Function at 0x251a3a9
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get file version info

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x29c
mov eax, dword [0x6400104]
xor eax, ebp
mov dword [ebp + 0x6c], eax
and dword [ebp - 0x21c], 0
push ebx
mov ebx, dword [ebp + 0x7c]
push esi
push edi
push dword [ebp + 0x78]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x251b9cf
lea eax, [ebp + 0x64]
push eax
push dword [ebp + 0x78]
call sub.VERSION.dll_GetFileVersionInfoSizeW
mov esi, eax
test esi, esi
je 0x251b9cf
push esi
call fcn.0258532a
pop ecx
mov edi, eax
push edi
push esi
push dword [ebp + 0x64]
push dword [ebp + 0x78]
call sub.VERSION.dll_GetFileVersionInfoW
test eax, eax
je 0x251b9b8
mov dword [ebp - 0x188], 0x78597848
mov dword [ebp - 0x184], 0x70387a49
mov dword [ebp - 0x180], 0x6763424b
mov dword [ebp - 0x17c], 0x5145444a
mov dword [ebp - 0x178], 0x3663534c
mov dword [ebp - 0x174], 0x755a5748
mov dword [ebp - 0x170], 0x34466d64
mov dword [ebp - 0x16c], 0x716c7966
mov dword [ebp - 0x168], 0x30595242
mov dword [ebp - 0x164], 0x6e38794a
mov dword [ebp - 0x160], 0x54454449
mov dword [ebp - 0x15c], 0x3051434e
mov dword [ebp - 0x158], 0x6e346a4a
mov dword [ebp - 0x154], 0x2f49794f
mov dword [ebp - 0x150], 0x6a596a42
mov dword [ebp - 0x14c], 0x72454744
mov dword [ebp - 0x148], 0x65386949
mov dword [ebp - 0x144], 0x664d774a
mov dword [ebp - 0x140], 0x31497750
mov dword [ebp - 0x13c], 0x466f5147
mov dword [ebp - 0x138], 0x39355147
mov dword [ebp - 0x134], 0x59594743
mov dword [ebp - 0x130], 0x5467774f
mov dword [ebp - 0x12c], 0x724d5442
mov dword [ebp - 0x128], 0x4767424c
mov dword [ebp - 0x124], 0x7678784d
mov dword [ebp - 0x120], 0x456f4744
mov dword [ebp - 0x11c], 0x6734774a
mov dword [ebp - 0x118], 0x2f454850
mov dword [ebp - 0x114], 0x7873524a
mov dword [ebp - 0x110], 0x39735164
mov dword [ebp - 0x10c], 0x30355346
mov dword [ebp - 0x108], 0x4f55574f
mov dword [ebp - 0x104], 0x316f784b
mov dword [ebp - 0x100], 0x7745484e
mov dword [ebp - 0xfc], 0x50776a44
mov dword [ebp - 0xf8], 0x52454142
mov dword [ebp - 0xf4], 0x2f736a4b
mov dword [ebp - 0xf0], 0x4b776748
mov dword [ebp - 0xec], 0x2f5a794f
mov dword [ebp - 0xe8], 0x78397947
mov dword [ebp - 0xe4], 0x70634345
mov dword [ebp - 0xe0], 0x67346a4c
mov dword [ebp - 0xdc], 0x4f34694a
mov dword [ebp - 0xd8], 0x37556e62
mov dword [ebp - 0xd4], 0x75454465
mov dword [ebp - 0xd0], 0x64637a50
mov dword [ebp - 0xcc], 0x4e777841
mov dword [ebp - 0xc8], 0x466f694d
mov dword [ebp - 0xc4], 0x6c495443
mov dword [ebp - 0xc0], 0x63517a47
mov dword [ebp - 0xbc], 0x2b497849
mov dword [ebp - 0xb8], 0x38426944
mov dword [ebp - 0xb4], 0x6856534a
mov dword [ebp - 0xb0], 0x5334424b
mov dword [ebp - 0xac], 0x5a417847
mov dword [ebp - 0xa8], 0x5a417a48
mov dword [ebp - 0xa4], 0x6445414c
mov dword [ebp - 0xa0], 0x2b41694e
mov dword [ebp - 0x9c], 0x436f7748
mov dword [ebp - 0x98], 0x6377694a
mov dword [ebp - 0x94], 0x2f347741
mov dword [ebp - 0x90], 0x7563524a
mov dword [ebp - 0x8c], 0x36455366
mov dword [ebp - 0x88], 0x6551444a
mov dword [ebp - 0x84], 0x51415142
mov dword [ebp - 0x80], 0x39704148
mov dword [ebp - 0x7c], 0x7170334a
mov dword [ebp - 0x78], 0x51635461
mov dword [ebp - 0x74], 0x77635145
mov dword [ebp - 0x70], 0x5441444b
mov dword [ebp - 0x6c], 0x50456a41
mov dword [ebp - 0x68], 0x73515742
mov dword [ebp - 0x64], 0x74314166
mov dword [ebp - 0x60], 0x45414146
mov dword [ebp - 0x5c], 0x6f525743
mov dword [ebp - 0x58], 0x58414246
mov dword [ebp - 0x54], 0x78384166
mov dword [ebp - 0x50], 0x784d674b
mov dword [ebp - 0x4c], 0x6b517749
mov dword [ebp - 0x48], 0x32426e46
lea eax, [ebp + 0x68]
mov dword [ebp - 0x44], 0x30465342
push eax
lea eax, [ebp + 0x60]
mov dword [ebp - 0x40], 0x7667574e
push eax
xor eax, eax
mov dword [ebp - 0x3c], 0x30496950
push eax
sub esp, 0xc
mov dword [ebp - 0x38], 0x4859434a
mov ecx, esp
mov dword [ebp - 0x34], 0x74784365
mov dword [ebp - 0x30], 0x6e516a66
mov dword [ebp - 0x2c], 0x6f354247
mov dword [ebp - 0x28], 0x2f704143
mov dword [ebp - 0x24], 0x7a516742
mov dword [ebp - 0x20], 0x446b6742
mov dword [ebp - 0x1c], 0x5245324e
mov dword [ebp - 0x18], 0x7a674742
mov dword [ebp - 0x14], 0x31597746
mov dword [ebp - 0x10], 0x50776942
mov dword [ebp - 0xc], 0x71744847
mov dword [ebp - 8], 0x5a63514e
mov dword [ebp - 4], 0x72346841
mov dword [ebp], 0x4241774b
mov dword [ebp + 4], 0x2f52414a
mov dword [ebp + 8], 0x7167694a
mov dword [ebp + 0xc], 0x7063324d
mov dword [ebp + 0x10], 0x59594747
mov dword [ebp + 0x14], 0x504d524d
mov dword [ebp + 0x18], 0x6d39794b
mov dword [ebp + 0x1c], 0x55304463
mov dword [ebp + 0x20], 0x4e6f6a4d
mov dword [ebp + 0x24], 0x54347963
mov dword [ebp + 0x28], 0x5349774d
mov dword [ebp + 0x2c], 0x6839414f
mov dword [ebp + 0x30], 0x6949534f
mov dword [ebp + 0x34], 0x6a45324d
mov dword [ebp + 0x38], 0x57677948
mov dword [ebp + 0x3c], 0x56454444
mov dword [ebp + 0x40], 0x42636844
mov dword [ebp + 0x44], 0x72354163
mov dword [ebp + 0x48], 0x354a7a41
mov dword [ebp + 0x4c], 0x734e5843
mov dword [ebp + 0x50], 0x53454845
mov dword [ebp + 0x54], 0x42414141
mov word [ebp + 0x58], 0x6750
mov byte [ebp - 0x220], al
push dword [ebp - 0x220]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp + 0x5a]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.024799be
lea eax, [ebp - 0x22c]
push eax
call fcn.024b8ec7
add esp, 0x10
mov ecx, eax
call fcn.02486d33
push eax
push edi
call sub.VERSION.dll_VerQueryValueW
xor ecx, ecx
inc ecx
mov dword [ebp - 0x220], ecx
test eax, eax
je 0x251a88b
cmp dword [ebp + 0x68], 0
mov byte [ebp + 0x5f], cl
jne 0x251a88f
mov byte [ebp + 0x5f], 0
lea ecx, [ebp - 0x22c]
call fcn.0247fe92
cmp byte [ebp + 0x5f], 0
jne 0x251ae98
mov dword [ebp - 0x218], 0x78597848
mov dword [ebp - 0x214], 0x70387a49
mov dword [ebp - 0x210], 0x6763424b
mov dword [ebp - 0x20c], 0x5145444a
mov dword [ebp - 0x208], 0x3663534c
mov dword [ebp - 0x204], 0x715a5748
mov dword [ebp - 0x200], 0x34686d64
mov dword [ebp - 0x1fc], 0x34733365
mov dword [ebp - 0x1f8], 0x30595242
mov dword [ebp - 0x1f4], 0x6e38794a
mov dword [ebp - 0x1f0], 0x54454449
mov dword [ebp - 0x1ec], 0x3051434e
mov dword [ebp - 0x1e8], 0x6e346a4a
mov dword [ebp - 0x1e4], 0x744e4249
mov dword [ebp - 0x1e0], 0x6d466e42
mov dword [ebp - 0x1dc], 0x67345263
mov dword [ebp - 0x1d8], 0x52674744
mov dword [ebp - 0x1d4], 0x73347845
mov dword [ebp - 0x1d0], 0x4b49784b
mov dword [ebp - 0x1cc], 0x4777534c
mov dword [ebp - 0x1c8], 0x33467a44
mov dword [ebp - 0x1c4], 0x45634741
mov dword [ebp - 0x1c0], 0x52595748
mov dword [ebp - 0x1bc], 0x3349684a
mov dword [ebp - 0x1b8], 0x46416a65
mov dword [ebp - 0x1b4], 0x53593243
mov dword [ebp - 0x1b0], 0x6b6b6d50
mov dword [ebp - 0x1ac], 0x3455694b
mov dword [ebp - 0x1a8], 0x794a7746
mov dword [ebp - 0x1a4], 0x5a776a48
mov dword [ebp - 0x1a0], 0x4159424e
mov dword [ebp - 0x19c], 0x39497759
mov dword [ebp - 0x198], 0x4e59544a
mov dword [ebp - 0x194], 0x6842534b
mov dword [ebp - 0x190], 0x6e6c694f
mov dword [ebp - 0x18c], 0x55735247
mov dword [ebp - 0x188], 0x3656524c
mov dword [ebp - 0x184], 0x62306e42
mov dword [ebp - 0x180], 0x76634248
mov dword [ebp - 0x17c], 0x6c4e4463
mov dword [ebp - 0x178], 0x4e30434a
mov dword [ebp - 0x174], 0x2b78794a
mov dword [ebp - 0x170], 0x77674245
mov dword [ebp - 0x16c], 0x71637a66
mov dword [ebp - 0x168], 0x57514246
mov dword [ebp - 0x164], 0x7064684b
mov dword [ebp - 0x160], 0x5a733249
mov dword [ebp - 0x15c], 0x73304143
mov dword [ebp - 0x158], 0x2f774244
mov dword [ebp - 0x154], 0x6a46424f
mov dword [ebp - 0x150], 0x68595446
mov dword [ebp - 0x14c], 0x4c736e48
mov dword [ebp - 0x148], 0x4163774f
mov dword [ebp - 0x144], 0x30527747
mov dword [ebp - 0x140], 0x504d6945
mov dword [ebp - 0x13c], 0x5a636d41
mov dword [ebp - 0x138], 0x7567324d
mov dword [ebp - 0x134], 0x69635341
mov dword [ebp - 0x130], 0x314a6a4b
mov dword [ebp - 0x12c], 0x6338514f
mov dword [ebp - 0x128], 0x6f5a794c
mov dword [ebp - 0x124], 0x6463514a
mov dword [ebp - 0x120], 0x6a34774f
mov dword [ebp - 0x11c], 0x7141575a
mov dword [ebp - 0x118], 0x47417a45
mov dword [ebp - 0x114], 0x43385343
mov dword [ebp - 0x110], 0x74416741
mov dword [ebp - 0x10c], 0x5455675a
mov dword [ebp - 0x108], 0x786f4350
mov dword [ebp - 0x104], 0x57635142
mov dword [ebp - 0x100], 0x55556e44
mov dword [ebp - 0xfc], 0x2b4a5747
mov dword [ebp - 0xf8], 0x2b427a50
mov dword [ebp - 0xf4], 0x44455241
mov dword [ebp - 0xf0], 0x4177324b
mov dword [ebp - 0xec], 0x6338534b
mov dword [ebp - 0xe8], 0x7938424d
mov dword [ebp - 0xe4], 0x7a456963
mov dword [ebp - 0xe0], 0x6a4d6847
mov dword [ebp - 0xdc], 0x5777424f
mov dword [ebp - 0xd8], 0x4c496865
lea eax, [ebp + 0x68]
mov dword [ebp - 0xd4], 0x52344147
push eax
lea eax, [ebp + 0x60]
mov dword [ebp - 0xd0], 0x74455766
mov dword [ebp - 0xcc], 0x73635465
mov dword [ebp - 0xc8], 0x4773524c
mov dword [ebp - 0xc4], 0x7a634141
mov dword [ebp - 0xc0], 0x62496941
mov dword [ebp - 0xbc], 0x6a736e4c
mov dword [ebp - 0xb8], 0x4c345361
mov dword [ebp - 0xb4], 0x4334674d
mov dword [ebp - 0xb0], 0x50556a43
mov dword [ebp - 0xac], 0x794a6a5a
mov dword [ebp - 0xa8], 0x424d6966
mov dword [ebp - 0xa4], 0x63454350
mov dword [ebp - 0xa0], 0x7963584a
mov dword [ebp - 0x9c], 0x5634524b
mov dword [ebp - 0x98], 0x35456841
mov dword [ebp - 0x94], 0x59496e41
mov dword [ebp - 0x90], 0x54774149
mov dword [ebp - 0x8c], 0x59346e4f
mov dword [ebp - 0x88], 0x61555842
mov dword [ebp - 0x84], 0x776b4147
mov dword [ebp - 0x80], 0x364a5241
mov dword [ebp - 0x7c], 0x7945774f
mov dword [ebp - 0x78], 0x4341694c
mov dword [ebp - 0x74], 0x41307a42
mov dword [ebp - 0x70], 0x6930444c
mov dword [ebp - 0x6c], 0x534d6a63
mov dword [ebp - 0x68], 0x57593346
mov dword [ebp - 0x64], 0x696f534b
mov dword [ebp - 0x60], 0x49636749
mov dword [ebp - 0x5c], 0x6d454442
mov dword [ebp - 0x58], 0x6841434a
mov dword [ebp - 0x54], 0x4d6f6a43
mov dword [ebp - 0x50], 0x4330534c
mov dword [ebp - 0x4c], 0x6f31444d
mov dword [ebp - 0x48], 0x6d737746
mov dword [ebp - 0x44], 0x46774450
mov dword [ebp - 0x40], 0x38386e61
mov dword [ebp - 0x3c], 0x3367584d
mov dword [ebp - 0x38], 0x50636765
mov dword [ebp - 0x34], 0x64636a41
mov dword [ebp - 0x30], 0x2b314249
mov dword [ebp - 0x2c], 0x41776a43
mov dword [ebp - 0x28], 0x79597747
mov dword [ebp - 0x24], 0x5041534f
mov dword [ebp - 0x20], 0x2f70444c
mov dword [ebp - 0x1c], 0x38776766
mov dword [ebp - 0x18], 0x2f6c6843
mov dword [ebp - 0x14], 0x6d416947
mov dword [ebp - 0x10], 0x7759784c
mov dword [ebp - 0xc], 0x6573524a
mov dword [ebp - 8], 0x6549544f
mov dword [ebp - 4], 0x6f647946
mov dword [ebp], 0x5a73514c
mov dword [ebp + 4], 0x67493264
mov dword [ebp + 8], 0x65387966
mov dword [ebp + 0xc], 0x7431514f
mov dword [ebp + 0x10], 0x504d434b
mov dword [ebp + 0x14], 0x7a4d784c
mov dword [ebp + 0x18], 0x63386a4e
mov dword [ebp + 0x1c], 0x536f425a
mov dword [ebp + 0x20], 0x6d6b5142
mov dword [ebp + 0x24], 0x70345142
mov dword [ebp + 0x28], 0x346b5142
mov dword [ebp + 0x2c], 0x6f307842
mov dword [ebp + 0x30], 0x76386a41
mov dword [ebp + 0x34], 0x75525142
mov dword [ebp + 0x38], 0x79565843
mov dword [ebp + 0x3c], 0x78456965
mov dword [ebp + 0x40], 0x31396746
mov dword [ebp + 0x44], 0x67556a45
mov dword [ebp + 0x48], 0x63515141
mov dword [ebp + 0x4c], 0x7a55694f
mov dword [ebp + 0x50], 0x5463674d
mov dword [ebp + 0x54], 0x41414147
mov word [ebp + 0x58], 0x6141
mov byte [ebp + 0x5a], 0x73
push eax
xor eax, eax
push eax
sub esp, 0xc
mov byte [ebp - 0x21c], al
mov ecx, esp
push dword [ebp - 0x21c]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp + 0x5b]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.024799be
lea eax, [ebp - 0x22c]
push eax
call fcn.024b8ec7
add esp, 0x10
mov ecx, eax
call fcn.02486d33
push eax
push edi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x251ae83
cmp dword [ebp + 0x68], 0
mov byte [ebp + 0x5f], 1
jne 0x251ae87
mov byte [ebp + 0x5f], 0
lea ecx, [ebp - 0x22c]
call fcn.0247fe92
cmp byte [ebp + 0x5f], 0
je 0x251aeaa
push dword [ebp + 0x68]
