Function at 0x426f00
Capabilities:
Check os version

Disassembly:
push ebp
lea ebp, [esp - 0x1ec]
sub esp, 0x26c
mov eax, dword [0x506550]
xor eax, ebp
mov dword [ebp + 0x1e8], eax
push ebx
mov ebx, dword [ebp + 0x1f8]
push edi
mov edi, dword [ebp + 0x1f4]
push dword [0x50b90c]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x24], ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x427717
push esi
xor esi, esi
cmp edi, esi
je 0x427716
cmp ebx, esi
je 0x427716
push ebx
push edi
call fcn.0043c72d
test eax, eax
pop ecx
pop ecx
je 0x427716
push 0xfffffffffffffff0
push dword [0x50b90c]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x30], eax
mov eax, 0x80000
push eax
push eax
mov edi, 0x1036
push edi
push dword [0x50b90c]
call ebx
test word [ebp - 0x30], 0x100
mov dword [ebp - 0x80], eax
je 0x426fc6
call fcn.00426135
shr eax, 0x10
cmp ax, 5
push esi
jbe 0x426fb4
push 0x7071
jmp 0x426fb9
push 0x7051
push 0x111
push dword [0x50b908]
call ebx
lea eax, [ebp - 0x7c]
push eax
push dword [0x50b90c]
mov dword [ebp - 0x7c], esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x7c]
push esi
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, esi
mov dword [ebp - 0x2c], eax
jne 0x426ff6
push dword [ebp - 0x80]
push esi
push edi
jmp 0x42770e
xor eax, eax
mov dword [ebp - 0x64], esi
lea edi, [ebp - 0x60]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
lea eax, [ebp - 0x64]
push eax
push esi
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
push esi
push esi
push 0x1033
push dword [0x50b90c]
call ebx
push dword [0x50b90c]
mov edx, dword [ebp - 0x3c]
mov ecx, eax
movzx eax, ax
shr ecx, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0x78], esi
lea edi, [ebp - 0x74]
stosd dword es:[edi], eax
call fcn.004262aa
cmp eax, 0xffffffff
mov dword [ebp - 0x3c], eax
je 0x4276fc
lea ecx, [ebp - 0x78]
push ecx
push eax
push dword [0x50b90c]
push dword [ebp - 0x2c]
call fcn.004264d1
test al, al
je 0x4276fc
push 0x206
lea eax, [ebp - 0x1e]
push esi
push eax
mov dword [ebp - 0x38], esi
mov word [ebp - 0x20], si
call fcn.0043b4c0
mov edx, dword [ebp - 0x24]
add esp, 0xc
cmp word [edx], si
je 0x42717d
push dword [0x50b90c]
mov ecx, dword [ebp - 0x2c]
call fcn.004262aa
cmp eax, 0xffffffff
mov dword [ebp - 0x30], eax
je 0x42717d
push dword [ebp - 0x30]
xor eax, eax
push dword [0x50b90c]
mov dword [ebp - 0x54], esi
push dword [ebp - 0x2c]
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x28], esi
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
lea edi, [ebp - 0x54]
call fcn.00426456
test al, al
je 0x42717d
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x30]
push dword [0x50b90c]
push dword [ebp - 0x2c]
call fcn.004264d1
test al, al
je 0x42717d
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x70]
add ecx, eax
cmp ecx, dword [ebp - 0x58]
jae 0x427113
mov ecx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x6c]
add ecx, eax
mov dword [ebp - 0x68], ecx
jmp 0x42711c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x40]
lea edi, [eax + ecx]
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0x5c]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x30]
mov esi, 0x100f
push esi
push dword [0x50b90c]
call ebx
movzx eax, word [ebp - 0x24]
movzx ecx, word [ebp - 0x28]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x3c]
push esi
push dword [0x50b90c]
call ebx
mov dword [ebp - 0x38], eax
movzx eax, word [ebp - 0x68]
movzx ecx, di
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x30]
push esi
push dword [0x50b90c]
call ebx
cmp dword [ebp - 0x38], 0
jne 0x4276fa
jmp 0x427182
mov esi, 0x100f
push 0xa
lea edi, [ebp - 0x20]
call fcn.00426204
test al, al
je 0x4272f0
push dword [0x50b90c]
mov ecx, dword [ebp - 0x2c]
mov edx, edi
call fcn.004262aa
cmp eax, 0xffffffff
mov dword [ebp - 0x30], eax
je 0x4272f0
and dword [ebp - 0x54], 0
push dword [ebp - 0x30]
and dword [ebp - 0x28], 0
push dword [0x50b90c]
xor eax, eax
push dword [ebp - 0x2c]
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
lea edi, [ebp - 0x54]
call fcn.00426456
test al, al
je 0x4272f0
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x30]
push dword [0x50b90c]
push dword [ebp - 0x2c]
call fcn.004264d1
test al, al
je 0x4272f0
mov eax, dword [ebp - 0x64]
mov edi, dword [ebp - 0x40]
add eax, edi
cmp dword [ebp - 0x28], eax
jae 0x4272f0
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x70]
lea eax, [eax + esi*2]
cmp eax, dword [ebp - 0x58]
jae 0x427224
add dword [ebp - 0x24], esi
push esi
jmp 0x42722c
sub dword [ebp - 0x24], esi
mov eax, esi
neg eax
push eax
push 0
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + esi]
cmp eax, dword [ebp - 0x58]
jae 0x42724d
mov eax, dword [ebp - 0x24]
add eax, esi
mov dword [ebp - 0x30], eax
jmp 0x427255
mov eax, dword [ebp - 0x28]
add eax, edi
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x54]
push dword [0x50b90c]
add eax, edx
push dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x48]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
lea esi, [ebp - 0x6c]
mov dword [ebp - 0x68], eax
call fcn.004263dc
mov edi, eax
cmp edi, 0xffffffff
mov esi, 0x100f
je 0x4272a7
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0x5c]
shl eax, 0x10
or eax, ecx
push eax
push edi
push esi
push dword [0x50b90c]
call ebx
movzx eax, word [ebp - 0x24]
movzx ecx, word [ebp - 0x28]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x3c]
push esi
push dword [0x50b90c]
call ebx
cmp edi, 0xffffffff
mov dword [ebp - 0x38], eax
je 0x4272e1
movzx eax, word [ebp - 0x30]
movzx ecx, word [ebp - 0x34]
shl eax, 0x10
or eax, ecx
push eax
push edi
push esi
push dword [0x50b90c]
call ebx
cmp dword [ebp - 0x38], 0
jne 0x4276fa
mov esi, 0x100f
call dword [sym.imp.KERNEL32.dll_GetVersion]
movzx cx, ah
mov ch, al
cmp cx, 0x600
ja 0x4273d3
push 1
lea edi, [ebp - 0x20]
call fcn.00426204
test al, al
je 0x4273d3
push dword [0x50b90c]
mov ecx, dword [ebp - 0x2c]
mov edx, edi
call fcn.004262aa
cmp eax, 0xffffffff
mov dword [ebp - 0x30], eax
je 0x4273d3
and dword [ebp - 0x28], 0
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x30]
push dword [0x50b90c]
push dword [ebp - 0x2c]
call fcn.004264d1
test al, al
je 0x4273d3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x70]
lea edx, [eax + ecx]
cmp edx, dword [ebp - 0x58]
jae 0x427373
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp - 0x6c]
add eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x427379
mov ecx, dword [ebp - 0x40]
lea edi, [eax + ecx]
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0x5c]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x30]
push esi
push dword [0x50b90c]
call ebx
movzx eax, word [ebp - 0x24]
movzx ecx, word [ebp - 0x28]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x3c]
push esi
push dword [0x50b90c]
call ebx
mov dword [ebp - 0x38], eax
movzx eax, word [ebp - 0x68]
movzx ecx, di
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x30]
push esi
push dword [0x50b90c]
call ebx
cmp dword [ebp - 0x38], 0
jne 0x4276fa
push 0xa
lea edi, [ebp - 0x20]
call fcn.00426204
test al, al
je 0x427513
push dword [0x50b90c]
mov ecx, dword [ebp - 0x2c]
mov edx, edi
call fcn.004262aa
cmp eax, 0xffffffff
mov dword [ebp - 0x30], eax
je 0x427513
and dword [ebp - 0x54], 0
push dword [ebp - 0x30]
and dword [ebp - 0x28], 0
push dword [0x50b90c]
xor eax, eax
push dword [ebp - 0x2c]
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
lea edi, [ebp - 0x54]
call fcn.00426456
test al, al
je 0x427513
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x30]
push dword [0x50b90c]
push dword [ebp - 0x2c]
call fcn.004264d1
test al, al
je 0x427513
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x64]
add ecx, eax
cmp dword [ebp - 0x28], ecx
jae 0x427516
mov eax, dword [ebp - 0x70]
sub dword [ebp - 0x24], eax
neg eax
push eax
push 0
mov eax, edi
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x54]
push dword [0x50b90c]
add eax, ecx
mov ecx, dword [ebp - 0x48]
