Function at 0x40b6f0
Capabilities:
Check os version

Disassembly:
sub esp, 0xa0
mov eax, dword [0x4844f0]
xor eax, esp
mov dword [esp + 0x9c], eax
push esi
push edi
push str.StillMnt_Init
call fcn.00404b50
push str.StillMnt_Init
push 0x48d1c0
call fcn.00404890
xor edi, edi
push 0x9c
lea eax, [esp + 0x18]
push edi
push eax
mov dword [0x486248], edi
call fcn.00440bc0
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExA]
add esp, 0x18
lea ecx, [esp + 8]
push ecx
mov dword [esp + 0xc], 0x9c
call esi
test eax, eax
jne 0x40b766
lea edx, [esp + 8]
push edx
mov dword [esp + 0xc], 0x94
call esi
test eax, eax
je 0x40b777
cmp dword [esp + 0xc], 5
jne 0x40b777
mov dword [0x486248], 1
mov dword [0x486258], 0x3e7
mov dword [0x48624c], 1
mov dword [0x486238], edi
mov dword [0x486250], 1
call fcn.00404e90
mov esi, dword [sym.imp.USER32.dll_RegisterWindowMessageA]
push str.VMStillMntLaunchap
mov dword [0x4867b4], eax
call esi
push str.VMStillMntSnapshot
mov dword [0x4866a8], eax
call esi
push str.VMStillMntTwnActive
mov dword [0x4866a4], eax
call esi
push str.VMStillMntTwnInactive
mov dword [0x4866a0], eax
call esi
mov dword [0x48669c], eax
call fcn.00405fd0
push eax
push str.MaxPics___d
mov dword [0x4866ac], eax
call fcn.00404b50
push 0x48d1b8
push str.MntLaunchAPEnable
push 0x486578
call fcn.004077e0
add esp, 0x14
test eax, eax
jne 0x40b811
mov dword [0x48d1b8], edi
mov eax, dword [0x48d1b8]
push eax
push str.bLaunchAPEnable___d
call fcn.00404b50
mov ecx, dword [0x48d1b8]
push ecx
push str.bLaunchAPEnable___d
push 0x48d1c0
call fcn.00404890
push 0x48d1bc
push str.MntSnapShotAddr
push 0x486578
call fcn.004077e0
add esp, 0x20
test eax, eax
jne 0x40b858
mov dword [0x48d1bc], edi
mov edx, dword [0x48d1bc]
push edx
push str.wSnapShotAddr___d
call fcn.00404b50
push 0x48646c
push str.MntSSEnable
push 0x486578
call fcn.004077e0
add esp, 0x14
test eax, eax
jne 0x40b88a
mov dword [0x48646c], edi
mov eax, dword [0x48646c]
push eax
push str.SSEnable___d
call fcn.00404b50
mov ecx, dword [0x48646c]
push ecx
push str.SSEnable___d
push 0x48d1c0
call fcn.00404890
push 0x486364
push str.MntPollingEnable
push 0x486578
call fcn.004077e0
add esp, 0x20
test eax, eax
jne 0x40b8d1
mov dword [0x486364], edi
mov edx, dword [0x486364]
push edx
push str.PollingEnable___d
call fcn.00404b50
push 0x486254
push str.MntRotationEnable
push 0x486578
call fcn.004077e0
add esp, 0x14
test eax, eax
jne 0x40b903
mov dword [0x486254], edi
mov eax, dword [0x486254]
push eax
push str.Rotation_support___d
call fcn.00404b50
add esp, 8
cmp dword [0x48646c], edi
jne 0x40b947
cmp dword [0x486364], edi
jne 0x40b947
cmp dword [0x486254], edi
jne 0x40b947
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x9c]
xor ecx, esp
call fcn.0043e789
add esp, 0xa0
ret
mov eax, dword [0x4866ac]
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
add ecx, ecx
push ecx
call fcn.0043ffd1
add esp, 4
cmp eax, edi
mov dword [0x48cda4], eax
je 0x40b92e
mov ecx, dword [0x4866ac]
mov edx, ecx
shl edx, 4
sub edx, ecx
add edx, edx
add edx, edx
push edx
push edi
push eax
call fcn.00440bc0
mov eax, dword [0x48cd88]
push eax
call fcn.00404de0
push 0x48cda8
push str.Snapshot1
push 0x486578
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [0x48cd7c], eax
call fcn.00405100
push 0x48cda8
push str.SnapApp1___s
call fcn.00404b50
push 0x32c8
push edi
push 0x489a90
call fcn.00440bc0
add esp, 0x34
call fcn.00405880
call fcn.00405720
call fcn.0040b5b0
mov ecx, dword [esp + 0xa4]
mov dword [0x486698], edi
mov dword [0x486694], edi
mov dword [0x486690], edi
pop edi
pop esi
xor ecx, esp
mov eax, 1
call fcn.0043e789
add esp, 0xa0
ret