mov ecx, ebx
push dword [ebp + 0x60]
call fcn.0247dfcc
jmp 0x251b9b8
mov dword [ebp - 0x1ec], 0x58347948
mov dword [ebp - 0x1e8], 0x4b737850
mov dword [ebp - 0x1e4], 0x37644744
mov dword [ebp - 0x1e0], 0x7356324a
mov dword [ebp - 0x1dc], 0x77735463
mov dword [ebp - 0x1d8], 0x39776a43
mov dword [ebp - 0x1d4], 0x65386a48
mov dword [ebp - 0x1d0], 0x31496e47
mov dword [ebp - 0x1cc], 0x58385346
mov dword [ebp - 0x1c8], 0x41346945
mov dword [ebp - 0x1c4], 0x64415464
mov dword [ebp - 0x1c0], 0x4f6f6847
mov dword [ebp - 0x1bc], 0x5441784b
mov dword [ebp - 0x1b8], 0x74467848
mov dword [ebp - 0x1b4], 0x33676763
mov dword [ebp - 0x1b0], 0x74426943
mov dword [ebp - 0x1ac], 0x51386a44
mov dword [ebp - 0x1a8], 0x2b34774d
mov dword [ebp - 0x1a4], 0x68385448
mov dword [ebp - 0x1a0], 0x4b385249
mov dword [ebp - 0x19c], 0x4d4d4443
mov dword [ebp - 0x198], 0x7a385142
mov dword [ebp - 0x194], 0x66776843
mov dword [ebp - 0x190], 0x6a594248
mov dword [ebp - 0x18c], 0x436b6764
mov dword [ebp - 0x188], 0x75634242
mov dword [ebp - 0x184], 0x5a307750
mov dword [ebp - 0x180], 0x78307763
mov dword [ebp - 0x17c], 0x33397961
mov dword [ebp - 0x178], 0x6e4a4444
mov dword [ebp - 0x174], 0x6a41414e
mov dword [ebp - 0x170], 0x78733359
mov dword [ebp - 0x16c], 0x35596a48
mov dword [ebp - 0x168], 0x4f41544f
mov dword [ebp - 0x164], 0x76634342
mov dword [ebp - 0x160], 0x33644149
mov dword [ebp - 0x15c], 0x76517a4e
mov dword [ebp - 0x158], 0x6a357a44
mov dword [ebp - 0x154], 0x75736d4f
mov dword [ebp - 0x150], 0x304d7a49
mov dword [ebp - 0x14c], 0x77646a44
mov dword [ebp - 0x148], 0x336f4261
mov dword [ebp - 0x144], 0x2b315265
mov dword [ebp - 0x140], 0x6774784a
mov dword [ebp - 0x13c], 0x6c67544e
mov dword [ebp - 0x138], 0x71637a42
mov dword [ebp - 0x134], 0x4f59524e
mov dword [ebp - 0x130], 0x50515143
mov dword [ebp - 0x12c], 0x4a595449
mov dword [ebp - 0x128], 0x6e30535a
mov dword [ebp - 0x124], 0x6d6b414b
mov dword [ebp - 0x120], 0x31554143
mov dword [ebp - 0x11c], 0x50735344
mov dword [ebp - 0x118], 0x5167424d
mov dword [ebp - 0x114], 0x474d6844
mov dword [ebp - 0x110], 0x53344447
mov dword [ebp - 0x10c], 0x37734245
mov dword [ebp - 0x108], 0x50775441
mov dword [ebp - 0x104], 0x3051484c
mov dword [ebp - 0x100], 0x6738584c
mov dword [ebp - 0xfc], 0x73517746
mov dword [ebp - 0xf8], 0x78345743
mov dword [ebp - 0xf4], 0x59553265
mov dword [ebp - 0xf0], 0x62346766
mov dword [ebp - 0xec], 0x32497744
mov dword [ebp - 0xe8], 0x7934544e
mov dword [ebp - 0xe4], 0x3945514a
mov dword [ebp - 0xe0], 0x51456742
mov dword [ebp - 0xdc], 0x524d434c
mov dword [ebp - 0xd8], 0x6e42434d
mov dword [ebp - 0xd4], 0x72415149
mov dword [ebp - 0xd0], 0x59775247
mov dword [ebp - 0xcc], 0x4773434f
mov dword [ebp - 0xc8], 0x54516945
mov dword [ebp - 0xc4], 0x45516941
mov dword [ebp - 0xc0], 0x7749774a
mov dword [ebp - 0xbc], 0x6e30774d
mov dword [ebp - 0xb8], 0x30347a44
mov dword [ebp - 0xb4], 0x43594864
mov dword [ebp - 0xb0], 0x37514248
mov dword [ebp - 0xac], 0x4a516746
