Function at 0x1107efa
Capabilities:
Get os information via kuser_shared_data

Disassembly:
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
push eax
mov eax, 0x63fcbbba
inc eax
jmp 0x110750e
mov esi, dword [esp]
add esp, 4
push edi
mov edi, 0x76cf888f
jmp 0x110757e
mov ebx, 0x76cf852d
or ebx, 0x1c9fb919
push edi
jmp 0x11076ba
shr ebx, 6
sub ebx, 0x8b178977
jmp 0x1107bfc
add eax, dword [esp]
sub eax, 0x78d64727
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x5fe3600a
mov dword [esp], ebx
push edx
jmp 0x1107978
sti
push edx
mov dword [esp], 0x27ff20d3
jmp 0x11074f3
sub ecx, 0x63f79bf8
add ecx, 0x1df8c400
mov edi, dword [esp]
push edi
mov edi, esp
add edi, 4
jmp 0x1107aa7
push esi
mov esi, 0x777fdedd
add esi, 0x7eeac6b
jmp 0x1107430
push dword [esp]
pop ebx
jmp 0x1107ef4
mov dword [esp], ebx
mov ebx, esp
push ebp
mov ebp, 4
jmp 0x11074aa
push ebx
jmp 0x1107334
mov dword [esp], ebx
mov ebx, 0x2effc807
push eax
mov eax, 0x67f77adb
shl eax, 5
jmp 0x11079a1
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
add dword [esp], 0x3bdbdea6
pop ebp
jmp 0x1107ce5
push edi
not dword [esp]
pop edi
add edi, 1
push eax
mov eax, 0x3fec5f78
add edi, 0x4f6f84f4
add edi, eax
sub edi, 0x4f6f84f4
pop eax
dec edi
sub edi, 0x93f35589
push esi
mov esi, 0x1df8c400
sub ecx, esi
jmp 0x11072b5
mov ecx, eax
pop eax
add eax, ecx
pop ecx
push ebx
jmp 0x11075f5
mov ebx, esi
pop esi
add edi, ebx
pop ebx
pop eax
push 0x76f2f4d4
mov esi, dword [esp]
jmp 0x110752b
push 0x144ccce4
push esp
pop dword [esp]
jmp 0x110790f
mov esi, dword [esp]
push ebx
mov ebx, esp
jmp 0x1107a8d
mov ebx, 0x25db5f19
jmp 0x11072da
mov edi, 0x4ffb43bc
sub edi, 0x6e390b94
jmp 0x1107d9e
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
jmp 0x1107f6f
add ebx, ebp
pop ebp
jmp 0x11075dc
mov dword [esp], 0x7f9bb900
jmp 0x1107656
xor ecx, ebp
pop ebp
add ebx, ecx
jmp 0x11076b4
push edi
jmp 0x110738e
mov esi, 0x2fffe8f4
add esi, 0x71ff4beb
xor esi, 0x9c55ad6f
jmp 0x1107c04
shr dword [esp], 6
sub esp, 4
mov dword [esp], edx
push ecx
mov ecx, 0x5f7ea778
xor ecx, 0x7bc7aec4
jmp 0x1107a2b
and eax, 0x79ec868b
or eax, 0x7fbb4b07
add eax, 0x80003475
jmp 0x1107d05
add esp, 4
xor esi, edi
jmp 0x1107a5a
push ebx
jmp 0x1107beb
sub ebx, 0x39f9599a
add ebx, edi
push ecx
jmp 0x1107f9c
inc edi
push eax
mov eax, 0x2fbeedab
shr eax, 2
add eax, 0x62ede297
jmp 0x1107681
push ecx
jmp 0x1107b78
mov eax, ebp
mov edx, eax
pop eax
mov ebp, dword [esp]
add esp, 4
push 0x5a432150
jmp 0x1107999
add edi, esi
pop esi
add ecx, 0x37f77b39
add ecx, edi
sub ecx, 0x37f77b39
pop edi
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
push dword [eax]
push dword [esp]
pop ecx
jmp 0x1107fac
add ebx, 4
jmp 0x11078be
mov dword [esp], edi
push edx
mov edx, 4
mov edi, edx
pop edx
jmp 0x110753e
mov ebx, 0x5cd3b051
jmp 0x1107665
mov esi, 0x7f9dd1bf
sub eax, esi
pop esi
mov edx, dword [esp]
jmp 0x1107592
add eax, 0x7bbf5b41
add eax, 0x78d64727
jmp 0x11072e8
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
jmp 0x1107aaf
push edi
jmp 0x1107835
xor dword [esp], 0x7eaf2956
pop ebx
jmp 0x1107e74
push edi
push esi
push 0x7fc36bfc
pop esi
neg esi
jmp 0x1108035
or ebx, 0x7ffd2951
or ebx, 0x7dbdfe31
xor ebx, 0x5fca40de
shl ebx, 2
not ebx
jmp 0x1107e64
or edi, eax
pop eax
inc edi
or edi, 0x3fcfd08c
or edi, 0x7f9b4ee0
add edi, 0xe417bcfa
add ecx, edi
pop edi
add ecx, edi
jmp 0x1107317
pop ecx
jmp 0x11077a6
push ebx
push eax
mov eax, 0x7e6ef06f
xor eax, 0x1009c8a3
mov ebx, eax
pop eax
mov edi, ebx
pop ebx
push ebp
mov ebp, 0x93d21120
add edi, ebp
mov ebp, dword [esp]
add esp, 4
sub ebx, edi
jmp 0x11079b8
add esp, 4
jmp 0x1107b35
mov dword [esp], ebx
mov dword [esp], edx
push ebp
mov ebp, 0x29b9dcdf
push eax
jmp 0x1107598
mov ebx, 0x5ff7e4c7
add eax, ebx
pop ebx
sub eax, 0x7fb7b89c
pop ebx
push edi
mov dword [esp], esi
mov dword [esp], 0x74ddcd13
neg dword [esp]
add dword [esp], 0xeffcfbd5
or dword [esp], 0x7ff710e6
jmp 0x1107f44
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x1107309
mov dword [esp], 0x4f0e5085
jmp 0x11076fd
push ebx
jmp 0x1107716
dec edi
shl edi, 4
xor edi, 0xdb1cc2a5
xor esi, edi
jmp 0x1107a9f
mov esi, 0x12dd9ca1
jmp 0x1107855
pop eax
add eax, 4
add eax, 4
push ebx
mov dword [esp], eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
sti
jmp 0x110760f
mov edi, 0x6bdf216e
mov ecx, edi
mov edi, dword [esp]
jmp 0x1107b09
push ebx
mov ebx, 0x146b419a
jmp 0x1107c0b
pop ebp
jmp 0x1107d57
dec esi
add esi, 0x5bff544f
sub esi, 0x2fc5095c
or eax, esi
pop esi
xor eax, 0x7fe51271
push 0x66e8ae3b
mov dword [esp], esi
mov esi, 0x76fb9d88
sub esi, 0x3725e120
xor eax, esi
pop esi
mov edi, eax
pop eax
sub eax, edi
pop edi
add eax, 0x2fee7091
sub eax, esi
jmp 0x1107963
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x1107990
push dword [esp]
pop ebp
add esp, 4
push 0x666a2a44
mov dword [esp], ebp
push ecx
jmp 0x1107634
add esp, 4
jmp 0x1107dc8
xor eax, 0x6baeb899
jmp 0x1107415
xchg dword [esp], edi
pop esp
jmp 0x1107bbd
sub ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x1107fe5
push ebx
mov ebx, 4
add dword [esp + 4], ebx
pop ebx
pop ecx
push 0x6973afd6
mov dword [esp], edi
mov edi, 0x757fe3ff
not edi
add edi, 0xffffffff
push esi
push ebx
jmp 0x110745d
not ebx
push ecx
mov ecx, 0xeb37c4b0
xor ebx, ecx
pop ecx
sub esp, 4
mov dword [esp], esi
jmp 0x1107ff8
sub eax, 0x2fee7091
add eax, 0x7fcf51ca
sub eax, 0x3ecb2666
pop esi
jmp 0x1107c62
mov edx, 0x7bbf5b41
push edx
push ebx
mov ebx, 0x3fda91c0
xor dword [esp + 4], ebx
mov ebx, dword [esp]
jmp 0x11078e5
shr dword [esp], 7
jmp 0x11074c8
mov dword [esp], edx
jmp 0x1107a7d
dec eax
sub eax, 0x2dce15d0
sub eax, 0x61c67add
add ebx, eax
pop eax
not ebx
neg ebx
jmp 0x1107e4d
pop edi
xor ebp, ebx
pop ebx
add ebp, 0x916ba760
xor ecx, ebp
jmp 0x11078cd
mov dword [esp], edi
mov dword [esp], esi
jmp 0x11075ff
add ecx, 0x3fd73ac4
or ecx, 0x5b7816aa
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x79fdbb67
not ebp
xor ebp, 0x6fbfda12
sub ebp, 0xe9bc8a33
sub ecx, ebp
pop ebp
mov edx, ecx
jmp 0x1107ae2
pop edi
push ebp
mov ebp, 0xcfa7326
add ebp, 0x31d0b340
add eax, ebp
pop ebp
push 0x6a418e61
mov dword [esp], edi
push eax
push 0x7ff3ca0a
jmp 0x1107b6e
mov edx, 0x3bbb3792
and edx, 0x5e7978f7
jmp 0x1107f84
add ebx, 4
jmp 0x11073a4
mov edi, dword [esp]
jmp 0x1107f39
add edi, 4
jmp 0x11078fa
push ebx
mov dword [esp], edx
jmp 0x1107844
pop ecx
or dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
sub dword [esp], 0x54aa1f23
mov dword [esp], ebx
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], 0x57eb81ea
jmp 0x1107538
add esp, 4
push ebx
sub esp, 4
mov dword [esp], edx
push edi
mov dword [esp], 0x7793cb85
pop edx
neg edx
not edx
add edx, 0x553eeb3
push edi
mov dword [esp], edx
jmp 0x110763a
add esp, 4
add eax, edx
push ebx
jmp 0x1107a20
pop eax
shr eax, 3
push esi
jmp 0x11077e2
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add ecx, eax
pop eax
push edx
mov dword [esp], ebp
mov ebp, 0x2eff4d9b
and ebp, 0x7ced6657
inc ebp
push edx
mov edx, 0x4a161ca8
xor ebp, edx
pop edx
shr ebp, 8
push edx
mov edx, 0
add edx, 0x3daa99b0
sub edx, ebp
push esi
jmp 0x11074ce
push ebp
mov ebp, 4
jmp 0x1107bf5
mov ebx, 0xe80e5064
jmp 0x1107c30
add ecx, ebp
jmp 0x1107e7f
mov esi, ebx
pop ebx
jmp 0x11075b0
sub edx, esi
jmp 0x1107452
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edi
mov eax, dword [esp]
add esp, 4
push dword [esp]
jmp 0x1107c21
sub dword [esp + 4], ebx
pop ebx
not dword [esp]
inc dword [esp]
push esi
mov esi, 0x3bff0255
xor dword [esp + 4], esi
pop esi
xor dword [esp], 0xa3dc037c
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], 0x1b45
push dword [esp]
jmp 0x1107345
push ebx
mov dword [esp], eax
jmp 0x110761e
mov ebx, dword [esp]
add esp, 4
push ecx
sub dword [esp], 0x1fd979f4
pop ebp
add ebp, 0x1fd979f4
pop ecx
add ecx, ebp
pop ebp
sub esp, 4
mov dword [esp], eax
jmp 0x110802d
sub ebp, 0x3bdbdea6
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebx
jmp 0x11072c9
add ecx, eax
pop eax
add ecx, 4
push edx
mov dword [esp], ecx
push dword [esp + 4]
push dword [esp]
pop ecx
add esp, 4
pop dword [esp]
mov esp, dword [esp]
push 0x60a4a0a6
mov dword [esp], eax
push edi
mov dword [esp], esp
add dword [esp], 4
jmp 0x11077ec
pop edi
jmp 0x110735e
shr edi, 8
neg edi
jmp 0x11077d1
push dword [esp]
pop ebx
add esp, 4
push esi
jmp 0x1107dd8
mov esi, 0x3fda91c0
xor ebx, esi
jmp 0x1107ded
pop esi
mov edx, dword [esp]
add esp, 4
push ecx
push eax
mov eax, 0x6b42eed2
neg eax
and eax, 0x7f1b64c6
neg eax
inc eax
neg eax
jmp 0x11078f0
sub ebx, 0x8ec6bd43
xor dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
pop dword [eax]
push esi
push edi
jmp 0x1107fd1
add ebx, 0xe0cee384
sub eax, ebx
pop ebx
sub eax, ebx
jmp 0x11077be
xor ebx, 0x7eaf2956
jmp 0x1107f13
pop ebp
xchg dword [esp], ecx
pop esp
push eax
mov eax, 0xbbf053c
shr eax, 2
push ebx
jmp 0x11077b2
add esi, 0x5bcbe0c8
xor esi, 0x3930bc16
mov edi, esi
push dword [esp]
pop esi
add esp, 4
or dword [esp + 4], edi
mov edi, dword [esp]
jmp 0x1107fc9
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
jmp 0x1107903
pop edx
dec ebx
jmp 0x1107f94
add esp, 4
jmp 0x1107e93
xor dword [esp], 0x7dfa77b2
sub dword [esp], 0xc2d79254
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
jmp 0x1107f5e
add esp, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
jmp 0x1107477
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0x11075e4
add edx, 0x6564a12d
add eax, edx
push dword [esp]
jmp 0x1107ff0
shr ebx, 6
jmp 0x110794a
push ebp
mov ebp, 0x4af7d3dc
mov ecx, 0x730e8a46
jmp 0x11074be
push edx
mov dword [esp], ecx
push esp
pop ecx
push edi
mov edi, 0x7adfbcbf
sub edi, 0x9e26969
add edi, 0x3afbb694
jmp 0x11073bc
sub esp, 4
jmp 0x110734e
push 0x400fa298
mov dword [esp], eax
mov eax, 0x76f2f4d5
push eax
push ebp
jmp 0x110803b
mov dword [esp], ebx
mov dword [esp], ecx
jmp 0x1107444
mov edx, dword [esp]
jmp 0x11076f2
mov esi, 0x7bd11460
sub ecx, 0x3fdf4f90
sub ecx, esi
add ecx, 0x3fdf4f90
pop esi
sub ecx, 0x73efe3f5
jmp 0x1108017
sub ecx, ebx
push esi
mov esi, 0x73efe3f5
add ecx, esi
pop esi
add ecx, 0x7bd11460
jmp 0x1107ca6
mov dword [esp], edi
jmp 0x11074b2
push edi
jmp 0x1107467
mov ebp, 0x7f6e8b48
jmp 0x1108045
sub dword [esp + 4], ebp
jmp 0x110784f