Function at 0x4a614060
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe24
push ebx
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4a6145b9
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4a6c8011], 0
je 0x4a614099
cmp dword [0x4a6d1ca0], 0
jne 0x4a61458d
mov byte [0x4a6c8011], 1
call sub.kernel32.dll_GetVersion_1
test eax, 0x80000000
jne 0x4a61411a
lea eax, [ebp - 0x1b4]
mov edx, 0x11c
call fcn.4a60df34
mov dword [ebp - 0x1b4], 0x11c
push 0x4a6145c8
push 0x4a6145e4
call sub.kernel32.dll_GetModuleHandleW_1
push eax
call fcn.4a60d6e0
mov ebx, eax
test ebx, ebx
je 0x4a6140f2
lea eax, [ebp - 0x1b4]
push eax
call ebx
test eax, eax
je 0x4a614174
lea eax, [ebp - 0x1b4]
push eax
call sub.kernel32.dll_GetVersionExW
test eax, eax
jne 0x4a614174
mov dword [ebp - 0x1b4], 0x114
lea eax, [ebp - 0x1b4]
push eax
call sub.kernel32.dll_GetVersionExW
jmp 0x4a614174
lea eax, [ebp - 0x98]
mov edx, 0x94
call fcn.4a60df34
mov dword [ebp - 0x98], 0x94
lea eax, [ebp - 0x98]
push eax
call sub.kernel32.dll_GetVersionExA
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x98]
mov ecx, 0x94
call fcn.4a604a4c
mov ecx, 0x80
lea eax, [ebp - 0x84]
lea edx, [ebp - 0x1a0]
movzx ebx, byte [eax]
mov word [edx], bx
add edx, 2
inc eax
dec ecx
jne 0x4a614167
mov eax, dword [ebp - 0x1b0]
mov dword [0x4a6d1c84], eax
mov eax, dword [ebp - 0x1ac]
mov dword [0x4a6d1c88], eax
mov eax, 0x4a6d1c90
lea edx, [ebp - 0x1a0]
mov ecx, 0x80
call fcn.4a6082f8
mov eax, dword [ebp - 0x1a4]
cmp eax, 1
sete dl
mov byte [0x4a6d1c94], dl
cmp eax, 2
sete al
mov byte [0x4a6d1c96], al
cmp byte [0x4a6d1c94], 0
je 0x4a6141d3
movzx eax, word [ebp - 0x1a8]
mov dword [0x4a6d1c8c], eax
jmp 0x4a6141de
mov eax, dword [ebp - 0x1a8]
mov dword [0x4a6d1c8c], eax
mov byte [0x4a6d1c98], 0
xor eax, eax
mov dword [0x4a6d1c9c], eax
cmp byte [0x4a6d1c94], 0
je 0x4a614298
mov eax, dword [0x4a6d1c84]
sub eax, 4
jb 0x4a614280
je 0x4a614207
jmp 0x4a614279
mov eax, dword [0x4a6d1c88]
sub eax, 0xa
jb 0x4a61421b
je 0x4a614239
dec eax
sub eax, 0x50
jb 0x4a614267
jmp 0x4a614270
cmp dword [0x4a6d1c8c], 0x3e8
jbe 0x4a614230
mov byte [0x4a6d1c98], 2
jmp 0x4a614280
mov byte [0x4a6d1c98], 1
jmp 0x4a614280
mov eax, dword [0x4a6d1c8c]
cmp eax, 0xa8c
jbe 0x4a61424e
mov byte [0x4a6d1c98], 5
jmp 0x4a614280
cmp eax, 0x7d0
jbe 0x4a61425e
mov byte [0x4a6d1c98], 4
jmp 0x4a614280
mov byte [0x4a6d1c98], 3
jmp 0x4a614280
mov byte [0x4a6d1c98], 5
jmp 0x4a614280
mov byte [0x4a6d1c98], 6
jmp 0x4a614280
mov byte [0x4a6d1c98], 6
movzx eax, byte [0x4a6d1c98]
mov byte [0x4a6d1c95], al
mov byte [0x4a6d1c97], 0
jmp 0x4a6144a0
cmp byte [0x4a6d1c96], 0
je 0x4a6144a0
mov eax, dword [0x4a6d1c84]
cmp eax, 0xa
ja case.0x4a6142b3.7
jmp dword [eax*4 + 0x4a6142ba]
mov byte [0x4a6d1c98], 7
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 8
jmp 0x4a6143f3
mov eax, dword [0x4a6d1c88]
sub eax, 1
jb 0x4a61430c
je 0x4a614318
jmp 0x4a614324
mov byte [0x4a6d1c98], 9
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0xa
jmp 0x4a6143f3
cmp byte [ebp - 0x9a], 1
jne 0x4a614339
