Function at 0x4e01b0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe24
push ebx
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4e06f4
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x516a51], 0
je 0x4e01e9
cmp dword [0x51ddf4], 0
jne 0x4e06c8
mov byte [0x516a51], 1
call sub.kernel32.dll_GetVersion_1
test eax, 0x80000000
jne 0x4e026a
lea eax, [ebp - 0x1b4]
mov edx, 0x11c
call fcn.00414410
mov dword [ebp - 0x1b4], 0x11c
push 0x4e0700
push 0x4e071c
call sub.kernel32.dll_GetModuleHandleW_1
push eax
call fcn.00413e8c
mov ebx, eax
test ebx, ebx
je 0x4e0242
lea eax, [ebp - 0x1b4]
push eax
call ebx
test eax, eax
je 0x4e02c4
lea eax, [ebp - 0x1b4]
push eax
call sub.kernel32.dll_GetVersionExW
test eax, eax
jne 0x4e02c4
mov dword [ebp - 0x1b4], 0x114
lea eax, [ebp - 0x1b4]
push eax
call sub.kernel32.dll_GetVersionExW
jmp 0x4e02c4
lea eax, [ebp - 0x98]
mov edx, 0x94
call fcn.00414410
mov dword [ebp - 0x98], 0x94
lea eax, [ebp - 0x98]
push eax
call sub.kernel32.dll_GetVersionExA
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x98]
mov ecx, 0x94
call fcn.00406fc8
mov ecx, 0x80
lea eax, [ebp - 0x84]
lea edx, [ebp - 0x1a0]
movzx ebx, byte [eax]
mov word [edx], bx
add edx, 2
inc eax
dec ecx
jne 0x4e02b7
mov eax, dword [ebp - 0x1b0]
mov dword [0x51ddd8], eax
mov eax, dword [ebp - 0x1ac]
mov dword [0x51dddc], eax
mov eax, 0x51dde4
lea edx, [ebp - 0x1a0]
mov ecx, 0x80
call fcn.0040aa58
mov eax, dword [ebp - 0x1a4]
cmp eax, 1
sete dl
mov byte [0x51dde8], dl
cmp eax, 2
sete al
mov byte [0x51ddea], al
cmp byte [0x51dde8], 0
je 0x4e0323
movzx eax, word [ebp - 0x1a8]
mov dword [0x51dde0], eax
jmp 0x4e032e
mov eax, dword [ebp - 0x1a8]
mov dword [0x51dde0], eax
mov byte [0x51ddec], 0
xor eax, eax
mov dword [0x51ddf0], eax
cmp byte [0x51dde8], 0
je 0x4e03e8
mov eax, dword [0x51ddd8]
sub eax, 4
jb 0x4e03d0
je 0x4e0357
jmp 0x4e03c9
mov eax, dword [0x51dddc]
sub eax, 0xa
jb 0x4e036b
je 0x4e0389
dec eax
sub eax, 0x50
jb 0x4e03b7
jmp 0x4e03c0
cmp dword [0x51dde0], 0x3e8
jbe 0x4e0380
mov byte [0x51ddec], 2
jmp 0x4e03d0
mov byte [0x51ddec], 1
jmp 0x4e03d0
mov eax, dword [0x51dde0]
cmp eax, 0xa8c
jbe 0x4e039e
mov byte [0x51ddec], 5
jmp 0x4e03d0
cmp eax, 0x7d0
jbe 0x4e03ae
mov byte [0x51ddec], 4
jmp 0x4e03d0
mov byte [0x51ddec], 3
jmp 0x4e03d0
mov byte [0x51ddec], 5
jmp 0x4e03d0
mov byte [0x51ddec], 6
jmp 0x4e03d0
mov byte [0x51ddec], 6
movzx eax, byte [0x51ddec]
mov byte [0x51dde9], al
mov byte [0x51ddeb], 0
jmp 0x4e05db
cmp byte [0x51ddea], 0
je 0x4e05db
mov eax, dword [0x51ddd8]
cmp eax, 0xa
ja case.0x4e0403.7
jmp dword [eax*4 + 0x4e040a]
mov byte [0x51ddec], 7
jmp 0x4e052e
mov byte [0x51ddec], 8
jmp 0x4e052e
mov eax, dword [0x51dddc]
sub eax, 1
jb 0x4e045c
je 0x4e0468
jmp 0x4e0474
mov byte [0x51ddec], 9
jmp 0x4e052e
