Function at 0x412e60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x320
mov eax, dword [0x547008]
xor eax, ebp
mov dword [esp + 0x318], eax
lea eax, [esp + 0x60]
mov dword [eax], 0
push eax
call fcn.004a56a0
add esp, 4
mov esi, eax
lea ecx, [esp + 0x5c]
mov dword [ecx], 0xffffffff
call fcn.00449150
lea edi, [esp + 0x1d0]
mov byte [edi + 0xb], 9
cmp edi, str.installer
ja 0x412ec6
lea eax, [esp + 0x1d9]
cmp eax, str.installer
ja 0x4146fe
mov dword [esp + 0x1d4], 0x656c6c61
mov dword [esp + 0x1d0], 0x74736e69
mov word [esp + 0x1d8], 0x72
lea edx, [esp + 0xa0]
mov byte [edx + 0xb], 5
cmp edx, str.ptype
ja 0x412f0b
lea eax, [esp + 0xa5]
cmp eax, str.ptype
ja 0x4146fe
mov dword [esp + 0xa0], 0x70797470
mov word [esp + 0xa4], 0x65
lea ecx, [esp + 0x5c]
push edi
push edx
call fcn.0044a710
cmp byte [esp + 0xab], 0
jns 0x412f44
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x1db], 0
jns 0x412f5d
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
push edi
call fcn.00439d90
add esp, 4
push 0x18
call fcn.004e82a5
add esp, 4
mov ebx, eax
mov ecx, eax
push 0x100000
push edi
call fcn.0045ab80
mov dword [esp + 0xa0], ebx
push ebx
call fcn.0045ba40
add esp, 4
mov ecx, edi
call fcn.0049c100
lea edi, [esp + 0x1d0]
mov ecx, edi
push 0xa7
push str.wWinMain
push 0
call fcn.0045baa0
lea ecx, [esp + 0x20c]
push 0x52931e
push str._______________________________________Start_install.
call fcn.004148f0
mov ecx, edi
call fcn.0045bd40
lea eax, [esp + 0x60]
push eax
call fcn.004a3960
add esp, 4
test al, al
je 0x413096
lea ecx, [esp + 0x1d0]
push 0xad
push str.wWinMain
push 0
call fcn.0045baa0
lea esi, [esp + 0x20c]
mov ecx, esi
push 0x52936e
push str.Handled_non_install_cmd_line_option_by_win10_default_browser_helper__ret_code:
call fcn.004148f0
lea edi, [esp + 0xa0]
push dword [esp + 0x60]
push edi
call fcn.004e5290
add esp, 8
movzx eax, byte [edi + 0xb]
test al, al
js 0x413033
and eax, 0x7f
jmp 0x413041
mov eax, dword [esp + 0xa4]
mov edi, dword [esp + 0xa0]
mov ecx, esi
push eax
push edi
call fcn.0047cfe0
cmp byte [esp + 0xab], 0
jns 0x413063
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x1d0]
call fcn.0045bd40
mov edi, dword [esp + 0x60]
lea ecx, [esp + 0x5c]
call fcn.00449180
mov ecx, dword [esp + 0x318]
xor ecx, ebp
call fcn.004e8be6
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
cmp esi, 4
ja case.default.0x41309f
jmp dword [esi*4 + 0x52987c]
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0xb3
push str.wWinMain
push 0
call fcn.0045baa0
lea ecx, [esp + 0x20c]
push 0x529398
push str.Exiting__because_of_insecure_environment.
call fcn.004148f0
mov ecx, esi
jmp 0x41306a
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0xbe
push str.wWinMain
push 0
call fcn.0045baa0
lea ecx, [esp + 0x20c]
push 0x529403
push str.Exiting__DLL_files_found_in_working_directory
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
mov edi, 0xffffff38
jmp 0x413073
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0xbb
push str.wWinMain
push 0
call fcn.0045baa0
lea ecx, [esp + 0x20c]
push 0x5293d5
push str.Runned_in_secure_environment.
jmp 0x413173
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0xb6
push str.wWinMain
push 0
call fcn.0045baa0
lea ecx, [esp + 0x20c]
push 0x5293b7
push str.Cant_find_secure_environment.