lea eax, [ebp + 0x68]
mov dword [ebp - 0xa8], 0x5159534f
push eax
lea eax, [ebp + 0x60]
mov dword [ebp - 0xa4], 0x39555350
push eax
xor eax, eax
mov dword [ebp - 0xa0], 0x59417a48
push eax
sub esp, 0xc
mov dword [ebp - 0x9c], 0x52307744
mov ecx, esp
mov dword [ebp - 0x98], 0x55306a4c
mov dword [ebp - 0x94], 0x66737848
mov dword [ebp - 0x90], 0x556f694d
mov dword [ebp - 0x8c], 0x724e784d
mov dword [ebp - 0x88], 0x4b38424a
mov dword [ebp - 0x84], 0x39774149
mov dword [ebp - 0x80], 0x54776942
mov dword [ebp - 0x7c], 0x4b38524c
mov dword [ebp - 0x78], 0x494d5166
mov dword [ebp - 0x74], 0x6a63414b
mov dword [ebp - 0x70], 0x4e346a49
mov dword [ebp - 0x6c], 0x5a417848
mov dword [ebp - 0x68], 0x396b6765
mov dword [ebp - 0x64], 0x4e777750
mov dword [ebp - 0x60], 0x6230414c
mov dword [ebp - 0x5c], 0x6949774c
mov dword [ebp - 0x58], 0x7049674a
mov dword [ebp - 0x54], 0x67554441
mov dword [ebp - 0x50], 0x67495345
mov dword [ebp - 0x4c], 0x6a4d6e49
mov dword [ebp - 0x48], 0x596f444b
mov dword [ebp - 0x44], 0x4c386943
mov dword [ebp - 0x40], 0x77776a4b
mov dword [ebp - 0x3c], 0x2f4a4350
mov dword [ebp - 0x38], 0x57306966
mov dword [ebp - 0x34], 0x78465144
mov dword [ebp - 0x30], 0x66497948
mov dword [ebp - 0x2c], 0x2b6b784f
mov dword [ebp - 0x28], 0x7351774a
mov dword [ebp - 0x24], 0x66735444
mov dword [ebp - 0x20], 0x35306a41
mov dword [ebp - 0x1c], 0x5a30544c
mov dword [ebp - 0x18], 0x314d3347
mov dword [ebp - 0x14], 0x52346e4e
mov dword [ebp - 0x10], 0x3255774a
mov dword [ebp - 0xc], 0x51514245
mov dword [ebp - 8], 0x77557849
mov dword [ebp - 4], 0x66737743
mov dword [ebp], 0x594d3250
mov dword [ebp + 4], 0x7751774c
mov dword [ebp + 8], 0x67347963
mov dword [ebp + 0xc], 0x4e457750
mov dword [ebp + 0x10], 0x64495165
mov dword [ebp + 0x14], 0x57417749
mov dword [ebp + 0x18], 0x45675341
mov dword [ebp + 0x1c], 0x4b634164
mov dword [ebp + 0x20], 0x78645242
mov dword [ebp + 0x24], 0x42776e64
mov dword [ebp + 0x28], 0x4f596966
mov dword [ebp + 0x2c], 0x6d6f4345
mov dword [ebp + 0x30], 0x5741544e
mov dword [ebp + 0x34], 0x34344346
mov dword [ebp + 0x38], 0x7134414a
mov dword [ebp + 0x3c], 0x7951684d
mov dword [ebp + 0x40], 0x5651514d
mov dword [ebp + 0x44], 0x77776e63
mov dword [ebp + 0x48], 0x4338474f
mov dword [ebp + 0x4c], 0x6249544b
mov dword [ebp + 0x50], 0x5977794f
mov dword [ebp + 0x54], 0x41416764
mov word [ebp + 0x58], 0x6241
mov byte [ebp + 0x5a], 0x41
mov byte [ebp - 0x21c], al
push dword [ebp - 0x21c]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp + 0x5b]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.024799be
lea eax, [ebp - 0x22c]
push eax
call fcn.024b8ec7
add esp, 0x10
mov ecx, eax
call fcn.02486d33
push eax
push edi
call sub.VERSION.dll_VerQueryValueW
test eax, eax
je 0x251b417
cmp dword [ebp + 0x68], 0
jne 0x251b41e
mov byte [ebp - 0x220], 0
lea ecx, [ebp - 0x22c]
call fcn.0247fe92
cmp byte [ebp - 0x220], 0
je 0x251b9b8
mov ecx, dword [ebp + 0x60]
cmp dword [ecx], 0xfeef04bd
jne 0x251b9b8
mov dword [ebp - 0x1ec], 0x7246695a
mov dword [ebp - 0x1e8], 0x704a4464
mov dword [ebp - 0x1e4], 0x6e566a61
mov dword [ebp - 0x1e0], 0x47415462
mov dword [ebp - 0x1dc], 0x344d4141
mov dword [ebp - 0x1d8], 0x734e4446
mov dword [ebp - 0x1d4], 0x4f734246
mov dword [ebp - 0x1d0], 0x6f737a41
mov dword [ebp - 0x1cc], 0x46346944
mov dword [ebp - 0x1c8], 0x46344848
mov dword [ebp - 0x1c4], 0x67597943
mov dword [ebp - 0x1c0], 0x534d784e
mov dword [ebp - 0x1bc], 0x69306a43
mov dword [ebp - 0x1b8], 0x57775766
mov dword [ebp - 0x1b4], 0x4367524e
mov dword [ebp - 0x1b0], 0x62515442
mov dword [ebp - 0x1ac], 0x2f6c5744
mov dword [ebp - 0x1a8], 0x794d6948
mov dword [ebp - 0x1a4], 0x67306745
mov dword [ebp - 0x1a0], 0x38454342
mov dword [ebp - 0x19c], 0x4f636746
mov dword [ebp - 0x198], 0x3951795a
mov dword [ebp - 0x194], 0x4263534c
mov dword [ebp - 0x190], 0x4e776948
mov dword [ebp - 0x18c], 0x3478414e
mov dword [ebp - 0x188], 0x5138524b
mov dword [ebp - 0x184], 0x3445424e
mov dword [ebp - 0x180], 0x2b455365
mov dword [ebp - 0x17c], 0x63637745
mov dword [ebp - 0x178], 0x6851694f
mov dword [ebp - 0x174], 0x7045544f
mov dword [ebp - 0x170], 0x2f427947
mov dword [ebp - 0x16c], 0x6c737a41
mov dword [ebp - 0x168], 0x54456949
mov dword [ebp - 0x164], 0x35347747
mov dword [ebp - 0x160], 0x76645244
mov dword [ebp - 0x15c], 0x4b41574e
mov dword [ebp - 0x158], 0x59495843
mov dword [ebp - 0x154], 0x7651514d
mov dword [ebp - 0x150], 0x6a49444c
mov dword [ebp - 0x14c], 0x68455146
mov dword [ebp - 0x148], 0x77645361
mov dword [ebp - 0x144], 0x2f4a5465
mov dword [ebp - 0x140], 0x55737a44
mov dword [ebp - 0x13c], 0x5a51334d
mov dword [ebp - 0x138], 0x706b424d
mov dword [ebp - 0x134], 0x36355147
mov dword [ebp - 0x130], 0x73706948
mov dword [ebp - 0x12c], 0x6a387a4f
mov dword [ebp - 0x128], 0x674e4866
mov dword [ebp - 0x124], 0x45777865
mov dword [ebp - 0x120], 0x57674266
mov dword [ebp - 0x11c], 0x6b636a41
mov dword [ebp - 0x118], 0x37414142
mov dword [ebp - 0x114], 0x6a4e7846
mov dword [ebp - 0x110], 0x5145794b
mov dword [ebp - 0x10c], 0x514d6a44
mov dword [ebp - 0x108], 0x556f6843
mov dword [ebp - 0x104], 0x5345774d
mov dword [ebp - 0x100], 0x776f684b
mov dword [ebp - 0xfc], 0x56737747
mov dword [ebp - 0xf8], 0x67386d4d
mov dword [ebp - 0xf4], 0x7a386a65
mov dword [ebp - 0xf0], 0x4f4d6848
mov dword [ebp - 0xec], 0x38637a44
mov dword [ebp - 0xe8], 0x2b634346
mov dword [ebp - 0xe4], 0x4a305264
mov dword [ebp - 0xe0], 0x72356e4d
mov dword [ebp - 0xdc], 0x56386e4b
mov dword [ebp - 0xd8], 0x2f78334f
mov dword [ebp - 0xd4], 0x49597843
mov dword [ebp - 0xd0], 0x73343249
mov dword [ebp - 0xcc], 0x724d7749
mov dword [ebp - 0xc8], 0x73517741
mov dword [ebp - 0xc4], 0x68464263
mov dword [ebp - 0xc0], 0x7855524f
mov dword [ebp - 0xbc], 0x34416d41
mov dword [ebp - 0xb8], 0x4930784c
mov dword [ebp - 0xb4], 0x4a496746
mov dword [ebp - 0xb0], 0x2f686943
mov dword [ebp - 0xac], 0x78493342
movzx eax, word [ecx + 0xc]
push eax
movzx eax, word [ecx + 0xe]
