Function at 0x407400
Capabilities:
Create process on windows
Get common file path
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x463104
mov eax, dword fs:[0]
push eax
sub esp, 0x500
mov eax, dword [0x4790c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x4b0], 0
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
mov dword [ebp - 4], 0
movups xmmword [ebp - 0x290], xmm0
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
movups xmmword [ebp - 0x278], xmm0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
movups xmmword [ebp - 0x2d8], xmm0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
push 0xb0
lea eax, [ebp - 0x3a0]
push 0
push eax
call fcn.0043da40
xorps xmm0, xmm0
mov dword [ebp - 0x3a0], 0x474200
add esp, 0xc
movlpd qword [ebp - 0x320], xmm0
movups xmmword [ebp - 0x330], xmm0
mov dword [ebp - 0x310], 0
movlpd qword [ebp - 0x318], xmm0
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x2fc], 0
mov byte [ebp - 0x2f8], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x338]
mov eax, 0x800
mov dword [ebp - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4b0], eax
lea eax, [ebp - 0x39c]
push 0
push eax
mov dword [ebp - 0x33c], 0x60
call fcn.00403f60
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x3a4], eax
lea ecx, [ebp - 0x39c]
call fcn.00403e30
lea eax, [ebp - 0x398]
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov dword [ebp - 0x390], eax
lea eax, [ebp - 0x394]
mov dword [ebp - 0x38c], eax
lea eax, [ebp - 0x388]
mov dword [ebp - 0x380], eax
lea eax, [ebp - 0x384]
mov dword [ebp - 0x37c], eax
lea eax, [ebp - 0x378]
mov dword [ebp - 0x370], eax
lea eax, [ebp - 0x374]
mov byte [ebp - 0x354], 0
mov byte [ebp - 0x35f], 0
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x394], 0
mov eax, dword [0x47b348]
mov ecx, dword [0x47b34c]
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x358], ecx
mov dword [ebp - 0x364], 0
mov eax, 1
mov byte [ebp - 4], 7
mov dword [ebp - 0x4b8], eax
cmp dword [ebp + 8], eax
jle 0x407cc1
mov dword [ebp - 0x4dc], str._log
mov edx, dword [esi + eax*4]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x250], 0
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x24c], 0
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4076d0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.00404340
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 8
call fcn.00406420
cmp dword [ebp - 0x24c], 0xf
lea ecx, [ebp - 0x260]
mov edi, dword [ebp - 0x260]
mov eax, dword [ebp - 0x250]
seta dl
cmova ecx, edi
mov byte [ebp - 0x4a1], dl
cmp eax, 4
jb 0x4078b5
mov esi, 4
mov edx, str._log
sub esi, esi
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x407746
add ecx, 4
add edx, 4
sub esi, 4
jae 0x407730
cmp esi, 0xfffffffc
je 0x40777a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x407773
cmp esi, 0xfffffffd
je 0x40777a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x407773
cmp esi, 0xfffffffe
je 0x40777a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x407773
cmp esi, 0xffffffff
je 0x40777a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40777a
sbb eax, eax
or eax, 1
jmp 0x40777c
xor eax, eax
test eax, eax
sete al
test al, al
mov eax, dword [ebp - 0x250]
je 0x4078af
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
cmp eax, 5
jb 0x4094a1
add eax, 0xfffffffb
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x4a1], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 5
lea ecx, [ebp - 0x28]
push eax
call fcn.00404340
or dword [ebp - 0x4a8], 0x10
mov ecx, dword [ebp - 0x2c4]
cmp ecx, 0xf
jbe 0x407817
mov edx, dword [ebp - 0x2d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40780d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40949c
push ecx
push edx
call fcn.0043c35b
add esp, 8
movups xmm1, xmmword [ebp - 0x28]
cmp dword [ebp - 0x14], 0xf
lea ecx, [ebp - 0x2d8]
movq xmm0, qword [ebp - 0x18]
movd eax, xmm1
movups xmmword [ebp - 0x2d8], xmm1
cmova ecx, eax
movq qword [ebp - 0x2c8], xmm0
sub esp, 8
push ecx
lea ecx, [ebp - 0x39c]
call fcn.0040bd00
test eax, eax
lea ecx, [ebp - 0x3a0]
mov eax, dword [ebp - 0x3a0]
je 0x407871
add ecx, dword [eax + 4]
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x407886
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.00401ff0
cmp dword [ebp - 0x350], 0
jne 0x407c65
mov edx, str.Unable_to_open_log_file_n
mov ecx, 0x47a5a8
call fcn.0040c1c0
jmp 0x407c65
mov dl, byte [ebp - 0x4a1]
test dl, dl
lea ecx, [ebp - 0x260]
mov esi, 0xc
mov edx, str._utmContent
cmovne ecx, edi
cmp eax, esi
jb 0x4079ee
sub esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4078eb
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4078d5
cmp esi, 0xfffffffc
je 0x40791f
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x407918
cmp esi, 0xfffffffd
je 0x40791f
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x407918
cmp esi, 0xfffffffe
je 0x40791f
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x407918
cmp esi, 0xffffffff
je 0x40791f
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40791f
sbb eax, eax
or eax, 1
jmp 0x407921
xor eax, eax
test eax, eax
sete al
test al, al
mov eax, dword [ebp - 0x250]
je 0x4079ee
mov dword [ebp - 0x4c0], 0
xorps xmm0, xmm0
mov dword [ebp - 0x4bc], 0
movups xmmword [ebp - 0x4d0], xmm0
cmp eax, 0xc
jb 0x4094a1
add eax, 0xfffffff4
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x4a1], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 0xc
lea ecx, [ebp - 0x4d0]
push eax
call fcn.00404340
or dword [ebp - 0x4a8], 0x400
mov ecx, dword [ebp - 0x27c]
cmp ecx, 0xf
jbe 0x4079cb
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4079c1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40949c
push ecx
push edx
call fcn.0043c35b
add esp, 8
movups xmm0, xmmword [ebp - 0x4d0]
movups xmmword [ebp - 0x290], xmm0
movq xmm0, qword [ebp - 0x4c0]
movq qword [ebp - 0x280], xmm0
jmp 0x407c65
cmp byte [ebp - 0x4a1], 0
lea ecx, [ebp - 0x260]
mov esi, 6
mov edx, str._uuid
cmovne ecx, edi
cmp eax, esi
jb 0x407b2c
sub esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x407a29
add ecx, 4
add edx, 4
sub esi, 4
jae 0x407a13
cmp esi, 0xfffffffc
je 0x407a5d
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x407a56
cmp esi, 0xfffffffd
je 0x407a5d
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x407a56
cmp esi, 0xfffffffe
je 0x407a5d
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x407a56
cmp esi, 0xffffffff
je 0x407a5d
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x407a5d
sbb eax, eax
or eax, 1
jmp 0x407a5f
xor eax, eax
test eax, eax
sete al
test al, al
mov eax, dword [ebp - 0x250]
je 0x407b2c
mov dword [ebp - 0x4c0], 0
xorps xmm0, xmm0
mov dword [ebp - 0x4bc], 0
movups xmmword [ebp - 0x4d0], xmm0
cmp eax, 6
jb 0x4094a1
add eax, 0xfffffffa
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x4a1], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 6
lea ecx, [ebp - 0x4d0]
push eax
call fcn.00404340
or dword [ebp - 0x4a8], 0x8000
mov ecx, dword [ebp - 0x264]
cmp ecx, 0xf
jbe 0x407b09
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407aff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40949c
push ecx
push edx
call fcn.0043c35b
add esp, 8
movups xmm0, xmmword [ebp - 0x4d0]
movups xmmword [ebp - 0x278], xmm0
movq xmm0, qword [ebp - 0x4c0]
movq qword [ebp - 0x268], xmm0
jmp 0x407c65
cmp byte [ebp - 0x4a1], 0
lea ecx, [ebp - 0x260]
mov esi, 5
mov edx, str._vid
cmovne ecx, edi
cmp eax, esi
jb 0x407c6b
sub esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x407b67
add ecx, 4
add edx, 4
sub esi, 4
jae 0x407b51
cmp esi, 0xfffffffc
je 0x407b9b
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x407b94
cmp esi, 0xfffffffd
je 0x407b9b
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x407b94
cmp esi, 0xfffffffe
je 0x407b9b
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x407b94
cmp esi, 0xffffffff
je 0x407b9b
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x407b9b
sbb eax, eax
or eax, 1
jmp 0x407b9d
xor eax, eax
test eax, eax
sete al
test al, al
je 0x407c6b
mov eax, dword [ebp - 0x250]
xorps xmm0, xmm0
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0
movups xmmword [ebp - 0x4d0], xmm0
cmp eax, 5
jb 0x4094a1
add eax, 0xfffffffb
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x4a1], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 5
lea ecx, [ebp - 0x4d0]
push eax
call fcn.00404340
or dword [ebp - 0x4a8], 0x10000
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x407c47
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407c3d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40949c
push ecx
push edx
call fcn.0043c35b
add esp, 8
movups xmm0, xmmword [ebp - 0x4d0]
movups xmmword [ebp - 0x2a8], xmm0
movq xmm0, qword [ebp - 0x4c0]
movq qword [ebp - 0x298], xmm0
mov edi, dword [ebp - 0x260]
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x24c]
cmp eax, 0xf
jbe 0x407ca5
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x407c9b
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40949c
push ecx
push edi
call fcn.0043c35b
add esp, 8
mov eax, dword [ebp - 0x4b8]
mov esi, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x4b8], eax
cmp eax, dword [ebp + 8]
jl 0x4076a4
mov edx, str.Starting_YandexInstaller_n
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
push eax
call fcn.0040c460
mov edx, dword [esi]
add esp, 4
xorps xmm0, xmm0
test edx, edx
je 0x407d7b
mov ecx, edx
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407d00
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00404340
push ecx
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2f0]
call fcn.00406540
mov byte [ebp - 4], 7
add esp, 4
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x407d61
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407d57
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40949c
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jmp 0x407da0
mov eax, 7
mov dword [ebp - 0x2e0], 0
xor ecx, ecx
mov dword [ebp - 0x2dc], eax
movups xmmword [ebp - 0x2f0], xmm0
mov word [ebp - 0x2f0], cx
cmp eax, 7
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x2f0]
cmova edx, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x3b8]
call fcn.00402250
push ecx
lea edx, [ebp - 0x3b8]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3c4]
call fcn.004025a0
mov edx, str.ID_data_string:__
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [ebp - 0x3a4], 0xf
lea edx, [ebp - 0x3b8]
push dword [ebp - 0x3a8]
cmova edx, dword [ebp - 0x3b8]
mov ecx, eax
call fcn.0040e020
add esp, 8
mov edx, 0x47438c
mov ecx, eax
call fcn.0040c1c0
mov eax, dword [ebp - 0x3c0]
mov ecx, eax
mov edi, dword [ebp - 0x3c4]
sub ecx, edi
mov dword [ebp - 0x4d4], eax
mov eax, 0x2aaaaaab
imul ecx
mov dword [ebp - 0x464], edi
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
cmp esi, 3
je 0x407e6a
mov edx, str.Wrong_parameters_count__
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
push esi
mov ecx, eax
call fcn.0040a370
mov ecx, eax
call fcn.0040c500
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x4a8], eax
mov esi, dword [eax]
mov eax, dword [0x47b350]
cmp eax, dword [esi + 4]
jle 0x407eb2
push 0x47b350
call fcn.0043c408
add esp, 4
cmp dword [0x47b350], 0xffffffff
jne 0x407eb2
push 0x463e10
call fcn.0043c6a8
push 0x47b350
call fcn.0043c3b7
add esp, 8
mov eax, dword [0x47b380]
cmp eax, dword [esi + 4]
jle 0x407eec
push 0x47b380
call fcn.0043c408
add esp, 4
cmp dword [0x47b380], 0xffffffff
jne 0x407eec
push 0x463db0
call fcn.0043c6a8
push 0x47b380
call fcn.0043c3b7
add esp, 8
mov eax, dword [0x47b3c4]
cmp eax, dword [esi + 4]
jle 0x407f5d
push 0x47b3c4
call fcn.0043c408
add esp, 4
cmp dword [0x47b3c4], 0xffffffff
jne 0x407f5d
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
push 0x24
push str.00000000_0000_0000_0000_000000000000
mov ecx, 0x47b40c
mov dword [0x47b41c], 0
movups xmmword [0x47b40c], xmm0
mov dword [0x47b420], 0
call fcn.00404340
push 0x463d50
call fcn.0043c6a8
push 0x47b3c4
mov byte [ebp - 4], 0xc
call fcn.0043c3b7
add esp, 8
cmp dword [ebp - 0x280], 0
mov esi, dword [ebp - 0x4d4]
jne 0x408009
cmp edi, esi
je 0x407fcb
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x407fcb
lea eax, [ebp - 0x290]
cmp eax, edi
je 0x407f9c
mov eax, edi
cmp dword [eax + 0x14], 0xf
jbe 0x407f8f
mov eax, dword [edi]
push ecx
push eax
lea ecx, [ebp - 0x290]
call fcn.00406a10
mov edx, str.Using_content_ID_from_certificate_data__
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
mov edx, edi
cmp dword [edx + 0x14], 0xf
jbe 0x407fb6
mov edx, dword [edi]
push dword [edi + 0x10]
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0040c460
add esp, 8
jmp 0x408009
cmp dword [0x479b8c], 0xf
lea ecx, [ebp - 0x290]
push dword [0x479b88]
mov eax, str.0000000
cmova eax, dword [str.0000000]
push eax
call fcn.00406a10
mov edx, str.No_content_ID_in_certificate_data__using_default_ID.
