Function at 0x427330
Capabilities:
Check os version
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x47a26b
mov eax, dword fs:[0]
push eax
sub esp, 0xc88
mov eax, dword [0x49e280]
xor eax, esp
mov dword [esp + 0xc80], eax
push ebx
push esi
push edi
mov eax, dword [0x49e280]
xor eax, esp
push eax
lea eax, [esp + 0xc98]
mov dword fs:[0], eax
xor edi, edi
push 0x40
lea eax, [esp + 0x4c]
push edi
push eax
mov esi, ecx
mov dword [esp + 0x20], edi
call fcn.0045acf0
add esp, 0xc
push 0x1fe
xor eax, eax
lea edx, [esp + 0x92]
xor ecx, ecx
push edi
push edx
mov dword [esp + 0x50], 0x44
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov word [esp + 0x98], cx
call fcn.0045acf0
add esp, 0xc
push 0x1fe
lea ecx, [esp + 0x692]
xor eax, eax
push edi
push ecx
mov word [esp + 0x698], ax
call fcn.0045acf0
mov eax, dword [ebp + 8]
add esp, 0xc
cmp eax, 7
ja case.default.0x4273ee
jmp dword [eax*4 + 0x427718]
call fcn.004279c0
test eax, eax
je 0x427410
push str.LMconfig.exe__config_Hide
lea edx, [esp + 0x90]
push edx
jmp 0x427508
push str.LMconfig.exe__config_Show
lea eax, [esp + 0x90]
push eax
jmp 0x427508
push str.LMconfig.exe__config_Show
jmp 0x427500
push edi
call fcn.00427800
add esp, 4
test eax, eax
jne 0x4273fe
mov eax, 1
jmp 0x4276f1
push edi
call fcn.00427800
add esp, 4
jmp 0x4276f1
cmp esi, edi
je 0x4274a1
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x4274a1
push str.LMconfig.exe__config_IsBtn
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov edi, dword [sym.imp.SzUPFUtl.dll_SzUPFUtl_SetProfileStringW]
push 0x487adc
push str.Cmd_ConfigBtn_Result
push str.Panel
call edi
add esp, 0xc
push esi
push str.Cmd_ConfigBtn
push str.Panel
call edi
add esp, 0xc
xor edi, edi
jmp case.default.0x4273ee
xor eax, eax
jmp 0x4276f1
push str.LMconfig.exe__config_Minimize
lea edx, [esp + 0x90]
push edx
jmp 0x427508
push str.LMconfig.exe
lea ecx, [esp + 0x2c]
call fcn.00401dc0
lea eax, [esp + 0x28]
push edi
push eax
mov dword [esp + 0xca8], edi
call fcn.00450760
add esp, 8
test eax, eax
lea ecx, [esp + 0x28]
sete bl
mov dword [esp + 0xca0], 0xffffffff
call fcn.00401820
test bl, bl
jne 0x427439
push str.LMconfig.exe__Destroy
lea ecx, [esp + 0x90]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0x690]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.LManager
push str.Dritek
lea ecx, [esp + 0x694]
push ecx
lea edx, [esp + 0x98]
push 0x487ae0
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
call fcn.0044f460
cmp eax, 6
jg 0x42759a
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x48]
push ecx
push edi
push edi
push 0x200
push edi
push edi
push edi
lea edx, [esp + 0xac]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4276ed
mov eax, dword [esp + 0x1c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [esp + 0x18]
push ecx
call esi
jmp 0x4276d8
push 0x3fe
lea eax, [esp + 0x892]
xor edx, edx
push edi
push eax
mov word [esp + 0x898], dx
call fcn.0045acf0
add esp, 0xc
push 0x3fe
lea edx, [esp + 0x292]
xor ecx, ecx
push edi
push edx
mov word [esp + 0x298], cx
call fcn.0045acf0
add esp, 0xc
lea eax, [esp + 0x8c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathGetArgsW]
cmp eax, edi
je 0x42762c
lea ecx, [esp + 0x88c]
mov esi, eax
mov eax, ecx
mov edx, 0x200
sub esi, eax
mov edi, edi
lea eax, [edx + 0x7ffffdfe]
test eax, eax
je 0x427620
movzx eax, word [esi + ecx]
cmp ax, di
je 0x427620
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x427600
jmp 0x427624
cmp edx, edi
jne 0x427627
sub ecx, 2
xor edx, edx
mov word [ecx], dx
lea eax, [esp + 0x8c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveArgsW]
lea eax, [esp + 0x28c]
mov esi, 0x4a3fd8
mov ecx, eax
mov edx, 0x200
sub esi, ecx
nop
lea ecx, [edx + 0x7ffffdfe]
test ecx, ecx
je 0x427670
movzx ecx, word [esi + eax]
cmp cx, di
je 0x427670
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x427650
jmp 0x427674
cmp edx, edi
jne 0x427677
sub eax, 2
xor edx, edx
mov word [eax], dx
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x290]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [esp + 0x28c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathQuoteSpacesW]
cmp word [esp + 0x88c], di
je 0x4276c8
push 0x487b00
lea edi, [esp + 0x290]
call fcn.004246e0
lea eax, [esp + 0x88c]
push eax
call fcn.004246e0
lea ecx, [esp + 0x28c]
call fcn.0043cef0
test eax, eax
je 0x4276ed
cmp dword [ebp + 8], 7
mov dword [esp + 0x14], 1
jne 0x4276ed
call fcn.00427740
jmp 0x4276f1
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc80]
xor ecx, esp
call fcn.00457c10
mov esp, ebp
pop ebp
ret