Function at 0x42d62f
Capabilities:
Check os version

Disassembly:
mov eax, 0x4720d3
call fcn.004549fc
sub esp, 0x940
push ebx
push esi
push edi
mov esi, ecx
call fcn.0042b7e6
test eax, eax
je 0x42db88
mov ecx, esi
call fcn.0042d25f
and dword [ebp - 0x20], 0
mov dword [esi + 0xb04], eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esi + 0x268]
movzx eax, word [eax + 0x48]
push eax
call fcn.00437243
pop ecx
lea eax, [ebp - 0xd]
pop ecx
push 1
lea ecx, [ebp - 0x70]
pop ebx
push ebx
push eax
push 0x48e0e0
call fcn.00401889
mov eax, dword [eax + 8]
and dword [ebp - 4], 0
test eax, eax
mov edi, 0x4765fc
jne 0x42d69f
mov eax, edi
push dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x268]
mov dword [ebp - 0x14], 0x30a
movzx eax, word [eax + 0x48]
push eax
lea eax, [ebp - 0x18]
push 0x48e7d8
push eax
call fcn.0040a580
or dword [ebp - 4], 0xffffffff
add esp, 0x10
lea ecx, [ebp - 0x70]
call fcn.00401093
mov eax, dword [esi + 0x268]
push ebx
movzx eax, word [eax + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
test eax, eax
jne 0x42d731
mov ecx, dword [esi + 0x268]
mov ax, word [ecx + 0x48]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041820d
mov ecx, dword [ebp - 0x68]
mov eax, 0x4b8
test ecx, ecx
mov dword [ebp - 4], ebx
mov dword [0x498770], eax
jne 0x42d717
mov ecx, 0x476650
push ecx
push eax
call fcn.0043610b
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x70]
call fcn.00402424
jmp 0x42db88
mov eax, dword [esi + 0x268]
cmp dword [eax + 0x5c], ebx
jbe 0x42db66
mov eax, dword [esi + 0x14]
cmp eax, 5
je 0x42db66
mov ebx, 0x400
lea eax, [ebp - 0x94c]
push ebx
push 0
push eax
call fcn.004550b0
lea eax, [ebp - 0x94c]
push 0xa
push eax
mov eax, dword [esi + 0x268]
movzx eax, word [eax + 0x48]
push eax
call fcn.00456434
mov eax, dword [0x496e78]
add esp, 0x18
test eax, eax
jne 0x42d787
mov eax, edi
push eax
lea eax, [ebp - 0x94c]
push eax
call fcn.0045516f
lea eax, [ebp - 0x94c]
pop ecx
mov edi, 0x4765e0
pop ecx
test eax, eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x28], 0x4765d8
lea eax, [ebp - 0x94c]
jne 0x42d7ba
mov eax, 0x494ad8
lea ecx, [ebp - 0xd]
push 0
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.004011a9
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 2
call fcn.00401a19
push eax
mov ecx, esi
call fcn.0042ddb7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x14], eax
call fcn.00401093
cmp dword [ebp - 0x14], 0
je 0x42d91b
cmp byte [0x4946b8], 0
jne 0x42d80b
cmp byte [0x498ea8], 0
je 0x42d87c
lea eax, [ebp - 0xd]
push 1
push eax
push 0x48e0e0
lea ecx, [ebp - 0x70]
call fcn.00401889
mov eax, 0x48e79c
mov dword [ebp - 4], 3
mov ecx, eax
mov dword [ebp - 0x48], edi
test ecx, ecx
mov dword [ebp - 0x28], 0x4765d8
jne 0x42d83f
mov eax, 0x494ad8
lea ecx, [ebp - 0xe]
push 0
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.004011a9
lea eax, [ebp - 0x70]
push 0x31e
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 4
call fcn.004659d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.00401093
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.00401093
push 6
lea eax, [ebp - 0x7c]
pop edi
lea ecx, [esi + 4]
push ebx
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], edi
push eax
call fcn.0040aea8
mov ecx, eax
call fcn.00402dad
mov ecx, dword [eax]
mov dword [ebp - 4], 5
mov byte [eax + 4], 1
call fcn.00403dc2
mov eax, dword [eax]
lea ecx, [ebp - 0x94c]
push ecx
push 0x497f70
push eax
call fcn.0043691c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.00402ebf
mov ecx, esi
call fcn.0042e283
test eax, eax
je 0x42db88
lea eax, [ebp - 0x70]
push edi
push eax
mov ecx, esi
