Function at 0x412320
Capabilities:
Contain obfuscated stackstrings
Get file version info
Impersonate file version information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44e1cb
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x10f4
call fcn.0044b8d0
mov eax, dword [0x4632c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xf54], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x34], 0x80004005
call fcn.00444bb0
mov dword [ebp - 0xf58], eax
cmp dword [ebp - 0xf58], 1
je 0x412380
jmp 0x41238a
call fcn.00408bb0
call fcn.00408cf0
push 0xff
push 0xbc
call fcn.00407ff0
add esp, 8
cmp eax, 0xbb44
jne 0x4123a5
jmp 0x4123b3
call fcn.00402aa0
call fcn.004465f0
jmp 0x4123b3
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
call fcn.00444ac0
test eax, eax
je 0x4123e2
call fcn.004465f0
call fcn.00408d60
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp + 0xc]
call dword [sym.imp.MSVCP90.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x412411
jmp 0x4134a9
push 0xf4
push 0xd2
call fcn.00407ff0
add esp, 8
cmp eax, 0xc828
jne 0x412438
call fcn.00444bb0
test eax, eax
je 0x412438
call fcn.00408e90
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0044b66a
add esp, 4
mov dword [ebp - 0x85c], eax
mov edx, dword [ebp - 0x85c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
push 0
lea ecx, [ebp + 0xc]
call dword [sym.imp.MSVCP90.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call sub.VERSION.dll_GetFileVersionInfoA
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x41247a
jmp 0x4134a9
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x8d4]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8b8], esp
push 0x1a
push 0x4543f8
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0xf5c], eax
lea ecx, [ebp - 0x8b4]
call fcn.00411c30
mov dword [ebp - 0xf60], eax
mov edx, dword [ebp - 0xf60]
mov dword [ebp - 0xf64], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xf64]
call fcn.00404440
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0xf6c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xf6c]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
call sub.VERSION.dll_VerQueryValueW
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8d4]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8b4]
call fcn.00411cb0
call fcn.00444ac0
test eax, eax
je 0x41252f
call fcn.00408fc0
push 0x85
call fcn.00401060
add esp, 4
mov dword [ebp - 0xf70], eax
cmp dword [ebp - 0xf70], 0xc9
je 0x412550
jmp 0x412552
jmp 0x41255c
call fcn.004090a0
call fcn.00425b60
cmp dword [ebp - 0x2c], 0
jne 0x412567
jmp 0x4134a9
xor edx, edx
mov word [ebp - 0x838], dx
push 0x7fe
push 0
lea eax, [ebp - 0x836]
push eax
call sub.MSVCR90.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx + 2]
push edx
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
push ecx
lea edx, [ebp - 0x94c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x930], esp
push 0x1e
push str.Stri2
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0xf74], eax
lea ecx, [ebp - 0x92c]
call fcn.00411c30
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0xf78]
mov dword [ebp - 0xf7c], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xf7c]
call fcn.00404440
mov dword [ebp - 0xf80], eax
mov ecx, dword [ebp - 0xf80]
mov dword [ebp - 0xf84], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xf84]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
lea edx, [ebp - 0x838]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x94c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x92c]
call fcn.00411cb0
mov byte [ebp - 4], 5
call fcn.00407ee0
jmp 0x41265a
mov dword [ebp - 4], 0
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0x858]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [ebp - 4], 7
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0x38
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x950], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0xf88], eax
mov edx, dword [ebp - 0xf88]
mov dword [ebp - 0xf8c], edx
mov byte [ebp - 4], 8
lea eax, [ebp - 0x9cc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9b0], esp
push 0xb
push 0x454434
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0xf90], eax
lea ecx, [ebp - 0x9ac]
call fcn.00411c30
mov dword [ebp - 0xf94], eax
mov ecx, dword [ebp - 0xf94]
mov dword [ebp - 0xf98], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xf98]
call fcn.00403e30
mov dword [ebp - 0xf9c], eax
mov edx, dword [ebp - 0xf9c]
mov dword [ebp - 0xfa0], edx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xfa0]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x954], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0xfa4], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x9cc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9ac]
call fcn.00411cb0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0x54
