Function at 0x461f10
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x478287
mov eax, dword fs:[0]
push eax
sub esp, 0x330
mov eax, dword [0x496028]
xor eax, esp
mov dword [esp + 0x328], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x496028]
xor eax, esp
push eax
lea eax, [esp + 0x344]
mov dword fs:[0], eax
mov eax, dword [esp + 0x354]
mov esi, dword [esp + 0x358]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x364]
lea edx, [esp + 0x44]
push edx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x44], ecx
call fcn.004551a0
xor edi, edi
mov dword [esp + 0x34c], edi
cmp esi, edi
je 0x46278b
mov ecx, dword [esp + 0x35c]
mov eax, dword [esp + 0x360]
mov edx, ecx
or edx, eax
je 0x46278b
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], ebx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], edi
cmp eax, edi
jb 0x461fbe
ja 0x461fd9
cmp ecx, 0x1f
ja 0x461fd9
lea esi, [esp + 0x74]
call fcn.0046d990
mov eax, dword [esp + 0x74]
push eax
jmp 0x462799
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x34]
mov dl, byte [ebp + esi]
add ebp, esi
cmp dl, 0xe5
je 0x4626c8
test dl, dl
je 0x461fbe
mov al, byte [ebp + 0xb]
and al, 0x3f
cmp al, 0xf
jne 0x4620fd
mov al, dl
movzx edx, al
and edx, 0x3f
jne 0x46200c
mov dword [esp + 0x18], edi
jmp 0x4626c8
test al, 0x40
je 0x462035
xor eax, eax
movzx esi, ax
mov eax, esi
shl esi, 0x10
mov ecx, 0x82
lea edi, [esp + 0x12c]
or eax, esi
rep stosd dword es:[edi], eax
mov cl, byte [ebp + 0xd]
stosw word es:[edi], ax
mov byte [esp + 0x17], cl
jmp 0x462045
lea eax, [edx + 1]
cmp eax, ebx
jne 0x462003
mov cl, byte [esp + 0x17]
cmp cl, byte [ebp + 0xd]
jne 0x462003
movzx ecx, word [ebp + 3]
mov dword [esp + 0x18], edx
imul edx, edx, 0xd
sub edx, 0xd
mov eax, edx
movzx edx, word [ebp + 1]
mov word [esp + eax*2 + 0x12c], dx
movzx edx, word [ebp + 5]
mov word [esp + eax*2 + 0x12e], cx
movzx ecx, word [ebp + 7]
inc eax
mov word [esp + eax*2 + 0x12e], dx
movzx edx, word [ebp + 9]
inc eax
mov word [esp + eax*2 + 0x12e], cx
movzx ecx, word [ebp + 0xe]
inc eax
mov word [esp + eax*2 + 0x12e], dx
movzx edx, word [ebp + 0x10]
inc eax
mov word [esp + eax*2 + 0x12e], cx
movzx ecx, word [ebp + 0x12]
inc eax
mov word [esp + eax*2 + 0x12e], dx
movzx edx, word [ebp + 0x14]
inc eax
mov word [esp + eax*2 + 0x12e], cx
movzx ecx, word [ebp + 0x16]
inc eax
mov word [esp + eax*2 + 0x12e], dx
movzx edx, word [ebp + 0x18]
inc eax
mov word [esp + eax*2 + 0x12e], cx
movzx ecx, word [ebp + 0x1c]
inc eax
inc eax
mov word [esp + eax*2 + 0x12c], dx
movzx edx, word [ebp + 0x1e]
inc eax
mov word [esp + eax*2 + 0x12c], cx
mov word [esp + eax*2 + 0x12e], dx
jmp 0x4626c8
cmp ebx, 1
je 0x46210e
xor eax, eax
mov word [esp + 0x12c], ax
jmp 0x46213b
mov ecx, ebp
xor al, al
mov esi, 0xb
mov bl, al
shl bl, 7
shr al, 1
add bl, al
add bl, byte [ecx]
dec esi
inc ecx
mov al, bl
cmp si, di
jne 0x462117
cmp al, byte [esp + 0x17]
je 0x46213b
xor ecx, ecx
mov word [esp + 0x12c], cx
movzx eax, byte [ebp + 1]
movzx ecx, byte [ebp + 2]
movzx dx, dl
mov word [esp + 0x112], ax
movzx eax, byte [ebp + 4]
mov word [esp + 0x110], dx
movzx edx, byte [ebp + 3]
mov word [esp + 0x118], ax
movzx eax, byte [ebp + 7]
mov word [esp + 0x114], cx
movzx ecx, byte [ebp + 5]
mov word [esp + 0x116], dx
movzx edx, byte [ebp + 6]
mov word [esp + 0x11e], ax
mov dword [esp + 0x18], edi
mov word [esp + 0x11a], cx
mov word [esp + 0x11c], dx
mov eax, 7
jmp 0x4621b0
mov ecx, 0x20
cmp word [esp + eax*2 + 0x110], cx
jne 0x4621ce
dec eax
cmp eax, edi
jg 0x4621b0
cmp word [esp + eax*2 + 0x110], cx
je 0x4621cf
inc eax
movzx dx, byte [ebp + 9]
movzx si, byte [ebp + 8]
mov ecx, 0x2e
lea ebx, [esp + eax*2 + 0x110]
mov word [ebx], cx
lea ecx, [esp + eax*2 + 0x114]
