Function at 0x42b1f6
Capabilities:
Contain obfuscated stackstrings
Move file

Disassembly:
push 0x1d4
mov eax, 0x46b942
call fcn.00443652
mov edi, ecx
cmp dword [ebp + 0x14], 0
mov eax, dword [ebp + 8]
mov ecx, dword [0x4a2794]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], ecx
jne 0x42b24b
cmp dword [ebp + 0x18], 0
jne 0x42b24b
xor eax, eax
inc eax
jmp 0x42c049
xor esi, esi
mov ecx, edi
mov dword [eax], esi
call fcn.00432794
mov dword [ebp - 0x1d4], eax
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x130], 0x47d5a4
mov dword [ebp - 0x108], 0x47d834
call fcn.00402580
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x100], 0x47d5a4
mov dword [ebp - 0xd8], 0x47d834
call fcn.00402580
mov byte [ebp - 4], 3
push ebx
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040cbd7
mov byte [ebp - 4], 4
push ebx
push ebx
lea eax, [ebp - 0x1e0]
push eax
push esi
lea eax, [ebp - 0x130]
push eax
push str.dotnetfx.exe
lea eax, [ebp - 0x70]
push eax
mov ecx, edi
call fcn.004259c5
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
inc bl
jne 0x42c029
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040cbd7
mov byte [ebp - 4], 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x130]
call fcn.0041df06
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
test bl, bl
je 0x42b3e9
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040cbd7
mov byte [ebp - 4], 0xa
push esi
push esi
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x130]
call fcn.0040fb92
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.004105c2
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x70]
call fcn.00401580
cmp dword [ebp - 0x28], 8
lea ecx, [ebp - 0x3c]
cmovae ecx, dword [ebp - 0x3c]
cmp dword [ebp - 0x118], 8
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x42b3dd
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.0040cf65
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp - 0x1e0], 1
jne 0x42b752
push esi
lea eax, [ebp - 0x1c1]
mov ebx, 0x47d5a4
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x48], 0x47d834
call fcn.00402580
mov byte [ebp - 4], 0x13
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x138], 0x47d834
call fcn.00402580
mov byte [ebp - 4], 0x15
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x42b4a9
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetredist.exe
lea ecx, [ebp - 0x40]
call fcn.0040cbd7
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x1cc]
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.004256ac
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x160]
call fcn.0040cf65
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
jmp 0x42b5c1
cmp byte [ebx + 0x45], 0
je 0x42b5c8
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.1033
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x1a
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x1b
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.Startup
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov ecx, ebx
call fcn.00436bcb
mov byte [ebp - 4], 0x1d
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42b536
mov eax, dword [eax]
mov edx, 0x484ef8
test eax, eax
mov ecx, edx
cmovne ecx, eax
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00405070
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c0]
call fcn.00401580
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x40]
call fcn.00401580
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa0]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x1c0]
call fcn.0040cbd7
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x160]
call fcn.0041de34
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c0]
call fcn.00401580
jmp 0x42b5de
cmp byte [ebx + 0x46], 0
je 0x42b5de
push str.dotnetfx20.exe
lea ecx, [ebp - 0x15c]
call fcn.00405070
push esi
push 1
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x160]
push eax
mov ecx, edi
call fcn.00426548
test eax, eax
je 0x42b66b
cmp byte [ebx + 0x44], 0
je 0x42b60c
push dword [ebp - 0x1cc]
mov ecx, edi
call fcn.00424611
jmp 0x42b667
cmp byte [ebx + 0x45], 0
je 0x42b686
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x42b64b
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 1
call fcn.0042490e
test eax, eax
je 0x42b66b
mov eax, dword [ebp - 0x1c8]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42b63f
mov eax, dword [eax]
push eax
mov ecx, edi
call fcn.004246be
test eax, eax
je 0x42b66b
push 0x478334
mov ecx, edi
call fcn.004246be
test eax, eax
je 0x42b66b
push str.1033
mov ecx, edi
call fcn.004246be
test eax, eax
jne 0x42b6a6
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
jmp 0x42c024
cmp byte [ebx + 0x46], 0
je 0x42b6a6
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x42b6a6
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 2
call fcn.0042490e
jmp 0x42b667
cmp dword [ebp + 0x18], 0
je 0x42b737
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x47d5a4
mov dword [ebp - 0x18], 0x47d834
call fcn.00402580
mov byte [ebp - 4], 0x41
cmp byte [ebx + 0x45], 0
je 0x42b7e3
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist.exe
lea ecx, [ebp - 0xa0]
call fcn.0040cbd7
mov byte [ebp - 4], 0x42
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00426548
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa0]
call fcn.00401580
inc bl
jne 0x42b82a
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401580
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x42b83b
cmp dword [ebp - 0x1d0], 0
je 0x42b787
push str.__q:a__c:_install__q_
call fcn.00443574
pop ecx
push eax
push str.__q:a__c:_install__q_
lea ecx, [ebp - 0xfc]
call fcn.0042c70c
push 1
push 0xa