push eax
movzx eax, word [ecx + 8]
push eax
movzx eax, word [ecx + 0xa]
push eax
xor eax, eax
mov dword [ebp - 0xa8], 0x7a453249
push eax
sub esp, 0xc
mov dword [ebp - 0xa4], 0x676b6a50
mov ecx, esp
mov dword [ebp - 0xa0], 0x306b6a43
mov dword [ebp - 0x9c], 0x4e6f794d
mov dword [ebp - 0x98], 0x78514262
mov dword [ebp - 0x94], 0x48674344
mov dword [ebp - 0x90], 0x4a456744
mov dword [ebp - 0x8c], 0x2b356a42
mov dword [ebp - 0x88], 0x626f7a50
mov dword [ebp - 0x84], 0x64414442
mov dword [ebp - 0x80], 0x49595141
mov dword [ebp - 0x7c], 0x76346841
mov dword [ebp - 0x78], 0x6f6b784f
mov dword [ebp - 0x74], 0x4855674e
mov dword [ebp - 0x70], 0x58384364
mov dword [ebp - 0x6c], 0x2f783248
mov dword [ebp - 0x68], 0x314d4849
mov dword [ebp - 0x64], 0x656b514c
mov dword [ebp - 0x60], 0x6831774c
mov dword [ebp - 0x5c], 0x3235414e
mov dword [ebp - 0x58], 0x6767425a
mov dword [ebp - 0x54], 0x61675350
mov dword [ebp - 0x50], 0x51495348
mov dword [ebp - 0x4c], 0x526b5364
mov dword [ebp - 0x48], 0x7a346746
mov dword [ebp - 0x44], 0x6a776750
mov dword [ebp - 0x40], 0x4b737847
mov dword [ebp - 0x3c], 0x32636746
mov dword [ebp - 0x38], 0x4b456a4f
mov dword [ebp - 0x34], 0x31706742
mov dword [ebp - 0x30], 0x75516844
mov dword [ebp - 0x2c], 0x6b70684a
mov dword [ebp - 0x28], 0x50596965
mov dword [ebp - 0x24], 0x6759484c
mov dword [ebp - 0x20], 0x76356d48
mov dword [ebp - 0x1c], 0x79417861
mov dword [ebp - 0x18], 0x526b794c
mov dword [ebp - 0x14], 0x7a455162
mov dword [ebp - 0x10], 0x67495348
mov dword [ebp - 0xc], 0x4a63414b
mov dword [ebp - 8], 0x2b787846
mov dword [ebp - 4], 0x66634242
mov dword [ebp], 0x75645449
mov dword [ebp + 4], 0x5277694c
mov dword [ebp + 8], 0x4355784a
mov dword [ebp + 0xc], 0x52345347
mov dword [ebp + 0x10], 0x62307945
mov dword [ebp + 0x14], 0x72514448
mov dword [ebp + 0x18], 0x715a5142
mov dword [ebp + 0x1c], 0x61455143
mov dword [ebp + 0x20], 0x7a345142
mov dword [ebp + 0x24], 0x2b524443
mov dword [ebp + 0x28], 0x77596a4b
mov dword [ebp + 0x2c], 0x73384364
mov dword [ebp + 0x30], 0x7a49574f
mov dword [ebp + 0x34], 0x524d6844
mov dword [ebp + 0x38], 0x74495141
mov dword [ebp + 0x3c], 0x636b4241
mov dword [ebp + 0x40], 0x6e346950
mov dword [ebp + 0x44], 0x6a30674d
mov dword [ebp + 0x48], 0x76414147
mov dword [ebp + 0x4c], 0x73495741
mov dword [ebp + 0x50], 0x4149534c
mov dword [ebp + 0x54], 0x6b474141
mov byte [ebp - 0x21c], al
push dword [ebp - 0x21c]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.024799be
lea eax, [ebp - 0x22c]
push eax
call fcn.024b8ec7
add esp, 0x10
mov ecx, eax
call fcn.02486d33
push eax
push ebx
call fcn.024b50cc
add esp, 0x18
lea ecx, [ebp - 0x22c]
call fcn.0247fe92
cmp dword [ebp + 0x64], 0
je 0x251b9c8
lea eax, [ebp + 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.02585333
pop ecx
mov ecx, dword [ebp + 0x78]
lea ecx, [ecx - 0x10]
call fcn.0247de5b
mov ecx, dword [ebp + 0x6c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.02585cf8
lea esp, [ebp + 0x70]
pop ebp
ret