Function at 0x1005a980
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1015e579
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x101af0fc]
xor eax, esp
mov dword [esp + 0x80], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101af0fc]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xa8]
mov ebx, dword [esp + 0xac]
mov edi, dword [esp + 0xc0]
lea eax, [esp + 0x3c]
xor ecx, ecx
mov dword [esp + 0x28], ecx
mov edx, eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x38], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
mov dword [esp + 0xa0], 1
mov eax, dword [esp + 0x4c]
mov byte [eax], cl
mov dword [esp + 0xa0], 2
push eax
pop eax
test eax, eax
mov eax, dword [ebx + 0x224]
cmp eax, ecx
je 0x1005aa2c
mov dword [ebx + 0x220], 0x101b8d60
test edx, edx
mov dword [ebx + 0x224], eax
push ecx
pop ecx
jmp 0x1005aa42
lea edx, [ebx + 0x8c]
mov dword [ebx + 0x220], edx
test ch, ch
mov dword [ebx + 0x224], ecx
mov ch, ch
mov edi, edi
mov esi, dword [ebx + 0x88]
test al, al
fld qword [0x10165748]
fld qword [esp + 0xc4]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 5
jnp 0x1005b372
fld1
fcomp st(1)
fnstsw ax
test ah, 5
jnp 0x1005b372
mov eax, dword [ebx + 0x220]
cmp dword [eax + esi*4], ecx
jne 0x1005aa95
lea ecx, [esp + 0x3c]
fstp st(0)
push ecx
mov ecx, ebp
call fcn.1000cef0
jmp 0x1005b380
fld qword [0x101656f0]
fnstcw word [esp + 0x1c]
movzx eax, word [esp + 0x1c]
fmul st(1)
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp dword [esp + 0x20]
mov dx, word [esp + 0x20]
mov word [ebx + esi*4 + 0x228], dx
fldcw word [esp + 0x1c]
mov esi, esi
mov dx, 0xb
fmul qword [0x10165740]
fnstcw word [esp + 0x1c]
fadd qword [0x101656d8]
movzx eax, word [esp + 0x1c]
or eax, 0xc00
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp dword [esp + 0x20]
mov ax, word [esp + 0x20]
sub dx, ax
mov word [ebx + esi*4 + 0x22a], dx
fldcw word [esp + 0x1c]
test edi, edi
movzx eax, word [ebx + esi*4 + 0x22a]
cmp ax, cx
ja 0x1005ab23
mov word [ebx + esi*4 + 0x22a], cx
test eax, eax
jmp 0x1005ab35
cmp ax, 3
jb 0x1005ab35
mov word [ebx + esi*4 + 0x22a], 3
mov bh, bh
test ah, ah
push 0x4e21
call fcn.1010136f
mov ebp, eax
add esp, 4
mov dword [esp + 0x34], ebp
test edx, edx
test ebp, ebp
jne 0x1005ab80
lea eax, [esp + 0x3c]
push eax
mov esi, dword [esp + 0x34]
mov ecx, esi
call fcn.1000cef0
mov dword [esp + 0x28], 1
mov byte [esp + 0xa0], 0
lea ecx, [esp + 0x3c]
call fcn.10006e20
mov eax, esi
jmp 0x1005b39b
mov dword [esp + 0x20], 0
test ebx, ebx
push 0xbb80
call fcn.1010136f
add esp, 4
mov dword [esp + 0x2c], eax
nop
test eax, eax
jne 0x1005abb4
push ebp
call fcn.10101432
add esp, 4
push eax
pop eax
mov ebp, ebp
lea ecx, [esp + 0x3c]
push ecx
jmp 0x1005ab55
push 0x4e21
push 0
push ebp
call fcn.10102a00
add esp, 0xc
mov eax, eax
mov edx, dword [esp + 0x2c]
push 0xbb80
push 0
push edx
call fcn.10102a00
add esp, 0xc
mov edx, edx
mov ebx, ebx
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0xc0]
push edx
mov edx, dword [esp + 0xc0]
push edi
push eax
mov eax, dword [esp + 0xc4]
push ecx
push edx
push eax
push esi
lea ecx, [esp + 0x38]
mov esi, ebx
call fcn.10056740
add esp, 0x24
test eax, eax
jne 0x1005ac47
test eax, eax
push ebp
call fcn.10101432
add esp, 4
test bh, bh
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.10101432
add esp, 4
mov ebp, ebp
lea edx, [esp + 0x3c]
push edx
jmp 0x1005ab55
mov esi, dword [ebx + 0x18]
nop
test ah, ah
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowDC]
mov dword [esp + 0x24], eax
test edx, edx
test eax, 0x3a5e
test eax, 0x1d7b
test esi, esi
jne 0x1005aca0
mov ebp, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x4e
call ebp
mov esi, eax
push ecx
pop ecx
push 0x4f
call ebp
mov edi, eax
mov ch, ch
push 0x4c
call ebp
mov ebx, eax
test ecx, ecx
push 0x4d
call ebp
test ebx, ebx
add esi, ebx
test eax, eax
add edi, eax
mov eax, eax
mov ebp, dword [esp + 0x34]
jmp 0x1005acf6
test ebx, ebx
lea eax, [esp + 0x54]
push eax
push esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov dh, dh
push esi
call fcn.1004ea50
add esp, 4
test ah, ah
cmp dword [ebx + 0x34], 5
jne 0x1005acd8
push eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x1005acd8
mov esi, dword [ebx + 0x2c]
mov ch, ch
mov edi, dword [ebx + 0x30]
mov ebp, ebp
jmp 0x1005acf6
mov esi, dword [esp + 0x5c]
sub esi, dword [esp + 0x54]
test al, al
mov edi, dword [esp + 0x60]
sub edi, dword [esp + 0x58]
mov dl, dl
mov dword [ebx + 0x2c], esi
push ebx
pop ebx
mov dword [ebx + 0x30], edi
test cl, cl
mov ecx, dword [esp + 0x24]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov dh, dh
cmp dword [esp + 0xb8], esi
jle 0x1005ad1c
mov dword [esp + 0xb8], esi
mov al, al
cmp dword [esp + 0xbc], edi
jle 0x1005ad27
push ecx
pop ecx
push 0x1772
call fcn.1010136f
mov edi, eax
add esp, 4
mov dword [esp + 0x24], edi
mov bh, bh
push 0x1772
call fcn.1010136f
mov esi, eax
add esp, 4
mov dword [esp + 0x1c], esi
mov ebx, ebx
test edi, edi
je 0x1005b359
test esi, esi
je 0x1005b344
push 0x1772
push 0
push edi
call fcn.10102a00
add esp, 0xc
test ebx, ebx
push 0x1772
push 0
push esi
call fcn.10102a00
add esp, 0xc
test ecx, ecx
test ebx, ebx
cmp dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
jle 0x1005b2b4
lea ebx, [ebx]
xor eax, eax
mov byte [esp + 0x54], 0
mov dword [esp + 0x55], eax
mov dword [esp + 0x59], eax
mov dword [esp + 0x5d], eax
mov dword [esp + 0x61], eax
mov dword [esp + 0x65], eax
mov dword [esp + 0x69], eax
mov dword [esp + 0x6d], eax
mov word [esp + 0x71], ax
mov byte [esp + 0x73], al
mov dh, dh
mov byte [esp + 0x74], al
mov dword [esp + 0x75], eax
mov dword [esp + 0x79], eax
mov dword [esp + 0x7d], eax
mov dword [esp + 0x81], eax
mov dword [esp + 0x85], eax
mov dword [esp + 0x89], eax
mov dword [esp + 0x8d], eax
mov word [esp + 0x91], ax
mov byte [esp + 0x93], al
test ebx, ebx
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
lea edx, [edi + edi*2]
lea ebx, [eax + edx*8]
movzx eax, word [ebx]
add eax, dword [esp + 0x14]
mov dh, dh
movzx esi, word [ebx + 2]
add esi, dword [esp + 0x18]
test edi, edi
mov cl, cl
mov dl, dl
push eax
lea ecx, [esp + 0x58]
push 0x10165438
push ecx
call fcn.10103959
add esp, 0xc
mov al, al
push esi
lea edx, [esp + 0x78]
push 0x10165438
push edx
call fcn.10103959
add esp, 0xc
test ecx, ecx
test edi, edi
jne 0x1005aedf
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x54]
mov ecx, eax
sub edx, ecx
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x1005ae70
mov bl, bl
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x74]
mov ecx, eax
sub edx, ecx
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x1005ae90
push ecx
pop ecx
mov eax, dword [esp + 0x2c]
add eax, 8
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005aea7
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
lea esp, [esp]
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005aec0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
pop eax
jmp 0x1005b29f
movzx edx, word [ebx - 0x16]
movzx eax, word [ebx - 0x12]
mov esi, dword [esp + 0x38]
mov ecx, dword [esi + 0x78]
add eax, edx
movzx edx, word [ebx + 2]
lea edi, [ecx + eax]
cmp edx, edi
jge 0x1005b047
movzx ecx, word [ebx - 0x18]
movzx edx, word [ebx - 0x14]
movzx eax, word [ebx]
add ecx, edx
add ecx, dword [esi + 0x84]
cmp eax, ecx
jle 0x1005b011
mov edi, dword [esp + 0x24]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005af21
mov cx, word [0x1016573c]
mov word [edi], cx
mov ah, ah
lea eax, [esp + 0x54]
mov ecx, eax
lea ecx, [ecx]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005af40
mov edi, dword [esp + 0x24]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005af54
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov bh, bh
mov edi, dword [esp + 0x1c]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005af75
mov dx, word [0x1016573c]
mov word [edi], dx
test cl, cl
lea eax, [esp + 0x74]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005af91
mov edi, dword [esp + 0x1c]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005afa5
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov al, al
mov edi, ebp
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005afc4
mov ax, word [0x10165378]
mov word [edi], ax
mov edx, edx
lea eax, [ebx + 8]
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005afe0
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005aff2
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test edx, edx
jmp 0x1005b29f
lea eax, [ebx + 8]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b016
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b028
