Function at 0x5a7c30
Capabilities:
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5df552
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f4
push ebx
push esi
push edi
mov edi, ecx
xor esi, esi
mov dword [esp + 0xb0], edi
mov dword [esp + 0x30], 0x5e2984
mov dword [esp + 0x34], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], esi
mov eax, dword [edi + 0x2c]
mov ecx, dword [edi + 0x28]
sub eax, ecx
mov ecx, dword [ebp + 8]
sar eax, 4
shl eax, 2
push eax
mov dword [esp + 0x20c], esi
call fcn.00594510
mov ebx, dword [edi + 0x28]
mov eax, dword [edi + 0x2c]
cmp ebx, eax
mov dword [esp + 0x8c], esi
jae 0x5a8127
cmp word [ebx], si
jne 0x5a8119
mov eax, dword [esp + 0x8c]
mov edx, dword [ebp + 0x10]
inc eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0xc]
push ecx
push edx
push eax
mov ecx, ebx
call fcn.005a7a30
test al, al
mov byte [esp + 0x12], al
je 0x5a7d6a
mov dx, word [ebx + 2]
cmp dx, si
je 0x5a7cf9
mov ecx, dword [ebx + 4]
mov eax, dword [ebx + 8]
fld qword [ecx + 8]
fsub qword [eax + 8]
jmp 0x5a7d05
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
fld qword [eax + 8]
fsub qword [ecx + 8]
fstp qword [esp + 0x44]
cmp dx, si
je 0x5a7d14
fld qword [ecx]
fsub qword [eax]
jmp 0x5a7d18
fld qword [eax]
fsub qword [ecx]
fstp qword [esp + 0x24]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push eax
push ecx
mov ecx, dword [ebp + 8]
call fcn.005936c0
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x60]
push eax
push ecx
mov ecx, dword [ebp + 8]
push edx
call fcn.00593710
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x70]
push ecx
push edx
push eax
jmp 0x5a7d9a
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x60]
push edx
push eax
push ecx
mov ecx, dword [ebp + 8]
call fcn.005936c0
mov edx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x70]
push eax
push ecx
push edx
mov ecx, dword [ebp + 8]
call fcn.00593710
cmp word [ebx + 2], si
je 0x5a7db4
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 8]
fld qword [eax]
fsub qword [ecx]
jmp 0x5a7dbe
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 4]
fld qword [edx]
fsub qword [eax]
mov eax, dword [esp + 0x38]
push 0xffffffffffffffff
fstp qword [esp + 0x18]
mov esi, eax
inc eax
push eax
lea ecx, [esp + 0x38]
call fcn.004e5b10
fld qword [esp + 0x14]
mov ecx, dword [esp + 0x34]
fstp qword [ecx + esi*8]
cmp word [ebx + 2], 0
je 0x5a7df5
mov edx, dword [ebx + 4]
mov eax, dword [ebx + 8]
fld qword [edx + 8]
fsub qword [eax + 8]
jmp 0x5a7e01
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
fld qword [ecx + 8]
fsub qword [edx + 8]
mov eax, dword [esp + 0x38]
push 0xffffffffffffffff
fstp qword [esp + 0x18]
mov esi, eax
inc eax
push eax
lea ecx, [esp + 0x38]
call fcn.004e5b10
fld qword [esp + 0x14]
mov eax, dword [esp + 0x34]
fstp qword [eax + esi*8]
cmp word [ebx + 2], 0
je 0x5a7e39
mov ecx, dword [ebx + 8]
mov edx, dword [ebx + 4]
mov eax, dword [ecx + 0x5c]
fld qword [edx]
fsub qword [eax]
jmp 0x5a7e46
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x5c]
fld qword [eax]
fsub qword [ecx]
mov eax, dword [esp + 0x38]
push 0xffffffffffffffff
fstp qword [esp + 0x18]
mov esi, eax
inc eax
push eax
lea ecx, [esp + 0x38]
call fcn.004e5b10
fld qword [esp + 0x14]
mov edx, dword [esp + 0x34]
fstp qword [edx + esi*8]
