Function at 0x445250
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x158
mov eax, dword [0x4f6cdc]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
xor ebx, ebx
push edi
mov edi, dword [ebp + 0x10]
mov esi, ecx
cmp eax, 0x87
ja 0x4453a0
je 0x445368
lea ecx, [eax - 6]
cmp ecx, 0x37
ja case.0x445294.7
movzx ecx, byte [ecx + 0x445564]
jmp dword [ecx*4 + 0x44554c]
mov ecx, dword [esi + 0x874]
test ecx, ecx
je 0x4452c0
cmp edi, 0xfffffffc
jne 0x4452c0
mov edx, dword [ebp + 0xc]
push ecx
push edx
push 0x4d488c
call sub.OLEACC.dll_LresultFromObject
mov ebx, eax
jmp 0x445535
mov ecx, dword [ebp + 0xc]
mov edx, dword [esi + 4]
push edi
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ebx, eax
jmp 0x445535
mov ecx, dword [esi + 4]
lea eax, [ebp - 0x44]
push eax
push ecx
call dword [sym.imp.USER32.dll_BeginPaint]
push eax
mov ecx, esi
call fcn.00444560
mov eax, dword [esi + 4]
lea edx, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x445535
mov ecx, dword [ebp + 0xc]
push edi
push ecx
mov ecx, esi
call fcn.004448f0
mov ebx, eax
jmp 0x445535
mov ecx, esi
call fcn.00440020
mov edx, dword [esi + 8]
push 0
push 0
push 0x658
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x445535
mov ecx, dword [ebp + 0xc]
mov edx, dword [esi + 4]
push edi
push ecx
push eax
push edx
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [esi + 4]
mov ebx, eax
mov eax, dword [esi + 0x870]
neg eax
sbb eax, eax
add eax, 4
push eax
push 0xfffffffffffffffc
push ecx
push 0x8005
call dword [sym.imp.USER32.dll_NotifyWinEvent]
jmp 0x445535
test edi, edi
je 0x445396
cmp dword [edi + 4], 0x101
jne 0x445396
mov edi, dword [edi + 8]
cmp edi, 9
je 0x445382
cmp edi, 0x20
jne 0x445396
mov esi, dword [esi + 4]
push 0
push esi
push esi
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
mov ebx, 4
jmp 0x445535
cmp eax, 0x200
ja 0x44550e
je 0x445500
mov ecx, eax
sub ecx, 0x101
je 0x4453d5
sub ecx, 0x10
jne case.0x445294.7
mov edx, dword [ebp + 0xc]
push edi
push edx
mov ecx, esi
call fcn.004448a0
jmp 0x445535
mov eax, dword [ebp + 0xc]
cmp eax, 0x1b
jne 0x4453f5
mov eax, dword [esi + 8]
push 0
push 0
push 0x658
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x445535
cmp eax, 9
je 0x445456
cmp eax, 0x26
je 0x445456
cmp eax, 0x28
je 0x445456
cmp eax, 0x27
je 0x445456
cmp eax, 0x25
je 0x445456
cmp eax, 0x20
jne 0x445535
cmp dword [esi + 0x870], ebx
je 0x44542a
mov eax, dword [esi + 0x34]
shl eax, 0x10
add eax, dword [esi + 0x30]
jmp 0x445433
mov eax, dword [esi + 0x44]
shl eax, 0x10
add eax, dword [esi + 0x40]
push eax
push 0
mov ecx, esi
call fcn.00444b10
mov ecx, dword [esi + 4]
push edi
push 0x20
push 0x101
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ebx, eax
jmp 0x445535
xor edx, edx
cmp dword [esi + 0x870], edx
push 0
sete dl
mov ecx, esi
mov dword [esi + 0x870], edx
call fcn.0043ff30
push 0x114
lea eax, [ebp - 0x158]
push 0
push eax
call fcn.0049eae0
add esp, 0xc
lea ecx, [ebp - 0x158]
push ecx
mov dword [ebp - 0x158], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x148], 2
jne 0x4454df
cmp dword [ebp - 0x154], 6
jne 0x4454df
cmp dword [ebp - 0x150], ebx
jne 0x4454df
cmp dword [esi + 0x870], ebx
je 0x4454c7
mov esi, dword [esi + 0x868]
jmp 0x4454cd
mov esi, dword [esi + 0x86c]
push 0
push 0xfffffffffffffffc
push esi
push 0x8005
call dword [sym.imp.USER32.dll_NotifyWinEvent]
jmp 0x445535
mov edx, dword [esi + 0x870]
mov eax, dword [esi + 4]
neg edx
sbb edx, edx
add edx, 4
push edx
push 0xfffffffffffffffc
push eax
push 0x8005
call dword [sym.imp.USER32.dll_NotifyWinEvent]
jmp 0x445535
mov ecx, dword [ebp + 0xc]
push edi
push ecx
mov ecx, esi
call fcn.00444bb0
jmp 0x445535
cmp eax, 0x201
je 0x445529
mov edx, dword [ebp + 0xc]
push edi
push edx
push eax
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ebx, eax
jmp 0x445535
mov ecx, dword [ebp + 0xc]
push edi
push ecx
mov ecx, esi
call fcn.00444b10
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.0049f71b
mov esp, ebp
pop ebp
ret 0xc