esi
lea eax, [esp + 0x54]
mov ecx, eax
lea esp, [esp]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f870
mov edi, dword [esp + 0x24]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f884
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ecx, ecx
mov edi, dword [esp + 0x1c]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f8a5
mov dx, word [0x1018291c]
mov word [edi], dx
test dh, dh
lea eax, [esp + 0x74]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f8c1
mov edi, dword [esp + 0x1c]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f8d5
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ch, ch
mov edi, ebp
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005f8f4
mov ax, word [0x10182558]
mov word [edi], ax
test eax, eax
lea eax, [ebx + 8]
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f910
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f922
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dl, dl
jmp 0x1005f96f
lea eax, [ebx + 8]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005f943
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005f955
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ah, ah
mov eax, dword [esp + 0x34]
add eax, 1
cmp eax, dword [esp + 0x20]
mov dword [esp + 0x34], eax
jl 0x1005f470
mov esi, dword [esp + 0x24]
cmp byte [esi], 0
je 0x1005f9db
push esi
lea ecx, [esp + 0x40]
call fcn.10011940
test eax, 0x24d5
push 0x10182558
lea ecx, [esp + 0x40]
call fcn.10011940
test ch, ch
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x40]
call fcn.10011940
mov dl, dl
push 0x10182558
lea ecx, [esp + 0x40]
call fcn.10011940
mov cl, cl
push ebp
lea ecx, [esp + 0x40]
call fcn.10011940
test eax, 0x1602
push eax
pop eax
push esi
call fcn.101167de
add esp, 4
test esi, esi
mov edx, dword [esp + 0x1c]
push edx
call fcn.101167de
add esp, 4
mov dh, dh
push ebp
call fcn.101167de
add esp, 4
push ecx
pop ecx
mov eax, dword [esp + 0x2c]
push eax
call fcn.101167de
add esp, 4
test eax, 0x559c
lea ecx, [esp + 0x3c]
push ecx
jmp 0x1005f225
push edi
call fcn.101167de
add esp, 4
push eax
pop eax
lea edx, [esp + 0x3c]
push edx
jmp 0x1005f225
test esi, esi
je 0x1005fa42
push esi
call fcn.101167de
add esp, 4
test ebx, ebx
lea edx, [esp + 0x3c]
push edx
jmp 0x1005f225
lea eax, [esp + 0x3c]
fstp st(0)
push eax
mov ecx, ebp
call fcn.1000cf10
mov dword [esp + 0x28], 1
mov byte [esp + 0xa0], 0
lea ecx, [esp + 0x3c]
call fcn.10006e00
mov eax, ebp
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x80]
xor ecx, esp
call fcn.10116cb9
add esp, 0x90
ret