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xa0]
call fcn.0041fddd
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x1c0]
push 0x47b0a8
push eax
call fcn.0041f65b
add esp, 0xc
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x100]
call fcn.004047c0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x1c0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa0]
jmp 0x42befc
cmp byte [ebx + 0x46], 0
je 0x42b72b
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist20.exe
lea ecx, [ebp - 0xa0]
call fcn.0040cbd7
mov byte [ebp - 4], 0x49
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00426548
mov ebx, eax
neg ebx
sbb bl, bl
jmp 0x42b714
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401580
jmp 0x42b66b
cmp dword [ebp + 0x14], 0
je 0x42badb
push str.__q:a
call fcn.00443574
pop ecx
push eax
push str.__q:a
lea ecx, [ebp - 0xfc]
call fcn.0042c70c
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x57
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x477c00
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x58
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__ver:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x59
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x478338
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp - 0x1d0], 0
mov ecx, str._redistui:F
mov eax, str._redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0042c6e5
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__c:_
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x5f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b108
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x60
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x61
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetFxCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x67
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b128
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x68
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x69
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
jmp 0x42bae5
cmp dword [ebp + 0x18], 0
je 0x42bf01
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x6f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x70
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__coreui:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x71
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x77
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x78
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langs:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x79
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPacks
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp + 0x18], 0
je 0x42bf01
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x7f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x80
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jsharpver:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x81
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JVersion
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp + 0x14], 0
jne 0x42be39
cmp dword [ebp - 0x1d0], 0
mov ecx, str.__redistui:F
mov eax, str.__redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0042c6e5
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x484ef8
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x87
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b128
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x88
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x89
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__q:a__c:_
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x8f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b244
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x90
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jscmd:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x91
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JCmdLine
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x92
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204cf
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], 0x47d5a4
mov dword [ebp - 0x168], 0x47d834
call fcn.00402580
mov byte [ebp - 4], 0x98
push 0x452
lea eax, [ebp - 0x1c0]
push eax
mov ecx, edi
call fcn.00432794
mov ecx, dword [eax + 0x260]
call fcn.00417b9a
mov byte [ebp - 4], 0x99
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42bf59
mov eax, dword [eax]
push str.Microsoft_R__.NET_Framework
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004182c2
add esp, 0xc
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1c0]
call fcn.00401580
cmp dword [ebp - 0x178], 8
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
push eax
mov ecx, ebx
call fcn.00438df6
mov eax, dword [ebx + 0x260]
cmp byte [eax + 1], 0
jne 0x42bfb0
cmp byte [eax + 2], 0
jne 0x42bfb0
xor eax, eax
inc eax
jmp 0x42bfb2
mov eax, esi
push 2
push dword [ebp - 0x1d8]
xor ebx, ebx
test al, al
setne bl
call dword [sym.imp.USER32.dll_GetDlgItem]
push esi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
mov edi, eax
push edi
call esi
cmp dword [ebp - 0xe8], 8
mov edx, dword [ebp - 0x1d4]
push edx
lea ecx, [ebp - 0xfc]
cmovae ecx, dword [ebp - 0xfc]
cmp dword [ebp - 0x118], 8
push ebx
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.0044158e
mov ecx, dword [ebp - 0x1dc]
push 1
push edi
mov dword [ecx], eax
call esi
xor esi, esi
inc esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x190]
call fcn.00401580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x100]
call fcn.00401580
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.00401580
mov eax, esi
call fcn.00443601
ret 0x18