Function at 0x428d40
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x454fa5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x250
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 0x58], ebx
push str.E9A6339A_EF7C_4944_83D3_AA89E6DD0607
push str.32768
mov dword [ebp - 4], 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov edi, dword [ebp + 8]
push edi
mov esi, eax
push 0xffffffffffffffeb
push esi
mov dword [ebp - 0x4c], esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x45be22
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov edx, dword [ebx + 0x20]
lea ecx, [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x50], ecx
test edx, edx
jle 0x428dc0
mov ecx, dword [ecx]
lea esp, [esp]
cmp dword [ecx], edi
je 0x428e3e
inc eax
add ecx, 4
cmp eax, edx
jl 0x428db0
xorps xmm0, xmm0
lea eax, [ebp - 0x74]
push eax
movq qword [ebp - 0x70], xmm0
push edi
movq qword [ebp - 0x68], xmm0
movq qword [ebp - 0x60], xmm0
mov dword [ebp - 0x74], 0x1c
mov dword [ebp - 0x70], 8
call dword [sym.imp.USER32.dll_GetMenuInfo]
test eax, eax
je 0x428dfd
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x428e82
xorps xmm0, xmm0
movq qword [ebp - 0x30], xmm0
push 0x10
movq qword [ebp - 0x28], xmm0
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x1c
mov dword [ebp - 0x30], 8
call fcn.0043df34
mov esi, eax
add esp, 4
mov dword [ebp - 0x10], eax
test esi, esi
je 0x428e68
xorps xmm0, xmm0
movq qword [esi], xmm0
movq qword [esi + 8], xmm0
jmp 0x428e6d
cmp eax, 0xffffffff
je 0x428dc0
mov eax, dword [ebp + 0xc]
mov dword [eax], 1
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
xor esi, esi
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x34]
push eax
mov byte [esi + 5], 0
mov dword [esi + 0xc], ebx
push edi
mov dword [ebp - 0x1c], esi
call dword [sym.imp.USER32.dll_SetMenuInfo]
push edi
mov byte [ebp + 0xb], 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
xor ebx, ebx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x18], 0xffffffff
test eax, eax
jle 0x4290db
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x140], ax
lea eax, [ebp - 0x13e]
push eax
call fcn.0043f760
push 0x30
lea eax, [ebp - 0x48]
push 0
push eax
call fcn.0043f760
push 0x110
lea eax, [ebp - 0x254]
push 0
push eax
mov dword [ebp - 0x48], 0x30
mov dword [ebp - 0x258], 0x114
call fcn.0043f760
add esp, 0x24
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x428f1a
mov eax, dword [ebp - 0x254]
cmp eax, 5
jae 0x428f21
cmp eax, 4
jne 0x428f1a
cmp dword [ebp - 0x250], 0x5a
jae 0x428f21
mov dword [ebp - 0x48], 0x2c
lea eax, [ebp - 0x140]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x48]
push eax
push 1
push ebx
push edi
mov dword [ebp - 0x20], 0x64
mov dword [ebp - 0x44], 0x3e
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
test ebx, ebx
jne 0x428f5d
cmp dword [ebp - 0x38], 0x29b
jne 0x428f5d
mov cl, 1
mov byte [ebp + 0xb], cl
jmp 0x4290ba
push 0x1c
call fcn.0043df34
mov esi, eax
add esp, 4
test esi, esi
je 0x428f8e
xorps xmm0, xmm0
movq qword [esi], xmm0
movq qword [esi + 8], xmm0
movq qword [esi + 0x10], xmm0
mov dword [esi + 0x18], 0
mov dword [esi + 0x14], 0xffffffff
jmp 0x428f90
xor esi, esi
mov eax, dword [ebp - 0x18]
inc eax
push 0x400
mov dword [esi], edi
mov dword [ebp - 0x18], eax
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x40]
push ebx
push edi
mov dword [esi + 0xc], eax
call dword [sym.imp.USER32.dll_GetMenuState]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x40]
or eax, 0x100
cmp dword [ebp - 0x38], 0x29b
mov dword [ebp - 0x40], eax
je 0x428fcc
test byte [esi + 0x10], 2
je 0x428fd4
or eax, 0x800
mov dword [ebp - 0x40], eax
shr eax, 9
and al, 1
mov byte [esi + 0x18], al
cmp word [ebp - 0x140], 0x28
lea eax, [ebp - 0x140]
mov dword [ebp + 0xc], eax
jne 0x42902c
push 0x29
lea eax, [ebp - 0x13e]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrIW]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x42902c
lea ecx, [ebp - 0x13e]
cmp eax, ecx
jbe 0x42902c
mov eax, ecx
push eax
call fcn.0043e3cc
mov ecx, eax
mov eax, dword [ebp - 0x14]
add eax, 2
add esp, 4
mov dword [ebp + 0xc], eax
test ecx, ecx
js 0x42902c
mov dword [esi + 0x14], ecx
mov ecx, dword [ebp - 0x58]
push esi
mov eax, dword [ecx]
lea edx, [ebp - 0x48]
push edx
call dword [eax]
test dword [esi + 0xc], 0x800
je 0x42904a
mov dword [esi + 8], 0
jmp 0x42908d
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x42908d
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043c71a
add esp, 4
mov dword [esi + 8], eax
push dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [esi + 8]
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov word [eax + ecx*2], dx
mov eax, dword [ebp - 0x40]
mov ecx, 0x20
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x28], esi
cmp eax, dword [esi + 0xc]
mov eax, 0x30
cmovne ecx, eax
lea eax, [ebp - 0x48]
push eax
push 1
push ebx
push edi
mov dword [ebp - 0x44], ecx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov cl, byte [ebp + 0xb]
inc ebx
cmp ebx, dword [ebp - 0x54]
jl 0x428ea1
test cl, cl
je 0x4290dd
push 0x400
push 0
push edi
call dword [sym.imp.USER32.dll_RemoveMenu]
mov cl, byte [ebp + 0xb]
jmp 0x4290dd
mov cl, bl
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4290ec
mov byte [eax + 4], cl
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x50]
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], edi
call fcn.00429ff0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8