cmp word [ebx + 2], 0
je 0x5a7e80
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
mov eax, dword [eax + 0x5c]
fld qword [ecx + 8]
fsub qword [eax + 8]
jmp 0x5a7e8f
mov edx, dword [ebx + 8]
mov ecx, dword [ebx + 4]
mov eax, dword [edx + 0x5c]
fld qword [eax + 8]
fsub qword [ecx + 8]
mov eax, dword [esp + 0x38]
push 0xffffffffffffffff
fstp qword [esp + 0x18]
mov esi, eax
inc eax
push eax
lea ecx, [esp + 0x38]
call fcn.004e5b10
fld qword [esp + 0x14]
mov edx, dword [esp + 0x34]
fstp qword [edx + esi*8]
mov esi, dword [ebx + 0xc]
test esi, esi
je 0x5a80de
cmp word [esi + 2], 0
je 0x5a7ed2
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x5c]
fld qword [ecx]
fsub qword [eax]
jmp 0x5a7edf
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov eax, dword [edx + 0x5c]
fld qword [eax]
fsub qword [ecx]
mov eax, dword [esp + 0x38]
push 0xffffffffffffffff
fstp qword [esp + 0x18]
mov edi, eax
inc eax
push eax
lea ecx, [esp + 0x38]
call fcn.004e5b10
fld qword [esp + 0x14]
mov edx, dword [esp + 0x34]
fstp qword [edx + edi*8]
cmp word [esi + 2], 0
je 0x5a7f19
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x5c]
fld qword [ecx + 8]
fsub qword [eax + 8]
jmp 0x5a7f28
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov eax, dword [edx + 0x5c]
fld qword [eax + 8]
fsub qword [ecx + 8]
mov eax, dword [esp + 0x38]
push 0xffffffffffffffff
fstp qword [esp + 0x18]
mov edi, eax
inc eax
push eax
lea ecx, [esp + 0x38]
call fcn.004e5b10
fld qword [esp + 0x14]
mov edx, dword [esp + 0x34]
fstp qword [edx + edi*8]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
mov edx, dword [ebp + 0x10]
lea ecx, [esp + 0x5c]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0xc]
push ecx
push edx
push eax
mov ecx, esi
call fcn.005a7a30
mov byte [esp + 0x13], al
test al, al
mov al, byte [esp + 0x12]
je 0x5a803d
test al, al
je 0x5a8041
fld qword [esp + 0x4c]
fsub qword [esp + 0x5c]
fabs
fcomp qword [0x5e7a50]
fnstsw ax
test ah, 0x41
je 0x5a7fc8
fld qword [esp + 0x54]
fsub qword [esp + 0x64]
fabs
fcomp qword [0x5e7a50]
fnstsw ax
test ah, 0x41
jne 0x5a8061
mov dx, word [esi + 2]
test dx, dx
je 0x5a7fdf
mov ecx, dword [esi + 4]
mov eax, dword [esi + 8]
fld qword [ecx + 8]
fsub qword [eax + 8]
jmp 0x5a7feb
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
fld qword [eax + 8]
fsub qword [ecx + 8]
fstp qword [esp + 0x44]
test dx, dx
je 0x5a7ffa
fld qword [ecx]
fsub qword [eax]
jmp 0x5a7ffe
fld qword [eax]
fsub qword [ecx]
fstp qword [esp + 0x24]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x28]
mov edi, dword [ebp + 8]
push ecx
mov ecx, dword [esp + 0x28]
push edx
push eax
push ecx
mov ecx, edi
call fcn.00593710
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x60]
push eax
push ecx
push edx
mov ecx, edi
call fcn.00593710
jmp 0x5a8064
test al, al
je 0x5a8061
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
mov edi, dword [ebp + 8]
push eax
mov eax, dword [esp + 0x60]
push ecx
push edx
push eax
mov ecx, edi
call fcn.00593710
jmp 0x5a8064
mov edi, dword [ebp + 8]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x70]
push edx
push eax
push ecx
mov ecx, edi
call fcn.00593710
mov edx, dword [esi + 8]
cmp word [esi + 2], 0
mov ecx, dword [esi + 4]
mov eax, dword [edx + 0x5c]
je 0x5a8095
fld qword [ecx]
fsub qword [eax]
jmp 0x5a8099
