Function at 0x42bd9f
Capabilities:
Check os version

Disassembly:
mov eax, 0x485544
call fcn.00466fdc
sub esp, 0x524
push ebx
push esi
push edi
mov esi, ecx
call fcn.0042abfb
test eax, eax
je 0x42c262
mov ecx, esi
call fcn.0042ba09
and dword [ebp - 0x20], 0
mov dword [esi + 0x600], eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esi + 0x164]
movzx eax, word [eax + 0x48]
push eax
call fcn.00435345
pop ecx
lea eax, [ebp - 0xd]
pop ecx
push 1
lea ecx, [ebp - 0x48]
pop ebx
push ebx
push eax
push 0x4a3768
call fcn.00401884
mov eax, dword [eax + 8]
and dword [ebp - 4], 0
test eax, eax
jne 0x42be0d
mov eax, 0x48b67c
push dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x164]
mov dword [ebp - 0x14], 0x2e8
movzx eax, word [eax + 0x48]
push eax
lea eax, [ebp - 0x18]
push 0x4a3be0
push eax
call fcn.0040a552
or dword [ebp - 4], 0xffffffff
add esp, 0x10
lea ecx, [ebp - 0x48]
call fcn.00401093
mov eax, dword [esi + 0x164]
push ebx
movzx eax, word [eax + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
test eax, eax
jne 0x42bea1
mov esi, dword [esi + 0x164]
mov ecx, esi
mov ax, word [esi + 0x48]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00417e61
mov ecx, dword [ebp - 0x74]
mov eax, 0x4b8
test ecx, ecx
mov dword [ebp - 4], ebx
mov dword [0x4abe88], eax
jne 0x42be87
mov ecx, 0x48b6d0
push ecx
push eax
call fcn.004342ad
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x7c]
call fcn.00402438
jmp 0x42c262
mov eax, dword [esi + 0x164]
cmp dword [eax + 0x5c], ebx
jbe 0x42c240
mov eax, dword [esi + 0x14]
cmp eax, 5
je 0x42c240
mov edi, 0x400
lea eax, [ebp - 0x530]
push edi
push 0
push eax
call fcn.00467690
lea eax, [ebp - 0x530]
push 0xa
push eax
mov eax, dword [esi + 0x164]
movzx eax, word [eax + 0x48]
push eax
call fcn.004692ea
add esp, 0x18
mov ecx, 0x4ab188
call fcn.00401a14
push eax
lea eax, [ebp - 0x530]
push eax
call fcn.004677c0
pop ecx
lea eax, [ebp - 0xd]
pop ecx
push ebx
push eax
lea eax, [ebp - 0x530]
lea ecx, [ebp - 0x48]
push eax
call fcn.00401884
mov ecx, eax
mov dword [ebp - 4], 2
call fcn.00401a14
push eax
mov ecx, esi
call fcn.0042c480
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x14], eax
call fcn.00401093
cmp dword [ebp - 0x14], 0
je 0x42c068
cmp byte [0x4a997c], 0
jne 0x42bf5a
cmp byte [0x4ac4f8], 0
je 0x42bfce
lea eax, [ebp - 0xd]
push ebx
push eax
push 0x4a3768
lea ecx, [ebp - 0x48]
call fcn.00401884
mov eax, 0x4a3ba4
mov dword [ebp - 4], 3
mov ecx, eax
mov dword [ebp - 0x7c], 0x48b660
test ecx, ecx
mov dword [ebp - 0x5c], 0x48b658
jne 0x42bf91
mov eax, 0x4a9e50
lea ecx, [ebp - 0xe]
push 0
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.004011a9
lea eax, [ebp - 0x48]
push 0x2fc
push eax
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 4
call fcn.00477a40
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 3
call fcn.00401093
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00401093
lea eax, [ebp - 0x54]
push edi
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
mov dword [ebp - 0x14], 6
call fcn.0040ae94
mov ecx, eax
call fcn.00402f01
mov edi, eax
mov ecx, dword [edi]
mov dword [ebp - 4], 5
call fcn.004042dd
lea ecx, [ebp - 0x530]
mov dword [edi + 8], eax
push ecx
push 0x4aba88
push eax
call fcn.00434a91
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.00403013
mov ecx, esi
call fcn.0042c945
test eax, eax
je 0x42c262
push 6
lea eax, [ebp - 0x48]
pop edi
mov ecx, esi
push edi
push eax
call fcn.0040a446
push ebx
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.004042dd
push eax
push 0x4a3b94
mov ecx, esi
call fcn.0042ceca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402438
mov dword [esi + 0x3c], ebx
jmp 0x42c240
cmp byte [esi + 0x160], 0
je 0x42c103
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x48]
call fcn.00402e7f
lea eax, [ebp - 0xd]
push ebx
push eax
lea eax, [esi + 0x55]
push eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 4], 7
call fcn.00402e7f
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
push ecx
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
call fcn.0040fc1f
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
call fcn.00402438
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.00402438
lea eax, [ebp - 0x7c]
push 0
push eax
push 6
mov ecx, esi
call fcn.0040a3c9
push ebx
lea ecx, [ebp - 0x7c]
call fcn.004042dd
push eax
push 0x4a3b94
mov ecx, esi
call fcn.0042ceca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
jmp 0x42c199
mov ecx, esi
call fcn.0042c3e0
test al, al
je 0x42c168
mov ecx, esi
call fcn.0042c377
test al, al
je 0x42c168
lea eax, [ebp - 0x54]
push edi
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
mov dword [ebp - 0x14], 6
call fcn.0040ae94
mov ecx, eax
call fcn.00402f01
mov edi, eax
mov ecx, dword [edi]
mov dword [ebp - 4], 0xc
call fcn.004042dd
mov dword [edi + 8], eax
push eax
lea eax, [ebp - 0x530]
mov ecx, esi
push eax
call fcn.0042c2c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.00403013
jmp 0x42c19e
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x48]
call fcn.00402e7f
lea eax, [ebp - 0x48]
push 0
push eax
push 6
mov ecx, esi
mov dword [ebp - 4], 0xd
call fcn.0040a3c9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402438
cmp byte [0x4a997c], 0
jne 0x42c1b4
cmp byte [0x4ac4f8], 0
je 0x42c240
lea eax, [ebp - 0x1a]
push ebx
push eax
push 0x4a3768
lea ecx, [ebp - 0xcc]
call fcn.00401884
mov eax, 0x4a3b30
mov dword [ebp - 4], 0xe
mov ecx, eax
mov dword [ebp - 0xa4], 0x48b660
test ecx, ecx
mov dword [ebp - 0x84], 0x48b658
jne 0x42c1f4
mov eax, 0x4a9e50
lea ecx, [ebp - 0x19]
push 0
push ecx
push eax
lea ecx, [ebp - 0xa4]
call fcn.004011a9
lea eax, [ebp - 0xcc]
push 0x323
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0xf
call fcn.00477a40
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xe
call fcn.00401093
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00401093
mov ecx, esi
call fcn.0042bb59
test eax, eax
je 0x42c262
push 0x44f
mov ecx, esi
call fcn.0042c409
mov ecx, esi
call fcn.0042cd96
test eax, eax
jne 0x42c266
xor eax, eax
jmp 0x42c2b3
push esi
push 0x451
lea ecx, [ebp - 0x108]
call fcn.00418237
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0x10
call fcn.0041b54c
test eax, eax
jne 0x42c291
xor ebx, ebx
jmp 0x42c2a2
mov eax, dword [ebp - 0xfc]
mov dword [esi + 0x608], eax
call fcn.004172ef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.0041828c
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret