Function at 0x4ce300
Capabilities:
Check os version
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x4f9514
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push ebp
push esi
mov ebx, ecx
push edi
mov dword [esp + 0x14], ebx
call fcn.004d5280
mov al, byte [esp + 0x13]
lea esi, [ebx + 0xac]
xor edi, edi
mov dword [esp + 0x38], edi
mov byte [esi], al
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
push edi
push edi
lea ecx, [ebx + 0xd4]
mov byte [esp + 0x40], 1
call fcn.004cf450
xor eax, eax
mov byte [esp + 0x38], 2
mov dword [ebx], 0x4fc450
mov dword [ebx + 0x10c], edi
mov dword [esp + 0x18], eax
jmp 0x4ce373
mov eax, dword [esp + 0x18]
xor edi, edi
mov ebp, 1
lea ecx, [eax + 0x9ccd]
cmp eax, ebp
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], ecx
je 0x4ce392
cmp eax, edi
mov dword [esp + 0x28], edi
jne 0x4ce396
mov dword [esp + 0x28], ebp
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 1
mov eax, edx
mov edi, ecx
shr eax, 0x1f
add edx, eax
cmp edx, ebp
jae 0x4ce498
mov ebx, dword [esi + 4]
test ebx, ebx
je 0x4ce3dd
mov edx, ecx
mov eax, 0x2aaaaaab
sub edx, ebx
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, ebp
jbe 0x4ce3d9
mov ebp, edx
test ebx, ebx
jne 0x4ce3e1
xor edx, edx
jmp 0x4ce3f3
sub ecx, ebx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [edx + ebp]
test eax, eax
mov dword [esp + 0x1c], eax
jge 0x4ce400
xor eax, eax
lea edx, [eax + eax*2]
shl edx, 2
push edx
call fcn.004de48f
mov ebx, dword [esi + 4]
add esp, 4
cmp ebx, edi
mov dword [esp + 0x20], eax
mov ebp, eax
je 0x4ce430
push ebx
push ebp
call fcn.00496070
add ebx, 0xc
add esp, 8
add ebp, 0xc
cmp ebx, edi
jne 0x4ce41c
lea eax, [esp + 0x24]
mov ecx, esi
push eax
push 1
push ebp
call fcn.0042d660
mov ecx, dword [esi + 8]
add ebp, 0xc
push ebp
push ecx
push edi
mov ecx, esi
call fcn.0042d610
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
push edx
push eax
mov ecx, esi
call fcn.0042c050
mov ecx, dword [esi + 4]
push ecx
call fcn.004de3a6
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
add esp, 4
mov ecx, esi
lea edx, [eax + eax*2]
lea eax, [edi + edx*4]
mov dword [esi + 0xc], eax
call fcn.00428700
inc eax
mov ebx, dword [esp + 0x14]
mov dword [esi + 4], edi
lea ecx, [eax + eax*2]
lea edx, [edi + ecx*4]
mov dword [esi + 8], edx
jmp 0x4ce57c
mov edx, ecx
mov eax, 0x2aaaaaab
sub edx, edi
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, ebp
jae 0x4ce517
lea edx, [edi + 0xc]
push edx
push ecx
push edi
mov ecx, esi
call fcn.0042d610
mov ebx, dword [esi + 8]
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
sub ecx, edi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, esi
sub ebp, edx
push ebp
push ebx
call fcn.0042d660
mov eax, dword [esi + 8]
cmp edi, eax
je 0x4ce508
mov ecx, dword [esp + 0x24]
mov edx, edi
add edi, 0xc
mov dword [edx], ecx
mov ecx, dword [esp + 0x28]
cmp edi, eax
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x2c]
mov dword [edx + 8], ecx
jne 0x4ce4eb
mov eax, dword [esi + 8]
mov ebx, dword [esp + 0x14]
add eax, 0xc
mov dword [esi + 8], eax
jmp 0x4ce57c
lea eax, [ecx - 0xc]
push ecx
push ecx
push eax
mov ecx, esi
mov dword [esp + 0x2c], eax
call fcn.0042d610
mov ecx, dword [esi + 8]
lea eax, [ecx - 0xc]
cmp edi, eax
je 0x4ce554
sub eax, 0xc
sub ecx, 0xc
mov edx, eax
mov ebx, ecx
cmp eax, edi
mov ebp, dword [edx]
mov dword [ebx], ebp
mov ebp, dword [edx + 4]
mov dword [ebx + 4], ebp
mov edx, dword [edx + 8]
mov dword [ebx + 8], edx
jne 0x4ce532
mov ebx, dword [esp + 0x14]
lea eax, [edi + 0xc]
cmp edi, eax
je 0x4ce578
mov edx, dword [esp + 0x24]
mov ecx, edi
add edi, 0xc
mov dword [ecx], edx
mov edx, dword [esp + 0x28]
cmp edi, eax
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x2c]
mov dword [ecx + 8], edx
jne 0x4ce55b
add dword [esi + 8], 0xc
mov eax, dword [esp + 0x18]
inc eax
cmp eax, 5
mov dword [esp + 0x18], eax
jl 0x4ce36d
mov ecx, dword [esp + 0x30]
xor eax, eax
pop edi
mov dword [ebx + 0xc8], eax
mov dword [ebx + 0xc4], eax
mov dword [ebx + 0xd0], eax
pop esi
mov dword [ebx + 0xcc], 0xffffffff
mov dword [ebx + 0xbc], 0x23
mov dword [ebx + 0xc0], 0x64
mov eax, ebx
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2c
ret