Function at 0x4114c0
Capabilities:
Check os version

Disassembly:
mov eax, dword [esp + 0x10]
sub esp, 0x16c
push ebx
mov ebx, dword [esp + 0x178]
push ebp
mov ebp, ecx
mov dword [eax], 1
push esi
push edi
mov dl, byte [ebp + 0x84]
and dl, 1
je 0x4114f6
mov dword [esp + 0x14], 0
cmp bx, 0xd
jne 0x4114fe
mov dword [esp + 0x14], 0x10001
test dl, dl
je 0x411703
mov eax, ebx
shr eax, 0x10
cmp eax, 0x10
jne 0x4116fb
mov edi, dword [esp + 0x188]
push edi
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov esi, eax
mov byte [esp + 0x118], 0
push 0x63
lea eax, [esp + 0x11d]
mov dword [esp + 0x20], esi
push 0
push eax
call fcn.00423310
xor eax, eax
add esp, 0xc
xor ebx, ebx
mov dword [esp + 0x18], eax
mov byte [esp + 0x13], al
test esi, esi
jle 0x411857
mov esi, dword [sym.imp.USER32.dll_CharNextA]
mov edi, edi
push 0x30
lea eax, [esp + 0x48]
push 0
push eax
call fcn.00423310
push 0x90
lea eax, [esp + 0x98]
mov dword [esp + 0x54], 0x30
push 0
push eax
mov dword [esp + 0x9c], 0x94
call fcn.00423310
add esp, 0x18
lea eax, [esp + 0x84]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVersionExA]
test eax, eax
je 0x4115c5
mov eax, dword [esp + 0x88]
cmp eax, 5
jae 0x4115cd
cmp eax, 4
jne 0x4115c5
cmp dword [esp + 0x8c], 0x5a
jae 0x4115cd
mov dword [esp + 0x44], 0x2c
lea eax, [esp + 0x118]
mov dword [esp + 0x6c], 0x64
mov dword [esp + 0x68], eax
lea eax, [esp + 0x44]
push eax
push 1
push ebx
push edi
mov dword [esp + 0x58], 0x3f
call dword [sym.imp.USER32.dll_GetMenuItemInfoA]
test eax, eax
je 0x411630
test dword [esp + 0x4c], 0x800
jne 0x411630
mov eax, dword [esp + 0x64]
test eax, eax
je 0x411630
cmp dword [eax], 0x1313
jne 0x411630
mov eax, dword [eax + 4]
test eax, eax
je 0x411630
mov cl, byte [eax]
test cl, cl
je 0x411630
cmp cl, 0x26
je 0x41169d
push eax
call esi
mov cl, byte [eax]
test cl, cl
jne 0x411622
mov al, byte [esp + 0x13]
inc ebx
cmp ebx, dword [esp + 0x1c]
jl 0x411560
mov ebx, 2
test al, al
je 0x411857
cmp ebx, 2
jne 0x41166a
push 0
push 0xffffffffffffffff
push 0x448
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, ebp
call fcn.0040cd40
mov eax, dword [esp + 0x18c]
pop edi
pop esi
pop ebp
mov dword [eax], 1
movzx eax, bx
shl eax, 0x10
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
movzx eax, ax
or ecx, eax
mov eax, ecx
pop ebx
add esp, 0x16c
ret 0x10
cmp byte [eax], 0
je 0x411630
movsx eax, byte [eax + 1]
movzx edi, ax
mov eax, dword [esp + 0x184]
movsx eax, al
movzx eax, ax
push eax
call dword [sym.imp.USER32.dll_CharLowerA]
push edi
mov esi, eax
call dword [sym.imp.USER32.dll_CharLowerA]
cmp eax, esi
mov al, byte [esp + 0x13]
jne 0x4116df
test al, al
jne 0x4116f1
movzx edi, bx
mov al, 1
mov dword [esp + 0x18], edi
mov byte [esp + 0x13], al
mov esi, dword [sym.imp.USER32.dll_CharNextA]
mov edi, dword [esp + 0x188]
jmp 0x411634
mov ebx, 3
jmp 0x411644
test dl, dl
jne 0x411857
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esp + 0x18]
push eax
movsx eax, bl
push eax
push 0x44e
push dword [ebp + 4]
mov dword [esp + 0x28], 0
call edi
test eax, eax
jne 0x41177a
mov edi, dword [esp + 0x18c]
push eax
push 0xffffffffffffffff
push 0x448
mov dword [edi], eax
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, ebp
call fcn.0040cd40
cmp bl, 0x2f
jne 0x411857
mov ecx, ebp
call fcn.00408410
mov ecx, dword [esp + 0x14]
test al, al
je 0x41185b
mov dword [edi], 1
mov eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x16c
ret 0x10
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x411857
lea eax, [esp + 0x74]
xorps xmm0, xmm0
push eax
push dword [ebp + 4]
movdqu xmmword [esp + 0x7c], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [esp + 0x34]
xorps xmm0, xmm0
push eax
push dword [esp + 0x1c]
movdqu xmmword [esp + 0x3c], xmm0
push 0x41d
push dword [ebp + 4]
call edi
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0
push eax
push dword [esp + 0x1c]
xorps xmm0, xmm0
push 0x417
push dword [ebp + 4]
movdqu xmmword [esp + 0x34], xmm0
call edi
mov al, byte [esp + 0x28]
test al, 4
je 0x41184f
test al, 8
jne 0x41184f
mov eax, dword [esp + 0x3c]
cmp eax, dword [esp + 0x7c]
jg 0x41184f
mov al, byte [ebp + 0x85]
test al, 2
je 0x411817
test al, 4
jne 0x411817
or al, 8
mov ecx, ebp
push 1
mov byte [ebp + 0x85], al
call fcn.004193c0
mov ecx, ebp
call fcn.00419a70
push 0
push 0x28
push pe_nt_image_headers32
push dword [ebp + 4]
call dword [sym.imp.USER32.dll_PostMessageA]
push dword [esp + 0x18]
lea ecx, [ebp + 4]
call fcn.00418e80
mov ecx, dword [esp + 0x14]
mov eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x16c
ret 0x10
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
mov ecx, dword [esp + 0x14]
pop edi
pop esi
pop ebp
mov eax, ecx
pop ebx
add esp, 0x16c
ret 0x10