Function at 0x414380
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x388
mov eax, dword [0x4302ec]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x1f0
xor edi, edi
lea eax, [ebp - 0x250]
push edi
push eax
mov esi, ecx
mov dword [ebp - 0x254], 0x1f4
call fcn.00418c80
add esp, 0xc
push edi
lea ecx, [ebp - 0x254]
push ecx
push 0x1f4
push 0x29
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x414536
push 0x58
lea edx, [ebp - 0x5c]
push edi
push edx
mov dword [ebp - 0x60], edi
call fcn.00418c80
mov eax, dword [esi + 0xa4]
add esp, 0xc
cmp eax, edi
je 0x4143ff
lea ecx, [ebp - 0x60]
push ecx
push 0x5c
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x174]
jne 0x4144b3
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x170]
jne 0x4144b3
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0x16c]
jne 0x4144b3
mov edx, dword [ebp - 0x54]
cmp edx, dword [ebp - 0x168]
jne 0x4144b3
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x164]
jne 0x4144b3
mov cl, byte [ebp - 0x4c]
cmp cl, byte [ebp - 0x160]
jne 0x4144b3
mov dl, byte [ebp - 0x4b]
cmp dl, byte [ebp - 0x15f]
jne 0x4144b3
mov al, byte [ebp - 0x4a]
cmp al, byte [ebp - 0x15e]
jne 0x4144b3
mov cl, byte [ebp - 0x49]
cmp cl, byte [ebp - 0x15d]
jne 0x4144b3
mov dl, byte [ebp - 0x48]
cmp dl, byte [ebp - 0x15c]
jne 0x4144b3
mov al, byte [ebp - 0x47]
cmp al, byte [ebp - 0x15b]
jne 0x4144b3
mov cl, byte [ebp - 0x46]
cmp cl, byte [ebp - 0x15a]
jne 0x4144b3
mov dl, byte [ebp - 0x45]
cmp dl, byte [ebp - 0x159]
jne 0x4144b3
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x414536
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov ebx, eax
cmp ebx, edi
je 0x414536
cmp dword [esi + 0xa4], edi
je 0x4144e5
mov eax, dword [esi + 0xa4]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
test eax, eax
je 0x4144e5
mov dword [esi + 0xa4], edi
mov eax, dword [esi + 0xa4]
cmp eax, edi
je 0x4144fa
cmp eax, ebx
je 0x4144fa
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
mov ecx, ebx
push ecx
mov dword [esi + 0xa4], ebx
mov edx, dword [esi + 4]
push 0x30
push edx
call edi
mov eax, dword [esi + 4]
push 0x429528
push 0
push 0x44d
push eax
call edi
mov ecx, dword [esi + 4]
push 0
push 0
push 0x421
push ecx
call edi
xor edi, edi
mov eax, dword [esi + 4]
push eax
mov dword [ebp - 0x384], eax
call dword [sym.imp.USER32.dll_GetWindowDC]
mov ebx, eax
mov eax, dword [esi + 0xa4]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x424
lea edx, [ebp - 0x380]
push edx
push 0xffffffffffffffff
push 0x429524
mov dword [ebp - 0x380], edi
mov dword [ebp - 0x37c], edi
mov dword [ebp - 0x378], edi
mov dword [ebp - 0x374], edi
mov edi, dword [sym.imp.USER32.dll_DrawTextW]
push ebx
mov dword [ebp - 0x370], eax
call edi
mov eax, dword [ebp - 0x378]
sub eax, dword [ebp - 0x380]
cmp eax, 4
jge 0x4145d8
lea ecx, [ebp - 0x380]
push ecx
call dword [sym.imp.USER32.dll_SetRectEmpty]
push 0x424
lea edx, [ebp - 0x380]
push edx
push 0xffffffffffffffff
push 0x429520
push ebx
call edi
mov eax, dword [ebp - 0x378]
sub eax, dword [ebp - 0x380]
mov dword [esi + 0xb0], eax
jmp 0x4145e2
mov dword [esi + 0xb0], 0
mov ecx, dword [ebp - 0x370]
push ecx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x110
xor edi, edi
lea edx, [ebp - 0x364]
push edi
push edx
mov dword [ebp - 0x368], 0x114
call fcn.00418c80
add esp, 0xc
lea eax, [ebp - 0x368]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x364]
cmp eax, 5
jb 0x4146da
push edi
lea ecx, [ebp - 0x370]
push ecx
push edi
push 0x100a
mov dword [ebp - 0x370], 1
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x41465b
cmp dword [ebp - 0x370], edi
jne 0x41465b
mov al, 1
jmp 0x41465d
xor al, al
mov dl, byte [esi + 0x85]
and al, 1
or al, 4
add al, al
and dl, 0xfd
or al, dl
mov byte [esi + 0x85], al
shr al, 1
not al
and al, 1
movzx eax, al
push eax
mov ecx, esi
call fcn.00413a90
mov eax, dword [ebp - 0x364]
cmp eax, 5
jne 0x41469b
cmp dword [ebp - 0x360], 1
jae 0x41469d
jmp 0x4146da
jbe 0x4146da
push edi
lea ecx, [ebp - 0x370]
push ecx
push edi
push 0x1022
mov dword [ebp - 0x370], edi
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x4146c7
cmp dword [ebp - 0x370], edi
je 0x4146c7
mov al, 1
jmp 0x4146c9
xor al, al
mov dl, byte [esi + 0x85]
xor dl, al
and dl, 1
xor byte [esi + 0x85], dl
call fcn.00412af0
test al, al
je 0x4147eb
lea eax, [ebp - 0x388]
push eax
lea ecx, [ebp - 0x370]
push ecx
mov dword [ebp - 0x370], edi
call fcn.00412a90
add esp, 8
test eax, eax
jl 0x4147eb
cmp dword [ebp - 0x370], 6
jb 0x4147eb
test byte [esi + 0x58], 0x10
jne 0x4147eb
push str.uxtheme.dll
mov byte [ebp - 0x369], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
test edi, edi
je 0x4147b7
push str.IsThemeActive
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x414757
call eax
mov byte [ebp - 0x369], 1
test eax, eax
jne 0x41475e
mov byte [ebp - 0x369], 0
push str.IsAppThemed
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [ebp - 0x369], 0
je 0x414784
test eax, eax
je 0x414784
call eax
mov byte [ebp - 0x369], 1
test eax, eax
jne 0x41478b
mov byte [ebp - 0x369], 0
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [ebp - 0x369], 0
jne 0x4147b7
test byte [esi + 0x86], 1
je 0x4147b7
cmp dword [esi + 0x44], 0
je 0x4147b7
cmp dword [esi + 0x50], 0
jle 0x4147b7
mov ecx, esi
call fcn.0040bfd0
mov dl, byte [esi + 0x86]
xor dl, byte [ebp - 0x369]
mov eax, dword [ebp - 0x384]
push ebx
and dl, 1
xor byte [esi + 0x86], dl
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00418c6f
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x369], 0
jmp 0x41479b