Function at 0x70ce9c
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x70d49f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x80]
test al, al
jne 0x70cedb
mov byte [ebx + 0x214], 1
mov byte [ebx + 0x1e9], 0
jmp 0x70cf06
cmp byte [ebx + 0x214], 1
jne 0x70cf06
cmp byte [ebx + 0x1e8], 0
je 0x70ceff
cmp dword [ebx + 0x1e0], 0
je 0x70ceff
mov byte [ebx + 0x214], 3
jmp 0x70cf06
mov byte [ebx + 0x214], 0
mov edx, dword [ebx + 0x74]
mov eax, dword [ebx + 0x1d8]
call fcn.005070cc
mov eax, ebx
call fcn.005ace64
test al, al
je 0x70d2b3
mov eax, ebx
call fcn.005acd68
mov esi, eax
test byte [ebx + 0x65], 0x80
setne al
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x70cf68
lea eax, [ebp - 0x10]
push eax
push 0
push 2
lea edx, [ebp - 0x44]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebx + 0x1d8]
call fcn.005071d4
push eax
call sub.uxtheme.dll_BeginBufferedPaint
mov dword [ebp - 0x14], eax
jmp 0x70cf6d
xor eax, eax
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [0x4fe5dc]
call fcn.00506298
mov dword [ebp - 0x18], eax
xor edx, edx
push ebp
push 0x70d2ac
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [ebp - 9], 0
je 0x70cf9d
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
call fcn.00507258
jmp 0x70cfb2
mov eax, dword [ebx + 0x1d8]
call fcn.005071d4
mov edx, eax
mov eax, dword [ebp - 0x18]
call fcn.00507258
mov edx, dword [ebx + 0x74]
mov eax, dword [ebp - 0x18]
call fcn.005070cc
cmp byte [ebp - 9], 0
jne 0x70cffa
cmp byte [ebx + 0x1f0], 0
je 0x70cfe7
push 0
push 1
push 0
mov eax, dword [ebp - 0x18]
call fcn.005071d4
mov ecx, eax
xor edx, edx
mov eax, esi
call fcn.005ad570
jmp 0x70d01e
mov eax, dword [ebp - 0x18]
call fcn.005071d4
mov edx, eax
mov eax, ebx
call fcn.00531310
jmp 0x70d01e
push 4
call sub.gdi32.dll_GetStockObject
push eax
lea edx, [ebp - 0x44]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x18]
call fcn.005071d4
push eax
call sub.user32.dll_FillRect
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x80]
test al, al
jne 0x70d032
mov byte [ebp - 0xa], 5
jmp 0x70d058
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jae 0x70d045
mov byte [ebp - 0xa], 4
jmp 0x70d058
cmp byte [ebx + 0x1f9], 0
je 0x70d054
mov byte [ebp - 0xa], 3
jmp 0x70d058
mov byte [ebp - 0xa], 2
mov byte [ebp - 0xb], 0
cmp byte [ebx + 0x1f8], 0
jne 0x70d073
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x70d09d
movzx eax, byte [ebp - 0xa]
sub al, 2
je 0x70d099
dec al
je 0x70d093
dec al
je 0x70d08d
dec al
jne 0x70d09d
mov byte [ebp - 0xb], 5
jmp 0x70d09d
mov byte [ebp - 0xb], 4
jmp 0x70d09d
mov byte [ebp - 0xb], 3
jmp 0x70d09d
mov byte [ebp - 0xb], 2
lea edx, [ebp - 0x28]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x78]
cmp byte [ebp - 0xb], 0
jne 0x70d0f8
movzx edx, byte [ebp - 0xa]
lea ecx, [ebp - 0x34]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x64]
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.005071d4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005ad510
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x18]
call fcn.005071d4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005ad698
jmp 0x70d196
movzx edx, byte [ebp - 0xb]
lea ecx, [ebp - 0x34]
mov eax, esi
mov edi, dword [eax]
call dword [edi + pe_nt_image_headers32]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
jne 0x70d149
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.005071d4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005ad510
cmp byte [ebp - 0xb], 5
jne 0x70d17a
movzx edx, byte [ebp - 0xa]
lea ecx, [ebp - 0x34]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x64]
jmp 0x70d17a
cmp byte [ebx + 0x1f8], 0
je 0x70d15e
cmp byte [ebp - 0xa], 4
je 0x70d15e
cmp byte [ebp - 0xa], 3
jne 0x70d17a
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.005071d4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005ad510
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x18]
call fcn.005071d4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005ad698
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp byte [ebp - 0xa], 4
jne 0x70d1e3
cmp byte [ebp - 0xb], 0
je 0x70d1ce
xor edx, edx
