Function at 0x467569
Capabilities:
Check os version
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
mov eax, dword [0x498070]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x24
push 0
lea eax, [ebp - 0x224]
push eax
call fcn.0043bad0
add esp, 0xc
push 0x11c
push 0
lea eax, [ebp - 0x120]
push eax
call fcn.0043bad0
add esp, 0xc
mov dword [ebp - 0x120], 0x11c
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jne 0x4675d2
xor al, al
jmp 0x468302
push str.GetNativeSystemInfo
push 0x485cd4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
je 0x467607
lea eax, [ebp - 0x224]
push eax
call dword [ebp - 0x1cc]
jmp 0x467614
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp dword [ebp - 0x110], 2
jne 0x467626
cmp dword [ebp - 0x11c], 4
ja 0x46762d
xor al, al
jmp 0x468302
mov eax, dword [ebp + 8]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x467650
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x12c], eax
jmp 0x467657
and dword [ebp - 0x12c], 0
push str.Microsoft
push dword [ebp - 0x12c]
call fcn.0041e358
pop ecx
pop ecx
cmp dword [ebp - 0x11c], 6
jne case.0x4677e6.4
cmp dword [ebp - 0x118], 0
jne 0x4676f0
movzx eax, byte [ebp - 6]
cmp eax, 1
jne 0x4676bd
cmp dword [ebp - 0x124], 0
je 0x4676a2
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x130], eax
jmp 0x4676a9
and dword [ebp - 0x130], 0
push 0x485d08
push dword [ebp - 0x130]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x4676f0
cmp dword [ebp - 0x124], 0
je 0x4676d7
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x134], eax
jmp 0x4676de
and dword [ebp - 0x134], 0
push str.Windows_Server_2008
push dword [ebp - 0x134]
call fcn.0042bc64
pop ecx
pop ecx
cmp dword [ebp - 0x118], 1
jne 0x46776a
movzx eax, byte [ebp - 6]
cmp eax, 1
jne 0x467737
cmp dword [ebp - 0x124], 0
je 0x46771c
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x138], eax
jmp 0x467723
and dword [ebp - 0x138], 0
push 0x485d30
push dword [ebp - 0x138]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x46776a
cmp dword [ebp - 0x124], 0
je 0x467751
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x13c], eax
jmp 0x467758
and dword [ebp - 0x13c], 0
push str.Windows_Server_2008_R2
push dword [ebp - 0x13c]
call fcn.0042bc64
pop ecx
pop ecx
push str.GetProductInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x1fc]
push eax
push 0
push 0
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
call dword [ebp - 0x1f8]
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x19
ja 0x4677ed
cmp dword [ebp - 0x128], 0x19
je 0x467b0b
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x11
ja case.0x4677e6.4
mov eax, dword [ebp - 0x128]
jmp dword [eax*4 + 0x468311]
cmp dword [ebp - 0x128], 0x30
je 0x467833
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467815
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x140], eax
jmp 0x46781c
and dword [ebp - 0x140], 0
push str.Ultimate_Edition
push dword [ebp - 0x140]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x46784d
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x144], eax
jmp 0x467854
and dword [ebp - 0x144], 0
push 0x485d68
push dword [ebp - 0x144]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467885
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x148], eax
jmp 0x46788c
and dword [ebp - 0x148], 0
push str.Home_Premium_Edition
push dword [ebp - 0x148]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x4678bd
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x14c], eax
jmp 0x4678c4
and dword [ebp - 0x14c], 0
push str.Home_Basic_Edition
push dword [ebp - 0x14c]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x4678f5
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x150], eax
jmp 0x4678fc
and dword [ebp - 0x150], 0
push 0x485dcc
