Function at 0x100a99b0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1310
call fcn.1014e870
mov eax, dword [0x101d8724]
xor eax, ebp
mov dword [ebp - 0xc], eax
push ebx
push esi
push edi
cmp dword [ebp + 8], 0
je 0x100a99da
call fcn.100a98e0
cmp dword [ebp + 8], eax
jne 0x100a99df
jmp 0x100aa0e8
mov eax, dword [ebp + 8]
and eax, 1
je 0x100a99ec
jmp 0x100aa0e8
mov cx, word [0x101a1360]
mov word [ebp - 0x1120], cx
push 0x102
push 0
lea edx, [ebp - 0x111e]
push edx
call fcn.1014e270
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1120]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea edx, [ebp - 0x1120]
push edx
call fcn.1014f580
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x100a9a4b
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x100a9a54
lea ecx, [ebp - 0x1120]
mov dword [ebp - 8], ecx
mov dword [ebp - 0x11c8], 0
jmp 0x100a9a6f
mov edx, dword [ebp - 0x11c8]
add edx, 1
mov dword [ebp - 0x11c8], edx
mov eax, dword [ebp - 0x11c8]
imul eax, eax, 0xc
cmp dword [eax + 0x101d5284], 0
je 0x100a9af5
mov ecx, dword [ebp - 0x11c8]
imul ecx, ecx, 0xc
mov edx, dword [ecx + 0x101d5284]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.1015d9f0
add esp, 8
test eax, eax
jne 0x100a9af0
mov ecx, dword [ebp - 0x11c8]
imul ecx, ecx, 0xc
mov edx, dword [ecx + 0x101d528c]
and edx, 1
je 0x100a9af0
mov eax, 0x12
shl eax, 2
mov ecx, dword [0x101db5fc]
mov edx, dword [0x101db5fc]
mov esi, dword [0x101db5fc]
mov ebx, dword [esi + 0x6c]
xor ebx, dword [edx + 0x64]
xor ebx, dword [ecx + eax]
and ebx, 0x80
neg ebx
sbb ebx, ebx
neg ebx
movzx eax, bl
test eax, eax
je 0x100a9af0
jmp 0x100aa0e8
jmp 0x100a9a60
mov ecx, dword [ebp + 8]
push ecx
mov ecx, 0x101dafb0
call fcn.1007c320
movzx edx, al
test edx, edx
jne 0x100a9b0f
jmp 0x100aa0e8
mov byte [ebp - 1], 0
mov dword [ebp - 0x11c0], 0x94
lea eax, [ebp - 0x11c0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [ebp - 0x11b0], 2
je 0x100a9b37
mov byte [ebp - 1], 1
movzx ecx, byte [ebp - 1]
test ecx, ecx
je 0x100a9b4d
cmp dword [ebp + 8], 0x80000000
jb 0x100a9b4d
jmp 0x100aa0e8
movzx edx, byte [ebp + 0xc]
test edx, edx
je 0x100a9b61
mov eax, dword [ebp + 8]
push eax
call fcn.100aa100
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x11c4], ecx
mov edx, dword [ebp - 0x11c4]
mov eax, dword [ebp - 0x11c4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1128], eax
mov ecx, dword [ebp - 0x1128]
cmp dword [ecx + 0x74], 1
ja 0x100a9b90
jmp 0x100aa0e8
mov edx, dword [ebp - 0x1128]
cmp dword [edx + 0x80], 0
jne 0x100a9ba4
jmp 0x100aa0e8
mov eax, dword [ebp - 0x1128]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x80]
mov dword [ebp - 0x1014], ecx
mov edx, dword [ebp - 0x1014]
cmp dword [edx + 0xc], 0
je 0x100aa0e8
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1124], eax
mov ecx, dword [ebp - 0x1014]
mov edx, dword [ebp + 8]
add edx, dword [ecx]
mov dword [ebp - 0x11d4], edx
mov eax, dword [ebp - 0x1014]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x10]
mov dword [ebp - 0x11d0], ecx
mov edx, dword [ebp - 0x11d0]
mov dword [ebp - 0x11d8], edx
mov dword [ebp - 0x11dc], 0
mov eax, dword [ebp - 0x11d4]
cmp dword [eax], 0
je 0x100a9fec
