Function at 0x419ff0
Capabilities:
Check os version
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x47ae44
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x368c
call fcn.004741a0
mov eax, dword [0x496028]
xor eax, esp
mov dword [esp + 0x3688], eax
push ebx
push esi
push edi
mov eax, dword [0x496028]
xor eax, esp
push eax
lea eax, [esp + 0x36a0]
mov dword fs:[0], eax
push 0x480720
push 2
mov esi, ecx
call dword [0x47c41c]
mov eax, dword [esi + 0x48]
mov ebx, dword [0x47c42c]
push str._NewInstallNative
push eax
call ebx
add esp, 0x10
test eax, eax
jne 0x41a06d
push eax
push eax
push eax
push eax
call fcn.004740b4
add esp, 0x10
jmp 0x41a45d
mov ecx, dword [esi + 0x48]
push str._UninstallNative
push ecx
call ebx
add esp, 8
test eax, eax
jne 0x41a089
call fcn.004740ba
jmp 0x41a45d
mov edx, dword [esi + 0x48]
push str._InstallNative
push edx
call ebx
add esp, 8
test eax, eax
jne 0x41a0af
call fcn.0041a7e0
push 0
call fcn.004740c0
add esp, 4
jmp 0x41a45d
push str.SeBackupPrivilege
call fcn.00419cf0
add esp, 4
push str.SeRestorePrivilege
call fcn.00419cf0
add esp, 4
call fcn.004510f0
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xf
cmp al, 0xa
jb 0x41a0e5
mov dword [0x496500], 4
call fcn.0041a7e0
mov eax, dword [esi + 0x48]
push eax
lea ecx, [esp + 0x18]
call dword [0x47ce1c]
xor edi, edi
mov dword [esp + 0x36a8], edi
call fcn.0041a730
test eax, eax
je 0x41a191
call fcn.0041a7b0
lea ecx, [esp + 0x10]
push ecx
push 0x419f90
mov dword [esp + 0x18], edi
call dword [sym.imp.USER32.dll_EnumWindows]
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41a453
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [esp + 0x10]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push edi
push edi
push 0x1105
push ecx
call esi
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], edi
je 0x41a453
mov edx, dword [eax - 0xc]
lea ecx, [edx + edx + 2]
lea edx, [esp + 0x20]
push edx
push edi
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
push 0x4a
push eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], 0x464
call esi
jmp 0x41a453
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], 8
mov dword [esp + 0x20], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, esi
call fcn.00472dd4
push edi
call fcn.00472dda
add esp, 4
push 7
call fcn.00474090
push 0x47d4d8
call dword [0x47c4bc]
add esp, 4
push 0x47d4d8
call dword [0x47c4c0]
lea edi, [esi + 0xc4]
add esp, 4
mov eax, edi
call fcn.004400d0
test edi, edi
je 0x41a1f6
mov dword [0x498240], edi
mov edi, dword [0x47c4ac]
push 1
push 0xffffff
push 0x4803a0
push str.Window
push 0x47d4d8
call edi
add esp, 0x14
push 1
push 0
push str.Text_Color
push str.Window
push 0x47d4d8
mov dword [esi + 0xac], eax
call edi
add esp, 0x14
push 1
push 0xf8f8f8
push str.Select_Color
push str.Window
push 0x47d4d8
mov dword [esi + 0xb0], eax
call edi
add esp, 0x14
push 1
push 0xf8f8f8
push str.Foucs_Color
push str.Window
push 0x47d4d8
mov dword [esi + 0xb4], eax
call edi
add esp, 0x14
push 1
push 0xffffff
push str.Frame_Color
push str.Window
push 0x47d4d8
mov dword [esi + 0xb8], eax
call edi
mov dword [esi + 0xbc], eax
mov eax, dword [esi + 0xac]
add esp, 0x14
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
lea ecx, [esi + 0xa4]
call fcn.004728a6
mov edx, dword [esi + 0x48]
push str._BootTimeDefrag
push edx
call ebx
add esp, 8
test eax, eax
jne 0x41a3a8
call fcn.0041a7b0
call fcn.0041a770
test eax, eax
je 0x41a31b
call fcn.0041a7b0
lea eax, [esp + 0x10]
push eax
push 0x419fc0
mov dword [esp + 0x18], 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41a453
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x41a453
push 4
lea eax, [esp + 0x30]
push eax
call fcn.00433100
lea ecx, [esp + 0x2c]
mov byte [esp + 0x36a8], 1
call fcn.00472b76
cmp eax, 1
jne 0x41a378
lea ecx, [esp + 0x10]
push ecx
push 0x419f90
mov dword [esp + 0x18], 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41a378
mov eax, dword [esp + 0x10]
push 0
push 0
push 0x108e
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.004740c6
test eax, eax
jne 0x41a38d
push eax
push eax
push eax
push eax
call fcn.004740b4
add esp, 0x10
call fcn.004740cc
lea ecx, [esp + 0x2c]
mov byte [esp + 0x36a8], 0
call fcn.00433250
jmp 0x41a453
lea ecx, [esp + 0xa84]
push ecx
call fcn.0041ec60
mov byte [esp + 0x36a8], 2
mov edx, dword [esi + 0x48]
push edx
lea ecx, [esp + 0xafc]
call dword [0x47ce18]
lea eax, [esp + 0xa84]
push 0
push 0x66
mov ecx, eax
mov dword [esi + 0x20], eax
call fcn.00472b64
test eax, eax
je 0x41a424
lea ecx, [esp + 0xa84]
push ecx
call fcn.00424a10
lea ecx, [esp + 0xa84]
test eax, eax
je 0x41a403
push 0
jmp 0x41a405
push 5
call fcn.00472be2
push 0
lea ecx, [esp + 0xa88]
call fcn.00472de0
lea ecx, [esp + 0xa84]
call fcn.00422810
call fcn.004740c6
test eax, eax
jne 0x41a439
push eax
push eax
push eax
push eax
call fcn.004740b4
add esp, 0x10
call fcn.004740cc
lea edx, [esp + 0xa84]
push edx
mov byte [esp + 0x36ac], 0
call fcn.0041a490
lea ecx, [esp + 0x14]
call dword [0x47ce24]
xor eax, eax
mov ecx, dword [esp + 0x36a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3688]
xor ecx, esp
call fcn.004734e6
mov esp, ebp
pop ebp
ret