fld qword [eax]
fsub qword [ecx]
fstp qword [esp + 0x4c]
mov edx, dword [esi + 8]
cmp word [esi + 2], 0
mov ecx, dword [esi + 4]
mov eax, dword [edx + 0x5c]
je 0x5a80b5
fld qword [ecx + 8]
fsub qword [eax + 8]
jmp 0x5a80bb
fld qword [eax + 8]
fsub qword [ecx + 8]
fstp qword [esp + 0x54]
mov dl, byte [esp + 0x13]
mov word [esi], 3
mov esi, dword [esi + 0xc]
mov byte [esp + 0x12], dl
test esi, esi
jne 0x5a7ebc
mov edi, dword [esp + 0xb0]
mov al, byte [esp + 0x12]
test al, al
je 0x5a8102
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [ebp + 8]
push edx
push eax
call fcn.00593710
mov ecx, dword [ebp + 8]
call fcn.00593740
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x38]
call fcn.004e5b10
xor esi, esi
mov eax, dword [edi + 0x2c]
add ebx, 0x10
cmp ebx, eax
jb 0x5a7caa
push fcn.0042bd50
push fcn.004b6ca0
push 0xa
lea ecx, [esp + 0xcc]
push 0x20
push ecx
call fcn.005c1f9f
mov eax, dword [edi + 0x28]
mov ecx, dword [edi + 0x2c]
cmp eax, ecx
mov byte [esp + 0x208], 1
mov dword [esp + 0x20], esi
mov dword [esp + 0x2c], eax
jae 0x5a84f9
lea edx, [esp + 0xc0]
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0x2c]
cmp word [eax], 0
jge 0x5a84dc
mov edi, dword [ebp + 8]
mov ecx, edi
call fcn.00593690
mov edx, dword [ebp + 0x10]
mov esi, dword [esp + 0x2c]
lea ecx, [esp + 0x5c]
mov dword [esp + 0x44], eax
mov eax, dword [ebp + 0xc]
push ecx
push edx
push eax
mov ecx, esi
call fcn.005a7a30
mov bl, al
test bl, bl
mov byte [esp + 0x12], bl
je 0x5a8217
mov dx, word [esi + 2]
test dx, dx
je 0x5a81be
mov ecx, dword [esi + 4]
mov eax, dword [esi + 8]
fld qword [ecx]
fsub qword [eax]
jmp 0x5a81c8
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
fld qword [eax]
fsub qword [ecx]
fstp qword [esp + 0x90]
test dx, dx
je 0x5a81dc
fld qword [ecx + 8]
fsub qword [eax + 8]
jmp 0x5a81e2
fld qword [eax + 8]
fsub qword [ecx + 8]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0xa4], edx
fstp qword [esp + 0x98]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
jmp 0x5a8243
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0xa0], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], edx
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x70]
push ecx
push edx
push eax
mov ecx, edi
call fcn.005935e0
mov eax, dword [esp + 0x2c]
mov word [eax], 3
mov esi, dword [eax + 0xc]
cmp word [esi], 0
jge 0x5a83b2
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x74]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0x10]
lea edx, [esp + 0x5c]
mov dword [esp + 0x58], ecx
mov ecx, dword [ebp + 0xc]
push edx
push eax
push ecx
mov ecx, esi
call fcn.005a7a30
test al, al
mov byte [esp + 0x13], al
je 0x5a8362
test bl, bl
je 0x5a8366
fld qword [esp + 0x4c]
fsub qword [esp + 0x5c]
fabs
fcomp qword [0x5e7a50]
fnstsw ax
test ah, 0x41
je 0x5a82ee
fld qword [esp + 0x54]
fsub qword [esp + 0x64]
fabs
fcomp qword [0x5e7a50]
fnstsw ax
test ah, 0x41
jne 0x5a8381
mov dx, word [esi + 2]
test dx, dx
je 0x5a8305
mov ecx, dword [esi + 4]
mov eax, dword [esi + 8]
fld qword [ecx + 8]
fsub qword [eax + 8]
jmp 0x5a8311
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
fld qword [eax + 8]
fsub qword [ecx + 8]
fstp qword [esp + 0xb4]
test dx, dx
je 0x5a8323
fld qword [ecx]
fsub qword [eax]
jmp 0x5a8327
fld qword [eax]
fsub qword [ecx]
fstp qword [esp + 0x14]