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9d0], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0xfa8], eax
mov edx, dword [ebp - 0xfa8]
mov dword [ebp - 0xfac], edx
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0xa4c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa30], esp
push 0xf
push 0x454440
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0xfb0], eax
lea ecx, [ebp - 0xa2c]
call fcn.00411c30
mov dword [ebp - 0xfb4], eax
mov ecx, dword [ebp - 0xfb4]
mov dword [ebp - 0xfb8], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xfb8]
call fcn.00403e30
mov dword [ebp - 0xfbc], eax
mov edx, dword [ebp - 0xfbc]
mov dword [ebp - 0xfc0], edx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xfc0]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9d4], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0xfc4], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa4c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa2c]
call fcn.00411cb0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0xe0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa50], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0xfc8], eax
mov edx, dword [ebp - 0xfc8]
mov dword [ebp - 0xfcc], edx
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xacc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xab0], esp
push 0xb
push 0x454450
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0xfd0], eax
lea ecx, [ebp - 0xaac]
call fcn.00411c30
mov dword [ebp - 0xfd4], eax
mov ecx, dword [ebp - 0xfd4]
mov dword [ebp - 0xfd8], ecx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xfd8]
call fcn.00404200
mov dword [ebp - 0xfdc], eax
mov edx, dword [ebp - 0xfdc]
mov dword [ebp - 0xfe0], edx
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xfe0]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa54], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0xfe4], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xacc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xaac]
call fcn.00411cb0
push 0x2b
push 0xad
call fcn.00445200
add esp, 8
mov dword [ebp - 0xfe8], eax
cmp dword [ebp - 0xfe8], 0x15
je 0x4129a0
jmp 0x4129a2
jmp 0x4129ac
call fcn.00426060
call fcn.00402aa0
call fcn.0041ea10
mov dword [ebp - 0xfec], eax
cmp dword [ebp - 0xfec], 1
je 0x4129c2
jmp 0x4129cc
call fcn.0043fdb0
call fcn.00409110
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0x70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xad0], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0xff0], eax
mov edx, dword [ebp - 0xff0]
mov dword [ebp - 0xff4], edx
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0xb4c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb30], esp
push 0xc
push str..__rF6_f
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0xff8], eax
lea ecx, [ebp - 0xb2c]
call fcn.00411c30
mov dword [ebp - 0xffc], eax
mov ecx, dword [ebp - 0xffc]
mov dword [ebp - 0x1000], ecx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x1000]
call fcn.00404200
mov dword [ebp - 0x1004], eax
mov edx, dword [ebp - 0x1004]
mov dword [ebp - 0x1008], edx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x1008]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xad4], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x100c], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb4c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb2c]
call fcn.00411cb0
call fcn.0041ea10
test eax, eax
je 0x412ae1
call fcn.0043fdb0
call fcn.00409240
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0x8c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb50], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0x1010], eax
mov edx, dword [ebp - 0x1010]
mov dword [ebp - 0x1014], edx
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xbcc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xbb0], esp
push 0xe
push 0x45446c
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x1018], eax
lea ecx, [ebp - 0xbac]
call fcn.00411c30
mov dword [ebp - 0x101c], eax
mov ecx, dword [ebp - 0x101c]
mov dword [ebp - 0x1020], ecx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1020]
call fcn.00404200
mov dword [ebp - 0x1024], eax
mov edx, dword [ebp - 0x1024]
mov dword [ebp - 0x1028], edx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1028]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xb54], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xbcc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xbac]
call fcn.00411cb0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0x8c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xbd0], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0x1030], eax
mov edx, dword [ebp - 0x1030]
mov dword [ebp - 0x1034], edx
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0xc4c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc30], esp
push 0xf
push 0x45447c
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x1038], eax
lea ecx, [ebp - 0xc2c]
call fcn.00411c30
mov dword [ebp - 0x103c], eax
mov ecx, dword [ebp - 0x103c]
mov dword [ebp - 0x1040], ecx
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1040]
call fcn.004046e0
mov dword [ebp - 0x1044], eax
mov edx, dword [ebp - 0x1044]
mov dword [ebp - 0x1048], edx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x1048]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xbd4], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xc4c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xc2c]
call fcn.00411cb0
mov byte [ebp - 4], 0x26
call fcn.004013b0
jmp 0x412d0b
mov dword [ebp - 4], 7
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0xa8
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc50], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0x1050], eax
mov edx, dword [ebp - 0x1050]
mov dword [ebp - 0x1054], edx
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0xccc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xcb0], esp
push 0x10
push 0x45448c
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x1058], eax
lea ecx, [ebp - 0xcac]
call fcn.00411c30
mov dword [ebp - 0x105c], eax
mov ecx, dword [ebp - 0x105c]
mov dword [ebp - 0x1060], ecx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x1060]
call fcn.00404200
mov dword [ebp - 0x1064], eax
mov edx, dword [ebp - 0x1064]
mov dword [ebp - 0x1068], edx
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x1068]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc54], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xccc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xcac]
call fcn.00411cb0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0xa8
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xcd0], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0x1070], eax
mov edx, dword [ebp - 0x1070]
mov dword [ebp - 0x1074], edx
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0xd4c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd30], esp
push 0xc
push 0x4544a0
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x1078], eax
lea ecx, [ebp - 0xd2c]
call fcn.00411c30
mov dword [ebp - 0x107c], eax
mov ecx, dword [ebp - 0x107c]
mov dword [ebp - 0x1080], ecx
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x1080]
call fcn.00404440
mov dword [ebp - 0x1084], eax
mov edx, dword [ebp - 0x1084]
mov dword [ebp - 0x1088], edx
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x1088]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xcd4], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x108c], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xd4c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd2c]
call fcn.00411cb0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0xc4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd50], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0x1090], eax
mov edx, dword [ebp - 0x1090]
mov dword [ebp - 0x1094], edx
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0xdcc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xdb0], esp
push 0xb
push 0x4544b0
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x1098], eax
lea ecx, [ebp - 0xdac]
call fcn.00411c30
mov dword [ebp - 0x109c], eax
mov ecx, dword [ebp - 0x109c]
mov dword [ebp - 0x10a0], ecx
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x10a0]
call fcn.00404440
mov dword [ebp - 0x10a4], eax
mov edx, dword [ebp - 0x10a4]
mov dword [ebp - 0x10a8], edx
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x10a8]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd54], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x10ac], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xdcc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xdac]
call fcn.00411cb0
call fcn.004013b0
test eax, eax
je 0x413031
call fcn.004226b0
call fcn.00409480
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0xe0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xdd0], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0x10b0], eax
mov edx, dword [ebp - 0x10b0]
mov dword [ebp - 0x10b4], edx
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0xe4c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xe30], esp
push 0xe
push 0x4544bc
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x10b8], eax
lea ecx, [ebp - 0xe2c]
call fcn.00411c30
mov dword [ebp - 0x10bc], eax
mov ecx, dword [ebp - 0x10bc]
mov dword [ebp - 0x10c0], ecx
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x10c0]
call fcn.00404440
mov dword [ebp - 0x10c4], eax
mov edx, dword [ebp - 0x10c4]
