Function at 0x49b978
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff4c
push ebx
xor eax, eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
xor eax, eax
push ebp
push 0x49be26
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4c6fe0
call fcn.0040414c
mov eax, 0x4c6fe4
call fcn.0040414c
mov dword [0x4c708c], 1
xor eax, eax
mov dword [0x4c6ffc], eax
mov dword [ebp - 0x94], 0x94
lea eax, [ebp - 0x94]
push eax
call sub.kernel32.dll_GetVersionExA
test eax, eax
je 0x49ba0c
mov eax, dword [ebp - 0x90]
mov dword [0x4c6ffc], eax
cmp dword [0x4c6ffc], 5
jle 0x49ba6c
lea edx, [ebp - 0x98]
mov eax, dword [0x4c56d8]
mov eax, dword [eax]
call fcn.0047be14
mov ecx, dword [ebp - 0x98]
mov edx, 0x49be3c
mov eax, 0x80000001
call fcn.0049b7e4
test al, al
jne 0x49ba6c
push 0x49be88
lea edx, [ebp - 0x9c]
mov eax, dword [0x4c56d8]
mov eax, dword [eax]
call fcn.0047be14
mov ecx, dword [ebp - 0x9c]
mov edx, 0x49be3c
mov eax, 0x80000001
call fcn.0049b4f0
call fcn.0049c030
call fcn.0040b308
fstp qword [0x4c6ff4]
wait
mov dl, 1
mov eax, dword [0x43808c]
call fcn.0043818c
mov ebx, eax
mov edx, 0x80000001
mov eax, ebx
call fcn.0043822c
mov cl, 1
mov edx, 0x49beb0
mov eax, ebx
call fcn.00438290
mov edx, 0x49bed8
mov eax, ebx
call fcn.00438ae0
test al, al
jne 0x49bac6
mov ecx, 0x49beec
mov edx, 0x49bed8
mov eax, ebx
call fcn.00438800
mov edx, 0x49bf08
mov eax, ebx
call fcn.00438ae0
test al, al
jne 0x49bae7
mov ecx, 0x49bf18
mov edx, 0x49bf08
mov eax, ebx
call fcn.00438800
mov edx, 0x49bf24
mov eax, ebx
call fcn.00438ae0
test al, al
je 0x49bb1b
lea ecx, [ebp - 0xa0]
mov edx, 0x49bf24
mov eax, ebx
call fcn.0043882c
mov edx, dword [ebp - 0xa0]
mov eax, 0x4c6fe0
call fcn.004041a0
jmp 0x49bb2d
mov ecx, dword [0x4c6fe0]
mov edx, 0x49bf24
mov eax, ebx
call fcn.00438800
mov edx, 0x49bf34
mov eax, ebx
call fcn.00438ae0
test al, al
je 0x49bb61
lea ecx, [ebp - 0xa4]
mov edx, 0x49bf34
mov eax, ebx
call fcn.0043882c
mov edx, dword [ebp - 0xa4]
mov eax, 0x4c6fe4
call fcn.004041a0
jmp 0x49bb73
mov ecx, dword [0x4c6fe4]
mov edx, 0x49bf34
mov eax, ebx
call fcn.00438800
mov edx, 0x49bf44
mov eax, ebx
call fcn.00438ae0
test al, al
je 0x49bb98
mov edx, 0x49bf44
mov eax, ebx
call fcn.00438968
fstp qword [0x4c6ff4]
wait
jmp 0x49bbb0
push dword [0x4c6ff8]
push dword [0x4c6ff4]
mov edx, 0x49bf44
mov eax, ebx
call fcn.00438954
mov edx, 0x49bf58
mov eax, ebx
call fcn.00438ae0
test al, al
je 0x49bbd3
mov edx, 0x49bf58
mov eax, ebx
call fcn.004388b8
mov dword [0x4c708c], eax
jmp 0x49bbe5
mov ecx, dword [0x4c708c]
mov edx, 0x49bf58
mov eax, ebx
call fcn.004388a4
mov edx, 0x49bf6c
mov eax, ebx
call fcn.00438ae0
test al, al
je 0x49bc19
lea ecx, [ebp - 0xa8]
mov edx, 0x49bf6c
mov eax, ebx
call fcn.0043882c
mov edx, dword [ebp - 0xa8]
mov eax, 0x4c7060
call fcn.004041a0
jmp 0x49bc2b
mov ecx, dword [0x4c7060]
mov edx, 0x49bf6c
mov eax, ebx
call fcn.00438800
mov edx, 0x49bf7c
mov eax, ebx
call fcn.00438ae0
test al, al
je 0x49bc5f
lea ecx, [ebp - 0xac]
mov edx, 0x49bf7c
mov eax, ebx
call fcn.0043882c
mov edx, dword [ebp - 0xac]
mov eax, 0x4c705c
call fcn.004041a0
jmp 0x49bc71
mov ecx, dword [0x4c705c]
mov edx, 0x49bf7c
mov eax, ebx
call fcn.00438800
mov edx, 0x49bf8c
mov eax, ebx
call fcn.00438ae0
test al, al
jne 0x49bc97
push 1
mov edx, 0x49beb0
mov ecx, 0x49bf8c
mov eax, 0x80000001
call fcn.0049b59c
mov eax, ebx
call fcn.004381fc
mov dl, 1
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx - 4]
mov eax, dword [0x4c708c]
cmp eax, 5
ja case.0x49bcb1.0
jmp dword [eax*4 + 0x49bcb8]
mov eax, 0x4c7090
mov edx, 0x49bfa8
call fcn.004041a0
jmp 0x49bd34
mov eax, 0x4c7090
mov edx, 0x49bfbc
call fcn.004041a0
jmp 0x49bd34
mov eax, 0x4c7090
mov edx, 0x49bfd0
call fcn.004041a0
jmp 0x49bd34
mov eax, 0x4c7090
mov edx, 0x49bfe4
call fcn.004041a0
jmp 0x49bd34
mov eax, 0x4c7090
mov edx, 0x49bff8
call fcn.004041a0
jmp 0x49bd34
mov eax, 0x4c7090
mov edx, 0x49bfa8
call fcn.004041a0
push dword [0x4c706c]
push 0x49c00c
push dword [0x4c7090]
lea eax, [ebp - 0xb0]
mov edx, 3
call fcn.004044dc
mov ecx, dword [ebp - 0xb0]
mov dl, 1
mov eax, dword [0x437140]
call fcn.004371f0
mov dword [0x4c7094], eax
mov eax, dword [0x4c56d8]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
mov dl, 1
mov eax, dword [0x499b2c]
call fcn.0049aeb4
mov dword [0x4c7074], eax
mov eax, dword [0x4c56d8]
mov eax, dword [eax]
mov edx, dword [eax + 0x30]
mov eax, dword [0x4c7074]
call fcn.0045f490
xor edx, edx
mov eax, dword [0x4c7074]
call fcn.0045b494
xor edx, edx
mov eax, dword [0x4c7074]
call fcn.00451800
lea edx, [ebp - 0xb4]
mov eax, dword [0x4c53cc]
call fcn.0048befc
mov edx, dword [ebp - 0xb4]
mov eax, 0x4c7084
call fcn.00405ddc
mov eax, 0x4c7088
mov edx, dword [0x4c7084]
mov ecx, 0x49c010
call fcn.00405e08
mov eax, 0x4c7080
mov edx, dword [0x4c7084]
mov ecx, 0x49c020
call fcn.00405e08
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49be2d
lea eax, [ebp - 0xb4]
call fcn.00405dc4
lea eax, [ebp - 0xb0]
mov edx, 7
call fcn.00404170
ret