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test bl, bl
jmp 0x1005b29f
mov edi, dword [esi + 0x80]
add edi, ecx
add edi, eax
cmp edx, edi
jle 0x1005b151
mov edi, dword [esp + 0x24]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005b060
mov cx, word [0x1016573c]
mov word [edi], cx
mov edi, edi
lea eax, [esp + 0x54]
mov ecx, eax
lea esp, [esp]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b080
mov edi, dword [esp + 0x24]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b094
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test al, al
mov edi, dword [esp + 0x1c]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005b0b5
mov dx, word [0x1016573c]
mov word [edi], dx
mov esi, esi
lea eax, [esp + 0x74]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b0d1
mov edi, dword [esp + 0x1c]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b0e5
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov bl, bl
mov edi, ebp
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005b104
mov ax, word [0x10165378]
mov word [edi], ax
test ecx, ecx
lea eax, [ebx + 8]
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b120
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b132
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov bl, bl
jmp 0x1005b29f
movzx ecx, word [ebx - 0x18]
movzx edx, word [ebx]
movzx eax, word [ebx - 0x14]
sub edx, ecx
sub edx, eax
sub edx, dword [esp + 0x14]
add edx, dword [esp + 0xb8]
cmp edx, dword [esi + 0x84]
jle 0x1005b26e
mov edi, dword [esp + 0x24]
add edi, 0xffffffff
mov edi, edi
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005b180
mov cx, word [0x1016573c]
mov word [edi], cx
mov ebp, ebp
lea eax, [esp + 0x54]
mov ecx, eax
lea esp, [esp]
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b1a0
mov edi, dword [esp + 0x24]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b1b4
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dh, dh
mov edi, dword [esp + 0x1c]
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005b1d5
mov dx, word [0x1016573c]
mov word [edi], dx
test ah, ah
lea eax, [esp + 0x74]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b1f1
mov edi, dword [esp + 0x1c]
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b205
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xchg ebx, eax
xchg ebx, eax
mov edi, ebp
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x1005b224
mov ax, word [0x10165378]
mov word [edi], ax
test dl, dl
lea eax, [ebx + 8]
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b240
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b252
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ebx, ebx
jmp 0x1005b29f
lea eax, [ebx + 8]
mov ecx, eax
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1005b273
mov edi, ebp
sub eax, ecx
mov esi, ecx
add edi, 0xffffffff
mov cl, byte [edi + 1]
add edi, 1
test cl, cl
jne 0x1005b285
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov cl, cl
mov eax, dword [esp + 0x34]
add eax, 1
cmp eax, dword [esp + 0x20]
mov dword [esp + 0x34], eax
jl 0x1005ada0
mov esi, dword [esp + 0x24]
cmp byte [esi], 0
je 0x1005b304
push esi
lea ecx, [esp + 0x40]
call fcn.100118f0
push edx
pop edx
push 0x10165378
lea ecx, [esp + 0x40]
call fcn.100118f0
nop
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x40]
call fcn.100118f0
test ah, ah
push 0x10165378
lea ecx, [esp + 0x40]
call fcn.100118f0
mov dh, dh
push ebp
lea ecx, [esp + 0x40]
call fcn.100118f0
test ecx, ecx
mov cl, cl
push esi
call fcn.10101432
add esp, 4
test esi, esi
mov edx, dword [esp + 0x1c]
push edx
call fcn.10101432
add esp, 4
push eax
pop eax
push ebp
call fcn.10101432
add esp, 4
mov bl, bl
mov eax, dword [esp + 0x2c]
push eax
call fcn.10101432
add esp, 4
mov esi, esi
lea ecx, [esp + 0x3c]
push ecx
jmp 0x1005ab55
push edi
call fcn.10101432
add esp, 4
test cl, cl
lea edx, [esp + 0x3c]
push edx
jmp 0x1005ab55
test esi, esi
je 0x1005b368
push esi
call fcn.10101432
add esp, 4
mov ebp, ebp
lea edx, [esp + 0x3c]
push edx
jmp 0x1005ab55
lea eax, [esp + 0x3c]
fstp st(0)
push eax
mov ecx, ebp
call fcn.1000cef0
mov dword [esp + 0x28], 1
mov byte [esp + 0xa0], 0
lea ecx, [esp + 0x3c]
call fcn.10006e20
mov eax, ebp
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x80]
xor ecx, esp
call fcn.1010190d
add esp, 0x90
ret