mov eax, 6
call fcn.00439dd4
test al, al
jne 0x70d1ce
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x40]
mov edx, 0xff00000e
call fcn.00505414
jmp 0x70d1e3
cmp byte [ebx + 0x1f8], 0
je 0x70d1e3
mov dword [ebp - 8], 1
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [ebx + 0x1e4]
movzx edx, byte [ebp - 9]
mov byte [eax + 0x21], dl
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x24], edx
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x28], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x2c], edx
mov byte [eax + 0x30], 1
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xac]
test al, 1
setne al
mov esi, dword [ebx + 0x1e4]
mov byte [esi + 0x40], al
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.00534ef4
mov eax, dword [ebp - 0x48]
push eax
movzx eax, byte [ebx + 0x1eb]
push eax
mov eax, dword [ebx + 0x1f4]
push eax
mov eax, dword [ebx + 0x1ec]
push eax
movzx eax, byte [ebx + 0x214]
push eax
movzx eax, byte [ebx + 0x1f0]
push eax
xor edx, edx
mov eax, ebx
call fcn.00537c1c
push eax
movzx eax, byte [ebx + 0x1f9]
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x28]
mov eax, esi
mov edx, dword [ebp - 0x18]
call fcn.0070c4b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x70d482
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.00507258
mov eax, dword [ebp - 0x18]
call fcn.004099cc
cmp byte [ebp - 9], 0
je 0x70d2a9
push 0xffffffffffffffff
mov eax, dword [ebp - 0x14]
push eax
call sub.uxtheme.dll_EndBufferedPaint
pop eax
jmp eax
mov eax, dword [ebx + 0x5c]
push eax
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebx + 0x58]
xor edx, edx
xor eax, eax
call fcn.00414974
cmp byte [ebx + 0x1f8], 0
jne 0x70d305
mov esi, 0x2010
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jae 0x70d2e8
or esi, 0x200
push esi
push 4
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebx + 0x1d8]
call fcn.005071d4
push eax
call sub.user32.dll_DrawFrameControl
jmp 0x70d3a2
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jb 0x70d32a
cmp byte [ebx + 0x1f9], 0
je 0x70d324
cmp byte [ebx + 0x214], 1
jne 0x70d32a
test byte [ebx + 0x1c], 0x10
je 0x70d36c
movzx eax, byte [ebx + 0x1f0]
mov eax, dword [eax*4 + 0x8d637c]
or eax, 0xf
push eax
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
setb al
and eax, 0x7f
mov eax, dword [eax*4 + 0x8d6374]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebx + 0x1d8]
call fcn.005071d4
push eax
call sub.user32.dll_DrawEdge
jmp 0x70d394
cmp byte [ebx + 0x1f0], 0
jne 0x70d394
mov edx, dword [ebx + 0x7c]
mov eax, dword [ebx + 0x1d8]
mov eax, dword [eax + 0x48]
call fcn.00505f98
lea edx, [ebp - 0x28]
mov eax, dword [ebx + 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
lea eax, [ebp - 0x28]
or ecx, 0xffffffff
or edx, 0xffffffff
call fcn.00414a24
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jae 0x70d407
cmp byte [ebx + 0x214], 3
jne 0x70d3f7
cmp byte [ebx + 0x1f8], 0
je 0x70d3ca
cmp byte [ebx + 0x1f9], 0
jne 0x70d3f7
mov edx, 0xff000014
mov eax, 0xff00000f
call fcn.005114f8
mov edx, eax
mov eax, dword [ebx + 0x1d8]
mov eax, dword [eax + 0x48]
call fcn.00505f6c
lea edx, [ebp - 0x28]
mov eax, dword [ebx + 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov dword [ebp - 8], 1
mov dword [ebp - 4], 1
jmp 0x70d411
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 4], eax
mov eax, ebx
call fcn.005acd68
mov esi, eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x4c]
mov edi, dword [ebx + 0x1e4]
mov byte [edi + 0x30], al
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0x4c]
mov eax, ebx
call fcn.00534ef4
mov eax, dword [ebp - 0x4c]
push eax
movzx eax, byte [ebx + 0x1eb]
push eax
mov eax, dword [ebx + 0x1f4]
push eax
mov eax, dword [ebx + 0x1ec]
push eax
movzx eax, byte [ebx + 0x214]
push eax
movzx eax, byte [ebx + 0x1f0]
push eax
xor edx, edx
mov eax, ebx
call fcn.00537c1c
push eax
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x28]
mov edx, dword [ebx + 0x1d8]
mov eax, edi
call fcn.0070c4b8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x70d4a6
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0040b914
pop eax
jmp eax