mov edx, dword [esp + 0xb8]
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x18]
push eax
push ecx
push edx
mov ecx, edi
call fcn.005935e0
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
push eax
mov eax, dword [esp + 0x60]
push ecx
push edx
push eax
jmp 0x5a837a
test bl, bl
je 0x5a8381
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x60]
push edx
push eax
push ecx
mov ecx, edi
call fcn.005935e0
mov edx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x70]
push eax
push ecx
push edx
mov ecx, edi
call fcn.005935e0
mov bl, byte [esp + 0x13]
mov word [esi], 3
mov esi, dword [esi + 0xc]
cmp word [esi], 0
jl 0x5a8274
mov al, byte [esp + 0x12]
test al, al
je 0x5a8443
test bl, bl
je 0x5a8447
fld qword [esp + 0x6c]
fsub qword [esp + 0xa0]
fabs
fcomp qword [0x5e7a50]
fnstsw ax
test ah, 0x41
je 0x5a83fa
fld qword [esp + 0x74]
fsub qword [esp + 0xa8]
fabs
fcomp qword [0x5e7a50]
fnstsw ax
test ah, 0x41
jne 0x5a846e
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x94]
push eax
mov eax, dword [esp + 0x94]
push ecx
push edx
push eax
mov ecx, edi
call fcn.005935e0
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0xa4]
push ecx
mov ecx, dword [esp + 0xa4]
push edx
push eax
push ecx
jmp 0x5a8467
test bl, bl
je 0x5a846e
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa4]
push edx
mov edx, dword [esp + 0xa4]
push eax
push ecx
push edx
mov ecx, edi
call fcn.005935e0
mov eax, dword [esp + 0x44]
mov ecx, edi
push eax
call fcn.00593750
mov ecx, dword [esp + 0x24]
push eax
call fcn.004b6d90
mov eax, dword [esp + 0x20]
xor esi, esi
test eax, eax
jle 0x5a84b4
lea ebx, [esp + 0xc0]
mov ecx, dword [esp + 0x24]
push ebx
push ecx
call fcn.004b6a50
add esp, 8
cmp eax, 5
je 0x5a84b4
mov eax, dword [esp + 0x20]
inc esi
add ebx, 0x20
cmp esi, eax
jl 0x5a8495
mov eax, dword [esp + 0x20]
cmp esi, eax
jne 0x5a84d0
mov ecx, eax
mov eax, dword [esp + 0x24]
inc ecx
add eax, 0x20
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
jmp 0x5a84dc
mov edx, dword [esp + 0x44]
mov ecx, edi
push edx
call fcn.005937d0
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x2c]
add eax, 0x10
mov edx, dword [ecx + 0x2c]
mov dword [esp + 0x2c], eax
cmp eax, edx
jb 0x5a816b
mov eax, dword [esp + 0x8c]
test eax, eax
jne 0x5a85a2
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x5a8542
push fcn.0042bd50
push 0xa
lea edx, [esp + 0xc8]
push 0x20
push edx
mov byte [esp + 0x218], al
call fcn.005c2021
mov dword [esp + 0x30], 0x5e2984
mov dword [esp + 0x208], 2
jmp 0x5a8578
cmp eax, 2
jle 0x5a85a2
push fcn.0042bd50
push 0xa
lea eax, [esp + 0xc8]
push 0x20
push eax
mov byte [esp + 0x218], 0
call fcn.005c2021
mov dword [esp + 0x30], 0x5e2984
mov dword [esp + 0x208], 3
mov eax, dword [esp + 0x34]
test eax, eax
je 0x5a8589
push eax
call sub.mfc42u.dll_operatordelete
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x200]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push fcn.0042bd50
push 0xa
lea ecx, [esp + 0xc8]
push 0x20
push ecx
mov byte [esp + 0x218], 0
call fcn.005c2021
mov dword [esp + 0x30], 0x5e2984
mov eax, dword [esp + 0x34]
mov dword [esp + 0x208], 4
test eax, eax
je 0x5a85e4
push eax
call sub.mfc42u.dll_operatordelete
add esp, 4
mov ecx, dword [esp + 0x200]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc