Function at 0x4262d0
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4bceb2
push eax
mov eax, 0x4570
mov dword fs:[0], esp
call fcn.0049f790
lea eax, [esp + 4]
push eax
push 0x20019
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push 0x80000002
mov dword [esp + 0x3c], 0x100
call dword [0x4c600c]
test eax, eax
je 0x426333
mov eax, 6
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
mov eax, dword [esp + 4]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x4c]
push edx
push 0
push 0
push str.CSDVersion
push eax
call dword [0x4c6014]
test eax, eax
je 0x42637e
mov ecx, dword [esp + 4]
push ecx
call dword [0x4c6004]
mov eax, dword [esp + 0x4580]
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
lea edx, [esp + 0x48]
push esi
push edx
call fcn.0049efa2
add esp, 4
test eax, eax
jbe 0x4266c9
mov eax, dword [esp + 8]
push eax
call dword [0x4c6004]
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x34]
call fcn.00412ed0
push 1
push 0xffffffffffffffff
lea edx, [esp + 0xc]
push edx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x4588], 0
mov dword [esp + 0x10], 0x20
call fcn.00425320
cmp eax, 0xffffffff
jne 0x426483
lea eax, [esp + 4]
push eax
call fcn.004a060a
add esp, 4
call dword [0x4c60c4]
mov esi, eax
call fcn.004a0585
mov ecx, dword [eax]
mov edx, dword [esp + 4]
push str.._sourcePlatformFactory.cpp
push ecx
push esi
push 0x14a
push edx
lea ecx, [esp + 0x160]
call fcn.00422d60
push str.CPlatformType::detectWinNTSP___failed_to_parse_CSDVersion_registry_key
lea eax, [esp + 0x150]
push 0x40
push eax
mov byte [esp + 0x4588], 1
call fcn.00422ed0
lea ecx, [esp + 0x158]
add esp, 0xc
push ecx
call fcn.004108d0
mov ecx, eax
call fcn.0041aaa0
lea ecx, [esp + 0x14c]
mov byte [esp + 0x457c], 0
call fcn.00422ea0
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, dword [esp + 0x4584]
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
mov edx, dword [esp + 0x44]
sub edx, eax
push edx
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x3c]
call fcn.00425fd0
mov eax, dword [esp + 0x20]
test eax, eax
mov byte [esp + 0x457c], 2
jne 0x42655e
lea ecx, [esp + 4]
push ecx
call fcn.004a060a
add esp, 4
call dword [0x4c60c4]
mov esi, eax
call fcn.004a0585
mov edx, dword [eax]
mov eax, dword [esp + 4]
push str.._sourcePlatformFactory.cpp
push edx
push esi
push 0x151
push eax
lea ecx, [esp + 0x160]
call fcn.00422d60
push str.CPlatformType::detectWinNTSP___failed_to_find_sp_number_while_parsing_CSDVersion_registry_key
lea ecx, [esp + 0x150]
push 0x40
push ecx
mov byte [esp + 0x4588], 3
call fcn.00422ed0
lea edx, [esp + 0x158]
add esp, 0xc
push edx
call fcn.004108d0
mov ecx, eax
call fcn.0041aaa0
lea ecx, [esp + 0x14c]
mov byte [esp + 0x457c], 2
call fcn.00422ea0
lea ecx, [esp + 0xc]
call fcn.00455e80
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, dword [esp + 0x4584]
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
mov esi, dword [esp + 0x4584]
cmp esi, 6
je 0x426616
cmp esi, 0xa
je 0x42659f
lea ecx, [esp + 0xc]
call fcn.00455e80
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, esi
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
cmp dword [esp + 0x24], 8
mov eax, dword [esp + 0x10]
jae 0x4265ae
lea eax, [esp + 0x10]
push eax
call fcn.0049f93c
add esp, 4
sub eax, 2
lea ecx, [esp + 0xc]
je 0x4265eb
call fcn.00455e80
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, 0xa
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
call fcn.00455e80
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, 0xb
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
cmp dword [esp + 0x24], 8
mov eax, dword [esp + 0x10]
jae 0x426625
lea eax, [esp + 0x10]
push eax
call fcn.0049f93c
add esp, 4
test eax, eax
jle 0x42669a
cmp eax, 2
jle 0x42666b
cmp eax, 3
jne 0x42669a
lea ecx, [esp + 0xc]
call fcn.00455e80
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, 7
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
lea ecx, [esp + 0xc]
call fcn.00455e80
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, 6
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
lea ecx, [esp + 0xc]
call fcn.00455e80
lea ecx, [esp + 0x30]
call fcn.00455e80
mov eax, 8
pop esi
mov ecx, dword [esp + 0x4570]
mov dword fs:[0], ecx
add esp, 0x457c
ret 4
lea eax, [esp + 4]
push edi
push eax
call fcn.004a060a
mov esi, dword [0x4c60c4]
add esp, 4
call esi
mov edi, eax
call fcn.004a0585
mov ecx, dword [eax]
mov edx, dword [esp + 8]
push str.._sourcePlatformFactory.cpp
push ecx
push edi
push 0x180
push edx
lea ecx, [esp + 0x164]
call fcn.00422d60
push str.CPlatformType::detectWinNTSP___CSDVersion_registry_key_is_empty
lea eax, [esp + 0x154]
push 0x40
push eax
mov dword [esp + 0x458c], 4
call fcn.00422ed0
lea ecx, [esp + 0x15c]
add esp, 0xc
push ecx
call fcn.004108d0
mov ecx, eax
call fcn.0041aaa0
lea ecx, [esp + 0x150]
mov dword [esp + 0x4580], 0xffffffff
call fcn.00422ea0
lea edx, [esp + 0x2c]
push edx
call fcn.004a060a
add esp, 4
call esi
mov esi, eax
call fcn.004a0585
mov eax, dword [eax]
mov ecx, dword [esp + 0x2c]
push str.._sourcePlatformFactory.cpp
push eax
push esi
push 0x184
push ecx
lea ecx, [esp + 0x2378]
call fcn.00422d60
push 0x184
push str.._sourcePlatformFactory.cpp
push 0x4ca218
push str.dok_assert_______s____s:_d_
lea edx, [esp + 0x2374]
push 0x100
push edx
mov dword [esp + 0x4598], 5
call fcn.00422ed0
lea eax, [esp + 0x237c]
add esp, 0x18
push eax
call fcn.004108d0
mov ecx, eax
call fcn.0041aaa0
lea ecx, [esp + 0x2364]
mov dword [esp + 0x4580], 0xffffffff
call fcn.00422ea0
mov ecx, dword [esp + 0x4578]
pop edi
xor eax, eax
pop esi
mov dword fs:[0], ecx
add esp, 0x457c
ret 4