Function at 0x10180d20
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x29c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x284], eax
mov ecx, eax
mov dword [ebp - 0x280], ecx
mov ecx, dword fs:[0x30]
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], 0
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0xa4]
mov dword [eax], ecx
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx + 0xa8]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 8]
movzx ecx, word [ecx + 0xac]
mov dword [eax + 8], ecx
xor eax, eax
lea eax, [ebp - 0xc]
mov dword [esp], 6
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call fcn.10181c10
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x27c], 0x1aac1e1e
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x288], eax
nop dword [eax + eax]
sub eax, 0x81ef9f7c
je 0x10181a4c
jmp 0x10180dd0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x87a70d0c
je 0x101813e5
jmp 0x10180df0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x8e1c968b
je 0x101818dd
jmp 0x10180e10
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x9529196a
je 0x10181311
jmp 0x10180e30
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x988fdbee
je 0x1018134d
jmp 0x10180e50
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xa2ca1944
je 0x101819b1
jmp 0x10180e70
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xa837f2d0
je 0x101814e5
jmp 0x10180e90
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xbc1d3fc0
je 0x101819f7
jmp 0x10180eb0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xc26ca69b
je 0x101815a5
jmp 0x10180ed0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xc32458b9
je 0x10181505
jmp 0x10180ef0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xd71e8fd7
je 0x10181545
jmp 0x10180f10
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xe26661a7
je 0x10181625
jmp 0x10180f30
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xe88a40e0
je 0x1018180b
jmp 0x10180f50
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xeefe064a
je 0x101816f1
jmp 0x10180f70
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xf8a253e3
je 0x10181485
jmp 0x10180f90
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfa549af8
je 0x1018136b
jmp 0x10180fb0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfcf374b4
je 0x101813a7
jmp 0x10180fd0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfe56fea2
je 0x101816ab
jmp 0x10180ff0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0xfe865d6b
je 0x10181851
jmp 0x10181010
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x492e547
je 0x10181897
jmp 0x10181030
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x131a25f8
je 0x101814c5
jmp 0x10181050
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x1aac1e1e
je 0x101812d5
jmp 0x10181070
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2a357a50
je 0x101813c5
jmp 0x10181090
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x2f5dea7d
je 0x101812f3
jmp 0x101810b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x314e6bea
je 0x10181a06
jmp 0x101810d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x3505531b
je 0x10181405
jmp 0x101810f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x37269f58
je 0x101815e5
jmp 0x10181110
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x3763f8d4
je 0x10181737
jmp 0x10181130
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x393429b0
je 0x10181525
jmp 0x10181150
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x3ade592f
je 0x10181465
jmp 0x10181170
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x434d99fd
je 0x10181445
jmp 0x10181190
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x4ad470bd
je 0x10181925
jmp 0x101811b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x4ebb3850
je 0x1018177d
jmp 0x101811d0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x558ea838
je 0x1018132f
jmp 0x101811f0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x59d1fb1f
je 0x10181425
jmp 0x10181210
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x5f4fc5e5
je 0x101817c5
jmp 0x10181230
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x6692e791
je 0x10181665
jmp 0x10181250
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x6ef07dbe
je 0x101814a5
jmp 0x10181270
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x71a98db5
je 0x1018196b
jmp 0x10181290
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x74feaaaf
je 0x10181565
jmp 0x101812b0
mov eax, dword [ebp - 0x288]
nop word cs:[eax + eax]
sub eax, 0x7eb1cfb7
je 0x10181389
jmp 0x101812d0
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x2f5dea7d
mov ecx, 0x434d99fd
cmp edx, 0xa
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x9529196a
mov ecx, 0x87a70d0c
cmp edx, 0xe
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x558ea838
mov ecx, 0xfcf374b4
cmp edx, 0x11
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x988fdbee
mov ecx, 0xa2ca1944
cmp edx, 0x12
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xfa549af8
mov ecx, 0x7eb1cfb7
cmp edx, 0x19
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xbc1d3fc0
mov ecx, 0x8e1c968b
cmp edx, 0x19
cmove eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xbc1d3fc0
mov ecx, 0xeefe064a
cmp edx, 0x12
