Function at 0x42cef5
Capabilities:
Check os version

Disassembly:
dec ebp
add al, byte [eax]
fxch st(0)
shl dh, 0x20
xor al, al
jb 0x42cec5
pop ebp
mov dx, dx
ret
mov al, 1
mov esi, esi
call fcn.00462f39
fisub dword [ebp - 1]
xlatb
jp 0x42cb9e
ljmp 0x2ac:0x74870f40
mov ebx, dword [ebp + 0x44]
jno 0x43a285
jo 0x42cebf
movsb byte es:[edi], byte [esi]
movsd dword es:[edi], dword [esi]
ret
jo 0x43a285
fdivr dword [esi - 0x71]
inc esp
and al, 0xfc
mov edx, dword [ebp + 0x38]
lea esi, [esi + 8]
mul dword [ebp + ebx]
mov dword [ebp + 0x30], eax
xchg esi, edi
xchg edi, esi
mov dword [ebp + 0x38], edx
mov bl, bl
ja 0x44b674
jbe 0x42ceed
nop
cpuid
ret 0x860f
jbe 0x44b674
and byte [eax - 0x73], 0x64
and al, 4
mov cl, byte [ebp + 0xc]
mov dx, word [ebp + 0x10]
push eax
ja 0x440ffa
jbe 0x42cf0c
cli
into
jbe 0x440ffa
invalid
cmp ax, 0xffff
je 0x443b33
jne 0x432c96
lds edi, [edx]
sbb bl, bl
cmp ax, 0x102
jb 0x443b33
push eax
pop eax
jae 0x432ca8
cpuid
ret
mov dword [0x5d21ad], 0
mov di, di
xchg dh, ch
xchg ch, dh
jmp 0x432cba
push edi
call fcn.004687de
add esp, 4
test ax, ax
jb 0x44ffe1
push edi
jne 0x4571b2
je 0x432cdc
movsd dword es:[edi], dword [esi]
in al, 0xe8
loope 0x432ca0
call fcn.0043eec2
add byte [eax], al
mov ecx, dword [ebp + 0x24]
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x1c]
add esp, 4
xchg ebx, ecx
xchg ecx, ebx
push ecx
shl ebp, 0x20
mov ecx, dword [ebp + 0x18]
push 0x45e0b0
ret
or ebp, dword [edx - 0x2279147a]
jmp 0x42ceb0
and eax, 0x20e1c092
not word [edi]
mov esi, esi
jmp dword [esi]
mov eax, eax
jmp 0x436a67
push ecx
mov ecx, dword [ebp + 0x1c]
push edx
call fcn.00453fea
shl bp, 0x20
shr eax, 0x1e
sub edx, 0
jno 0x436aa8
shl byte [esi + 0xf], 1
and ebx, 0xd9000098
std
jno 0x440391
fscale
mov edx, dword [esi + 4]
jne 0x463ffd
je 0x43e3d0
retf
je 0x463ffd
fxch st(5)
sub eax, 3
jne 0x446b19
je 0x4403a2
adc byte [edi], cl
mov byte [0x97850fc3], al
in eax, dx
add byte [eax], al
jne 0x44f13f
je 0x4403ac
mov al, 0x5d
je 0x44f13f
fnstenv [ebp + 0x5f]
mov word [esi + 0x1a], ax
push ebx
pop ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov bx, bx
push esi
mov esi, esi
mov byte [esi + 0xba], cl
shr edi, 0x40
shr esi, 0x40
mov bx, bx
mov byte [esi + 0xbb], 0
shr bp, 0x40
xchg bl, ah
mov bh, bh
xchg ah, bl
mov word [esi + 0xbc], dx
call fcn.00460025
mov al, byte [ebp + 0xb]
shr cx, 0x40
mov cx, cx
jmp 0x441037
push esi
xchg bp, ax
mov bx, bx
shl bp, 0x20
xchg bp, ax
mov byte [esi + 0xba], bl
jne 0x4527a0
mov cx, cx
je 0x441059
sti
popfd
cmpsd dword [esi], dword es:[edi]
je 0x4527a0
je 0x4527a0
and eax, 0xba96859
inc esp
add bl, al
or byte [ecx + edx*2 + 0x1e23e852], 2
add byte [ebx + 0xff0ff06], cl
sbb dword [eax + 0x70000070], 0x4eb65803
push 0x44c818
ret
mov ah, ah
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x20]
call fcn.00467646
mov ecx, ecx
jmp dword [esi]
add esp, 4
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jne 0x44c81b
shl ch, 0x20
je 0x446b2f
push edi
xchg esp, eax
push 0
push 0
push 3
push 0
shr ah, 0x40
push 3
push 0xc0000000
mov ah, ah
push 0x5d28c3
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, ebx
mov dword [0x5d21a9], eax
mov dword [ebp + 8], eax
jne 0x4422c4
push esi
pop esi
je 0x446b65
lahf
imul ebx, dword [ebx + 0x1641685f], 0x45
add bl, al
sbb byte [ebx + 0x26ff0311], 0xf4
invalid
pop edi
push 0x451641
ret
jmp dword [esi]
mov eax, dword [0x5d21ad]
test eax, eax
jb 0x44ffd7
je 0x432cb5
xchg dx, bp
xchg bp, dx
jne 0x44c839
or esi, dword [esi - 0x3c]
push ebx
call fcn.00432a26
add esp, 4
test ebx, ebx
jno 0x44c84d
sbb ch, byte [ebx - 0x7ef0cfaf]
xor esp, dword [esi + edi*8 - 1]
jno 0x432c86
invalid
xchg ecx, eax