Function at 0x94b828
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x464a6d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x32c
push ebx
push ebp
xor ebx, ebx
push esi
or ebp, 0xffffffff
push edi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x70], ebp
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov esi, 0xf
mov dword [esp + 0x344], ebx
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
push ebx
push 0x407323
lea ecx, [esp + 0x3c]
mov byte [esp + 0x34c], 1
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.00936fd8
mov eax, dword [esp + 0x350]
push 1
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x34c], 2
call fcn.0093e788
test al, al
jne 0x94b8f1
mov eax, dword [esp + 0x4c]
mov edi, 0x10
cmp eax, edi
jb 0x94b8d0
mov ecx, dword [esp + 0x38]
push ecx
call fcn.0095fd15
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], 0
jb 0x94b9a8
mov edx, dword [esp + 0x1c]
push edx
jmp 0x94b9a0
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
push eax
push ecx
lea ecx, [esp + 0x88]
call fcn.00951608
test al, al
jne 0x94b948
lea ecx, [esp + 0x6c]
call fcn.0093e738
mov eax, dword [esp + 0x4c]
mov edi, 0x10
cmp eax, edi
jb 0x94b92e
mov edx, dword [esp + 0x38]
push edx
call fcn.0095fd15
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], 0
jb 0x94b9a8
mov eax, dword [esp + 0x1c]
push eax
jmp 0x94b9a0
mov ecx, dword [esp + 0x94]
cmp dword [ecx + 0x10], ebx
jne 0x94b9b8
mov edx, dword [esp + 0x34c]
push 0x407c30
push 0x412
push edx
call fcn.0093fef8
mov eax, dword [esp + 0x58]
mov edi, 0x10
add esp, 0xc
cmp eax, edi
jb 0x94b988
mov eax, dword [esp + 0x38]
push eax
call fcn.0095fd15
add esp, 4
cmp dword [esp + 0x30], edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], 0
jb 0x94b9a8
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0095fd15
add esp, 4
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x344], ebp
jmp 0x94c23a
mov ecx, dword [esp + 0x354]
cmp ecx, ebx
mov esi, dword [esp + 0x358]
je 0x94b9f7
mov eax, dword [esp + 0x8c]
cmp esi, ebx
je 0x94b9df
add ecx, dword [eax + 0x34]
mov dword [esp + 0x354], ecx
sub ecx, dword [eax + 0x34]
push ecx
lea ecx, [esp + 0x84]
call fcn.009514d8
cmp eax, ebx
mov dword [esp + 0x14], eax
jne 0x94ba0d
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + 0x34]
add ecx, dword [eax + 0x28]
mov dword [esp + 0x354], ecx
jmp 0x94b9d1
mov ecx, dword [0x468e34]
cmp ecx, ebx
je 0x94ba25
mov eax, dword [0x468e38]
sub eax, ecx
sar eax, 2
cmp eax, ebx
jne 0x94ba6d
mov edx, dword [esp + 0x14]
push 8
push edx
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.00948268
add esp, 0x10
push eax
mov ecx, 0x468e30
mov byte [esp + 0x348], 3
call fcn.00947098
mov eax, dword [esp + 0x54]
cmp eax, ebx
mov byte [esp + 0x344], 2
je 0x94ba6d
push eax
call fcn.0095fd15
add esp, 4
mov eax, dword [0x468da4]
cmp eax, ebx
je 0x94baa0
mov ecx, dword [0x468da8]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0xb0], eax
jne 0x94bc95
xor ebx, ebx
lea ecx, [esp + 0x80]
push ecx
lea edx, [esp + 0x54]
push edx
call fcn.0093f688
add esp, 8
push eax
mov ecx, 0x468da0
mov byte [esp + 0x348], 4
call fcn.0094b5e8
mov esi, dword [esp + 0x54]
cmp esi, ebx
mov byte [esp + 0x344], 2
je 0x94bb16
mov eax, dword [esp + 0x58]
cmp esi, eax
mov edi, eax
je 0x94bb0d
add esi, 0x10
lea ecx, [ecx]
mov eax, dword [esi]
cmp eax, ebx
je 0x94baf7
push eax
call fcn.0095fd15
add esp, 4
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
add esi, 0x1c
lea eax, [esi - 0x10]
cmp eax, edi
jne 0x94bae8
mov esi, dword [esp + 0x54]
push esi
call fcn.0095fd15
add esp, 4
mov eax, dword [0x468da4]
cmp eax, dword [0x468da8]
mov ecx, eax
mov dword [0x469950], ecx
je 0x94bc95
jmp 0x94bb38
mov eax, dword [ecx + 0x10]
mov dword [0x468d20], eax
cmp eax, dword [ecx + 0x14]
je 0x94bc7f
mov edi, dword [0x468e34]
cmp edi, dword [0x468e38]
je 0x94bc63
mov ebp, 0x10
jmp 0x94bb68
mov ecx, dword [0x468d20]
cmp dword [ecx], 0
je 0x94bbe3
mov edx, dword [edi]
add edx, dword [esp + 0x80]
push edx
lea eax, [esp + 0x54]
push eax
call fcn.009442c8
mov edx, dword [esp + 0x18]
mov ecx, dword [eax + 0x18]
or edx, 1
add esp, 8
cmp ecx, ebp
mov dword [esp + 0x10], edx
jb 0x94bba1
mov eax, dword [eax + 4]
jmp 0x94bba4
add eax, 4
mov ecx, dword [0x468d20]
mov esi, eax
mov eax, dword [ecx]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x94bbd6
test cl, cl
je 0x94bbd2
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x94bbd6
add eax, 2
add esi, 2
test cl, cl
jne 0x94bbae
xor eax, eax
jmp 0x94bbdb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x94bbe3
mov bl, 1
jmp 0x94bbe5
xor bl, bl
test byte [esp + 0x10], 1
je 0x94bc21
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
and ecx, 0xfffffffe
cmp eax, ebp
mov dword [esp + 0x10], ecx
jb 0x94bc0c
mov eax, dword [esp + 0x54]
push eax
call fcn.0095fd15
add esp, 4
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], 0
mov byte [esp + 0x54], 0
test bl, bl
jne 0x94bc37
mov eax, dword [0x468e38]
add edi, 4
cmp edi, eax
jne 0x94bb68
jmp 0x94bc63
mov eax, dword [0x468e38]
lea ecx, [edi + 4]
sub eax, ecx
sar eax, 2
lea edx, [eax*4]
push edx
push ecx
push edi
call fcn.0095f9d8
mov eax, dword [0x468e38]
add esp, 0xc
sub eax, 4
mov dword [0x468e38], eax
mov eax, dword [0x468d20]
mov ecx, dword [0x469950]
add eax, 0x10
mov dword [0x468d20], eax
cmp eax, dword [ecx + 0x14]
jne 0x94bb49
mov eax, dword [0x468da8]
add ecx, 0x1c
cmp ecx, eax
mov dword [0x469950], ecx
jne 0x94bb38
mov ebx, dword [esp + 0x34c]
mov ebp, dword [0x47d368]
mov edx, dword [esp + 0x14]
xor eax, eax
mov ecx, 1
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], ecx
mov byte [esp + 0xac], 0x23
mov dword [esp + 0x10], eax