Function at 0x10171de0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x140
mov eax, dword [0x10250150]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [ebp - 0x138]
push ecx
mov ecx, edi
mov dword [ebp - 0x140], edi
mov eax, dword [edi]
call dword [eax + 8]
mov eax, dword [edi + 0x18]
xor esi, esi
sub eax, dword [edi + 0x14]
or ebx, 0xffffffff
sar eax, 2
mov dword [ebp - 0x134], esi
test eax, eax
je 0x10171f8f
jmp 0x10171e30
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
call fcn.10003980
test eax, eax
je 0x101722c5
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x130]
push 0x1021a0d8
mov dword [ebp - 0x130], eax
call fcn.10004a70
test al, al
jne 0x10171e91
push 1
push 0x1021a0d8
lea ecx, [ebp - 0x130]
call fcn.10004050
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x130]
push eax
mov eax, dword [edi + 0x14]
lea eax, [eax + esi*4]
push eax
call fcn.101cc070
mov edx, dword [ebp - 0x130]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10171ecc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x128]
mov ebx, edi
mov esi, dword [ebp - 0x12c]
sub ebx, esi
sar ebx, 2
cmp ebx, 2
jae 0x10171fc1
test esi, esi
je 0x10171f68
cmp esi, edi
je 0x10171f17
mov edx, dword [esi]
or eax, 0xffffffff
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10171f0a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, edi
jne 0x10171ef0
mov esi, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x124]
mov eax, esi
sub ecx, esi
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x10171f40
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101722cf
push ecx
push esi
call fcn.102134ff
add esp, 8
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
or ebx, 0xffffffff
mov edi, dword [ebp - 0x140]
mov esi, dword [ebp - 0x134]
inc esi
mov dword [ebp - 0x134], esi
mov eax, dword [edi + 0x18]
sub eax, dword [edi + 0x14]
sar eax, 2
cmp esi, eax
jb 0x10171e30
xor esi, esi
mov eax, dword [ebp - 0x138]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x10171fac
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10212f74
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x138]
test eax, eax
je 0x101722c5
mov ecx, dword [esi]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x10171ff7
test dx, dx
je 0x10171ff3
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x10171ff7
add ecx, 4
add eax, 4
test dx, dx
jne 0x10171fd1
xor eax, eax
jmp 0x10171ffc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101721be
mov eax, dword [ebp + 8]
test eax, eax
je 0x101722c5
mov ecx, eax
mov eax, dword [esi + 4]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1017203a
test dx, dx
je 0x10172036
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1017203a
add eax, 4
add ecx, 4
test dx, dx
jne 0x10172014
xor eax, eax
jmp 0x1017203f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101721be
cmp ebx, 5
jb 0x10172255
cmp dword [0x10259a90], eax
jne 0x101720be
mov dword [ebp - 0x13c], eax
mov ecx, 0x1024ea08
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.101cb680
test eax, eax
jne 0x10172091
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x11c]
mov dword [0x10259a88], eax
mov eax, dword [ebp - 0x118]
mov dword [0x10259a8c], eax
call fcn.1000ad40
mov esi, dword [ebp - 0x12c]
neg eax
sbb eax, eax
neg eax
inc eax
mov dword [0x10259a90], eax
mov edi, dword [esi + 8]
mov ecx, 0x10232a10
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x101720ee
test dx, dx
je 0x101720ea
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x101720ee
add eax, 4
add ecx, 4
test dx, dx
jne 0x101720c8
xor eax, eax
jmp 0x101720f3
sbb eax, eax
or eax, 1
test eax, eax
je 0x10172112
push edi
call fcn.1021354d
add esp, 4
cmp eax, dword [0x10259a88]
jne 0x101721b8
mov esi, dword [ebp - 0x12c]
mov edi, dword [esi + 0xc]
mov ecx, 0x10232a10
mov eax, edi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10172146
test dx, dx
je 0x10172142
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10172146
add eax, 4
add ecx, 4
test dx, dx
jne 0x10172120
xor eax, eax
jmp 0x1017214b
sbb eax, eax
or eax, 1
test eax, eax
je 0x10172166
push edi
call fcn.1021354d
add esp, 4
cmp eax, dword [0x10259a8c]
jne 0x101721b8
mov esi, dword [ebp - 0x12c]
mov edi, dword [esi + 0x10]
mov ecx, 0x10232a10
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10172196
test dx, dx
je 0x10172192
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10172196
add eax, 4
add ecx, 4
test dx, dx
jne 0x10172170
xor eax, eax
jmp 0x1017219b
sbb eax, eax
or eax, 1
test eax, eax
je 0x10172255
push edi
call fcn.1021354d
add esp, 4
cmp eax, dword [0x10259a90]
je 0x1017224f
mov esi, dword [ebp - 0x12c]
test esi, esi
je 0x10171f68
mov edi, dword [ebp - 0x128]
or ebx, 0xffffffff
cmp esi, edi
je 0x101721f9
mov edx, dword [esi]
mov eax, ebx
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x101721ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, edi
jne 0x101721d3
mov esi, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x124]
mov eax, esi
sub ecx, esi
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x10172222
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101722cf
push ecx
push esi
call fcn.102134ff
add esp, 8
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
jmp 0x10171f6b
mov esi, dword [ebp - 0x12c]
or ebx, 0xffffffff
test esi, esi
je 0x101722bb
mov edi, dword [ebp - 0x128]
cmp esi, edi
je 0x1017228c
mov edx, dword [esi]
mov eax, ebx
sub edx, 0x10
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1017227f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 4
cmp esi, edi
jne 0x10172266
mov esi, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x124]
mov eax, esi
sub ecx, esi
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x101722b1
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x101722cf
push ecx
push esi
call fcn.102134ff
add esp, 8
mov esi, 1
jmp 0x10171f91
push 0x80004005
call fcn.100030c0
call fcn.10200ab0
int3