push dword [ebp - 0x150]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x46792d
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x154], eax
jmp 0x467934
and dword [ebp - 0x154], 0
push str.Business_Edition
push dword [ebp - 0x154]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467965
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x158], eax
jmp 0x46796c
and dword [ebp - 0x158], 0
push str.Starter_Edition
push dword [ebp - 0x158]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x46799d
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x15c], eax
jmp 0x4679a4
and dword [ebp - 0x15c], 0
push str.Cluster_Server_Edition
push dword [ebp - 0x15c]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x4679d5
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x160], eax
jmp 0x4679dc
and dword [ebp - 0x160], 0
push 0x485e30
push dword [ebp - 0x160]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467a0d
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x164], eax
jmp 0x467a14
and dword [ebp - 0x164], 0
push str.Datacenter_Edition__core_installation_
push dword [ebp - 0x164]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467a45
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x168], eax
jmp 0x467a4c
and dword [ebp - 0x168], 0
push 0x485e6c
push dword [ebp - 0x168]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467a7d
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x16c], eax
jmp 0x467a84
and dword [ebp - 0x16c], 0
push str.Enterprise_Edition__core_installation_
push dword [ebp - 0x16c]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467ab5
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x170], eax
jmp 0x467abc
and dword [ebp - 0x170], 0
push 0x485e98
push dword [ebp - 0x170]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467aed
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x174], eax
jmp 0x467af4
and dword [ebp - 0x174], 0
push str.Small_Business_Server
push dword [ebp - 0x174]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467b25
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x178], eax
jmp 0x467b2c
and dword [ebp - 0x178], 0
push str.Small_Business_Server_Premium_Edition
push dword [ebp - 0x178]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467b5d
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x17c], eax
jmp 0x467b64
and dword [ebp - 0x17c], 0
push 0x485ec8
push dword [ebp - 0x17c]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467b92
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x180], eax
jmp 0x467b99
and dword [ebp - 0x180], 0
push str.Standard_Edition__core_installation_
push dword [ebp - 0x180]
call fcn.0042bc64
pop ecx
pop ecx
jmp case.0x4677e6.4
cmp dword [ebp - 0x124], 0
je 0x467bc7
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x184], eax
jmp 0x467bce
and dword [ebp - 0x184], 0
push str.Web_Server_Edition
push dword [ebp - 0x184]
call fcn.0042bc64
pop ecx
pop ecx
cmp dword [ebp - 0x11c], 5
jne 0x467fd9
cmp dword [ebp - 0x118], 2
jne 0x467fd9
push 0x59
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x467c3e
cmp dword [ebp - 0x124], 0
je 0x467c20
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x188], eax
jmp 0x467c27
and dword [ebp - 0x188], 0
push str.Windows_Server_2003_R2_
push dword [ebp - 0x188]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467d3e
movzx eax, word [ebp - 8]
and eax, 0x2000
je 0x467c81
cmp dword [ebp - 0x124], 0
je 0x467c63
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x18c], eax
jmp 0x467c6a
and dword [ebp - 0x18c], 0
push str.Windows_Storage_Server_2003
push dword [ebp - 0x18c]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467d3e
movzx eax, word [ebp - 8]
and eax, 0x8000
je 0x467cc1
cmp dword [ebp - 0x124], 0
je 0x467ca6
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x190], eax
