Function at 0x42814c
Capabilities:
Check os version

Disassembly:
mov eax, 0x465100
call fcn.00433ae8
sub esp, 0x628
push ebx
push esi
push edi
mov esi, ecx
call fcn.00427246
test eax, eax
je 0x4285d5
mov ecx, esi
call fcn.00427dac
and dword [ebp - 0x20], 0
mov dword [esi + 0x60c], eax
lea eax, [ebp - 0x20]
push eax
push dword [0x485168]
call fcn.004303a5
pop ecx
lea eax, [ebp - 0xd]
pop ecx
push 1
lea ecx, [ebp - 0x48]
pop ebx
push ebx
push eax
push 0x47d96c
call fcn.0040175f
mov eax, dword [eax + 8]
and dword [ebp - 4], 0
test eax, eax
jne 0x4281b5
mov eax, 0x469558
push dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x2ce
push dword [0x485168]
push 0x47dd3c
push eax
call fcn.004084c8
or dword [ebp - 4], 0xffffffff
add esp, 0x10
lea ecx, [ebp - 0x48]
call fcn.00401bc2
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
test eax, eax
jne 0x428224
lea eax, [ebp - 0x234]
push eax
push dword [0x485168]
call fcn.00430624
pop ecx
mov eax, 0x4b8
pop ecx
mov dword [0x485f50], eax
lea ecx, [ebp - 0x234]
push ecx
push eax
call fcn.0042efda
pop ecx
pop ecx
jmp 0x4285d5
cmp dword [esi + 0x44], ebx
jbe 0x4285b3
mov eax, dword [esi + 0x14]
cmp eax, 5
je 0x4285b3
mov edi, 0x400
lea eax, [ebp - 0x634]
push edi
push 0
push eax
call fcn.00434350
lea eax, [ebp - 0x634]
push 0xa
push eax
push dword [esi + 0x50]
call fcn.00436045
add esp, 0x18
mov ecx, 0x485678
call fcn.0040198d
push eax
lea eax, [ebp - 0x634]
push eax
call fcn.00433610
pop ecx
lea eax, [ebp - 0xd]
pop ecx
push ebx
push eax
lea eax, [ebp - 0x634]
lea ecx, [ebp - 0x48]
push eax
call fcn.0040175f
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.0040198d
push eax
mov ecx, esi
call fcn.004287f3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x14], eax
call fcn.00401bc2
cmp dword [ebp - 0x14], 0
je 0x4283db
cmp byte [0x483278], 0
jne 0x4282cb
cmp byte [0x486500], 0
je 0x42833f
lea eax, [ebp - 0xd]
push ebx
push eax
push 0x47d96c
lea ecx, [ebp - 0x48]
call fcn.0040175f
mov eax, 0x47dd00
mov dword [ebp - 4], 2
mov ecx, eax
mov dword [ebp - 0x7c], 0x469540
test ecx, ecx
mov dword [ebp - 0x5c], 0x469538
jne 0x428302
mov eax, 0x483644
lea ecx, [ebp - 0xe]
push 0
push ecx
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408d40
lea eax, [ebp - 0x48]
push 0x2e3
push eax
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 3
call fcn.00458f20
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.00401bc2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00401bc2
lea eax, [ebp - 0x54]
push edi
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
mov dword [ebp - 0x14], 7
call fcn.00408c09
mov ecx, eax
call fcn.004024e5
mov edi, eax
mov ecx, dword [edi]
mov dword [ebp - 4], 4
call fcn.0040305e
lea ecx, [ebp - 0x634]
mov dword [edi + 8], eax
push ecx
push 0x485b50
push eax
call fcn.0042fa35
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004025f7
mov ecx, esi
call fcn.00428d0c
test eax, eax
je 0x4285d5
lea eax, [ebp - 0x48]
push 7
push eax
mov ecx, esi
call fcn.004083bc
push ebx
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.0040305e
push eax
push 0x47dcf0
mov ecx, esi
call fcn.0042928a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00401f95
mov dword [esi + 0x3c], ebx
jmp 0x4285b3
cmp byte [esi + 0x16c], 0
je 0x428476
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x48]
call fcn.00402caf
lea eax, [ebp - 0xd]
push ebx
push eax
lea eax, [esi + 0x61]
push eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 4], 6
call fcn.00402caf
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 7
push ecx
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
call fcn.0040e3b5
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xa
call fcn.00401f95
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.00401f95
lea eax, [ebp - 0x7c]
push 0
push eax
push 7
mov ecx, esi
call fcn.0040833f
push ebx
lea ecx, [ebp - 0x7c]
call fcn.0040305e
push eax
push 0x47dcf0
mov ecx, esi
call fcn.0042928a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
jmp 0x42850c
mov ecx, esi
call fcn.00428753
test al, al
je 0x4284db
mov ecx, esi
call fcn.004286ea
test al, al
je 0x4284db
lea eax, [ebp - 0x54]
push edi
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 4]
mov dword [ebp - 0x14], 7
call fcn.00408c09
mov ecx, eax
call fcn.004024e5
mov edi, eax
mov ecx, dword [edi]
mov dword [ebp - 4], 0xb
call fcn.0040305e
mov dword [edi + 8], eax
push eax
lea eax, [ebp - 0x634]
mov ecx, esi
push eax
call fcn.00428635
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.004025f7
jmp 0x428511
lea eax, [ebp - 0xe]
push ebx
push eax
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x48]
call fcn.00402caf
lea eax, [ebp - 0x48]
push 0
push eax
push 7
mov ecx, esi
mov dword [ebp - 4], 0xc
call fcn.0040833f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00401f95
cmp byte [0x483278], 0
jne 0x428527
cmp byte [0x486500], 0
je 0x4285b3
lea eax, [ebp - 0x1a]
push ebx
push eax
push 0x47d96c
lea ecx, [ebp - 0xcc]
call fcn.0040175f
mov eax, 0x47dc8c
mov dword [ebp - 4], 0xd
mov ecx, eax
mov dword [ebp - 0xa4], 0x469540
test ecx, ecx
mov dword [ebp - 0x84], 0x469538
jne 0x428567
mov eax, 0x483644
lea ecx, [ebp - 0x19]
push 0
push ecx
push eax
lea ecx, [ebp - 0xa4]
call fcn.00408d40
lea eax, [ebp - 0xcc]
push 0x30a
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0xe
call fcn.00458f20
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xd
call fcn.00401bc2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.00401bc2
mov ecx, esi
call fcn.00427ee2
test eax, eax
je 0x4285d5
push 0x44f
mov ecx, esi
call fcn.0042877c
mov ecx, esi
call fcn.00429156
test eax, eax
jne 0x4285d9
xor eax, eax
jmp 0x428626
push esi
push 0x451
lea ecx, [ebp - 0x108]
call fcn.0041663e
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], 0xf
call fcn.004195fc
test eax, eax
jne 0x428604
xor ebx, ebx
jmp 0x428615
mov eax, dword [ebp - 0xfc]
mov dword [esi + 0x614], eax
call fcn.00413e23
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.00416693
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret