Function at 0x434bb0
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x45483e
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
mov eax, dword [0x467334]
xor eax, esp
mov dword [esp + 0xa0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x467334]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xcc]
mov esi, ebp
mov dword [esp + 0x18], ebp
call fcn.00433df0
call fcn.0043c831
cdq
mov ecx, 0x14
idiv ecx
mov esi, edx
inc esi
call fcn.0043c831
cdq
idiv esi
cmp edx, esi
jg 0x434c22
mov eax, esi
cdq
idiv esi
test edx, edx
je 0x434c27
call fcn.00432210
mov edi, ebp
call fcn.004290c0
lea edi, [ebp + 0x1c]
call fcn.004290c0
lea edi, [ebp + 0x38]
call fcn.004290c0
lea edi, [ebp + 0x54]
call fcn.004290c0
lea eax, [esp + 0x17]
mov byte [esp + 0x17], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x434c52
sub eax, edx
je 0x434c62
call fcn.004322c0
lea edi, [ebp + 0x70]
call fcn.004290c0
call fcn.00403c90
add ebp, 0x90
mov dword [esp + 0xc4], 0xffffffff
mov edi, dword [ebp + 0x10]
cmp dword [ebp + 0xc], edi
jbe 0x434c8d
call fcn.0043c74a
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp]
cmp esi, dword [ebp + 0x10]
jbe 0x434c9d
call fcn.0043c74a
mov eax, dword [ebp]
push edi
push ebx
push esi
push eax
lea ebx, [esp + 0x2c]
mov esi, ebp
call fcn.00405530
lea edx, [esp + 0x40]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], 0
mov byte [edi], 0
mov eax, dword [esi + 0x18]
mov ebx, pe_nt_image_headers32
mov dword [esp + 0x3c], esp
cmp eax, ebx
jb 0x434ce1
mov ecx, dword [edi]
jmp 0x434ce3
mov ecx, edi
cmp ecx, str.kLI_
ja 0x434d1c
cmp eax, ebx
jb 0x434cf3
mov ecx, dword [edi]
jmp 0x434cf5
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str.kLI_
jbe 0x434d1c
cmp eax, ebx
jb 0x434d08
mov edi, dword [edi]
push 0xa
mov eax, str.kLI_
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x434d5e
cmp eax, 0xa
jae 0x434d2e
mov ecx, dword [esi + 0x14]
push ecx
push 0xa
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebx
jb 0x434d39
mov eax, dword [edi]
jmp 0x434d3b
mov eax, edi
push 0xa
push str.kLI_
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 0xa
cmp dword [esi + 0x18], ebx
jb 0x434d5a
mov edi, dword [edi]
mov byte [edi + 0xa], 0
lea esi, [esp + 0x7c]
call fcn.00401900
push eax
mov dword [esp + 0xcc], 2
call fcn.00401c70
mov byte [esp + 0xc4], 3
cmp dword [eax + 0x18], ebx
jb 0x434d8a
mov ecx, dword [eax + 4]
jmp 0x434d8d
lea ecx, [eax + 4]
mov eax, ecx
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x434da7
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x2c]
call fcn.004033f0
lea edx, [esp + 0x24]
push edx
mov ebx, ebp
mov byte [esp + 0xc8], 4
call fcn.004297d0
mov esi, pe_nt_image_headers32
cmp dword [esp + 0x3c], esi
jb 0x434de7
mov eax, dword [esp + 0x28]
push eax
call fcn.0043c853
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
cmp dword [esp + 0x58], esi
jb 0x434e0d
mov ecx, dword [esp + 0x44]
push ecx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x5c]
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
call fcn.00429050
mov esi, dword [esp + 0x18]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 4
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb0], ebx
call edi
lea edx, [esp + 0x18]
cmp eax, edx
jle 0x434e53
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
jmp 0x434e5f
push 0xe
call edi
lea ecx, [esp + 0x18]
cmp eax, ecx
jle 0x434e64
call fcn.00432390
push ebx
mov dword [esi + 0xbc], ebx
call fcn.0043cb47
add esp, 4
call fcn.00417b40
mov dword [esi + 0xb4], ebx
mov dword [esi + 0xb8], ebx
mov dword [esi + 0x8c], ebx
mov dword [esi + 0xc0], ebx
mov dword [esi + 0xc4], ebx
xor eax, eax
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.0043c2d9
add esp, 0xb4
ret 4