mov byte [ebp - 0x11dd], 0
mov dword [ebp - 0x11e4], 0
mov ecx, dword [ebp - 0x11d4]
mov edx, dword [ebp + 8]
add edx, dword [ecx]
mov dword [ebp - 0x11e8], edx
mov eax, dword [ebp - 0x11e8]
add eax, 2
mov dword [ebp - 0x11ec], eax
mov dword [ebp - 0x11f0], 0
cmp dword [ebp - 0x11dc], 0xa
jle 0x100a9c68
jmp 0x100a9fec
mov ecx, dword [ebp - 0x11d4]
mov edx, dword [ecx]
and edx, 0x80000000
je 0x100a9c8e
mov eax, dword [ebp - 0x11d4]
mov ecx, dword [eax]
and ecx, 0xffff
mov dword [ebp - 0x11f0], ecx
jmp 0x100a9ce7
push pe_nt_image_headers32
mov edx, dword [ebp - 0x11ec]
push edx
call dword [sym.imp.KERNEL32.dll_IsBadStringPtrA]
test eax, eax
jne 0x100a9cd3
mov eax, dword [ebp - 0x11ec]
movsx ecx, byte [eax]
test ecx, ecx
je 0x100a9cbd
mov dword [ebp - 0x11dc], 0
jmp 0x100a9cd1
mov edx, dword [ebp - 0x11dc]
add edx, 1
mov dword [ebp - 0x11dc], edx
jmp 0x100a9c0e
jmp 0x100a9ce7
mov eax, dword [ebp - 0x11dc]
add eax, 1
mov dword [ebp - 0x11dc], eax
jmp 0x100a9c0e
mov dword [ebp - 0x11f4], 0x101d5284
jmp 0x100a9d11
mov ecx, dword [ebp - 0x11f4]
add ecx, 0xc
mov dword [ebp - 0x11f4], ecx
mov edx, dword [ebp - 0x11e4]
add edx, 1
mov dword [ebp - 0x11e4], edx
mov eax, dword [ebp - 0x11f4]
cmp dword [eax], 0
je 0x100a9fc9
movzx ecx, byte [ebp - 0x11dd]
test ecx, ecx
jne 0x100a9fc9
mov edx, dword [ebp - 0x11f4]
mov eax, dword [edx + 8]
and eax, 1
je 0x100a9d77
mov ecx, 0x12
shl ecx, 2
mov edx, dword [0x101db5fc]
mov eax, dword [0x101db5fc]
mov esi, dword [0x101db5fc]
mov ebx, dword [esi + 0x6c]
xor ebx, dword [eax + 0x64]
xor ebx, dword [edx + ecx]
and ebx, 0x80
neg ebx
sbb ebx, ebx
neg ebx
movzx ecx, bl
test ecx, ecx
je 0x100a9d77
jmp 0x100a9cf3
mov dword [ebp - 0x11f8], 0
mov edx, dword [ebp - 0x11f4]
mov eax, dword [edx + 4]
mov dword [ebp - 0x11fc], eax
jmp 0x100a9db0
mov ecx, dword [ebp - 0x11fc]
add ecx, 0xc
mov dword [ebp - 0x11fc], ecx
mov edx, dword [ebp - 0x11f8]
add edx, 1
mov dword [ebp - 0x11f8], edx
mov eax, dword [ebp - 0x11fc]
cmp dword [eax], 0
je 0x100a9fb7
cmp dword [ebp - 0x11f0], 0
je 0x100a9de5
mov ecx, dword [ebp - 0x11fc]
movzx edx, word [ecx + 4]
xor eax, eax
cmp dword [ebp - 0x11f0], edx
sete al
mov byte [ebp - 0x11dd], al
jmp 0x100a9e25
push pe_nt_image_headers32
lea ecx, [ebp - 0x1300]
push ecx
mov edx, dword [ebp - 0x11fc]
mov eax, dword [edx]
push eax
call fcn.100f11d0
add esp, 0xc
lea ecx, [ebp - 0x1300]
push ecx
mov edx, dword [ebp - 0x11ec]
push edx
call fcn.1014f3a0
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x11dd], al
movzx eax, byte [ebp - 0x11dd]
test eax, eax
je 0x100a9fb2
movzx ecx, byte [ebp + 0xc]
test ecx, ecx
je 0x100a9ea6
mov edx, dword [ebp - 0x11d0]
mov eax, dword [ebp - 0x11fc]
mov ecx, dword [edx]
cmp ecx, dword [eax + 8]
je 0x100a9ea6
mov edx, dword [ebp - 0x11d0]
sub edx, dword [ebp - 0x11d8]
sar edx, 2
mov eax, dword [ebp - 0x1124]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1124]
add ecx, 4
mov dword [ebp - 0x1124], ecx
mov edx, dword [ebp - 0x1124]
mov eax, dword [ebp - 0x11fc]
mov ecx, dword [eax + 8]
mov dword [edx], ecx
mov edx, dword [ebp - 0x1124]
add edx, 4
mov dword [ebp - 0x1124], edx
mov byte [ebp - 0x11dd], 1
jmp 0x100a9fb7
movzx eax, byte [ebp + 0xc]
test eax, eax
jne 0x100a9fab
mov ecx, dword [ebp - 0x11d0]
mov edx, dword [ebp - 0x11fc]
mov eax, dword [ecx]
cmp eax, dword [edx + 8]
jne 0x100a9fab
mov ecx, dword [ebp - 0x11d0]
sub ecx, dword [ebp - 0x11d8]
sar ecx, 2
mov edx, dword [ebp - 0x1124]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1124]
add eax, 4
mov dword [ebp - 0x1124], eax
mov ecx, dword [ebp - 0x11e4]
mov edx, dword [0x101de7f4]
mov eax, dword [edx + ecx*4]
mov ecx, dword [0x101db5fc]
mov edx, dword [0x101db5fc]
mov esi, dword [0x101db5fc]
mov edi, dword [0x101db5fc]
mov edi, dword [edi + 0x50]
xor edi, dword [esi + 0x6c]
xor edi, dword [edx + 0x64]
xor edi, dword [ecx + 0x68]
mov ecx, dword [ebp - 0x11f8]
xor edi, dword [eax + ecx*4]
mov dword [ebp - 0x1304], edi
mov edx, dword [ebp - 0x1304]
push edx
call dword [sym.imp.KERNEL32.dll_IsBadCodePtr]
test eax, eax
je 0x100a9f83
mov eax, dword [ebp - 0x11e4]
mov ecx, dword [0x101de7f8]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x101db5fc]
mov ecx, dword [0x101db5fc]
mov esi, dword [0x101db5fc]
mov edi, dword [0x101db5fc]
mov edi, dword [edi + 0x50]
xor edi, dword [esi + 0x6c]
xor edi, dword [ecx + 0x64]
xor edi, dword [eax + 0x68]
mov eax, dword [ebp - 0x11f8]
xor edi, dword [edx + eax*4]
mov dword [ebp - 0x1304], edi
mov ecx, dword [ebp - 0x1124]
mov edx, dword [ebp - 0x1304]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1124]
add eax, 4
mov dword [ebp - 0x1124], eax
mov byte [ebp - 0x11dd], 1
jmp 0x100a9fb7
mov byte [ebp - 0x11dd], 0
jmp 0x100a9d92
movzx ecx, byte [ebp - 0x11dd]
test ecx, ecx
je 0x100a9fc4
jmp 0x100a9fc9
jmp 0x100a9cf3
mov edx, dword [ebp - 0x11d0]
add edx, 4
mov dword [ebp - 0x11d0], edx
mov eax, dword [ebp - 0x11d4]
add eax, 4
mov dword [ebp - 0x11d4], eax
jmp 0x100a9c0e
mov ecx, dword [ebp - 0x11d0]
sub ecx, dword [ebp - 0x11d8]
sar ecx, 2
mov dword [ebp - 0x11cc], ecx
mov edx, dword [ebp - 0x1124]
lea eax, [ebp - 0x1010]
cmp edx, eax
je 0x100aa0d4
lea ecx, [ebp - 0x1308]
push ecx
push 8
mov edx, dword [ebp - 0x11cc]
shl edx, 2
push edx
mov eax, dword [ebp - 0x11d8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [ebp - 0x11cc]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x11d8]
push edx
call dword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
jne 0x100aa0af
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x130c], eax
mov ecx, dword [ebp - 0x130c]
cmp ecx, dword [ebp - 0x1124]
jae 0x100aa0af
mov edx, dword [ebp - 0x130c]
mov eax, dword [edx]
mov dword [ebp - 0x1310], eax
mov ecx, dword [ebp - 0x130c]
add ecx, 4
mov dword [ebp - 0x130c], ecx
mov edx, dword [ebp - 0x1310]
mov eax, dword [ebp - 0x11d8]
mov ecx, dword [ebp - 0x130c]
mov ecx, dword [ecx]
mov dword [eax + edx*4], ecx
mov edx, dword [ebp - 0x130c]
add edx, 4
mov dword [ebp - 0x130c], edx
jmp 0x100aa05c
lea eax, [ebp - 0x1308]
push eax
mov ecx, dword [ebp - 0x1308]
push ecx
mov edx, dword [ebp - 0x11cc]
shl edx, 2
push edx
mov eax, dword [ebp - 0x11d8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [ebp - 0x1014]
add ecx, 0x14
mov dword [ebp - 0x1014], ecx
jmp 0x100a9bb9
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1014c68a
mov esp, ebp
pop ebp
ret