call fcn.0040a474
mov eax, dword [eax + 8]
mov dword [ebp - 4], edi
test eax, eax
jne 0x42d8f6
mov eax, 0x476650
push 1
mov ecx, esi
pop edi
push edi
push eax
push 0x48e77c
call fcn.0042e842
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.00402424
mov dword [esi + 0x3c], edi
jmp 0x42db66
cmp byte [esi + 0x264], 0
je 0x42d9ff
lea eax, [ebp - 0x94c]
mov edi, 0x476628
mov ebx, 0x476620
mov dword [ebp - 0xa4], edi
test eax, eax
mov dword [ebp - 0x84], ebx
lea eax, [ebp - 0x94c]
jne 0x42d953
mov eax, 0x494ad8
lea ecx, [ebp - 0xe]
push 0
push ecx
push eax
lea ecx, [ebp - 0xa4]
call fcn.00403cfd
lea eax, [esi + 0x56]
mov dword [ebp - 4], 7
test eax, eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x28], ebx
jne 0x42d97e
mov eax, 0x494ad8
lea ecx, [ebp - 0xd]
push 0
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00403cfd
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x48]
push eax
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 8
call fcn.0040faa8
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xb
call fcn.00402424
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xa
call fcn.00402424
lea eax, [ebp - 0x70]
push 0
push eax
push 6
mov ecx, esi
call fcn.0040a3f7
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x42d9da
mov eax, 0x476650
push 1
push eax
push 0x48e77c
mov ecx, esi
call fcn.0042e842
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.00402424
mov edi, 0x4765e0
jmp 0x42dac7
mov ecx, esi
call fcn.0042dd17
test al, al
je 0x42da64
mov ecx, esi
call fcn.0042dca9
test al, al
je 0x42da64
lea eax, [ebp - 0x7c]
push ebx
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
mov dword [ebp - 0x14], 6
call fcn.0040aea8
mov ecx, eax
call fcn.00402dad
mov ecx, dword [eax]
mov dword [ebp - 4], 0xc
mov byte [eax + 4], 1
call fcn.00403dc2
push dword [eax]
lea eax, [ebp - 0x94c]
mov ecx, esi
push eax
call fcn.0042dbeb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.00402ebf
jmp 0x42dac7
lea eax, [ebp - 0x94c]
mov dword [ebp - 0xa4], 0x476628
test eax, eax
mov dword [ebp - 0x84], 0x476620
lea eax, [ebp - 0x94c]
jne 0x42da8d
mov eax, 0x494ad8
lea ecx, [ebp - 0xe]
push 0
push ecx
push eax
lea ecx, [ebp - 0xa4]
call fcn.00403cfd
lea eax, [ebp - 0xa4]
push 0
push eax
push 6
mov ecx, esi
mov dword [ebp - 4], 0xd
call fcn.0040a3f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.00402424
cmp byte [0x4946b8], 0
jne 0x42dadd
cmp byte [0x498ea8], 0
je 0x42db66
lea eax, [ebp - 0x1a]
push 1
push eax
push 0x48e0e0
lea ecx, [ebp - 0xf4]
call fcn.00401889
mov eax, 0x48e718
mov dword [ebp - 4], 0xe
mov ecx, eax
mov dword [ebp - 0xcc], edi
test ecx, ecx
mov dword [ebp - 0xac], 0x4765d8
jne 0x42db1a
mov eax, 0x494ad8
lea ecx, [ebp - 0x19]
push 0
push ecx
push eax
lea ecx, [ebp - 0xcc]
call fcn.004011a9
lea eax, [ebp - 0xf4]
push 0x345
push eax
lea eax, [ebp - 0xcc]
push eax
mov byte [ebp - 4], 0xf
call fcn.004659d0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xe
call fcn.00401093
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.00401093
mov ecx, esi
call fcn.0042d3e8
test eax, eax
je 0x42db88
push 0x44f
mov ecx, esi
call fcn.0042dd40
mov ecx, esi
call fcn.0042e714
test eax, eax
jne 0x42db8c
xor eax, eax
jmp 0x42dbdc
push esi
push 0x451
lea ecx, [ebp - 0x14c]
call fcn.004185e0
lea ecx, [ebp - 0x14c]
mov dword [ebp - 4], 0x10
call fcn.0041bb9e
test eax, eax
jne 0x42dbb7
xor esi, esi
jmp 0x42dbcb
mov eax, dword [ebp - 0x140]
mov dword [esi + 0xb0c], eax
call fcn.0041765e
push 1
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14c]
call fcn.00418635
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret