Function at 0x134b0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
mov eax, dword [0x1c208]
xor eax, ebp
mov dword [ebp - 0xc], eax
xor eax, eax
mov word [ebp - 8], ax
xor ecx, ecx
mov dword [ebp - 6], ecx
mov word [ebp - 2], cx
mov dword [ebp - 0x130], 0x11c
push 0x118
push 0
lea edx, [ebp - 0x12c]
push edx
call sub.ntoskrnl.exe_memset
add esp, 0xc
mov dword [ebp - 0x150], 0
mov eax, 0x52
mov word [ebp - 0x14c], ax
mov ecx, 0x74
mov word [ebp - 0x14a], cx
mov edx, 0x6c
mov word [ebp - 0x148], dx
mov eax, 0x47
mov word [ebp - 0x146], ax
mov ecx, 0x65
mov word [ebp - 0x144], cx
mov edx, 0x74
mov word [ebp - 0x142], dx
mov eax, 0x56
mov word [ebp - 0x140], ax
mov ecx, 0x65
mov word [ebp - 0x13e], cx
mov edx, 0x72
mov word [ebp - 0x13c], dx
mov eax, 0x73
mov word [ebp - 0x13a], ax
mov ecx, 0x69
mov word [ebp - 0x138], cx
mov edx, 0x6f
mov word [ebp - 0x136], dx
mov eax, 0x6e
mov word [ebp - 0x134], ax
xor ecx, ecx
mov word [ebp - 0x132], cx
cmp dword [0x1c628], 0
je 0x135b4
mov eax, dword [0x1c628]
jmp 0x13809
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 8]
push eax
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea ecx, [ebp - 8]
push ecx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x135ed
lea edx, [ebp - 0x130]
push edx
call dword [ebp - 0x150]
jmp 0x1360a
push 0
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x128]
push ecx
lea edx, [ebp - 0x12c]
push edx
call dword [sym.imp.ntoskrnl.exe_PsGetVersion]
cmp dword [ebp - 0x12c], 5
jne 0x13656
cmp dword [ebp - 0x128], 1
jne 0x13656
movzx eax, word [ebp - 0x1c]
cmp eax, 2
jne 0x13639
mov dword [0x1c628], 2
mov eax, dword [0x1c628]
jmp 0x13809
movzx ecx, word [ebp - 0x1c]
cmp ecx, 3
jne 0x13656
mov dword [0x1c628], 3
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x12c], 5
jne 0x136be
cmp dword [ebp - 0x128], 2
jne 0x136be
movzx edx, word [ebp - 0x1c]
test edx, edx
jne 0x13684
mov dword [0x1c628], 4
mov eax, dword [0x1c628]
jmp 0x13809
movzx eax, word [ebp - 0x1c]
cmp eax, 1
jne 0x136a1
mov dword [0x1c628], 5
mov eax, dword [0x1c628]
jmp 0x13809
movzx ecx, word [ebp - 0x1c]
cmp ecx, 2
jne 0x136be
mov dword [0x1c628], 6
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x12c], 6
jne 0x1374e
cmp dword [ebp - 0x128], 0
jne 0x1374e
cmp dword [ebp - 0x124], 0x1770
jne 0x136fc
movzx edx, word [ebp - 0x1c]
test edx, edx
jne 0x136fc
mov dword [0x1c628], 7
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x124], 0x1771
jne 0x13725
movzx eax, word [ebp - 0x1c]
cmp eax, 1
jne 0x13725
mov dword [0x1c628], 8
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x124], 0x1772
jne 0x1374e
movzx ecx, word [ebp - 0x1c]
cmp ecx, 2
jne 0x1374e
mov dword [0x1c628], 9
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x12c], 6
jne 0x137cb
cmp dword [ebp - 0x128], 1
jne 0x137cb
cmp dword [ebp - 0x124], 0x1b58
jne 0x13780
mov dword [0x1c628], 0xa
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x124], 0x1db0
jne 0x137a5
movzx edx, word [ebp - 0x1c]
test edx, edx
jne 0x137a5
mov dword [0x1c628], 0xb
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x124], 0x1db1
jne 0x137cb
movzx eax, word [ebp - 0x1c]
cmp eax, 1
jne 0x137cb
mov dword [0x1c628], 0xc
mov eax, dword [0x1c628]
jmp 0x13809
cmp dword [ebp - 0x12c], 6
jne 0x137fa
cmp dword [ebp - 0x128], 2
jne 0x137fa
cmp dword [ebp - 0x124], 0x23f0
jne 0x137fa
mov dword [0x1c628], 0xd
mov eax, dword [0x1c628]
jmp 0x13809
mov dword [0x1c628], 1
mov eax, dword [0x1c628]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0001ac4e
mov esp, ebp
pop ebp
ret