Function at 0x413050
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x423a84
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x4351b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
mov dword [ebp - 0x214], edi
mov ebx, edx
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 4], 0
push str.E9A6339A_EF7C_4944_83D3_AA89E6DD0607
push str.32768
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
mov esi, eax
push 0xffffffffffffffeb
push esi
mov dword [ebp - 0x204], esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x4290bc
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [edi + 0x20]
add edi, 0x1c
xor ecx, ecx
mov dword [ebp - 0x210], edi
test eax, eax
jle 0x4130f0
mov edx, dword [edi]
lea ebx, [ebx]
cmp dword [edx], ebx
je 0x413216
inc ecx
add edx, 4
cmp ecx, eax
jl 0x4130e0
mov ecx, ebx
call fcn.00412ef0
test eax, eax
push ebx
mov dword [ebp - 0x218], eax
sete byte [ebp - 0x1f6]
mov byte [ebp - 0x1f5], 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov esi, eax
xor edi, edi
mov dword [ebp - 0x20c], esi
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0x200], edi
test esi, esi
jle 0x4133d9
mov dword [ebp - 0x208], 0xffffffff
xor edx, edx
push 0xc6
push edx
lea eax, [ebp - 0xda]
push eax
mov word [ebp - 0xdc], dx
call sub.MSVCR100.dll_memset
push 0x30
lea ecx, [ebp - 0x248]
push 0
push ecx
call sub.MSVCR100.dll_memset
push pe_nt_image_headers32
lea edx, [ebp - 0x1f0]
push 0
push edx
mov dword [ebp - 0x248], 0x30
call sub.MSVCR100.dll_memset
add esp, 0x24
lea eax, [ebp - 0x1f4]
push eax
mov dword [ebp - 0x1f4], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x4131bf
mov eax, dword [ebp - 0x1f0]
cmp eax, 5
jae 0x4131c9
cmp eax, 4
jne 0x4131bf
cmp dword [ebp - 0x1ec], 0x5a
jae 0x4131c9
mov dword [ebp - 0x248], 0x2c
lea edx, [ebp - 0x248]
push edx
push 1
push edi
lea ecx, [ebp - 0xdc]
push ebx
mov dword [ebp - 0x220], 0x64
mov dword [ebp - 0x244], 0x3e
mov dword [ebp - 0x224], ecx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
test edi, edi
jne 0x41323c
cmp dword [ebp - 0x238], 0x29b
jne 0x41323c
mov byte [ebp - 0x1f5], 1
jmp 0x4133b3
cmp ecx, 0xffffffff
je 0x4130f0
mov ecx, dword [ebp - 0x1fc]
mov dword [ecx], 1
mov dword [ebp - 4], 0xffffffff
mov eax, 1
jmp 0x413414
push 0x1c
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x413273
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x14], 0xffffffff
mov esi, eax
jmp 0x413275
xor esi, esi
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1fc]
inc eax
push 0x400
mov dword [esi], ebx
mov dword [ebp - 0x1fc], eax
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x240]
push edi
push ebx
mov dword [esi + 0xc], eax
call dword [sym.imp.USER32.dll_GetMenuState]
mov dword [esi + 0x10], eax
mov eax, dword [ebp - 0x240]
or eax, 0x100
cmp dword [ebp - 0x238], 0x29b
mov dword [ebp - 0x240], eax
je 0x4132d4
test eax, 0x800
jne 0x4132ce
inc dword [ebp - 0x208]
test byte [esi + 0x10], 2
je 0x4132df
or eax, 0x800
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x214]
shr eax, 9
and al, 1
mov byte [esi + 0x18], al
cmp byte [ecx + 0x28], 0
je 0x413307
cmp byte [ebp - 0x1f6], 0
jne 0x413307
mov ecx, dword [ebp - 0x208]
mov dword [esi + 0x14], ecx
jmp 0x413315
mov edx, dword [ecx]
mov edx, dword [edx]
push esi
lea eax, [ebp - 0x248]
push eax
call edx
test dword [esi + 0xc], 0x800
je 0x413327
mov dword [esi + 8], 0
jmp 0x413377
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
test edi, edi
je 0x413371
xor ecx, ecx
lea eax, [edi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new___unsigned_int_]
add esp, 4
lea ecx, [ebp - 0xdc]
push ecx
push eax
mov dword [esi + 8], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [esi + 8]
xor eax, eax
mov word [edx + edi*2], ax
mov edi, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x240]
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x244], 0x20
cmp ecx, dword [esi + 0xc]
je 0x41339c
mov dword [ebp - 0x244], 0x30
lea edx, [ebp - 0x248]
push edx
push 1
push edi
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov esi, dword [ebp - 0x20c]
inc edi
mov dword [ebp - 0x200], edi
cmp edi, esi
jl 0x413140
cmp byte [ebp - 0x1f5], 0
je 0x4133d9
push 0x400
push 0
push ebx
call dword [sym.imp.USER32.dll_RemoveMenu]
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x4133f4
mov cl, byte [ebp - 0x1f5]
mov edx, dword [ebp - 0x204]
mov byte [eax + 4], cl
mov dword [eax], edx
mov esi, dword [ebp - 0x210]
mov dword [ebp - 0x204], ebx
lea ebx, [ebp - 0x204]
call fcn.00414300
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004223ce
mov esp, ebp
pop ebp
ret 4