Function at 0x42e6a0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40c
mov eax, dword [0x53d190]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
call fcn.00434740
mov dword [0x58a06c], eax
lea eax, [eax + eax*2]
shl eax, 3
push eax
call fcn.004c4a00
add esp, 4
mov dword [0x58a068], eax
test eax, eax
je 0x42e92a
xor esi, esi
cmp dword [0x58a06c], esi
jle 0x42e703
xor edi, edi
add eax, edi
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
inc esi
add edi, 0x18
cmp esi, dword [0x58a06c]
jge 0x42e703
mov eax, dword [0x58a068]
jmp 0x42e6e7
push 0x42b050
call fcn.00434780
push 0x42b020
call fcn.00434790
push 0x42b060
call fcn.00434750
push 0x42b080
call fcn.00434770
push 0x42b0a0
call fcn.00434760
add esp, 0x14
call fcn.004946b0
test eax, eax
je 0x42e92a
call fcn.0043a0a0
push eax
call fcn.00439190
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jne 0x42e8e4
shr eax, 8
cmp al, 1
ja 0x42e8ea
push 0
push 0
push 0x589de4
call dword [sym.imp.WINTRUST.dll_CryptCATAdminAcquireContext]
test eax, eax
jne 0x42e785
call dword [sym.imp.KERNEL32.dll_GetLastError]
call fcn.00439cd0
mov dword [0x589de0], eax
test eax, eax
je 0x42e93c
mov eax, dword [0x580c00]
xor esi, esi
test eax, eax
je 0x42e80e
xor ecx, ecx
push dword [ecx + 0x580c04]
mov dword [ebp - 0x40c], eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x408]
mov dword [ebp - 0x408], 0
push eax
call fcn.00437980
mov eax, dword [ebp - 0x408]
add esp, 0xc
test eax, eax
je 0x42e7fc
push eax
push dword [0x589de0]
call fcn.00439580
add esp, 8
cmp eax, 1
jge 0x42e7fc
push dword [ebp - 0x408]
call fcn.00437930
add esp, 4
inc esi
lea ecx, [esi*8]
mov eax, dword [ecx + 0x580c00]
test eax, eax
jne 0x42e7a4
push str.ROOT
push 0x20000
push 0
push 0
push 0xa
call dword [sym.imp.CRYPT32.dll_CertOpenStore]
mov edi, eax
test edi, edi
je 0x42e8cf
push 0
push edi
call dword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
mov esi, eax
test esi, esi
je 0x42e8c6
push dword [esi + 8]
lea eax, [esi + 4]
push eax
push 0
call fcn.00437980
add esp, 0xc
mov dword [ebp - 0x408], eax
lea ecx, [ebp - 0x404]
mov byte [ebp - 0x404], 0
push 0x400
push ecx
push eax
call fcn.0043a940
add esp, 4
push eax
call fcn.004374b0
lea eax, [ebp - 0x404]
push str.K7_Web_Proxy
push eax
call fcn.004be7b0
add esp, 0x14
test eax, eax
jne 0x42e8a6
push dword [ebp - 0x408]
push dword [0x589de0]
call fcn.00439580
add esp, 8
push dword [ebp - 0x408]
call fcn.00437930
add esp, 4
push esi
push edi
call dword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
mov esi, eax
test esi, esi
jne 0x42e841
push 0
push edi
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
pop edi
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004bcc56
mov esp, ebp
pop ebp
ret
jbe 0x42e76c
push str.CryptCATAdminAcquireContext2
push str.wintrust.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x42e785
push 0
push 0
push str.SHA256
push 0
push 0x589de4
mov ecx, esi
call dword [0x4e82f8]
call esi
jmp 0x42e77b
push str.OpenSSL_initialization_failed_n
call fcn.00428ad0
add esp, 4
call fcn.0042b0c0
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
xor ecx, ebp
pop esi
call fcn.004bcc56
mov esp, ebp
pop ebp
ret