mov byte [0x51ddec], 0xa
jmp 0x4e052e
cmp byte [ebp - 0x9a], 1
jne 0x4e0489
mov byte [0x51ddec], 0xa
jmp 0x4e052e
mov byte [0x51ddec], 0xb
jmp 0x4e052e
mov eax, dword [0x51dddc]
sub eax, 1
jb 0x4e04a9
je 0x4e04c4
dec eax
je 0x4e04df
dec eax
je 0x4e04fa
jmp 0x4e0515
cmp byte [ebp - 0x9a], 1
jne 0x4e04bb
mov byte [0x51ddec], 0xc
jmp 0x4e052e
mov byte [0x51ddec], 0xd
jmp 0x4e052e
cmp byte [ebp - 0x9a], 1
jne 0x4e04d6
mov byte [0x51ddec], 0xe
jmp 0x4e052e
mov byte [0x51ddec], 0xf
jmp 0x4e052e
cmp byte [ebp - 0x9a], 1
jne 0x4e04f1
mov byte [0x51ddec], 0x10
jmp 0x4e052e
mov byte [0x51ddec], 0x11
jmp 0x4e052e
cmp byte [ebp - 0x9a], 1
jne 0x4e050c
mov byte [0x51ddec], 0x12
jmp 0x4e052e
mov byte [0x51ddec], 0x13
jmp 0x4e052e
mov byte [0x51ddec], 0x15
jmp 0x4e052e
mov byte [0x51ddec], 0x14
jmp 0x4e052e
mov byte [0x51ddec], 0x15
mov byte [0x51dde9], 0
movzx eax, byte [0x51ddec]
mov byte [0x51ddeb], al
cmp dword [ebp - 0x1b4], 0x11c
jb 0x4e055b
movzx eax, word [ebp - 0xa0]
mov dword [0x51ddf0], eax
jmp 0x4e0597
mov eax, dword [0x51dde4]
call fcn.0040a060
cmp eax, 0xe
jl 0x4e0597
mov eax, dword [0x51dde4]
call fcn.0040a060
sub eax, 0xd
push eax
mov eax, 0x51dde4
call fcn.0040a128
lea edx, [eax + 0x1a]
mov ebx, dword [0x5177ec]
mov ebx, dword [ebx]
xor eax, eax
pop ecx
call ebx
mov dword [0x51ddf0], eax
push 0x4e0730
push 0x4e0758
call sub.kernel32.dll_GetModuleHandleW_1
push eax
call fcn.00413e8c
mov ebx, eax
test ebx, ebx
je 0x4e05db
lea eax, [ebp - 0x1d8]
mov edx, 0x24
call fcn.00414410
lea eax, [ebp - 0x1d8]
push eax
call ebx
cmp word [ebp - 0x1d8], 9
sete al
mov byte [0x51dded], al
lea eax, [ebp - 0x1dc]
movzx edx, byte [0x51ddec]
mov edx, dword [edx*4 + 0x5169ec]
mov ecx, 0
call fcn.0040a2cc
mov edx, dword [ebp - 0x1dc]
mov eax, 0x51ddf4
call fcn.0040aa74
cmp byte [0x51ddea], 0
je 0x4e06c8
push 0x59
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4e0630
mov eax, 0x51ddf4
mov edx, 0x4e0780
call fcn.0040abb0
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4e064a
mov eax, 0x51ddf4
mov edx, 0x4e0794
call fcn.0040abb0
push 0x58
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4e0664
mov eax, 0x51ddf4
mov edx, 0x4e07b8
call fcn.0040abb0
cmp byte [0x51ddec], 0xc
jae 0x4e0687
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4e0687
mov eax, 0x51ddf4
mov edx, 0x4e07d8
call fcn.0040abb0
cmp byte [0x51dded], 0
je 0x4e069f
mov eax, 0x51ddf4
mov edx, 0x4e0800
call fcn.0040abb0
cmp dword [0x51dde4], 0
je 0x4e06c8
push dword [0x51ddf4]
push 0x4e0818
push dword [0x51dde4]
mov eax, 0x51ddf4
mov edx, 3
call fcn.0040ac90
mov eax, dword [ebp - 4]
mov edx, 0x51ddd8
mov ecx, dword [0x4dfc1c]
call fcn.0040b43c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e06fb
lea eax, [ebp - 0x1dc]
call fcn.00409b94
ret