Function at 0x100929b7
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b52ab
mov eax, dword fs:[0]
push eax
sub esp, 0x1c8
mov eax, dword [0x100e13e0]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1cc], ecx
push 0x114
push 0
lea eax, [ebp - 0x14c]
push eax
call fcn.10072050
add esp, 0xc
mov dword [ebp - 0x14c], 0x114
lea eax, [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x10092a1e
jmp 0x10092c8f
lea ecx, [ebp - 0x34]
call fcn.10009d47
and dword [ebp - 4], 0
cmp dword [ebp - 0x148], 5
jne 0x10092a69
cmp dword [ebp - 0x144], 1
jne 0x10092a69
mov ecx, dword [ebp - 0x1cc]
call fcn.10092543
test eax, eax
je 0x10092a5a
push str._xpx64_
lea ecx, [ebp - 0x34]
call fcn.100213c4
jmp 0x10092a67
push str._xp_
lea ecx, [ebp - 0x34]
call fcn.100213c4
jmp 0x10092ab0
cmp dword [ebp - 0x148], 6
jb 0x10092a9f
mov ecx, dword [ebp - 0x1cc]
call fcn.10092543
test eax, eax
je 0x10092a90
push str._win7x64_
lea ecx, [ebp - 0x34]
call fcn.100213c4
jmp 0x10092a9d
push str._win7_
lea ecx, [ebp - 0x34]
call fcn.100213c4
jmp 0x10092ab0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.100014a4
jmp 0x10092c8f
lea ecx, [ebp - 0x160]
call fcn.1004322f
mov byte [ebp - 4], 1
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x1cc]
add ecx, 4
call fcn.1003f9a9
lea eax, [ebp - 0x1a4]
push eax
mov ecx, dword [ebp - 0x1cc]
add ecx, 4
call fcn.10011dd1
push eax
lea ecx, [ebp - 0x14]
call fcn.1003fc32
movzx eax, al
test eax, eax
je 0x10092c00
lea ecx, [ebp - 0x14]
call fcn.1001718f
push eax
lea ecx, [ebp - 0x198]
call fcn.1000146c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.1001718f
add eax, 0x1c
push eax
lea ecx, [ebp - 0x17c]
call fcn.1000146c
mov byte [ebp - 4], 3
push 0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x198]
call fcn.100431db
cmp eax, 0xffffffff
je 0x10092bd5
push 0
push 0x5b
lea ecx, [ebp - 0x198]
call fcn.10004c04
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
je 0x10092bd5
push dword [ebp - 0x19c]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x1c0]
call fcn.1004315a
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 4
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x198]
call fcn.10004b83
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c0]
call fcn.100014a4
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x160]
call fcn.10043251
mov ecx, eax
call fcn.10004b83
lea ecx, [ebp - 0x14]
call fcn.1000378b
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
call fcn.100014a4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x198]
call fcn.100014a4
jmp 0x10092ad1
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x160]
call fcn.1003f9a9
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x160]
call fcn.10011dd1
push eax
lea ecx, [ebp - 0x154]
call fcn.1003fc32
movzx eax, al
test eax, eax
je 0x10092c74
lea ecx, [ebp - 0x154]
call fcn.1001718f
add eax, 0x1c
push eax
lea ecx, [ebp - 0x154]
call fcn.1001718f
push eax
mov ecx, dword [ebp - 0x1cc]
add ecx, 4
call fcn.10043251
mov ecx, eax
call fcn.10004b83
lea ecx, [ebp - 0x154]
call fcn.1000378b
jmp 0x10092c12
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x160]
call fcn.1003cad6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.100014a4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.1006f3d1
leave
ret