Function at 0x100b7c5b
Capabilities:
Check os version

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0x384
mov eax, dword [0x1019c8c8]
xor eax, ebp
mov dword [ebp + 0x74], eax
push ebx
push esi
push edi
mov esi, ecx
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x1dc]
mov eax, 0x1f4
push ecx
push eax
push 0x29
mov dword [ebp - 0x1dc], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x100b7dbb
push 0x5c
lea eax, [ebp + 0x18]
push ebx
push eax
call fcn.101027c0
lea edi, [esi + 0xa4]
add esp, 0xc
cmp dword [edi], ebx
je 0x100b7cbf
lea eax, [ebp + 0x18]
push eax
mov ecx, edi
call fcn.100b554e
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp - 0xfc]
jne 0x100b7d6f
mov eax, dword [ebp + 0x1c]
cmp eax, dword [ebp - 0xf8]
jne 0x100b7d6f
mov eax, dword [ebp + 0x20]
cmp eax, dword [ebp - 0xf4]
jne 0x100b7d6f
mov eax, dword [ebp + 0x24]
cmp eax, dword [ebp - 0xf0]
jne 0x100b7d6f
mov eax, dword [ebp + 0x28]
cmp eax, dword [ebp - 0xec]
jne 0x100b7d6f
mov al, byte [ebp + 0x2c]
cmp al, byte [ebp - 0xe8]
jne 0x100b7d6f
mov al, byte [ebp + 0x2d]
cmp al, byte [ebp - 0xe7]
jne 0x100b7d6f
mov al, byte [ebp + 0x2e]
cmp al, byte [ebp - 0xe6]
jne 0x100b7d6f
mov al, byte [ebp + 0x2f]
cmp al, byte [ebp - 0xe5]
jne 0x100b7d6f
mov al, byte [ebp + 0x30]
cmp al, byte [ebp - 0xe4]
jne 0x100b7d6f
mov al, byte [ebp + 0x31]
cmp al, byte [ebp - 0xe3]
jne 0x100b7d6f
mov al, byte [ebp + 0x32]
cmp al, byte [ebp - 0xe2]
jne 0x100b7d6f
mov al, byte [ebp + 0x33]
cmp al, byte [ebp - 0xe1]
jne 0x100b7d6f
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x100b7dbb
lea eax, [ebp - 0xfc]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
cmp eax, ebx
mov dword [ebp - 0x2f4], eax
je 0x100b7dbb
cmp dword [edi], ebx
je 0x100b7d91
mov ecx, edi
call fcn.100173ca
push dword [ebp - 0x2f4]
mov ecx, edi
call fcn.10017253
push 1
push dword [edi]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x30
push dword [esi + 4]
call edi
push ebx
push ebx
push 0x421
push dword [esi + 4]
call edi
push dword [esi + 4]
lea ecx, [ebp - 0x2fc]
call fcn.100490e2
push dword [esi + 0xa4]
push dword [ebp - 0x2fc]
call dword [sym.imp.GDI32.dll_SelectObject]
mov edi, dword [sym.imp.USER32.dll_DrawTextW]
push 0x424
mov dword [ebp - 0x2f4], eax
lea eax, [ebp - 0x30c]
push eax
push 0xffffffffffffffff
push 0x1015e98c
push dword [ebp - 0x2fc]
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x308], ebx
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x300], ebx
call edi
mov eax, dword [ebp - 0x304]
sub eax, dword [ebp - 0x30c]
cmp eax, 4
jge 0x100b7e67
lea eax, [ebp - 0x30c]
push eax
call dword [sym.imp.USER32.dll_SetRectEmpty]
push 0x424
lea eax, [ebp - 0x30c]
push eax
push 0xffffffffffffffff
push 0x10162574
push dword [ebp - 0x2fc]
call edi
mov eax, dword [ebp - 0x304]
sub eax, dword [ebp - 0x30c]
mov dword [esi + 0xb0], eax
jmp 0x100b7e6d
mov dword [esi + 0xb0], ebx
push dword [ebp - 0x2f4]
push dword [ebp - 0x2fc]
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x110
lea eax, [ebp - 0x2ec]
push ebx
push eax
mov dword [ebp - 0x2f0], 0x114
call fcn.101027c0
add esp, 0xc
lea eax, [ebp - 0x2f0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x2ec], 5
jb 0x100b7f60
push ebx
lea eax, [ebp - 0x2f4]
push eax
push ebx
push 0x100a
mov dword [ebp - 0x2f4], 1
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x100b7ee6
cmp dword [ebp - 0x2f4], ebx
jne 0x100b7ee6
mov al, 1
jmp 0x100b7ee8
xor al, al
and al, 1
or al, 4
lea edi, [esi + 0x85]
mov cl, byte [edi]
add al, al
and cl, 0xfd
or al, cl
mov byte [edi], al
shr al, 1
not al
mov ecx, esi
and eax, 0xffffff01
push eax
call fcn.100b5caa
cmp dword [ebp - 0x2ec], 5
jne 0x100b7f27
cmp dword [ebp - 0x2e8], 1
jae 0x100b7f29
cmp dword [ebp - 0x2ec], 5
jbe 0x100b7f60
push ebx
lea eax, [ebp - 0x2f4]
push eax
push ebx
push 0x1022
mov dword [ebp - 0x2f4], ebx
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x100b7f51
cmp dword [ebp - 0x2f4], ebx
je 0x100b7f51
mov bl, 1
lea eax, [esi + 0x85]
mov cl, byte [eax]
xor cl, bl
and cl, 1
xor byte [eax], cl
lea ecx, [ebp - 0x2fc]
call fcn.100490fe
mov ecx, dword [ebp + 0x74]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101018a3
add ebp, 0x78
leave
ret