Function at 0x427efb
Capabilities:
Check os version

Disassembly:
push 0x2e4
mov eax, 0x445260
call fcn.0040ec3e
mov esi, ecx
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x19c]
mov edi, dword [ebp + 8]
push 0x407e70
mov dword [ebp - 0x1a0], eax
call fcn.0040cd4c
and dword [ebp - 4], 0
lea ecx, [ebp - 0x1b8]
push 0x407f28
call fcn.0040cd4c
mov byte [ebp - 4], 1
mov ebx, 0x401220
push ebx
lea ecx, [ebp - 0x1d0]
call fcn.0040cd4c
mov byte [ebp - 4], 2
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x184]
call fcn.00426286
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1d0]
push 0
push 1
call fcn.0040d09c
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1b8]
push 0
push 1
call fcn.0040d09c
mov dword [ebp - 0x154], 2
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x14c]
mov eax, dword [esi + 4]
push 0x407f78
mov dword [ebp - 0x150], eax
call fcn.0040cd4c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1d0]
push 0x408030
call fcn.0040cd4c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
push ebx
call fcn.0040cd4c
mov byte [ebp - 4], 9
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x134]
call fcn.00426286
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1b8]
push 0
push 1
call fcn.0040d09c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1d0]
push 0
push 1
call fcn.0040d09c
mov dword [ebp - 0x104], 2
mov byte [ebp - 4], 0xd
mov eax, dword [esi + 4]
push 0x408080
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x100], eax
call fcn.0040cd4c
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1d0]
push 0x408138
call fcn.0040cd4c
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1b8]
push ebx
call fcn.0040cd4c
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0xe4]
call fcn.00426286
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1b8]
push 0
push 1
call fcn.0040d09c
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1d0]
push 0
push 1
call fcn.0040d09c
mov dword [ebp - 0xb4], 2
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xac]
mov eax, dword [esi + 4]
push 0x408188
mov dword [ebp - 0xb0], eax
call fcn.0040cd4c
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1d0]
push 0x408240
call fcn.0040cd4c
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1b8]
push ebx
call fcn.0040cd4c
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x94]
call fcn.00426286
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1b8]
push 0
push 1
call fcn.0040d09c
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1d0]
push 0
push 1
call fcn.0040d09c
mov dword [ebp - 0x64], 2
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x5c]
mov eax, dword [esi + 4]
mov dword [ebp - 0x60], eax
push 0x408290
call fcn.0040cd4c
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1d0]
push 0x408348
call fcn.0040cd4c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1b8]
push ebx
call fcn.0040cd4c
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x44]
call fcn.00426286
mov byte [ebp - 4], 0x20
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x1b8]
call fcn.0040d09c
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1d0]
push ebx
push 1
call fcn.0040d09c
mov dword [ebp - 0x14], 2
mov dword [ebp - 4], 0x22
mov esi, 0x11c
push esi
lea eax, [ebp - 0x2ec]
push ebx
push eax
call fcn.0040f870
add esp, 0xc
mov dword [ebp - 0x2ec], esi
lea eax, [ebp - 0x2ec]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x2e8], 6
jne 0x42825a
cmp dword [ebp - 0x2e4], 3
jne 0x42825a
call fcn.00426c3a
test al, al
jne 0x42825a
mov esi, 0x408398
push esi
call fcn.0040d4b7
pop ecx
push eax
push esi
lea ecx, [ebp - 0x16c]
call fcn.0040d2da
mov esi, 0x4083e8
push esi
call fcn.0040d4b7
pop ecx
push eax
push esi
lea ecx, [ebp - 0x7c]
call fcn.0040d2da
mov esi, 0x408438
push esi
call fcn.0040d4b7
pop ecx
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.0040d2da
mov ecx, edi
call fcn.00428780
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
lea eax, [ebp - 0x1a0]
push eax
push dword [edi + 4]
lea eax, [ebp - 0x2f0]
push eax
call fcn.00427ab7
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1a0]
push fcn.004262f1
push 5
push 0x50
push eax
call fcn.00429677
call fcn.0040ebde
ret 4