jmp 0x467cad
and dword [ebp - 0x190], 0
push str.Windows_Home_Server
push dword [ebp - 0x190]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467d3e
movzx eax, byte [ebp - 6]
cmp eax, 1
jne 0x467d0b
movzx eax, word [ebp - 0x224]
cmp eax, 9
jne 0x467d0b
cmp dword [ebp - 0x124], 0
je 0x467cf0
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x194], eax
jmp 0x467cf7
and dword [ebp - 0x194], 0
push str.Windows_XP_Professional_x64_Edition
push dword [ebp - 0x194]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467d3e
cmp dword [ebp - 0x124], 0
je 0x467d25
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x198], eax
jmp 0x467d2c
and dword [ebp - 0x198], 0
push str.Windows_Server_2003_
push dword [ebp - 0x198]
call fcn.0042bc64
pop ecx
pop ecx
movzx eax, byte [ebp - 6]
cmp eax, 1
je 0x467fd9
movzx eax, word [ebp - 0x224]
cmp eax, 6
jne 0x467ddc
movzx eax, word [ebp - 8]
and eax, 0x80
je 0x467d9b
cmp dword [ebp - 0x124], 0
je 0x467d80
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x19c], eax
jmp 0x467d87
and dword [ebp - 0x19c], 0
push str.Datacenter_Edition_for_Itanium_based_Systems
push dword [ebp - 0x19c]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467dd7
movzx eax, word [ebp - 8]
and eax, 2
je 0x467dd7
cmp dword [ebp - 0x124], 0
je 0x467dbe
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1a0], eax
jmp 0x467dc5
and dword [ebp - 0x1a0], 0
push str.Enterprise_Edition_for_Itanium_based_Systems
push dword [ebp - 0x1a0]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467fd9
movzx eax, word [ebp - 0x224]
cmp eax, 9
jne 0x467ea2
movzx eax, word [ebp - 8]
and eax, 0x80
je 0x467e2c
cmp dword [ebp - 0x124], 0
je 0x467e11
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1a4], eax
jmp 0x467e18
and dword [ebp - 0x1a4], 0
push str.Datacenter_x64_Edition
push dword [ebp - 0x1a4]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467e9d
movzx eax, word [ebp - 8]
and eax, 2
je 0x467e6a
cmp dword [ebp - 0x124], 0
je 0x467e4f
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1a8], eax
jmp 0x467e56
and dword [ebp - 0x1a8], 0
push str.Enterprise_x64_Edition
push dword [ebp - 0x1a8]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467e9d
cmp dword [ebp - 0x124], 0
je 0x467e84
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1ac], eax
jmp 0x467e8b
and dword [ebp - 0x1ac], 0
push str.Standard_x64_Edition
push dword [ebp - 0x1ac]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467fd9
movzx eax, word [ebp - 8]
and eax, 0x4000
je 0x467ee5
cmp dword [ebp - 0x124], 0
je 0x467ec7
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1b0], eax
jmp 0x467ece
and dword [ebp - 0x1b0], 0
push str.Compute_Cluster_Edition
push dword [ebp - 0x1b0]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467fd9
movzx eax, word [ebp - 8]
and eax, 0x80
je 0x467f28
cmp dword [ebp - 0x124], 0
je 0x467f0a
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1b4], eax
jmp 0x467f11
and dword [ebp - 0x1b4], 0
push str.Datacenter_Edition
push dword [ebp - 0x1b4]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467fd9
movzx eax, word [ebp - 8]
and eax, 2
je 0x467f66
cmp dword [ebp - 0x124], 0
je 0x467f4b
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1b8], eax
jmp 0x467f52
and dword [ebp - 0x1b8], 0
push str.Enterprise_Edition
push dword [ebp - 0x1b8]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467fd9
movzx eax, word [ebp - 8]
and eax, 0x400
je 0x467fa6
cmp dword [ebp - 0x124], 0
je 0x467f8b
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1bc], eax
jmp 0x467f92
and dword [ebp - 0x1bc], 0
push str.Web_Edition
push dword [ebp - 0x1bc]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x467fd9
cmp dword [ebp - 0x124], 0
je 0x467fc0
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1c0], eax