mov dword [esp + 0x3c], ecx
mov word [ecx], dx
movzx cx, byte [ebp + 0xa]
lea edi, [esp + eax*2 + 0x116]
mov word [esp + eax*2 + 0x112], si
mov word [edi], cx
cmp cx, 0x20
je 0x46221f
xor edx, edx
mov word [esp + eax*2 + 0x118], dx
jmp 0x462242
cmp dx, 0x20
je 0x46222c
xor eax, eax
mov word [edi], ax
jmp 0x462242
cmp si, 0x20
je 0x46223d
mov edx, dword [esp + 0x3c]
xor ecx, ecx
mov word [edx], cx
jmp 0x462242
xor eax, eax
mov word [ebx], ax
cmp word [esp + 0x110], 5
jne 0x46225a
mov ecx, 0xe5
mov word [esp + 0x110], cx
mov al, byte [ebp + 0xb]
and al, 0x18
cmp al, 8
jne 0x4622a6
lea edx, [esp + 0x110]
push 0x2e
push edx
call dword [0x47c3ec]
add esp, 8
test eax, eax
je 0x4626c8
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x462283
sub ecx, esi
lea edx, [eax + 2]
push edx
sar ecx, 1
push ecx
push eax
call dword [0x47c420]
add esp, 0xc
jmp 0x4626c8
cmp al, 0x18
je 0x4626c8
mov ecx, 0x484800
lea eax, [esp + 0x110]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4622e6
test dx, dx
je 0x4622e2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4622e6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4622c0
xor eax, eax
jmp 0x4622eb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4626c8
mov ecx, 0x48799c
lea eax, [esp + 0x110]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x462326
test dx, dx
je 0x462322
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x462326
add eax, 4
add ecx, 4
test dx, dx
jne 0x462300
xor eax, eax
jmp 0x46232b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4626c8
lea esi, [esp + 0x44]
call fcn.00455240
mov esi, dword [esp + 0x30]
movzx eax, byte [esi + 0x1d]
movzx ecx, word [esi + 0x1b]
imul eax, ecx
cmp word [esp + 0x12c], 0
mov dword [esp + 0x60], eax
jne 0x4623ab
mov ecx, 0x484800
lea eax, [esp + 0x110]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x46238c
test dx, dx
je 0x462388
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x46238c
add eax, 4
add ecx, 4
test dx, dx
jne 0x462366
xor eax, eax
jmp 0x462391
sbb eax, eax
sbb eax, 0xffffffff
lea ecx, [esp + 0x44]
test eax, eax
jne 0x4623a1
call dword [0x47c74c]
jmp 0x4623bd
lea edx, [esp + 0x110]
push edx
jmp 0x4623b7
lea eax, [esp + 0x12c]
push eax
lea ecx, [esp + 0x48]
call dword [0x47ce18]
movzx eax, word [ebp + 0x14]
movzx edx, word [ebp + 0x1a]
mov ecx, dword [ebp + 0x1c]
shl eax, 0x10
or eax, edx
cdq
mov dword [esp + 0x9c], ecx
lea ecx, [esp + 0xf4]
mov dword [esp + 0xa0], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
call dword [0x47c2dc]
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0xf8]
mov byte [esp + 0x350], 1
call dword [0x47c2cc]
push 0x47ef4c
lea ecx, [esp + 0xf8]
call dword [0x47c2d0]
mov ecx, dword [esp + 0x44]
push ecx
lea ecx, [esp + 0xf8]
call dword [0x47c2d0]
cmp dword [esp + 0x10c], 8
mov eax, dword [esp + 0xf8]
jae 0x46244b
lea eax, [esp + 0xf8]
push eax
lea ecx, [esp + 0x4c]
call dword [0x47ce18]
movzx dx, byte [ebp + 0xd]
movzx eax, word [ebp + 0xe]
movzx ecx, word [ebp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
movzx ebx, dx
lea edx, [esp + 0xec]
push edx
push eax
push ecx
call edi
test eax, eax
jne 0x462482
xor ebx, ebx
xor ecx, ecx
jmp 0x4624c6
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0xf0]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
test eax, eax
jne 0x4624a0
xor ecx, ecx
jmp 0x4624c4
mov edi, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
movzx eax, bx
imul eax, eax, 0x186a0
cdq
add edi, eax
mov eax, edi
mov edi, dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
adc ecx, edx
xor ebx, ebx
mov dword [esp + 0xa4], eax
movzx eax, word [ebp + 0x16]
lea edx, [esp + 0xe4]
mov dword [esp + 0xa8], ecx
movzx ecx, word [ebp + 0x18]
push edx
push eax
push ecx
call edi
test eax, eax
jne 0x4624f0
xor ecx, ecx
jmp 0x46251c
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0xe8]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
test eax, eax
jne 0x46250e
xor ecx, ecx
jmp 0x46251c
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
lea edx, [esp + 0xdc]
mov dword [esp + 0xac], eax
movzx eax, word [ebp + 0x12]
push edx
push ebx
push eax
mov dword [esp + 0xbc], ecx
call edi
test eax, eax
jne 0x462542
xor ecx, ecx
jmp 0x46256e
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0xe0]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
test eax, eax
jne 0x462560
xor ecx, ecx
jmp 0x46256e
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
movzx edx, byte [ebp + 0xb]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xb8], ecx
mov ecx, 0x7ffffff
mov dword [esp + 0x5c], edx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ebx
cmp eax, ebx
je 0x4625a5
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov dword [esp + 0x58], edx
jmp 0x4625a9
mov dword [esp + 0x58], ebx
mov eax, dword [esp + 0x20]
push eax
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0x4c]
push edx
push esi
call fcn.004627f0
movzx ecx, byte [esi + 0x1d]
movzx edx, word [esi + 0x1b]
mov eax, dword [esp + 0x64]
imul ecx, edx
imul ecx, eax
add dword [esi + 0x220], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], ebx
adc dword [esi + 0x224], ebx
test byte [esp + 0x5c], 0x10
jne 0x46260c
lea eax, [esp + 0x44]
push eax
call fcn.00426e70
mov dword [esp + 0x68], 2
cmp eax, 1
ja 0x462610
mov dword [esp + 0x68], ebx
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x220]
mov edx, dword [esi + 0x224]
mov edi, dword [esi + 0x228]
mov ebp, dword [esi + 0x22c]
test eax, eax
je 0x462647
mov ebx, dword [esi + 8]
push ebx
lea ebx, [esp + 0x48]
push ebx
push edx
push ecx
push ebp
push edi
call eax
cmp eax, 0xffffffff
je 0x46271c
test byte [esp + 0x5c], 0x10
je 0x4626b3
mov ecx, dword [esp + 0x20]
mov edx, dword [esi]
mov edx, dword [edx + 0x20]
lea eax, [esp + 0xc4]
push eax
mov eax, dword [esp + 0x20]
push ecx
push eax
mov ecx, esi
call edx
cmp dword [esp + 0x10c], 8
mov edi, eax
mov eax, dword [esp + 0xf8]
jae 0x462683
lea eax, [esp + 0xf8]
mov edx, dword [esp + 0xc8]
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0xc8]
push edx
push ecx
push edi
push eax
mov ecx, esi
call fcn.00461f10
push edi
cmp eax, 0xffffffff
je 0x462760
call fcn.00472d5c
add esp, 4
lea ecx, [esp + 0xf4]
mov byte [esp + 0x34c], 0
call dword [0x47c2e0]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
add ebp, 0x20
mov edi, 0
adc eax, edi
mov ecx, ebp
add ecx, 0x1f
mov dword [esp + 0x28], eax
adc eax, edi
mov dword [esp + 0x24], ebp
cmp eax, dword [esp + 0x360]
jb 0x461fd1
ja 0x461fbe
cmp ecx, dword [esp + 0x35c]
jb 0x461fd1
lea esi, [esp + 0x74]
call fcn.0046d990
mov eax, dword [esp + 0x74]
push eax
jmp 0x462799
lea ecx, [esp + 0xf4]
mov byte [esp + 0x34c], 0
call dword [0x47c2e0]
lea esi, [esp + 0x74]
call fcn.0046d990
mov edx, dword [esp + 0x74]
push edx
call fcn.0047284c
add esp, 4
lea ecx, [esp + 0x48]
call dword [0x47ce24]
lea ecx, [esp + 0x44]
call dword [0x47ce24]
or eax, 0xffffffff
jmp 0x4627b7
call fcn.00472d5c
add esp, 4
lea ecx, [esp + 0xf4]
mov byte [esp + 0x34c], 0
call dword [0x47c2e0]
lea edi, [esp + 0x44]
call fcn.00455210
or eax, 0xffffffff
jmp 0x4627b7
lea esi, [esp + 0x74]
call fcn.0046d990
mov ecx, dword [esp + 0x74]
push ecx
call fcn.0047284c
add esp, 4
lea ecx, [esp + 0x48]
call dword [0x47ce24]
lea ecx, [esp + 0x44]
call dword [0x47ce24]
xor eax, eax
mov ecx, dword [esp + 0x344]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x328]
xor ecx, esp
call fcn.004734e6
add esp, 0x33c
ret 0x14