cmove eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x2a357a50
mov ecx, 0xe88a40e0
cmp edx, 0xf
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xbc1d3fc0
mov ecx, 0xfe865d6b
cmp edx, 0xf
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x3505531b
mov ecx, 0x59d1fb1f
cmp edx, 0xc
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x71a98db5
mov ecx, 0x4ebb3850
cmp edx, 0xd
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xfe56fea2
mov ecx, 0x5f4fc5e5
cmp edx, 0xb
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x3ade592f
mov ecx, 0x131a25f8
cmp edx, 6
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xf8a253e3
mov ecx, 0x6ef07dbe
cmp edx, 8
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x492e547
mov ecx, 0x3763f8d4
cmp edx, 9
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x4ad470bd
mov ecx, 0x6692e791
cmp edx, 7
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xa837f2d0
mov ecx, 0x393429b0
cmp edx, 3
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xc32458b9
mov ecx, 0xc26ca69b
cmp edx, 4
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xbc1d3fc0
mov ecx, 0xe26661a7
cmp edx, 4
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0x37269f58
mov ecx, 0xd71e8fd7
cmp edx, 2
cmovl eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
mov edx, dword [ebp - 4]
mov eax, 0xbc1d3fc0
mov ecx, 0x74feaaaf
cmp edx, 1
cmove eax, ecx
mov dword [ebp - 0x27c], eax
nop
jmp 0x10181a74
lea ecx, [ebp - 0x28]
lea eax, [ebp - 0x24]
mov dword [esp], eax
call fcn.10181c80
sub esp, 4
lea ecx, [ebp - 0x24]
call fcn.100b72a0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
nop dword [eax]
jmp 0x10181a74
lea ecx, [ebp - 0x48]
lea eax, [ebp - 0x44]
mov dword [esp], eax
call fcn.10181cc0
sub esp, 4
lea ecx, [ebp - 0x44]
call fcn.100860a0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
nop dword [eax]
jmp 0x10181a74
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x60]
mov dword [esp], eax
call fcn.10181d00
sub esp, 4
lea ecx, [ebp - 0x60]
call fcn.100aad60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
nop dword [eax]
jmp 0x10181a74
lea ecx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
mov dword [esp], eax
call fcn.10181d40
sub esp, 4
lea ecx, [ebp - 0x7c]
call fcn.100aad60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
nop dword [eax]
jmp 0x10181a74
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
mov dword [esp], eax
call fcn.10181d80
sub esp, 4
lea ecx, [ebp - 0x90]
call fcn.10082020
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0xac]
lea eax, [ebp - 0xa8]
mov dword [esp], eax
call fcn.10181dc0
sub esp, 4
lea ecx, [ebp - 0xa8]
call fcn.100a02a0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0xcc]
lea eax, [ebp - 0xc8]
mov dword [esp], eax
call fcn.10181e00
sub esp, 4
lea ecx, [ebp - 0xc8]
call fcn.100a8b20
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0xe4]
mov dword [esp], eax
call fcn.10181e40
sub esp, 4
lea ecx, [ebp - 0xe4]
call fcn.100aad60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0x118]
lea eax, [ebp - 0x114]
mov dword [esp], eax
call fcn.10181e80
sub esp, 4
lea ecx, [ebp - 0x114]
call fcn.10181ec0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
nop
jmp 0x10181a74
lea ecx, [ebp - 0x134]
lea eax, [ebp - 0x130]
mov dword [esp], eax
call fcn.101827b0
sub esp, 4
lea ecx, [ebp - 0x130]
call fcn.100aad60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0x164]
lea eax, [ebp - 0x160]
mov dword [esp], eax
call fcn.101827f0
sub esp, 4
lea ecx, [ebp - 0x160]
call fcn.10181ec0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov dword [esp], eax
call fcn.10182840
sub esp, 4
lea ecx, [ebp - 0x198]
call fcn.101844a0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0x1bc]
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
call fcn.10185650
sub esp, 4
lea ecx, [ebp - 0x1b8]
call fcn.100b9460
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0x1ec]
lea eax, [ebp - 0x1e8]
mov dword [esp], eax
call fcn.10185690
sub esp, 4
lea ecx, [ebp - 0x1e8]
call fcn.101856e0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
nop
jmp 0x10181a74
lea ecx, [ebp - 0x208]
lea eax, [ebp - 0x204]
mov dword [esp], eax
call fcn.10186370
sub esp, 4
lea ecx, [ebp - 0x204]
call fcn.100b72a0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0x238]
lea eax, [ebp - 0x234]
mov dword [esp], eax
call fcn.101863b0
sub esp, 4
lea ecx, [ebp - 0x234]
call fcn.100ae7e0
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
lea ecx, [ebp - 0x254]
lea eax, [ebp - 0x250]
mov dword [esp], eax
call fcn.101863f0
sub esp, 4
lea ecx, [ebp - 0x250]
call fcn.100aad60
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
mov dword [ebp - 0x27c], 0x314e6bea
jmp 0x10181a74
lea ecx, [ebp - 0x278]
lea eax, [ebp - 0x274]
mov dword [esp], eax
call fcn.10186430
sub esp, 4
lea ecx, [ebp - 0x274]
call fcn.100b2000
mov ecx, dword [ebp - 0x284]
add ecx, 0x10
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1017fad0
mov dword [ebp - 0x27c], 0x81ef9f7c
jmp 0x10181a74
mov eax, dword [ebp - 0x284]
add eax, 0xc
mov ecx, 0xffffffff
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10186480
mov eax, dword [ebp - 0x280]
add esp, 0x29c
pop ebp
ret
jmp 0x10180dac