Function at 0x70cbf4
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x48], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x70d1f7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x80]
test al, al
jne 0x70cc33
mov byte [ebx + 0x214], 1
mov byte [ebx + 0x1e9], 0
jmp 0x70cc5e
cmp byte [ebx + 0x214], 1
jne 0x70cc5e
cmp byte [ebx + 0x1e8], 0
je 0x70cc57
cmp dword [ebx + 0x1e0], 0
je 0x70cc57
mov byte [ebx + 0x214], 3
jmp 0x70cc5e
mov byte [ebx + 0x214], 0
mov edx, dword [ebx + 0x74]
mov eax, dword [ebx + 0x1d8]
call fcn.0050699c
mov eax, ebx
call fcn.005ac734
test al, al
je 0x70d00b
mov eax, ebx
call fcn.005ac638
mov esi, eax
test byte [ebx + 0x65], 0x80
setne al
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x70ccc0
lea eax, [ebp - 0x10]
push eax
push 0
push 2
lea edx, [ebp - 0x44]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebx + 0x1d8]
call fcn.00506aa4
push eax
call sub.uxtheme.dll_BeginBufferedPaint
mov dword [ebp - 0x14], eax
jmp 0x70ccc5
xor eax, eax
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [0x4fdeac]
call fcn.00505b68
mov dword [ebp - 0x18], eax
xor edx, edx
push ebp
push 0x70d004
push dword fs:[edx]
mov dword fs:[edx], esp
cmp byte [ebp - 9], 0
je 0x70ccf5
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
call fcn.00506b28
jmp 0x70cd0a
mov eax, dword [ebx + 0x1d8]
call fcn.00506aa4
mov edx, eax
mov eax, dword [ebp - 0x18]
call fcn.00506b28
mov edx, dword [ebx + 0x74]
mov eax, dword [ebp - 0x18]
call fcn.0050699c
cmp byte [ebp - 9], 0
jne 0x70cd52
cmp byte [ebx + 0x1f0], 0
je 0x70cd3f
push 0
push 1
push 0
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
mov ecx, eax
xor edx, edx
mov eax, esi
call fcn.005ace40
jmp 0x70cd76
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
mov edx, eax
mov eax, ebx
call fcn.00530be0
jmp 0x70cd76
push 4
call sub.gdi32.dll_GetStockObject
push eax
lea edx, [ebp - 0x44]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x78]
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
push eax
call sub.user32.dll_FillRect
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x80]
test al, al
jne 0x70cd8a
mov byte [ebp - 0xa], 5
jmp 0x70cdb0
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jae 0x70cd9d
mov byte [ebp - 0xa], 4
jmp 0x70cdb0
cmp byte [ebx + 0x1f9], 0
je 0x70cdac
mov byte [ebp - 0xa], 3
jmp 0x70cdb0
mov byte [ebp - 0xa], 2
mov byte [ebp - 0xb], 0
cmp byte [ebx + 0x1f8], 0
jne 0x70cdcb
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
je 0x70cdf5
movzx eax, byte [ebp - 0xa]
sub al, 2
je 0x70cdf1
dec al
je 0x70cdeb
dec al
je 0x70cde5
dec al
jne 0x70cdf5
mov byte [ebp - 0xb], 5
jmp 0x70cdf5
mov byte [ebp - 0xb], 4
jmp 0x70cdf5
mov byte [ebp - 0xb], 3
jmp 0x70cdf5
mov byte [ebp - 0xb], 2
lea edx, [ebp - 0x28]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x78]
cmp byte [ebp - 0xb], 0
jne 0x70ce50
movzx edx, byte [ebp - 0xa]
lea ecx, [ebp - 0x34]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x64]
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005acde0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005acf68
jmp 0x70ceee
movzx edx, byte [ebp - 0xb]
lea ecx, [ebp - 0x34]
mov eax, esi
mov edi, dword [eax]
call dword [edi + pe_nt_image_headers32]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xc8]
test al, al
jne 0x70cea1
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005acde0
cmp byte [ebp - 0xb], 5
jne 0x70ced2
movzx edx, byte [ebp - 0xa]
lea ecx, [ebp - 0x34]
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x64]
jmp 0x70ced2
cmp byte [ebx + 0x1f8], 0
je 0x70ceb6
cmp byte [ebp - 0xa], 4
je 0x70ceb6
cmp byte [ebp - 0xa], 3
jne 0x70ced2
lea eax, [ebp - 0x28]
push eax
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005acde0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x18]
call fcn.00506aa4
mov edx, eax
lea ecx, [ebp - 0x34]
mov eax, esi
call fcn.005acf68
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 4], eax
cmp byte [ebp - 0xa], 4
jne 0x70cf3b
cmp byte [ebp - 0xb], 0
je 0x70cf26
xor edx, edx
mov eax, 6
call fcn.004396e0
test al, al
jne 0x70cf26