push dword [ebp - 0x2c]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x50]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
lea esi, [ebp - 0x6c]
mov dword [ebp - 0x68], eax
call fcn.004263dc
mov edi, eax
cmp edi, 0xffffffff
mov esi, 0x100f
je 0x4274ca
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0x5c]
shl eax, 0x10
or eax, ecx
push eax
push edi
push esi
push dword [0x50b90c]
call ebx
movzx eax, word [ebp - 0x24]
movzx ecx, word [ebp - 0x28]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x3c]
push esi
push dword [0x50b90c]
call ebx
cmp edi, 0xffffffff
mov dword [ebp - 0x38], eax
je 0x427504
movzx eax, word [ebp - 0x74]
movzx ecx, word [ebp - 0x78]
shl eax, 0x10
or eax, ecx
push eax
push edi
push esi
push dword [0x50b90c]
call ebx
cmp dword [ebp - 0x38], 0
jne 0x4276fa
mov esi, 0x100f
mov eax, dword [ebp - 0x40]
shr eax, 1
add eax, dword [ebp - 0x64]
and dword [ebp - 0x24], 0
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x58]
jge 0x427664
push dword [0x50b90c]
lea esi, [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.004263dc
mov esi, eax
cmp esi, 0xffffffff
je 0x427652
and dword [ebp - 0x54], 0
and dword [ebp - 0x44], 0
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push esi
push dword [0x50b90c]
xor eax, eax
push dword [ebp - 0x2c]
lea edi, [ebp - 0x40]
stosd dword es:[edi], eax
lea edi, [ebp - 0x54]
call fcn.00426456
test al, al
je 0x427652
lea eax, [ebp - 0x44]
push eax
push esi
push dword [0x50b90c]
push dword [ebp - 0x2c]
call fcn.004264d1
test al, al
je 0x427652
mov esi, dword [ebp - 0x70]
mov eax, esi
shl eax, 2
push eax
mov eax, edi
mov edi, dword [sym.imp.USER32.dll_OffsetRect]
push 0
push eax
call edi
mov eax, esi
shl eax, 2
add dword [ebp - 0x40], eax
add dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x50]
lea eax, [eax + esi*2]
cmp eax, dword [ebp - 0x58]
jbe 0x4275e3
mov dword [ebp - 0x30], esi
neg dword [ebp - 0x30]
push dword [ebp - 0x30]
lea eax, [ebp - 0x54]
push 0
push eax
call edi
mov eax, dword [ebp - 0x50]
sub dword [ebp - 0x40], esi
sub dword [ebp - 0x24], esi
lea eax, [eax + esi*2]
cmp eax, dword [ebp - 0x58]
ja 0x4275c7
push dword [0x50b90c]
lea esi, [ebp - 0x28]
push dword [ebp - 0x2c]
call fcn.004263dc
mov edi, eax
cmp edi, 0xffffffff
mov esi, 0x100f
je 0x427618
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0x5c]
shl eax, 0x10
or eax, ecx
push eax
push edi
push esi
push dword [0x50b90c]
call ebx
movzx eax, word [ebp - 0x40]
movzx ecx, word [ebp - 0x44]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x3c]
push esi
push dword [0x50b90c]
call ebx
cmp edi, 0xffffffff
mov dword [ebp - 0x38], eax
je 0x427652
movzx eax, word [ebp - 0x74]
movzx ecx, word [ebp - 0x78]
shl eax, 0x10
or eax, ecx
push eax
push edi
push esi
push dword [0x50b90c]
call ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x38], 0
mov esi, 0x100f
je 0x427522
cmp dword [ebp - 0x38], 0
jne 0x4276fa
push dword [0x50b90c]
mov ecx, dword [ebp - 0x2c]
mov edx, str.Internet_Explorer
call fcn.004262aa
cmp eax, 0xffffffff
mov dword [ebp - 0x30], eax
je 0x4276fa
and dword [ebp - 0x28], 0
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x30]
push dword [0x50b90c]
push dword [ebp - 0x2c]
call fcn.004264d1
test al, al
je 0x4276fa
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0x5c]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x30]
push esi
push dword [0x50b90c]
call ebx
movzx eax, word [ebp - 0x24]
movzx ecx, word [ebp - 0x28]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x3c]
push esi
push dword [0x50b90c]
call ebx
movzx eax, word [ebp - 0x74]
movzx ecx, word [ebp - 0x78]
shl eax, 0x10
or eax, ecx
push eax
push dword [ebp - 0x30]
push esi
push dword [0x50b90c]
call ebx
xor esi, esi
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x80]
push esi
push 0x1036
push dword [0x50b90c]
call ebx
pop esi
mov ecx, dword [ebp + 0x1e8]
pop edi
xor ecx, ebp
pop ebx
call fcn.0043b4a5
add ebp, 0x1ec
leave
ret