Function at 0x42a21e
Capabilities:
Check os version

Disassembly:
push 0x350
mov eax, 0x5a3bd8
call fcn.0043a209
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x330]
xor edi, edi
mov dword [ebp - 0x338], esi
push 0x118
push edi
mov dword [ebp - 0x354], edi
push eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x35c], esi
mov dword [ebp - 0x334], 0x11c
call fcn.00446360
add esp, 0xc
lea eax, [ebp - 0x334]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
call fcn.0043d2b8
test al, al
je 0x42a29b
in eax, dx
adc dword [ebx + 0x52], ebp
in eax, 0x59
wait
mov dh, 0xde
lcall 0x9b23, 0xe597a01d
sub al, 0x53
mov es, word [ecx + ebx*8]
mov esp, 0xf1cc3292
invalid
push 0x5a6864
mov ecx, esi
call fcn.00403820
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x350], eax
movzx eax, byte [ebp - 0x21a]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 4], edi
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x344], edi
mov dword [ebp - 0x348], edi
mov dword [ebp - 0x340], edi
mov dword [ebp - 0x34c], eax
call fcn.0043d56a
test al, al
je 0x42a317
out 0xfd, al
invalid
add byte [edi], dl
imul ebx, dword [eax - 0x448c0b2f], 0x7c9f738b
inc edi
add ch, bh
aas
jmp 0x647b7f78
call fcn.0043d2fd
test al, al
je 0x42a338
add dword [edx - 0x5d], 0xc1854c08
mov bl, 0x7e
sub dl, byte [esi - 0x362bf66b]
jl 0x42a2b6
les ebx, [esi]
pop ebx
fadd qword [edx + 0x4ae80eb8]
xor byte [ecx], al
add byte [eax + eax*8 + 0x577a1874], al
call fcn.0043d387
test al, al
je 0x42a359
jp 0x42a39a
push 0xcc8dd41a
inc esp
push cs
cmpsb byte [esi], byte es:[edi]
movsb byte es:[di], byte [si]
pop ss
jl 0x42a35c
push ecx
loop 0x42a3d0
aam 0x73
mov edi, 0x68d33883
dec esp
cmpsb byte [esi], byte es:[edi]
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
pop edx
add bh, bh
adc eax, sym.imp.KERNEL32.dll_LoadLibraryW
mov esi, eax
test esi, esi
je 0x42a3a5
push str.RtlGetNtVersionNumbers
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x42a39e
lea ecx, [ebp - 0x340]
push ecx
lea ecx, [ebp - 0x348]
push ecx
lea ecx, [ebp - 0x344]
push ecx
call eax
movzx eax, word [ebp - 0x340]
mov dword [ebp - 0x340], eax
sar ah, 0xff
call dword [esi - 1]
adc eax, sym.imp.KERNEL32.dll_FreeLibrary
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.0043d15f
test al, al
je 0x42a3be
inc ecx
or ch, byte [ecx - 0x71815bc8]
retf
mov eax, dword [ebp - 0x350]
cmp eax, 5
jne 0x42a3f0
mov eax, dword [ebp - 0x34c]
test eax, eax
je 0x42a4c9
ror byte [edi], 0x84
add byte [eax], al
add byte [ebx + 0xa7501f8], al
cmp eax, 1
jne 0x42a3e6
mov esi, str.WindowsXP
jmp 0x42a4b5
mov esi, str.WindowsServer2003
jmp 0x42a4b5
cmp eax, 6
jne 0x42a4c9
mov eax, dword [ebp - 0x34c]
sub eax, 0
je 0x42a4a2
sub eax, 1
je 0x42a49b
mov ebx, dword [ebp - 0x33c]
sub eax, 1
jne 0x42a4cf
cmp ebx, 0x1ebb
je 0x42a43b
lea eax, [ebx - 0x1ee6]
cmp eax, 0x25
jbe 0x42a43b
cmp ebx, 0x1f13
jne 0x42a442
mov esi, str.Windows8
jmp 0x42a485
cmp dword [ebp - 0x344], 0xa
jne 0x42a46e
cmp dword [ebp - 0x348], 0
jne 0x42a4cf
cmp dword [ebp - 0x340], 0x4e20
jae 0x42a467
mov esi, str.Windows10
jmp 0x42a485
mov esi, str.Windows11
jmp 0x42a485
cmp dword [ebp - 0x344], 6
jne 0x42a4cf
cmp dword [ebp - 0x348], 3
jne 0x42a4cf
mov esi, str.Windows8.1
push esi
call fcn.004549d7
pop ecx
mov ecx, dword [ebp - 0x338]
push eax
push esi
call fcn.004020c0
jmp 0x42a4cf
mov esi, str.Windows7
jmp 0x42a4b5
cmp dword [ebp - 0x358], 1
mov esi, str.WindowsVista
je 0x42a4b5
mov esi, str.WindowsServer2008
push esi
call fcn.004549d7
pop ecx
mov ecx, dword [ebp - 0x338]
push eax
push esi
call fcn.004020c0
mov ebx, dword [ebp - 0x33c]
call fcn.0043d15f
test al, al
je 0x42a4e8
and byte [edi + 0x638980e7], 0xe8
inc edx
jno 0x42a4cf
in eax, dx
test al, 0x25
cwde
and al, byte [ebx + ecx*4 - 0x43]
enter 0xfffffffffffffffc, 0xffffffffffffffff
mov edi, dword [ebp - 0x338]
mov ecx, edi
push 0x5a6864
call fcn.00425671
test eax, eax
jne 0x42a55c
push 0x208
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00446360
mov eax, dword [ebp - 0x350]
push ebx
push dword [ebp - 0x34c]
push eax
lea eax, [ebp - 0x218]
push str.Windows_d._d._d
push eax
call fcn.00408fc0
add esp, 0x20
cmp word [ebp - 0x218], 0
jne 0x42a540
xor eax, eax
jmp 0x42a54d
lea eax, [ebp - 0x218]
push eax
call fcn.004549d7
pop ecx
test eax, ebp
std
invalid
push eax
lea eax, [ebp - 0x218]
mov ecx, edi
push eax
call fcn.004020c0
call fcn.0043d5f4
test al, al
je 0x42a582
invalid
call fcn.0043d708
test al, al
je 0x42a5af
loopne 0x42a541
jno 0x42a60c
inc edi
out dx, al
fsubrp st(4)
add dword [eax], edx
cmpsb byte [esi], byte es:[edi]
stosd dword es:[edi], eax
pop esi
dec ebx
xchg ecx, eax
nop
into
cld
salc
pop esi
invalid
cmp dword [ebp + 0xc], 0
je 0x42a5df
cmp word [ebp - 0x320], 0
jne 0x42a5c3
xor eax, eax
jmp 0x42a5d0
lea eax, [ebp - 0x320]
push eax
call fcn.004549d7
pop ecx
push eax
lea eax, [ebp - 0x320]
mov ecx, edi
push eax
call fcn.004053e0
mov eax, edi
call fcn.0043a1c4
ret
invalid