jmp 0x467fc7
and dword [ebp - 0x1c0], 0
push str.Standard_Edition
push dword [ebp - 0x1c0]
call fcn.0042bc64
pop ecx
pop ecx
cmp dword [ebp - 0x11c], 5
jne 0x468099
cmp dword [ebp - 0x118], 1
jne 0x468099
cmp dword [ebp - 0x124], 0
je 0x46800d
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1c4], eax
jmp 0x468014
and dword [ebp - 0x1c4], 0
push 0x4860bc
push dword [ebp - 0x1c4]
call fcn.0042bc64
pop ecx
pop ecx
movzx eax, word [ebp - 8]
and eax, 0x200
je 0x468066
cmp dword [ebp - 0x124], 0
je 0x46804b
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1c8], eax
jmp 0x468052
and dword [ebp - 0x1c8], 0
push str.Home_Edition
push dword [ebp - 0x1c8]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x468099
cmp dword [ebp - 0x124], 0
je 0x468080
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1e8], eax
jmp 0x468087
and dword [ebp - 0x1e8], 0
push 0x4860dc
push dword [ebp - 0x1e8]
call fcn.0042bc64
pop ecx
pop ecx
cmp dword [ebp - 0x11c], 5
jne 0x4681d8
cmp dword [ebp - 0x118], 0
jne 0x4681d8
cmp dword [ebp - 0x124], 0
je 0x4680cd
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1d0], eax
jmp 0x4680d4
and dword [ebp - 0x1d0], 0
push 0x48610c
push dword [ebp - 0x1d0]
call fcn.0042bc64
pop ecx
pop ecx
movzx eax, byte [ebp - 6]
cmp eax, 1
jne 0x468127
cmp dword [ebp - 0x124], 0
je 0x468109
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1d4], eax
jmp 0x468110
and dword [ebp - 0x1d4], 0
push str.Professional
push dword [ebp - 0x1d4]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x4681d8
movzx eax, word [ebp - 8]
and eax, 0x80
je 0x468167
cmp dword [ebp - 0x124], 0
je 0x46814c
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1d8], eax
jmp 0x468153
and dword [ebp - 0x1d8], 0
push str.Datacenter_Server
push dword [ebp - 0x1d8]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x4681d8
movzx eax, word [ebp - 8]
and eax, 2
je 0x4681a5
cmp dword [ebp - 0x124], 0
je 0x46818a
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
jmp 0x468191
and dword [ebp - 0x1dc], 0
push str.Advanced_Server
push dword [ebp - 0x1dc]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x4681d8
cmp dword [ebp - 0x124], 0
je 0x4681bf
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1e0], eax
jmp 0x4681c6
and dword [ebp - 0x1e0], 0
push str.Server
push dword [ebp - 0x1e0]
call fcn.0042bc64
pop ecx
pop ecx
lea eax, [ebp - 0x10c]
push eax
call fcn.004402a6
pop ecx
test eax, eax
jbe 0x46822b
cmp dword [ebp - 0x124], 0
je 0x468203
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1e4], eax
jmp 0x46820a
and dword [ebp - 0x1e4], 0
lea eax, [ebp - 0x10c]
push eax
push 0x486140
push dword [ebp - 0x1e4]
call fcn.0042bc64
pop ecx
pop ecx
push eax
call fcn.0041e358
pop ecx
pop ecx
cmp dword [ebp - 0x124], 0
je 0x468245
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1f4], eax
jmp 0x46824c
and dword [ebp - 0x1f4], 0
push 0x486160
push dword [ebp - 0x114]
push str.__build
push dword [ebp - 0x1f4]
call fcn.0041e358
pop ecx
pop ecx
mov ecx, eax
call fcn.00419bc6
push eax
call fcn.0041e358
pop ecx
pop ecx
cmp dword [ebp - 0x11c], 6
jb 0x468300
movzx eax, word [ebp - 0x224]
cmp eax, 9
jne 0x4682c2
cmp dword [ebp - 0x124], 0
je 0x4682a7
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1ec], eax
jmp 0x4682ae
and dword [ebp - 0x1ec], 0
push str.__64_bit
push dword [ebp - 0x1ec]
call fcn.0042bc64
pop ecx
pop ecx
jmp 0x468300
movzx eax, word [ebp - 0x224]
test eax, eax
jne 0x468300
cmp dword [ebp - 0x124], 0
je 0x4682e7
mov eax, dword [ebp - 0x124]
add eax, 0x10
mov dword [ebp - 0x1f0], eax
jmp 0x4682ee
and dword [ebp - 0x1f0], 0
push str.__32_bit
push dword [ebp - 0x1f0]
call fcn.0042bc64
pop ecx
pop ecx
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043a99c
mov esp, ebp
pop ebp
ret