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
push eax
call fcn.0040c460
add esp, 4
cmp dword [ebp - 0x298], 0
jne 0x408139
cmp edi, esi
je 0x4080fb
mov esi, dword [edi + 0x28]
test esi, esi
je 0x4080fb
mov edx, dword [edi + 0x2c]
lea eax, [edi + 0x18]
mov dword [ebp - 0x4b0], edx
mov ecx, eax
cmp edx, 0xf
jbe 0x40803e
mov ecx, dword [eax]
cmp esi, 3
jne 0x4080ac
mov edx, 0x474424
sub esi, 4
jb 0x408061
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x408066
add ecx, 4
add edx, 4
sub esi, 4
jae 0x408050
cmp esi, 0xfffffffc
je 0x40809a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x408093
cmp esi, 0xfffffffd
je 0x40809a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x408093
cmp esi, 0xfffffffe
je 0x40809a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x408093
cmp esi, 0xffffffff
je 0x40809a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40809a
sbb eax, eax
or eax, 1
jmp 0x40809c
xor eax, eax
test eax, eax
je 0x4080fb
mov esi, dword [edi + 0x28]
lea eax, [edi + 0x18]
mov edx, dword [ebp - 0x4b0]
lea ecx, [ebp - 0x2a8]
cmp ecx, eax
je 0x4080ca
cmp edx, 0xf
jbe 0x4080bd
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00406a10
mov edx, str.Using_VID_from_certificate_data__
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [edi + 0x2c], 0xf
lea edx, [edi + 0x18]
mov ecx, dword [edx + 0x10]
jbe 0x4080e8
mov edx, dword [edx]
push ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0040c460
add esp, 8
jmp 0x408139
cmp dword [0x479bbc], 0xf
lea ecx, [ebp - 0x2a8]
push dword [0x479bb8]
mov eax, 0x479ba8
cmova eax, dword [0x479ba8]
push eax
call fcn.00406a10
mov edx, str.No_VID_in_certificate_data__using_default_VID.
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
push eax
call fcn.0040c460
add esp, 4
cmp dword [ebp - 0x268], 0
jne 0x4081e7
cmp edi, dword [ebp - 0x4d4]
je 0x4081a9
mov eax, dword [edi + 0x40]
test eax, eax
je 0x4081a9
lea esi, [edi + 0x30]
lea ecx, [ebp - 0x278]
cmp ecx, esi
je 0x408179
cmp dword [esi + 0x14], 0xf
mov ecx, esi
jbe 0x40816c
mov ecx, dword [esi]
push eax
push ecx
lea ecx, [ebp - 0x278]
call fcn.00406a10
mov edx, str.Using_UUID_from_certificate_data__
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [esi + 0x14], 0xf
mov ecx, dword [esi + 0x10]
jbe 0x408194
mov esi, dword [esi]
push ecx
mov edx, esi
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0040c460
add esp, 8
jmp 0x4081e7
cmp dword [0x47b420], 0xf
lea ecx, [ebp - 0x278]
push dword [0x47b41c]
mov eax, 0x47b40c
cmova eax, dword [0x47b40c]
push eax
call fcn.00406a10
mov edx, str.No_UUID_in_certificate_data__using_default_UUID.
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
push eax
call fcn.0040c460
add esp, 4
mov ecx, dword [ebp - 0x4a8]
mov eax, dword [0x47b344]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 4]
jle 0x408229
push 0x47b344
call fcn.0043c408
add esp, 4
cmp dword [0x47b344], 0xffffffff
jne 0x408229
push 0x463cf0
call fcn.0043c6a8
push 0x47b344
call fcn.0043c3b7
add esp, 8
mov edx, str.Using_following_parameters:_n
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
mov edx, str.UTM_content_ID:__
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [ebp - 0x27c], 0xf
lea edx, [ebp - 0x290]
push dword [ebp - 0x280]
cmova edx, dword [ebp - 0x290]
mov ecx, eax
call fcn.0040e020
mov edx, 0x47438c
mov ecx, eax
call fcn.0040c1c0
mov edx, str.VID:__
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [ebp - 0x294], 0xf
lea edx, [ebp - 0x2a8]
push dword [ebp - 0x298]
cmova edx, dword [ebp - 0x2a8]
mov ecx, eax
call fcn.0040e020
mov edx, 0x47438c
mov ecx, eax
call fcn.0040c1c0
mov edx, str.UUID:
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [ebp - 0x264], 0xf
lea edx, [ebp - 0x278]
push dword [ebp - 0x268]
cmova edx, dword [ebp - 0x278]
mov ecx, eax
call fcn.0040e020
add esp, 0xc
mov edx, 0x47438c
mov ecx, eax
call fcn.0040c1c0
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
xor eax, eax
mov dword [ebp - 0x234], 7
movups xmmword [ebp - 0x248], xmm0
mov word [ebp - 0x248], ax
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0xe
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, 0x104
jbe 0x408394
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x408377
cmp eax, 7
mov dword [ebp - 0x238], 8
push 0x10
lea esi, [ebp - 0x248]
cmova esi, dword [ebp - 0x248]
push 0x474238
push esi
call fcn.0043dba0
add esp, 0xc
xor eax, eax
mov word [esi + 0x10], ax
jmp 0x40841b
push 0x474238
push dword [ebp - 0x4d8]
lea ecx, [ebp - 0x248]
push 8
call fcn.00405df0
jmp 0x40841b
test eax, eax
je 0x408337
lea ecx, [ebp - 0x230]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4083a1
mov eax, dword [ebp - 0x234]
sub ecx, edx
sar ecx, 1
cmp ecx, eax
ja 0x4083f2
cmp eax, 7
mov dword [ebp - 0x238], ecx
lea esi, [ecx + ecx]
push esi
lea eax, [ebp - 0x230]
lea edi, [ebp - 0x248]
cmova edi, dword [ebp - 0x248]
push eax
push edi
call fcn.0043dba0
add esp, 0xc
xor eax, eax
mov word [edi + esi], ax
mov edi, dword [ebp - 0x464]
jmp 0x40840b
lea eax, [ebp - 0x230]
push eax
push dword [ebp - 0x4d8]
push ecx
lea ecx, [ebp - 0x248]
call fcn.00405df0
push str.Yandex.exe
lea ecx, [ebp - 0x248]
call fcn.00406650
cmp dword [ebp - 0x234], 7
lea eax, [ebp - 0x248]
push 0
cmova eax, dword [ebp - 0x248]
push 0x8000080
push 4
push 0
push 1
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4b0], eax
cmp eax, 0xffffffff
jne 0x408511
mov edx, str.Failed_to_create_file
mov ecx, 0x47a658
call fcn.0040c7a0
cmp dword [ebp - 0x234], 7
lea edx, [ebp - 0x248]
push dword [ebp - 0x238]
cmova edx, dword [ebp - 0x248]
mov ecx, eax
call fcn.0040e270
add esp, 4
mov edx, str.__error_code
mov ecx, eax
call fcn.0040c7a0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.0040bfa0
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x28]
cmp dword [ebp - 0x14], 7
mov ecx, esi
push dword [ebp - 0x18]
cmova edx, dword [ebp - 0x28]
call fcn.0040e270
add esp, 4
mov ecx, eax
call fcn.0040ca40
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x408509
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4084ff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094a6
push ecx
push edx
call fcn.0043c35b
add esp, 8
or esi, 0xffffffff
jmp 0x409159
call fcn.0040e650
mov esi, eax
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 0x4b8], esi
call fcn.00405330
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [0x47b408]
mov edx, dword [eax]
cmp ecx, dword [edx + 4]
jle 0x40860a
push 0x47b408
call fcn.0043c408
add esp, 4
cmp dword [0x47b408], 0xffffffff
jne 0x40860a
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x47410c
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.00404340
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x3dc]
mov ecx, 0x47b384
push eax
lea eax, [ebp - 0x278]
push 0x479bd8
push eax
lea edx, [ebp - 0x290]
call fcn.00406cc0
mov byte [ebp - 4], 0x11
add esp, 0x10
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x4085ef
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4085e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094b0
push ecx
push edx
call fcn.0043c35b
add esp, 8
push 0x463c90
call fcn.0043c6a8
push 0x47b408
mov byte [ebp - 4], 0x10
call fcn.0043c3b7
add esp, 8
push 0
push 0x51
push esi
call fcn.00411480
push 0
push 0x40
push esi
call fcn.00411480
push 0
push 0x2751
push esi
call fcn.00411480
push 1
push 0x34
push esi
call fcn.00411480
push 5
push 0x44
push esi
call fcn.00411480
push 7
push 0xa1
push esi
call fcn.00411480
add esp, 0x48
push 0x406cb0
push 0x4e2b
push esi
call fcn.00411480
cmp dword [0x47b398], 0xf
mov eax, 0x47b384
cmova eax, dword [0x47b384]
push eax
push 0x2712
push esi
call fcn.00411480
mov edx, str.Sending_start_request:
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [0x47b398], 0xf
mov edx, 0x47b384
push dword [0x47b394]
cmova edx, dword [0x47b384]
mov ecx, eax
call fcn.0040e020
mov ecx, eax
call fcn.0040c500
push esi
call fcn.0040e690
mov eax, dword [ebp - 0x4a8]
add esp, 0x20
mov ecx, dword [eax]
mov eax, dword [0x47b37c]
cmp eax, dword [ecx + 4]
jle 0x408737
push 0x47b37c
call fcn.0043c408
add esp, 4
cmp dword [0x47b37c], 0xffffffff
jne 0x408737
mov byte [ebp - 4], 0x13
xorps xmm0, xmm0
push 0x40
push str.https:__download.yandex.ru_yandex_pack_downloader_downloader.exe
mov ecx, 0x47b364
mov dword [0x47b374], 0
movups xmmword [0x47b364], xmm0
mov dword [0x47b378], 0
call fcn.00404340
push 0x463c30
call fcn.0043c6a8
push 0x47b37c
mov byte [ebp - 4], 0x10
call fcn.0043c3b7
add esp, 8
mov edx, str.Downloading_URL:
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [0x47b378], 0xf
mov edx, 0x47b364
push dword [0x47b374]
cmova edx, dword [0x47b364]
mov ecx, eax
call fcn.0040e020
mov ecx, eax
call fcn.0040c500
cmp dword [0x47b378], 0xf
mov eax, 0x47b364
cmova eax, dword [0x47b364]
push eax
push 0x2712
push esi
call fcn.00411480
mov edi, dword [ebp - 0x4b0]
push edi
push 0x2711
push esi
call fcn.00411480
push 0x406c60
push 0x4e2b
push esi
call fcn.00411480
push esi
call fcn.0040e690
add esp, 0x2c
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
lea ecx, [ebp - 0x3a0]
mov edx, str.Downloaded_Yandex_file_size:
mov dword [ebp - 0x4ac], esi
call fcn.0040c1c0
mov ecx, esi
mov dword [ebp - 0x4d8], eax
lea edi, [ebp - 0x13]
mov dword [ebp - 0x4b4], ecx
nop word [eax + eax]
mov eax, 0xcccccccd
dec edi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x4b4]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [ebp - 0x4b4], eax
test eax, eax
jne 0x4087f0
push ecx
lea eax, [ebp - 0x13]
push eax
push edi
lea ecx, [ebp - 0x4d0]
call fcn.004060d0
mov ecx, dword [ebp - 0x4d8]
lea edx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x4bc], 0xf
push dword [ebp - 0x4c0]
cmova edx, dword [ebp - 0x4d0]
call fcn.0040e020
add esp, 4
mov ecx, eax
call fcn.0040c500
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x4bc]
mov edi, dword [ebp - 0x464]
cmp ecx, 0xf
jbe 0x4088a7
mov edx, dword [ebp - 0x4d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40889d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094ab
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [eax]
mov eax, dword [0x47b3c0]
cmp eax, dword [ecx + 4]
jle 0x408a23
push 0x47b3c0
call fcn.0043c408
add esp, 4
cmp dword [0x47b3c0], 0xffffffff
jne 0x408a23
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4d0]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4c0], 0
push 0x47410c
movups xmmword [ebp - 0x4d0], xmm0
mov dword [ebp - 0x4bc], 0
call fcn.00404340
mov byte [ebp - 4], 0x16
lea edi, [ebp - 0x13]
mov eax, 0xcccccccd
dec edi
mul esi
shr edx, 3
mov al, dl
mov esi, edx
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x4ac]
add cl, cl
sub al, cl
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [ebp - 0x4ac], eax
test eax, eax
jne 0x408915
push ecx
lea eax, [ebp - 0x13]
push eax
push edi
lea ecx, [ebp - 0x50c]
call fcn.004060d0
lea eax, [ebp - 0x4d0]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x50c]
mov ecx, 0x47b3a8
push eax
lea eax, [ebp - 0x278]
push 0x479bf0
push eax
lea edx, [ebp - 0x290]
call fcn.00406cc0
mov byte [ebp - 4], 0x16
add esp, 0x10
mov ecx, dword [ebp - 0x4f8]
mov edi, dword [ebp - 0x464]
cmp ecx, 0xf
jbe 0x4089ca
mov edx, dword [ebp - 0x50c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4089c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094b0
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x4bc]
cmp ecx, 0xf
jbe 0x408a08
mov edx, dword [ebp - 0x4d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4089fe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094b0
push ecx
push edx
call fcn.0043c35b
add esp, 8
push 0x463bd0
call fcn.0043c6a8
push 0x47b3c0
mov byte [ebp - 4], 0x10
call fcn.0043c3b7
add esp, 8
mov esi, dword [ebp - 0x4b8]
push 0x406cb0
push 0x4e2b
push esi
call fcn.00411480
cmp dword [0x47b3bc], 0xf
mov eax, 0x47b3a8
cmova eax, dword [0x47b3a8]
push eax
push 0x2712
push esi
call fcn.00411480
mov edx, str.Sending_downloaded_request:
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [0x47b3bc], 0xf
mov edx, 0x47b3a8
push dword [0x47b3b8]
cmova edx, dword [0x47b3a8]
mov ecx, eax
call fcn.0040e020
mov ecx, eax
call fcn.0040c500
push esi
call fcn.0040e690
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x20
mov dword [ebp - 0x4ac], eax
push dword [ebp - 0x4b0]
call eax
push ecx
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0x4f4]
call fcn.00406540
add esp, 4
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x4e4]
mov eax, dword [ebp - 0x4e0]
sub eax, ecx
mov dword [ebp - 0x4d8], ecx
cmp eax, 0x51
jb 0x408ba2
cmp dword [ebp - 0x4e0], 7
lea edx, [ebp - 0x4f4]
lea eax, [ecx + 0x51]
cmova edx, dword [ebp - 0x4f4]
mov dword [ebp - 0x4e4], eax
mov dword [ebp - 0x4b0], edx
cmp edx, 0x4746c2
jae 0x408b2e
lea eax, [edx + ecx*2]
cmp eax, str.__partner_108498___distr__quiet__msicl__YAHOMEPAGEy_YAQSEARCHy_YABROWSERy_VID
jb 0x408b2e
cmp edx, str.__partner_108498___distr__quiet__msicl__YAHOMEPAGEy_YAQSEARCHy_YABROWSERy_VID