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x40]
mov edx, 0xff00000e
call fcn.00504ce4
jmp 0x70cf3b
cmp byte [ebx + 0x1f8], 0
je 0x70cf3b
mov dword [ebp - 8], 1
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [ebx + 0x1e4]
movzx edx, byte [ebp - 9]
mov byte [eax + 0x21], dl
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x24], edx
mov edx, dword [ebp - 0x30]
mov dword [eax + 0x28], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax + 0x2c], edx
mov byte [eax + 0x30], 1
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xac]
test al, 1
setne al
mov esi, dword [ebx + 0x1e4]
mov byte [esi + 0x40], al
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0x48]
mov eax, ebx
call fcn.005347c4
mov eax, dword [ebp - 0x48]
push eax
movzx eax, byte [ebx + 0x1eb]
push eax
mov eax, dword [ebx + 0x1f4]
push eax
mov eax, dword [ebx + 0x1ec]
push eax
movzx eax, byte [ebx + 0x214]
push eax
movzx eax, byte [ebx + 0x1f0]
push eax
xor edx, edx
mov eax, ebx
call fcn.005374ec
push eax
movzx eax, byte [ebx + 0x1f9]
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x28]
mov eax, esi
mov edx, dword [ebp - 0x18]
call fcn.0070c210
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x70d1da
xor edx, edx
mov eax, dword [ebp - 0x18]
call fcn.00506b28
mov eax, dword [ebp - 0x18]
call fcn.004099cc
cmp byte [ebp - 9], 0
je 0x70d001
push 0xffffffffffffffff
mov eax, dword [ebp - 0x14]
push eax
call sub.uxtheme.dll_EndBufferedPaint
pop eax
jmp eax
mov eax, dword [ebx + 0x5c]
push eax
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebx + 0x58]
xor edx, edx
xor eax, eax
call fcn.00414974
cmp byte [ebx + 0x1f8], 0
jne 0x70d05d
mov esi, 0x2010
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jae 0x70d040
or esi, 0x200
push esi
push 4
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebx + 0x1d8]
call fcn.00506aa4
push eax
call sub.user32.dll_DrawFrameControl
jmp 0x70d0fa
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jb 0x70d082
cmp byte [ebx + 0x1f9], 0
je 0x70d07c
cmp byte [ebx + 0x214], 1
jne 0x70d082
test byte [ebx + 0x1c], 0x10
je 0x70d0c4
movzx eax, byte [ebx + 0x1f0]
mov eax, dword [eax*4 + 0x8cb3cc]
or eax, 0xf
push eax
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
setb al
and eax, 0x7f
mov eax, dword [eax*4 + 0x8cb3c4]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebx + 0x1d8]
call fcn.00506aa4
push eax
call sub.user32.dll_DrawEdge
jmp 0x70d0ec
cmp byte [ebx + 0x1f0], 0
jne 0x70d0ec
mov edx, dword [ebx + 0x7c]
mov eax, dword [ebx + 0x1d8]
mov eax, dword [eax + 0x48]
call fcn.00505868
lea edx, [ebp - 0x28]
mov eax, dword [ebx + 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
lea eax, [ebp - 0x28]
or ecx, 0xffffffff
or edx, 0xffffffff
call fcn.00414a24
movzx eax, byte [ebx + 0x214]
add al, 0xfe
sub al, 2
jae 0x70d15f
cmp byte [ebx + 0x214], 3
jne 0x70d14f
cmp byte [ebx + 0x1f8], 0
je 0x70d122
cmp byte [ebx + 0x1f9], 0
jne 0x70d14f
mov edx, 0xff000014
mov eax, 0xff00000f
call fcn.00510dc8
mov edx, eax
mov eax, dword [ebx + 0x1d8]
mov eax, dword [eax + 0x48]
call fcn.0050583c
lea edx, [ebp - 0x28]
mov eax, dword [ebx + 0x1d8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov dword [ebp - 8], 1
mov dword [ebp - 4], 1
jmp 0x70d169
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 4], eax
mov eax, ebx
call fcn.005ac638
mov esi, eax
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x4c]
mov edi, dword [ebx + 0x1e4]
mov byte [edi + 0x30], al
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0x4c]
mov eax, ebx
call fcn.005347c4
mov eax, dword [ebp - 0x4c]
push eax
movzx eax, byte [ebx + 0x1eb]
push eax
mov eax, dword [ebx + 0x1f4]
push eax
mov eax, dword [ebx + 0x1ec]
push eax
movzx eax, byte [ebx + 0x214]
push eax
movzx eax, byte [ebx + 0x1f0]
push eax
xor edx, edx
mov eax, ebx
call fcn.005374ec
push eax
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x28]
mov edx, dword [ebx + 0x1d8]
mov eax, edi
call fcn.0070c210
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x70d1fe
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0040b914
pop eax
jmp eax