mov dword [ebp - 0x10c8], edx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x10c8]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xdd4], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x10cc], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xe4c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe2c]
call fcn.00411cb0
mov byte [ebp - 4], 0x3c
call fcn.004051f0
jmp 0x413157
mov dword [ebp - 4], 7
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
add eax, 0xe0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xe50], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [ebp - 0x10d0], eax
mov edx, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d4], edx
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0xecc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xeb0], esp
push 0xc
push 0x4544cc
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x10d8], eax
lea ecx, [ebp - 0xeac]
call fcn.00411c30
mov dword [ebp - 0x10dc], eax
mov ecx, dword [ebp - 0x10dc]
mov dword [ebp - 0x10e0], ecx
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x10e0]
call fcn.004046e0
mov dword [ebp - 0x10e4], eax
mov edx, dword [ebp - 0x10e4]
mov dword [ebp - 0x10e8], edx
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x10e8]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xe54], esp
push eax
lea edx, [ebp - 0x858]
push edx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
mov dword [ebp - 0x10ec], eax
mov eax, dword [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0xf54]
call fcn.004135a0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xecc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xeac]
call fcn.00411cb0
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x83c]
push edx
lea eax, [ebp - 0xf48]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xf2c], esp
push 2
push 0x4544dc
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___unsigned_int_]
mov dword [ebp - 0x10f0], eax
lea ecx, [ebp - 0xf28]
call fcn.00411c30
mov dword [ebp - 0x10f4], eax
mov ecx, dword [ebp - 0x10f4]
mov dword [ebp - 0x10f8], ecx
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x10f8]
call fcn.004046e0
mov dword [ebp - 0x10fc], eax
mov edx, dword [ebp - 0x10fc]
mov dword [ebp - 0x1100], edx
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x1100]
call dword [sym.imp.MSVCP90.dll_public:_wchar_t_const____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::c_str_void_const]
push eax
mov eax, dword [ebp - 0x28]
push eax
call sub.VERSION.dll_VerQueryValueW
mov dword [ebp - 0xed0], eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xf48]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf28]
call fcn.00411cb0
cmp dword [ebp - 0xed0], 0
je 0x4133e9
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
mov edx, dword [ebp - 0x83c]
mov eax, dword [eax + 0xfc]
mov dword [edx + 8], eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
mov edx, dword [ebp - 0x83c]
mov eax, dword [eax + 0x100]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
mov edx, dword [ebp - 0x83c]
mov eax, dword [eax + 0xfc]
mov dword [edx + 0x10], eax
push 0xc3
push 0xd1
call fcn.00445200
add esp, 8
mov dword [ebp - 0x1104], eax
cmp dword [ebp - 0x1104], 0x61
je 0x413399
jmp 0x41339b
jmp 0x4133a5
call fcn.00409690
call fcn.004097c0
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0xf54]
call fcn.00413c20
mov edx, dword [ebp - 0x83c]
mov eax, dword [eax + 0x100]
mov dword [edx + 0x14], eax
push 0xd6
push 0x27
call fcn.00407ff0
add esp, 8
cmp eax, 0x209a
jne 0x4133db
jmp 0x4133e9
call fcn.00426060
call fcn.00426060
jmp 0x4133e9
push 0
lea ecx, [ebp + 0xc]
call dword [sym.imp.MSVCP90.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceA]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x413419
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x858]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
jmp 0x4134a9
push 0x9d
call fcn.00401060
add esp, 4
cmp eax, 0xed
jne 0x41343b
call fcn.004013b0
test eax, eax
je 0x41343b
call fcn.00425b60
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
push ecx
push 1
push 0x10
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_UpdateResourceA]
test eax, eax
jne 0x413492
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x858]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
jmp 0x4134a9
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x858]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
jmp 0x4134a9
cmp dword [ebp - 0x28], 0
je 0x4134c7
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xf4c], eax
mov ecx, dword [ebp - 0xf4c]
push ecx
call sub.MSVCR90.dll_void___cdecl_operator_delete___void__
add esp, 4
cmp dword [ebp - 0x30], 0
je 0x4134d9
push 0
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceA]
mov dword [ebp - 0xf50], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov eax, dword [ebp - 0xf50]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044b84a
mov esp, ebp
pop ebp
ret 0x20