Function at 0x42b70f
Capabilities:
Check os version

Disassembly:
mov eax, 0x484b04
call fcn.0046694c
sub esp, 0x524
push ebx
push esi
push edi
mov esi, ecx
call fcn.0042a56b
test eax, eax
je 0x42bbc7
mov ecx, esi
call fcn.0042b379
and dword [ebp - 0x20], 0
mov dword [esi + 0x600], eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esi + 0x164]
movzx eax, word [eax + 0x48]
push eax
call fcn.00434caa
pop ecx
lea eax, [ebp - 0xd]
pop ecx
push 1
lea ecx, [ebp - 0x48]
pop ebx
push ebx
push eax
push 0x4a24f8
call fcn.00401884
mov eax, dword [eax + 8]
and dword [ebp - 4], 0
test eax, eax
jne 0x42b77d
mov eax, 0x48a67c
push dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x164]
mov dword [ebp - 0x14], 0x2df
movzx eax, word [eax + 0x48]
push eax
lea eax, [ebp - 0x18]
push 0x4a2970
push eax
call fcn.0040a559
or dword [ebp - 4], 0xffffffff
add esp, 0x10
lea ecx, [ebp - 0x48]
call fcn.00401093
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
test eax, eax
jne 0x42b806
mov ecx, dword [esi + 0x164]
mov ax, word [ecx + 0x48]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00417e6f
mov ecx, dword [ebp - 0x74]
mov eax, 0x4b8
test ecx, ecx
mov dword [ebp - 4], ebx
mov dword [0x4aac18], eax
jne 0x42b7ec
mov ecx, 0x48a6d0
push ecx
push eax
call fcn.00433c12
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x7c]
call fcn.00402438
jmp 0x42bbc7
mov eax, dword [esi + 0x164]
cmp dword [eax + 0x5c], ebx
jbe 0x42bba5
mov eax, dword [esi + 0x14]
cmp eax, 5
je 0x42bba5
mov edi, 0x400
lea eax, [ebp - 0x530]
push edi
push 0
push eax
call fcn.00467000
lea eax, [ebp - 0x530]
push 0xa
push eax
mov eax, dword [esi + 0x164]
movzx eax, word [eax + 0x48]
push eax
call fcn.00468c5a
add esp, 0x18
mov ecx, 0x4a9f18
call fcn.00401a14
push eax
lea eax, [ebp - 0x530]
push eax
call fcn.00467130
pop ecx
lea eax, [ebp - 0xd]
pop ecx
push ebx
push eax
lea eax, [ebp - 0x530]
lea ecx, [ebp - 0x48]
push eax
call fcn.00401884
mov ecx, eax
mov dword [ebp - 4], 2
call fcn.00401a14
push eax
mov ecx, esi
call fcn.0042bde5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x14], eax
call fcn.00401093
cmp dword [ebp - 0x14], 0
je 0x42b9cd
cmp byte [0x4a870c], 0
jne 0x42b8bf
cmp byte [0x4ab288], 0
je 0x42b933
lea eax, [ebp - 0xd]
push ebx
push eax
push 0x4a24f8
lea ecx, [ebp - 0x48]
call fcn.00401884
mov eax, 0x4a2934
mov dword [ebp - 4], 3
mov ecx, eax
mov dword [ebp - 0x7c], 0x48a660
test ecx, ecx
mov dword [ebp - 0x5c], 0x48a658
jne 0x42b8f6
mov eax, 0x4a8be0
lea ecx, [ebp - 0xe]
push 0
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.004011a9
lea eax, [ebp - 0x48]
push 0x2f3
push eax
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 4
call fcn.004772d0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 3
call fcn.00401093
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00401093
lea eax, [ebp - 0x54]
push edi
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
mov dword [ebp - 0x14], 6
call fcn.0040ae9b
mov ecx, eax
call fcn.00402f01
mov edi, eax
mov ecx, dword [edi]
mov dword [ebp - 4], 5
call fcn.004042dd
lea ecx, [ebp - 0x530]
mov dword [edi + 8], eax
push ecx
push 0x4aa818
push eax
call fcn.004343f6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.00403013
mov ecx, esi
call fcn.0042c2aa
test eax, eax
je 0x42bbc7
push 6
lea eax, [ebp - 0x48]
pop edi
mov ecx, esi
push edi
push eax
call fcn.0040a44d
push ebx
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.004042dd
push eax
push 0x4a2924
mov ecx, esi
call fcn.0042c82f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402438
mov dword [esi + 0x3c], ebx
jmp 0x42bba5
cmp byte [esi + 0x160], 0
je 0x42ba68
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x48]
call fcn.00402e7f
lea eax, [ebp - 0xd]
push ebx
push eax
lea eax, [esi + 0x55]
push eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 4], 7
call fcn.00402e7f
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
push ecx
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
call fcn.0040fc26
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
call fcn.00402438
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.00402438
lea eax, [ebp - 0x7c]
push 0
push eax
push 6
mov ecx, esi
call fcn.0040a3d0
push ebx
lea ecx, [ebp - 0x7c]
call fcn.004042dd
push eax
push 0x4a2924
mov ecx, esi
call fcn.0042c82f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
jmp 0x42bafe
mov ecx, esi
call fcn.0042bd45
test al, al
je 0x42bacd
mov ecx, esi
call fcn.0042bcdc
test al, al
je 0x42bacd
lea eax, [ebp - 0x54]
push edi
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
mov dword [ebp - 0x14], 6
call fcn.0040ae9b
mov ecx, eax
call fcn.00402f01
mov edi, eax
mov ecx, dword [edi]
mov dword [ebp - 4], 0xc
call fcn.004042dd
mov dword [edi + 8], eax
push eax
lea eax, [ebp - 0x530]
mov ecx, esi
push eax
call fcn.0042bc27
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.00403013
jmp 0x42bb03
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x48]
call fcn.00402e7f
lea eax, [ebp - 0x48]
push 0
push eax
push 6
mov ecx, esi
mov dword [ebp - 4], 0xd
call fcn.0040a3d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00402438
cmp byte [0x4a870c], 0
jne 0x42bb19
cmp byte [0x4ab288], 0
je 0x42bba5
lea eax, [ebp - 0x1a]
push ebx
push eax
push 0x4a24f8
lea ecx, [ebp - 0xcc]
call fcn.00401884
mov eax, 0x4a28c0
mov dword [ebp - 4], 0xe
mov ecx, eax
mov dword [ebp - 0xa4], 0x48a660
test ecx, ecx
mov dword [ebp - 0x84], 0x48a658
jne 0x42bb59
mov eax, 0x4a8be0
lea ecx, [ebp - 0x19]
push 0
push ecx
push eax
lea ecx, [ebp - 0xa4]
call fcn.004011a9
lea eax, [ebp - 0xcc]
push 0x31a
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0xf
call fcn.004772d0
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xe
call fcn.00401093
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00401093
mov ecx, esi
call fcn.0042b4c9
test eax, eax
je 0x42bbc7
push 0x44f
mov ecx, esi
call fcn.0042bd6e
mov ecx, esi
call fcn.0042c6fb
test eax, eax
jne 0x42bbcb
xor eax, eax
jmp 0x42bc18
push esi
push 0x451
lea ecx, [ebp - 0x108]
call fcn.00418245
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0x10
call fcn.0041b55a
test eax, eax
jne 0x42bbf6
xor ebx, ebx
jmp 0x42bc07
mov eax, dword [ebp - 0xfc]
mov dword [esi + 0x608], eax
call fcn.004172fd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.0041829a
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret