Function at 0x11095250
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x11183f01
mov eax, dword fs:[0]
push eax
mov eax, 0x237c
call fcn.11164040
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x2324], edi
cmp edi, ebx
jne 0x110952bb
push 0x6c
lea eax, [ebp - 0x2dc]
push ebx
push eax
call fcn.11162be0
lea ecx, [ebp - 0x2dc]
add esp, 0xc
mov dword [ebp - 0x2324], ecx
mov dword [ebp - 0x2b8], 1
mov edi, ecx
push 0x11197b1c
mov dword [ebp - 0x2320], ebx
mov dword [ebp - 0x232c], ebx
call dword [sym.imp.KeRneL32.DLl_LoadLibraryA]
mov esi, eax
mov dword [ebp - 0x2388], esi
mov dword [ebp - 0x2384], ebx
mov dword [ebp - 0x2380], ebx
mov dword [ebp - 0x237c], ebx
mov dword [ebp - 0x2378], ebx
mov dword [ebp - 0x2374], ebx
mov dword [ebp - 0x2370], ebx
mov dword [ebp - 0x236c], ebx
mov dword [ebp - 0x2364], ebx
mov dword [ebp - 0x2360], ebx
mov dword [ebp - 0x235c], ebx
mov dword [ebp - 0x2358], ebx
mov dword [ebp - 0x2354], ebx
mov dword [ebp - 0x2350], ebx
mov dword [ebp - 0x234c], ebx
mov dword [ebp - 0x2348], ebx
mov dword [ebp - 0x2344], ebx
mov dword [ebp - 0x2340], ebx
push 0x111a5f18
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.KeRneL32.DLl_GetProcAddress]
mov dword [ebp - 0x2368], eax
cmp eax, ebx
je 0x1109538b
call eax
mov dword [ebp - 0x231c], eax
cmp eax, ebx
jne 0x11095722
call dword [sym.imp.KeRneL32.DLl_GetLastError]
cmp dword [edi + 0x24], ebx
jne 0x1109539b
cmp eax, 0x78
je 0x110953a9
cmp esi, ebx
je 0x11095384
push esi
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
xor eax, eax
jmp 0x11095892
push 0x78
call dword [sym.imp.KeRneL32.DLl_SetLastError]
mov dword [ebp - 0x231c], ebx
jmp 0x11095369
cmp eax, 0x78
je 0x110953a9
cmp dword [edi + 0x20], ebx
je 0x11095462
mov esi, dword [sym.imp.uSEr32.dll_GetSystemMetrics]
push 0x4e
call esi
push 0x4f
mov edi, eax
call esi
mov dword [ebp - 0x2328], eax
cmp edi, ebx
jne 0x110953c8
push ebx
call esi
mov edi, eax
cmp dword [ebp - 0x2328], ebx
jne 0x110953da
push 1
call esi
mov dword [ebp - 0x2328], eax
mov esi, dword [ebp - 0x2324]
mov eax, dword [esi + 0x20]
cmp eax, ebx
je 0x11095447
push eax
call dword [sym.imp.uSEr32.dll_IsWindow]
test eax, eax
je 0x11095447
mov edx, dword [esi + 0x20]
push 0xfffffffffffffff0
push edx
call dword [sym.imp.uSEr32.dll_GetWindowLongA]
test eax, 0x10000000
je 0x11095447
mov ecx, dword [esi + 0x20]
lea eax, [ebp - 0x270]
push eax
push ecx
call dword [sym.imp.uSEr32.dll_GetWindowRect]
test eax, eax
je 0x11095447
mov edx, dword [ebp - 0x268]
sub edx, dword [ebp - 0x270]
cmp edx, edi
jne 0x11095447
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x2328]
jne 0x11095447
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x231c], ecx
mov edi, dword [ebp - 0x2324]
mov dword [esi + 0x20], ebx
mov esi, dword [ebp - 0x2388]
cmp dword [ebp - 0x231c], ebx
jne 0x11095722
lea edx, [ebp - 0x30]
mov eax, edi
sub edx, edi
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x11095470
cmp byte [ebp - 0x30], bl
jne 0x11095490
mov edx, dword [0x11195708]
mov eax, dword [0x1119570c]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], eax
push ebx
lea ecx, [ebp - 0x30]
push ecx
call dword [sym.imp.uSEr32.dll_FindWindowA]
mov dword [ebp - 0x231c], eax
cmp eax, ebx
jne 0x11095722
push edi
call fcn.110951b0
add esp, 4
mov dword [ebp - 0x231c], eax
cmp eax, ebx
jne 0x11095722
cmp dword [edi + 0x24], ebx
je 0x11095722
call dword [sym.imp.KeRneL32.DLl_GetVersion]
mov byte [ebp - 0x2315], al
cmp al, 5
jb 0x11095715
lea ecx, [ebp - 0x58]
call fcn.11009940
lea edx, [ebp - 0x232c]
push edx
mov byte [ebp - 4], 1
call dword [sym.imp.KeRneL32.DLl_GetCurrentProcessId]
push eax
lea ecx, [ebp - 0x58]
call fcn.11031c90
cmp dword [ebp - 0x232c], ebx
jne 0x11095514
cmp byte [ebp - 0x2315], 5
jne 0x11095704
push ebx
lea ecx, [ebp - 0x2314]
call fcn.11094500
lea eax, [ebp - 0x2338]
push eax
lea ecx, [ebp - 0x2314]
call fcn.11094bb0
mov edi, dword [ebp - 0x2334]
mov esi, dword [ebp - 0x2338]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x26c]
push ecx
lea ecx, [ebp - 0x2314]
call fcn.11094bd0
cmp edi, dword [eax + 4]
jne 0x11095563
mov byte [ebp - 0x2315], bl
cmp esi, dword [eax]
je 0x1109556a
mov byte [ebp - 0x2315], 1
mov eax, dword [ebp - 0x264]
cmp eax, ebx
je 0x11095581
push eax
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
mov dword [ebp - 0x264], ebx
cmp byte [ebp - 0x2315], bl
je 0x110956d8
cmp byte [edi + 0x1fa0], bl
je 0x110955ab
mov eax, dword [edi + 0x1f98]
mov edx, esi
add edx, edx
mov ecx, dword [eax + edx*8 + 4]
mov dword [ebp - 0x2328], ecx
jmp 0x110955b5
mov edx, dword [edi + esi*4 + 0x24]
mov dword [ebp - 0x2328], edx
cmp dword [ebp - 0x2328], ebx
je 0x11095695
push esi
mov ecx, edi
call fcn.11094870
cmp eax, dword [ebp - 0x232c]
jne 0x11095695
push 0x104
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x2338]
mov byte [ebp - 0x260], bl
call fcn.11094f70
mov esi, eax
cmp esi, ebx
je 0x11095689
push 0x111a6080
push esi
call fcn.11081e70
add esp, 8
test eax, eax
je 0x11095689
push 0x111a6074
push esi
call fcn.11081e70
add esp, 8
test eax, eax
je 0x11095689
push 0x111a6064
push esi
call fcn.11081e70
add esp, 8
test eax, eax
je 0x11095689
push 0x111a6054
push esi
call fcn.11081e70
add esp, 8
test eax, eax
je 0x11095689
push 0x111a6048
push esi
call fcn.11081e70
add esp, 8
test eax, eax
je 0x11095689
push ebx
push ebx
push ebx
push 0x100
lea ecx, [ebp - 0x158]
push ecx
push 0x410
lea ecx, [ebp - 0x2338]
mov byte [ebp - 0x158], bl
call fcn.11094b60
push eax
call fcn.11094f00
add esp, 0x18
cmp eax, 3
jge 0x110956b8
mov edi, dword [ebp - 0x2334]
mov esi, dword [ebp - 0x2338]
mov eax, dword [ebp - 0x2330]
cmp eax, ebx
je 0x110956ac
push eax
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
mov dword [ebp - 0x2330], ebx
inc esi
mov dword [ebp - 0x2338], esi
jmp 0x11095542
lea edx, [ebp - 0x260]
push edx
push 0x111a6028
call fcn.11147060
mov eax, dword [ebp - 0x2328]
add esp, 8
mov dword [ebp - 0x2320], eax
mov eax, dword [ebp - 0x2330]
cmp eax, ebx
je 0x110956e9
push eax
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 1
call fcn.11094780
mov edi, dword [ebp - 0x2324]
mov esi, dword [ebp - 0x2388]
mov eax, dword [ebp - 0x58]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x11095715
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
cmp dword [ebp - 0x2320], ebx
jne 0x11095746
jmp 0x11095379
cmp dword [ebp - 0x2320], ebx
jne 0x11095746
mov edx, dword [ebp - 0x231c]
lea ecx, [ebp - 0x2320]
push ecx
push edx
call dword [sym.imp.uSEr32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x11095379
mov eax, dword [ebp - 0x2320]
push eax
push ebx
push 0x440
mov dword [ebp - 0x233c], ebx
call dword [sym.imp.KeRneL32.DLl_OpenProcess]
mov esi, eax
cmp esi, ebx
je 0x11095843
lea ecx, [ebp - 0x233c]
push ecx
push 0x2000b
push esi
call dword [sym.imp.aDvapi32.DLL_OpenProcessToken]
cmp eax, ebx
jne 0x110957a0
call dword [sym.imp.KeRneL32.DLl_GetLastError]
push eax
push 0x111a6000
call fcn.11147060
add esp, 8
push esi
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
jmp 0x11095864
cmp dword [edi + 0x24], ebx
je 0x1109583a
mov edx, dword [ebp - 0x2320]
cmp edx, dword [0x111eed84]
je 0x1109583a
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x15c], bl
call fcn.110262c0
push 0x104
lea eax, [ebp - 0x15c]
push eax
push esi
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call fcn.110262f0
mov eax, dword [ebp - 0x34]
cmp eax, ebx
je 0x110957f0
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
lea edi, [ebp - 0x15c]
cmp byte [ebp - 0x15c], bl
je 0x11095812
mov ecx, edi
push 0x5c
push ecx
call fcn.11081e00
add esp, 8
cmp eax, ebx
je 0x11095812
lea edi, [eax + 1]
mov eax, dword [ebp - 0x2320]
push edi
push eax
push eax
push 0x111a5fd4
call fcn.11147060
mov edx, dword [ebp - 0x2320]
mov edi, dword [ebp - 0x2324]
add esp, 0x10
mov dword [0x111eed84], edx
push esi
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
jmp 0x11095864
call dword [sym.imp.KeRneL32.DLl_GetLastError]
push eax
mov eax, dword [ebp - 0x2320]
push eax
push 0x111a5fa4
call fcn.11147060
add esp, 0xc
mov dword [ebp - 0x231c], ebx
mov eax, dword [ebp - 0x233c]
cmp eax, ebx
jne 0x11095874
mov dword [ebp - 0x231c], ebx
mov ecx, dword [ebp - 0x231c]
mov esi, eax
mov eax, dword [ebp - 0x2388]
mov dword [edi + 0x20], ecx
cmp eax, ebx
je 0x11095890
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret