Function at 0x4eeb10
Capabilities:
Check os version
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x56c7f7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
push ebp
push esi
mov eax, dword [0x5b0768]
mov esi, ecx
mov edx, dword [0x5b0770]
mov ecx, dword [0x5b076c]
mov dword [esp + 0x2c], eax
mov al, byte [0x5b0774]
mov dword [esp + 0x30], ecx
mov ecx, dword [0x5b0760]
xor ebp, ebp
mov dword [esp + 0x24], ecx
mov cx, word [0x5b075c]
push edi
mov word [esp + 0x1c], cx
mov cx, word [0x5b074c]
push ebp
mov dword [esp + 0x3c], edx
mov dx, word [0x5b0764]
mov byte [esp + 0x40], al
mov eax, dword [0x5b0758]
push ebp
push ecx
mov word [esp + 0x30], cx
mov word [esp + 0x38], dx
mov dl, byte [0x5b075e]
mov dword [esp + 0x24], eax
mov eax, dword [0x5b0748]
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x59b910
mov byte [esp + 0x32], dl
mov dword [esp + 0x34], eax
call fcn.005318a0
push ecx
mov dword [esp + 0xbc], ebp
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x59c0ec
call fcn.005318a0
or ebx, 0xffffffff
mov ecx, 0x5c6628
mov dword [esp + 0xbc], ebx
call fcn.00533b90
mov ecx, esi
call fcn.004f0ae0
push ebp
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov dword [esp + 0xbc], 1
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x5a3dcc
call fcn.005318a0
mov ecx, 0x5c6628
mov dword [esp + 0xbc], ebx
call fcn.00533b90
cmp ax, 4
jne 0x4eec40
xor ax, ax
jmp 0x4eedb2
push ebp
push ebp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov dword [esp + 0xbc], 2
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x59ccd4
call fcn.005318a0
mov ecx, 0x5c6628
mov dword [esp + 0xbc], ebx
call fcn.00533b90
mov ecx, esi
call fcn.004eea70
mov ecx, esi
call fcn.004f0b20
push 0x64
call fcn.0043d4c0
add esp, 4
lea edx, [esp + 0x40]
lea edi, [esi + 0xdc]
lea eax, [esp + 0x28]
push 2
push edx
push eax
mov ecx, edi
call fcn.0043cb50
push 0x64
call fcn.0043d4c0
add esp, 4
lea ecx, [esp + 0x40]
push 2
lea edx, [esp + 0x1c]
push ecx
push edx
mov ecx, edi
call fcn.0043cb50
push 0x64
call fcn.0043d4c0
mov al, byte [esp + 0x48]
add esp, 4
test al, al
je 0x4eeceb
inc ebp
cmp bp, 0xa
jl 0x4eecbf
lea eax, [esp + 0x40]
push 2
lea ecx, [esp + 0x34]
push eax
push ecx
mov ecx, edi
call fcn.0043cb50
push 0x64
call fcn.0043d4c0
add esp, 4
lea edx, [esp + 0x40]
lea eax, [esp + 0x20]
mov ecx, edi
push 2
push edx
push eax
call fcn.0043cb50
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov dword [esp + 0xbc], 3
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x59ce18
call fcn.005318a0
mov ecx, 0x5c6628
mov dword [esp + 0xbc], ebx
call fcn.00533b90
mov ecx, esi
call fcn.004f0b20
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x59b910
call fcn.005318a0
push ecx
mov dword [esp + 0xbc], 4
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x59c0dc
call fcn.005318a0
mov ecx, 0x5c6628
mov dword [esp + 0xbc], ebx
call fcn.00533b90
mov ax, 1
mov ecx, dword [esp + 0xa4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xa0
ret