Function at 0x426b30
Capabilities:
Access peb ldr_data
Check os version
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x6ac4ad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
xor eax, eax
mov dword [esi], 0x6be1cc
push edi
lea edi, [esi + 0xc]
mov dword [esp + 0x10], esi
mov dword [edi + 4], eax
mov dword [edi], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
push fcn.00527170
push fcn.00527000
push 2
push 0x5d8
lea ebx, [esi + 0x1c]
push ebx
mov dword [esp + 0x30], eax
call fcn.005ce6bb
push fcn.00527170
push fcn.00527000
push 2
push 0x5d8
lea ebp, [esi + 0xbcc]
push ebp
mov byte [esp + 0x30], 1
call fcn.005ce6bb
lea ecx, [esi + 0x177c]
mov byte [esp + 0x1c], 2
call fcn.00527000
mov eax, dword [esp + 0x24]
cmp eax, 0xa
mov byte [esp + 0x1c], 3
mov dword [esi + 0x1d54], eax
jle 0x426bd6
mov dword [esi + 0x1d58], 0xa
jmp 0x426bdc
mov dword [esi + 0x1d58], eax
push 0x80
push 0x100
push str.change_item.tga
push str.data_interface
mov ecx, edi
call fcn.005497a0
mov eax, dword [0x71c2a4]
add eax, 0xffffffae
mov dword [esi + 4], eax
mov ecx, dword [0x71c2a8]
add ecx, 0xffffffce
xor edi, edi
cmp eax, edi
mov dword [esi + 8], ecx
jge 0x426c19
mov dword [esi + 4], edi
jmp 0x426c30
lea edx, [eax + 0xa4]
mov eax, dword [0x70859c]
cmp edx, eax
jle 0x426c30
add eax, 0xffffff5c
mov dword [esi + 4], eax
mov eax, dword [esi + 8]
cmp eax, edi
jge 0x426c3c
mov dword [esi + 8], edi
jmp 0x426c4e
lea ecx, [eax + 0x64]
mov eax, dword [0x7085a0]
cmp ecx, eax
jle 0x426c4e
add eax, 0xffffff9c
mov dword [esi + 8], eax
push edi
push 0x3f000000
push edi
push 0x3f800000
push 0x3f400000
push edi
push edi
push edi
push edi
push 0x3f000000
push edi
push 0x3f400000
push 0x3f000000
push 0x3f000000
push edi
push 0x3f000000
push 0x3e800000
push 0x3f000000
push edi
push 0x3e800000
push edi
mov edx, dword [esi + 8]
push 1
mov eax, dword [esi + 4]
push 0x40
push 0x100
push str.stats_on_button.tga
push edi
push 0x14
push 0x2e
push 0x20
push 0x40
push 0x45
push 0x1d
push edx
push eax
mov ecx, ebx
call fcn.00528830
push edi
push 0x3f800000
push 0x3f000000
push 0x3f800000
push 0x3f400000
push edi
push edi
push edi
push edi
push 0x3f800000
push 0x3f000000
push 0x3f400000
push 0x3f000000
push 0x3f800000
push 0x3f000000
push 0x3f000000
push 0x3e800000
push 0x3f800000
push 0x3f000000
push 0x3e800000
push edi
mov ecx, dword [esi + 8]
push 1
mov edx, dword [esi + 4]
push 0x40
push 0x100
push str.stats_on_button.tga
push edi
push 0x14
push 0x2e
push 0x20
push 0x40
push 0x45
push 0x58
push ecx
push edx
lea ecx, [esi + 0x5f4]
call fcn.00528830
push edi
push 0x3f000000
push edi
push 0x3f800000
push 0x3f400000
push edi
fld dword [0x708954]
push edi
push edi
push edi
push 0x3f000000
push edi
push 0x3f400000
push 0x3f000000
push 0x3f000000
push edi
push 0x3f000000
push 0x3e800000
push 0x3f000000
push edi
push 0x3e800000
push edi
push 1
push 0x40
push 0x80
push str.stats_on_select_button.tga
push edi
push 0x16
push 0x16
push 0x20
push 0x20
call fcn.005cd414
fld dword [0x708950]
push eax
call fcn.005cd414
mov ecx, dword [esi + 4]
push eax
mov eax, dword [esi + 8]
push eax
push ecx
mov ecx, ebp
call fcn.00528830
fld dword [0x70895c]
push edi
push 0x3f800000
push 0x3f000000
push 0x3f800000
push 0x3f400000
push edi
push edi
push edi
push edi
push 0x3f800000
push 0x3f000000
push 0x3f400000
push 0x3f000000
push 0x3f800000
push 0x3f000000
push 0x3f000000
push 0x3e800000
push 0x3f800000
push 0x3f000000
push 0x3e800000
push edi
push 1
push 0x40
push 0x80
push str.stats_on_select_button.tga
push edi
push 0x16
push 0x16
push 0x20
push 0x20
call fcn.005cd414
fld dword [0x708958]
push eax
call fcn.005cd414
mov edx, dword [esi + 8]
push eax
mov eax, dword [esi + 4]
push edx
push eax
lea ecx, [esi + 0x11a4]
call fcn.00528830
push edi
push edi
push edi
fld dword [0x70894c]
push edi
push edi
push edi
push edi
push edi
push edi
push 0x3f800000
push edi
push 0x3f400000
push 0x3f000000
push 0x3f800000
push edi
push 0x3f000000
push 0x3e800000
push 0x3f800000
push edi
push 0x3e800000
push edi
push 1
push 0x20
push 0x80
push str.talk1_close_button.tga
push edi
push 0x16
push 0x16
push 0x20
push 0x20
call fcn.005cd414
fld dword [0x708948]
push eax
call fcn.005cd414
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
push eax
push ecx
push edx
lea ecx, [esi + 0x177c]
call fcn.00528830
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x1d5c], edi
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4