mov byte [0x4a6d1c98], 0xa
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0xb
jmp 0x4a6143f3
mov eax, dword [0x4a6d1c88]
sub eax, 1
jb 0x4a614359
je 0x4a614377
dec eax
je 0x4a614392
dec eax
je 0x4a6143ad
jmp 0x4a6143c8
cmp byte [ebp - 0x9a], 1
jne 0x4a61436e
mov byte [0x4a6d1c98], 0xc
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0xd
jmp 0x4a6143f3
cmp byte [ebp - 0x9a], 1
jne 0x4a614389
mov byte [0x4a6d1c98], 0xe
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0xf
jmp 0x4a6143f3
cmp byte [ebp - 0x9a], 1
jne 0x4a6143a4
mov byte [0x4a6d1c98], 0x10
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0x11
jmp 0x4a6143f3
cmp byte [ebp - 0x9a], 1
jne 0x4a6143bf
mov byte [0x4a6d1c98], 0x12
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0x13
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0x16
jmp 0x4a6143f3
cmp byte [ebp - 0x9a], 1
jne 0x4a6143e3
mov byte [0x4a6d1c98], 0x14
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0x15
jmp 0x4a6143f3
mov byte [0x4a6d1c98], 0x16
mov byte [0x4a6d1c95], 0
movzx eax, byte [0x4a6d1c98]
mov byte [0x4a6d1c97], al
cmp dword [ebp - 0x1b4], 0x11c
jb 0x4a614420
movzx eax, word [ebp - 0xa0]
mov dword [0x4a6d1c9c], eax
jmp 0x4a61445c
mov eax, dword [0x4a6d1c90]
call fcn.4a607a58
cmp eax, 0xe
jl 0x4a61445c
mov eax, dword [0x4a6d1c90]
call fcn.4a607a58
sub eax, 0xd
push eax
mov eax, 0x4a6d1c90
call fcn.4a607b20
lea edx, [eax + 0x1a]
mov ebx, dword [0x4a6ce754]
mov ebx, dword [ebx]
xor eax, eax
pop ecx
call ebx
mov dword [0x4a6d1c9c], eax
push 0x4a6145f8
push 0x4a614620
call sub.kernel32.dll_GetModuleHandleW_1
push eax
call fcn.4a60d6e0
mov ebx, eax
test ebx, ebx
je 0x4a6144a0
lea eax, [ebp - 0x1d8]
mov edx, 0x24
call fcn.4a60df34
lea eax, [ebp - 0x1d8]
push eax
call ebx
cmp word [ebp - 0x1d8], 9
sete al
mov byte [0x4a6d1c99], al
lea eax, [ebp - 0x1dc]
movzx edx, byte [0x4a6d1c98]
mov edx, dword [edx*4 + 0x4a6c7f84]
mov ecx, 0
call fcn.4a607c04
mov edx, dword [ebp - 0x1dc]
mov eax, 0x4a6d1ca0
call fcn.4a608314
cmp byte [0x4a6d1c96], 0
je 0x4a61458d
push 0x59
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4a6144f5
mov eax, 0x4a6d1ca0
mov edx, 0x4a614648
call fcn.4a6083e4
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4a61450f
mov eax, 0x4a6d1ca0
mov edx, 0x4a61465c
call fcn.4a6083e4
push 0x58
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4a614529
mov eax, 0x4a6d1ca0
mov edx, 0x4a614680
call fcn.4a6083e4
cmp byte [0x4a6d1c98], 0xc
jae 0x4a61454c
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x4a61454c
mov eax, 0x4a6d1ca0
mov edx, 0x4a6146a0
call fcn.4a6083e4
cmp byte [0x4a6d1c99], 0
je 0x4a614564
mov eax, 0x4a6d1ca0
mov edx, 0x4a6146c8
call fcn.4a6083e4
cmp dword [0x4a6d1c90], 0
je 0x4a61458d
push dword [0x4a6d1ca0]
push 0x4a6146e0
push dword [0x4a6d1c90]
mov eax, 0x4a6d1ca0
mov edx, 3
call fcn.4a6084c4
mov eax, dword [ebp - 4]
mov edx, 0x4a6d1c84
mov ecx, dword [0x4a613ce4]
call fcn.4a608ae8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a6145c0
lea eax, [ebp - 0x1dc]
call fcn.4a6075ac
ret