Function at 0x43068e
Capabilities:
Check os version

Disassembly:
push 0xa4
mov eax, 0x50a2ca
call fcn.005060cc
mov edi, ecx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xa8], edi
mov eax, dword [sym.imp.USER32.dll_DefWindowProcA]
xor ebx, ebx
mov dword [edi + 4], ebx
mov dword [edi + 0x14], ebx
mov dword [ebp - 0xb0], edi
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ebx
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0x30], ebx
lea ecx, [edi + 0x38]
mov dword [ebp - 4], ebx
call fcn.00438e83
mov byte [ebp - 4], 1
lea ecx, [edi + 0x5c]
mov dword [edi + 0x34], vtable.WTL::CMessageFilter.0
mov dword [edi], vtable.CMainFrame.1.0
mov dword [edi + 0x34], vtable.CMainFrame.0
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
call fcn.004206b3
mov dword [edi + 0x1010], ebx
mov dword [edi + 0x1014], ebx
mov dword [edi + 0x1018], ebx
mov dword [edi + 0x101c], ebx
mov dword [edi + 0x1020], 1
mov dword [edi + 0x1024], ebx
mov dword [edi + 0x1028], ebx
mov dword [edi + 0x1050], ebx
mov byte [ebp - 4], 3
lea ecx, [edi + 0x1074]
mov dword [edi + 0x1054], ebx
call fcn.0047724e
lea esi, [edi + 0x1100]
mov byte [ebp - 4], 4
mov dword [ebp - 0xa8], esi
lea ecx, [esi + 0x10]
push str.recentsave.dat
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
call fcn.0042f31b
push str.favdirssave.dat
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 5
call fcn.0042f31b
mov dword [esi + 0x50], ebx
lea ecx, [edi + 0x1154]
mov byte [ebp - 4], 6
call fcn.0047275f
mov byte [ebp - 4], 7
mov esi, ebx
mov dword [edi + 0x1184], ebx
mov dword [edi + 0x1188], ebx
lea ebx, [edi + 0x102c]
push 0x90
call fcn.004f0435
pop ecx
push esi
mov ecx, eax
mov dword [ebp - 0xa8], eax
call fcn.004756e1
inc esi
mov dword [ebx], eax
lea ebx, [ebx + 4]
cmp esi, 6
jb 0x4307b3
mov esi, dword [sym.imp.USER32.dll_RegisterWindowMessageA]
push str.commdlg_FindReplace
call esi
push str.TaskbarCreated
mov dword [0xd59db4], eax
call esi
mov edi, dword [ebp - 0xac]
push str.AnvirHookMsg
mov dword [edi + 0x118c], eax
call esi
xor ebx, ebx
mov ecx, eax
mov dword [0xd59c8c], ecx
cmp dword [0xd5b274], ebx
jne 0x430865
push 0x90
lea eax, [ebp - 0xa0]
mov dword [0xd5b274], 1
push ebx
push eax
mov dword [ebp - 0xa4], 0x94
call fcn.004f1a90
add esp, 0xc
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
imul eax, dword [ebp - 0xa0], 0xa
mov ecx, dword [0xd59c8c]
add eax, dword [ebp - 0x9c]
mov dword [0xd5b270], eax
jmp 0x43086a
mov eax, dword [0xd5b270]
cmp eax, 0x3c
jl 0x43087f
call fcn.00430648
mov ecx, dword [edi + 0x118c]
call fcn.00430648
mov dword [edi + 0x1044], ebx
mov dword [edi + 0x1048], ebx
cmp dword [edi + 0x24c], ebx
je 0x4308fa
push 0xc0
call fcn.004f0435
mov esi, eax
pop ecx
mov dword [ebp - 0xa8], esi
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.0043b08e
mov dword [esi + 0xb4], ebx
mov dword [esi + 0xb8], ebx
mov dword [esi + 0xbc], ebx
mov dword [esi], vtable.CCommandBarXPCtrl.0
mov byte [ebp - 4], 7
push 0x30
mov dword [edi + 0x1048], esi
mov dword [edi + 0x104c], esi
call fcn.004f0435
mov dword [ebp - 0xa8], eax
pop ecx
xor ecx, ecx
mov dword [eax + 4], ebx
mov dword [eax + 0x14], ebx
mov dword [eax], vtable.CMultiPaneStatusBarXPCtrl.0
mov dword [eax + 0x2c], ecx
jmp 0x43094a
push 0xb4
call fcn.004f0435
mov esi, eax
pop ecx
mov dword [ebp - 0xa8], esi
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.004399b7
mov dword [esi], vtable.WTL::CCommandBarCtrl.0
mov byte [ebp - 4], 7
push 0x2c
mov dword [edi + 0x1044], esi
mov dword [edi + 0x104c], esi
call fcn.004f0435
mov dword [ebp - 0xa8], eax
pop ecx
xor ecx, ecx
mov dword [eax + 4], ebx
mov dword [eax + 0x14], ebx
mov dword [eax], vtable.WTL::CMultiPaneStatusBarCtrl.0
mov dword [eax + 0x18], ebx
lea esi, [edi + 0x1058]
mov dword [eax + 0x1c], ebx
mov ebx, dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [eax + 0x20], ebx
mov dword [eax + 0x24], ecx
mov dword [eax + 0x28], ecx
push 6
mov dword [edi + 0x1070], eax
pop edi
push 0x24
call fcn.004f0435
mov dword [ebp - 0xa8], eax
pop ecx
xor ecx, ecx
mov dword [eax + 4], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ebx
mov dword [eax], vtable.CToolBarXPCtrl.0
mov dword [esi], eax
lea esi, [esi + 4]
sub edi, 1
jne 0x43096e
mov eax, dword [ebp - 0xac]
call fcn.00506076
ret