ja 0x408b22
xor esi, esi
jmp 0x408b33
mov esi, edx
sub esi, str.__partner_108498___distr__quiet__msicl__YAHOMEPAGEy_YAQSEARCHy_YABROWSERy_VID
sar esi, 1
jmp 0x408b33
mov esi, 0x51
mov eax, dword [ebp - 0x4d8]
lea ecx, [edx + 0xa2]
mov dword [ebp - 0x4b4], esi
lea eax, [eax*2 + 2]
push eax
push edx
push ecx
call fcn.0043dba0
add esi, esi
push esi
push str.__partner_108498___distr__quiet__msicl__YAHOMEPAGEy_YAQSEARCHy_YABROWSERy_VID
push dword [ebp - 0x4b0]
call fcn.0043dba0
mov eax, dword [ebp - 0x4b4]
mov ecx, dword [ebp - 0x4b0]
add ecx, esi
lea edx, [eax*2 + 0x4746c2]
mov eax, 0x51
sub eax, dword [ebp - 0x4b4]
add eax, eax
push eax
push edx
push ecx
call fcn.0043dba0
mov esi, dword [ebp - 0x4b8]
lea eax, [ebp - 0x4f4]
add esp, 0x24
jmp 0x408bba
push 0x51
sub esp, 8
lea ecx, [ebp - 0x4f4]
push dword [ebp - 0x4d8]
push 0x51
call fcn.0040e4c0
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 0x474618
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x19
call fcn.00406650
xorps xmm0, xmm0
mov dword [ebp - 0x2b0], 0
movups xmmword [ebp - 0x2c0], xmm0
mov dword [ebp - 0x2ac], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2b0], xmm0
mov byte [ebp - 4], 0x1b
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x408c8a
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x408c80
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094b5
push ecx
push edx
call fcn.0043c35b
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x4e0]
cmp ecx, 7
jbe 0x408ce2
mov edx, dword [ebp - 0x4f4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x408cd8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094b5
push ecx
push edx
call fcn.0043c35b
add esp, 8
xor eax, eax
mov dword [ebp - 0x4e4], 0
push 0x84
push eax
mov word [ebp - 0x4f4], ax
lea eax, [ebp - 0x460]
push eax
mov dword [ebp - 0x4e0], 7
call fcn.0043da40
add esp, 0xc
lea eax, [ebp - 0x2c0]
cmp dword [ebp - 0x2ac], 7
lea ecx, [ebp - 0x45c]
mov dword [ebp - 0x460], ecx
lea ecx, [ebp - 0x460]
cmova eax, dword [ebp - 0x2c0]
push 3
push eax
call fcn.0040b1b0
mov edx, str.Launch_parameters:
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
mov edx, dword [ebp - 0x460]
mov ecx, eax
call fcn.0040c1c0
mov ecx, eax
call fcn.0040c500
cmp dword [ebp - 0x234], 7
lea eax, [ebp - 0x248]
xorps xmm0, xmm0
mov dword [ebp - 0x4a0], 0x3c
cmova eax, dword [ebp - 0x248]
cmp dword [ebp - 0x2ac], 7
mov dword [ebp - 0x490], eax
lea eax, [ebp - 0x2c0]
cmova eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x4a0]
push eax
movlpd qword [ebp - 0x47c], xmm0
movlpd qword [ebp - 0x474], xmm0
movlpd qword [ebp - 0x46c], xmm0
mov dword [ebp - 0x49c], 0x40
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x494], str.open
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 5
mov dword [ebp - 0x480], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x409073
mov eax, dword [ebp - 0x468]
test eax, eax
je 0x409073
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x464]
mov dword [ebp - 0x464], 0xfffe1dc0
push eax
push dword [ebp - 0x468]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea ecx, [ebp - 0x3a0]
test eax, eax
je 0x408e72
mov edx, str.Exit_code:
call fcn.0040c1c0
push dword [ebp - 0x464]
mov ecx, eax
call fcn.0040a370
mov ecx, eax
call fcn.0040c500
jmp 0x408e7c
mov edx, str.Error._Process_has_finished__but_its_impossible_to_retreive_exit_code._n
call fcn.0040c1c0
push dword [ebp - 0x468]
call dword [ebp - 0x4ac]
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [eax]
mov eax, dword [0x47b360]
cmp eax, dword [ecx + 4]
jle 0x409012
push 0x47b360
call fcn.0043c408
add esp, 4
cmp dword [0x47b360], 0xffffffff
jne 0x409012
mov byte [ebp - 4], 0x1e
lea esi, [ebp - 0x13]
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x4ac], ecx
nop
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x4ac]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x4ac], eax
test eax, eax
jne 0x408ed0
push ecx
lea eax, [ebp - 0x13]
push eax
push esi
lea ecx, [ebp - 0x50c]
call fcn.004060d0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x4d0]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4c0], 0
push 0x47410c
movups xmmword [ebp - 0x4d0], xmm0
mov dword [ebp - 0x4bc], 0
call fcn.00404340
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x4d0]
mov ecx, 0x47b3f0
push eax
