Function at 0x4d289c
Capabilities:
Check os version
Link many functions at runtime

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xbc
mov dword [esp + 0x1c], 0x94
lea eax, [esp + 0x1c]
mov dword [esp], eax
call sub.KERNEL32.dll_GetVersionExA
push edx
mov dword [esp], str.uxtheme.dll
call sub.KERNEL32.dll_LoadLibraryA
push ecx
mov edi, eax
test eax, eax
je 0x4d2b87
mov dword [esp], 0x28
mov eax, dword [0x67bad4]
call dword [eax + 0x14]
mov ebx, eax
mov dword [esp + 4], str.OpenThemeData
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.CloseThemeData
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 4], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.GetThemePartSize
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 8], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.GetThemeSysSize
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 0xc], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.DrawThemeBackground
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 0x10], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.GetThemeTextExtent
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 0x18], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.DrawThemeText
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 0x14], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.IsThemeActive
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 0x1c], eax
test eax, eax
je 0x4d2b7c
mov dword [esp + 4], str.IsAppThemed
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
sub esp, 8
mov dword [ebx + 0x20], eax
test eax, eax
je 0x4d2b7c
mov eax, dword [esp + 0xd4]
mov dword [ebx + 0x24], eax
mov dword [esp + 4], str.winnative
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.00491628
mov dword [esp + 8], eax
mov dword [esp + 4], str.xpnative
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.00491324
mov ebp, eax
test eax, eax
je 0x4d2b87
mov dword [esp], 8
mov eax, dword [0x67bad4]
call dword [eax + 0x14]
mov esi, eax
mov dword [eax + 4], ebx
mov dword [eax], edi
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4d1b70
mov dword [esp], ebp
call fcn.00491614
mov dword [esp + 8], 0x4d230c
mov dword [esp + 4], esi
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004912d0
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x4d1c34
mov dword [esp + 4], str.vsapi
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.00492014
cmp dword [esp + 0x2c], 2
je 0x4d2b98
mov esi, 0x5ddd20
mov eax, dword [str.Checkbutton.indicator]
test eax, eax
je 0x4d2b19
nop
mov dword [esp], 0x20
mov eax, dword [0x67bad4]
call dword [eax + 0x14]
mov edi, eax
mov dword [eax + 4], ebx
mov dword [eax], esi
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [esi + 4]
mov dword [esp + 8], eax
mov eax, dword [esi]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.0049239c
mov dword [esp + 8], 0x4d1ba0
mov dword [esp + 4], edi
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.004912d0
add esi, 0x20
mov eax, dword [esi]
test eax, eax
jne 0x4d2ab8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d8640
mov dword [esp + 4], str.Scale.trough
mov dword [esp], ebp
call fcn.0049239c
mov dword [esp + 4], 0x5de200
mov dword [esp], ebp
call fcn.004ce17c
mov dword [esp + 8], 0x60884e
mov dword [esp + 4], str.ttk::theme::xpnative
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov eax, dword [0x67bad4]
call dword [eax + 0x44c]
xor eax, eax
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], ebx
mov eax, dword [0x67bad4]
call dword [eax + 0x18]
mov eax, 1
add esp, 0xbc
pop ebx
pop esi
pop edi
pop ebp
ret
cmp dword [esp + 0x20], 5
jbe 0x4d2aa9
mov dword [esp + 8], ebp
mov dword [esp + 4], str.vista
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
call fcn.00491324
test eax, eax
je 0x4d2aa9
mov dword [esp + 8], esi
mov dword [esp + 4], 0x4d1b70
mov dword [esp], eax
call fcn.00491614
jmp 0x4d2aa9