Function at 0x1007eaab
Capabilities:
Check os version

Disassembly:
push 0x30
mov eax, 0x100b6cca
call fcn.100b4d71
mov edi, ecx
mov dword [ebp - 0x2c], edi
push 0x26
call fcn.100b493e
pop ecx
push eax
push str.win.frame.fullWindowDragsOn
mov ecx, edi
call fcn.100b493e
push 0x4a
call fcn.100b493e
pop ecx
push eax
push str.win.text.fontSmoothingOn
mov ecx, edi
call fcn.100b493e
mov esi, dword [sym.imp.kernel32.dll_GetVersion]
call esi
cmp al, 5
jb 0x1007eafb
call esi
shr eax, 8
cmp al, 1
jae 0x1007eb01
call esi
cmp al, 5
jbe 0x1007eb43
push 0x200a
call fcn.100b493e
pop ecx
push eax
push str.win.text.fontSmoothingType
mov ecx, edi
call fcn.100b493e
push 0x200c
call fcn.100b493e
pop ecx
push eax
push str.win.text.fontSmoothingContrast
mov ecx, edi
call fcn.100b493e
call fcn.1007da1e
push eax
push str.win.text.fontSmoothingOrientation
mov ecx, edi
call fcn.100b493e
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x44
call esi
push 0x45
mov ebx, eax
call esi
push ebx
push str.win.drag.width
mov ecx, edi
mov dword [ebp - 0x24], eax
call fcn.100b493e
push dword [ebp - 0x24]
mov ecx, edi
push str.win.drag.height
call fcn.100b493e
mov eax, dword [ebp - 0x24]
cmp ebx, eax
jle 0x1007eb7b
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
push eax
push str.DnD.gestureMotionThreshold
mov ecx, edi
call fcn.100b493e
call fcn.100a5e00
push eax
push str.awt.mouse.numButtons
mov ecx, edi
call fcn.100b493e
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
push eax
push str.awt.multiClickInterval
mov ecx, edi
call fcn.100b493e
push 0x26
call fcn.100b493e
pop ecx
push eax
push str.awt.dynamicLayoutSupported
mov ecx, edi
call fcn.100b493e
push 0x4b
call esi
push eax
push str.awt.wheelMousePresent
mov ecx, edi
call fcn.100b493e
push 0x1008
call fcn.100b493e
pop ecx
push eax
push str.win.frame.captionGradientsOn
mov ecx, edi
call fcn.100b493e
push 0x100e
call fcn.100b493e
pop ecx
push eax
push str.win.item.hotTrackingOn
mov ecx, edi
call fcn.100b493e
push 0x100a
call fcn.100b493e
pop ecx
push eax
push str.win.menu.keyboardCuesOn
mov ecx, edi
call fcn.100b493e
push 0xc
pop eax
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x3c]
push ecx
push eax
push 0x42
mov dword [ebp - 0x3c], eax
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x1007ec44
test byte [ebp - 0x38], 1
je 0x1007ec44
push 1
jmp 0x1007ec45
push ebx
push str.win.highContrast.on
mov ecx, edi
call fcn.100b493e
push 0x101
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.SHELL32.dll_SHGetSettings]
test byte [ebp - 0x28], 1
mov ecx, edi
je 0x1007ec6c
push 1
jmp 0x1007ec6d
push ebx
push str.awt.file.showHiddenFiles
call fcn.100b493e
test dword [ebp - 0x28], 0x200
mov ecx, edi
je 0x1007ec86
push 1
jmp 0x1007ec87
push ebx
push str.awt.file.showAttribCol
call fcn.100b493e
push str.Shell_Icon_BPP
push str.Control_PanelDesktopWindowMetrics
lea eax, [ebp - 0x1c]
call fcn.100b493e
mov esi, eax
pop ecx
pop ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], ebx
cmp esi, ebx
je 0x1007eccf
cmp dword [ebp - 0x1c], 1
jne 0x1007ecc4
push esi
push str.win.icon.shellIconBPP
mov ecx, edi
call fcn.100b493e
push esi
call dword [sym.imp.MSVCR100.dll_free]
pop ecx
mov dword [ebp - 0x18], ebx
push str.NoPlacesBar
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciescomdlg32
lea eax, [ebp - 0x1c]
call fcn.100b493e
mov esi, eax
pop ecx
pop ecx
mov dword [ebp - 0x18], esi
cmp esi, ebx
je 0x1007ed0f
cmp dword [ebp - 0x1c], 4
jne 0x1007ed07
xor eax, eax
cmp word [esi], bx
mov ecx, edi
setne al
push eax
push str.win.comdlg.noPlacesBar
call fcn.100b493e
push esi
call dword [sym.imp.MSVCR100.dll_free]
pop ecx
mov esi, dword [sym.imp.kernel32.dll_lstrlenW]
or dword [ebp - 4], 0xffffffff
mov edi, str.PlaceN
push edi
call esi
inc eax
js 0x1007ee8f
push edi
call esi
inc eax
cmp eax, 0xffffffff
ja 0x1007ee8f
push edi
call esi
inc eax
je 0x1007ed51
push edi
call esi
lea ecx, [eax + 1]
or eax, 0xffffffff
xor edx, edx
div ecx
cmp eax, 2
jb 0x1007ee8f
push edi
call esi
lea eax, [eax + eax + 2]
push eax
call fcn.100b493e
mov ebx, dword [sym.imp.kernel32.dll_lstrcpyW]
pop ecx
push edi
push eax
mov dword [ebp - 0x24], eax
call ebx
mov edi, str.win.comdlg.placesBarPlaceN
push edi
mov dword [ebp - 4], 2
call esi
inc eax
js 0x1007ee68
push edi
call esi
inc eax
cmp eax, 0xffffffff
ja 0x1007ee68
push edi
call esi
inc eax
je 0x1007edab
push edi
call esi
lea ecx, [eax + 1]
or eax, 0xffffffff
xor edx, edx
div ecx
cmp eax, 2
jb 0x1007ee68
push edi
call esi
lea eax, [eax + eax + 2]
push eax
call fcn.100b493e
pop ecx
mov esi, eax
push edi
push esi
mov dword [ebp - 0x30], esi
call ebx
and dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x24]
and dword [ebp - 0x18], 0
add eax, 0x30
inc dword [ebp - 0x20]
mov word [ebx + 0xa], ax
mov word [esi + 0x32], ax
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciescomdlg32PlacesBar
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 4
call fcn.100b493e
mov edi, eax
pop ecx
pop ecx
mov dword [ebp - 0x18], edi
test edi, edi
je 0x1007ee22
cmp dword [ebp - 0x1c], 4
mov ecx, dword [ebp - 0x2c]
jne 0x1007ee13
movzx eax, word [edi]
push eax
push esi
call fcn.100b493e
jmp 0x1007ee1a
push edi
push esi
call fcn.100b493e
push edi
call dword [sym.imp.MSVCR100.dll_free]
pop ecx
or dword [ebp - 4], 0xffffffff
test edi, edi
jne 0x1007edc6
push esi
mov esi, dword [sym.imp.MSVCR100.dll_free]
call esi
push ebx
call esi
pop ecx
pop ecx
call fcn.100b4e16
ret
call sub.MSVCR100.dll__CxxThrowException
xor eax, eax
lea edi, [ebp - 0x11]
stosb byte es:[edi], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x12], al
push 0x100da640
lea eax, [ebp - 0x12]
push eax
jmp 0x1007ee63
xor eax, eax
lea edi, [ebp - 0x11]
stosb byte es:[edi], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x13], al
push 0x100da640
lea eax, [ebp - 0x13]
jmp 0x1007ee7c