lea eax, [ebp - 0x278]
push 0x479c08
push eax
lea edx, [ebp - 0x290]
call fcn.00406cc0
mov byte [ebp - 4], 0x1f
add esp, 0x10
mov ecx, dword [ebp - 0x4bc]
cmp ecx, 0xf
jbe 0x408fb3
mov edx, dword [ebp - 0x4d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x408fa9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094ba
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x4f8]
cmp ecx, 0xf
jbe 0x408ff1
mov edx, dword [ebp - 0x50c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x408fe7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094ba
push ecx
push edx
call fcn.0043c35b
add esp, 8
push 0x463b70
call fcn.0043c6a8
push 0x47b360
mov byte [ebp - 4], 0x1d
call fcn.0043c3b7
mov esi, dword [ebp - 0x4b8]
add esp, 8
cmp dword [0x47b404], 0xf
mov eax, 0x47b3f0
cmova eax, dword [0x47b3f0]
push eax
push 0x2712
push esi
call fcn.00411480
mov edx, str.Sending_installed_request:
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
cmp dword [0x47b404], 0xf
mov edx, 0x47b3f0
push dword [0x47b400]
cmova edx, dword [0x47b3f0]
mov ecx, eax
call fcn.0040e020
mov ecx, eax
call fcn.0040c500
push esi
call fcn.0040e690
add esp, 0x14
jmp 0x409083
mov edx, str.Error._Unable_to_launch_process._n
lea ecx, [ebp - 0x3a0]
call fcn.0040c1c0
push esi
call fcn.0040e630
mov eax, dword [ebp - 0x460]
lea ecx, [ebp - 0x45c]
add esp, 4
xor esi, esi
cmp eax, ecx
je 0x4090a7
push eax
call fcn.00441333
add esp, 4
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2ac]
cmp ecx, 7
jbe 0x4090eb
mov edx, dword [ebp - 0x2c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4090e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x2b0], esi
mov dword [ebp - 0x2ac], 7
mov word [ebp - 0x2c0], ax
cmp ecx, 0xf
jbe 0x409142
mov edx, dword [ebp - 0x3dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x409138
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov dword [ebp - 0x3cc], esi
mov dword [ebp - 0x3c8], 0xf
mov byte [ebp - 0x3dc], 0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x234]
cmp ecx, 7
jbe 0x40919d
mov edx, dword [ebp - 0x248]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x409193
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
mov byte [ebp - 4], 0xb
test edi, edi
je 0x40921a
mov edx, dword [ebp - 0x4d4]
push ecx
mov ecx, edi
call fcn.00404430
mov ecx, dword [ebp - 0x3bc]
mov eax, 0x2aaaaaab
sub ecx, edi
add esp, 4
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 3
cmp ecx, 0x1000
jb 0x409210
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edi
call fcn.0043c35b
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x3a4]
cmp ecx, 0xf
jbe 0x409258
mov edx, dword [ebp - 0x3b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40924e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x3a4], 0xf
mov byte [ebp - 0x3b8], 0
cmp ecx, 7
jbe 0x4092b7
mov edx, dword [ebp - 0x2f0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4092ad
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
xor eax, eax
mov dword [ebp - 0x2e0], 0
mov word [ebp - 0x2f0], ax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x2dc], 7
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x3a4], eax
lea ecx, [ebp - 0x39c]
call fcn.0040a210
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x3a4], eax
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 0x21
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0043a00f
mov ecx, dword [ebp - 0x2c4]
add esp, 4
cmp ecx, 0xf
jbe 0x409384
mov edx, dword [ebp - 0x2d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40937a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0xf
mov byte [ebp - 0x2d8], 0
cmp ecx, 0xf
jbe 0x4093d9
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4093cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
cmp ecx, 0xf
jbe 0x40942e
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x409424
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
cmp ecx, 0xf
jbe 0x40947f
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x409475
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4094bf
push ecx
push edx
call fcn.0043c35b
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043c313
mov esp, ebp
pop ebp
ret
call fcn.0044166a
call fcn.00405050
call fcn.0044166a
call fcn.0044166a
call fcn.0044166a
call fcn.0044166a
call fcn.0044166a
call fcn.0044166a
int3