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
call fcn.004a7210
mov esi, eax
push str.run_as_admin
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139bb
mov ebx, eax
mov dword [esp + 4], esi
mov esi, edi
cmp eax, 0xa
jbe 0x4131d7
mov edi, ebx
or edi, 7
inc edi
push edi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x1d0], eax
or edi, 0x80000000
mov dword [esp + 0x1d8], edi
mov dword [esp + 0x1d4], ebx
jmp 0x4131e1
lea eax, [esp + 0x1d0]
mov byte [eax + 0xb], bl
lea edi, [eax + ebx]
cmp eax, str.run_as_admin
ja 0x4131f7
cmp edi, str.run_as_admin
ja 0x4146fe
test ebx, ebx
je 0x41320a
push ebx
push str.run_as_admin
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [edi], 0
mov ecx, dword [esp + 4]
push esi
call fcn.004a7750
mov ebx, eax
cmp byte [esp + 0x1db], 0
jns 0x413232
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
test bl, bl
je 0x413e19
xor edi, edi
dec edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], edi
call fcn.004a7210
mov esi, eax
push str.setup_cmd_line
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139bb
mov ebx, eax
cmp eax, 0xa
mov dword [esp + 4], esi
jbe 0x41329f
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x1d0], eax
or esi, 0x80000000
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
jmp 0x4132a9
lea eax, [esp + 0x1d0]
mov byte [eax + 0xb], bl
lea esi, [eax + ebx]
cmp eax, str.setup_cmd_line
ja 0x4132bf
cmp esi, str.setup_cmd_line
ja 0x4146fe
test ebx, ebx
je 0x4132d2
push ebx
push str.setup_cmd_line
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esi], 0
lea edx, [esp + 0x10]
mov ecx, dword [esp + 4]
lea eax, [esp + 0x1d0]
push eax
push edx
call fcn.004a79f0
cmp byte [esp + 0x1db], 0
jns 0x413304
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
mov dword [esp + 0x94], edi
mov dword [esp + 0x98], edi
mov dword [esp + 0x9c], edi
call fcn.004a7210
mov esi, eax
push str.parent_installer_process_id
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139bb
mov ebx, eax
cmp eax, 0xa
mov dword [esp + 4], esi
jbe 0x41336f
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x1d0], eax
or esi, 0x80000000
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
jmp 0x41337d
mov byte [esp + 0x1db], bl
lea eax, [esp + 0x1d0]
lea esi, [eax + ebx]
cmp eax, str.parent_installer_process_id
ja 0x413393
cmp esi, str.parent_installer_process_id
ja 0x4146fe
test ebx, ebx
je 0x4133a6
push ebx
push str.parent_installer_process_id
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esi], 0
lea ebx, [esp + 0x94]
mov ecx, dword [esp + 4]
lea eax, [esp + 0x1d0]
push eax
push ebx
call fcn.004a7930
cmp byte [esp + 0x1db], 0
jns 0x4133db
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
xor eax, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], eax
movzx ecx, byte [esp + 0x9f]
mov eax, ecx
and eax, 0x7f
test cl, cl
cmovs eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
cmovns ecx, ebx
test eax, eax
js 0x4146e8
test ecx, ecx
jne 0x413420
test eax, eax
jne 0x4146d7
lea edx, [esp + 0x88]
push edx
push eax
push ecx
call fcn.00492270
add esp, 0xc
test al, al
jne 0x4134d6
call fcn.005183b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0xa0]
push eax
push esi
call fcn.00516ab0
add esp, 8
lea ecx, [esp + 0x1d0]
push esi
push 0x59
push str.ExecuteAsAdmin
push 1
call fcn.0045bec0
lea edi, [esp + 0x20c]
mov ecx, edi
push 0x5296b4
push str.Suspicious_process_id
call fcn.004148f0
movzx eax, byte [esp + 0x9f]
test al, al
js 0x413495
and eax, 0x7f
jmp 0x4134a3
mov ebx, dword [esp + 0x94]
mov eax, dword [esp + 0x98]
add eax, ebx
mov ecx, edi
push eax
push ebx
call fcn.004148f0
lea ecx, [esp + 0x1d0]
call fcn.0045bf00
cmp byte [esp + 0xab], 0
jns 0x4134d3
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
xor edi, edi
dec edi
mov eax, 0x100000
push dword [esp + 0x88]
push 1
push eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [esp + 4], eax
xor eax, eax
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0x5f
push str.ExecuteAsAdmin
push eax
xor ebx, ebx
call fcn.0045baa0
lea ecx, [esp + 0x20c]
push 0x5296cd
push str.Start_installer_as_admin
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
lea ecx, [esp + 0x40]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], edi
pcmpeqd xmm0, xmm0
movdqa xmmword [ecx], xmm0
lea eax, [esp + 0x10]
push eax
call fcn.004a8ad0
mov esi, dword [sym.imp.KERNEL32.dll_OpenEventA]
push str.0c0f0f0d_6434_4cfd_a5e9_23e9ca4d94b6
push ebx
mov eax, 0x100000
push eax
call esi
mov ebx, eax
push str.fef32d6d_67e9_4654_b314_6c72098ff5d1
xor eax, eax
push eax
mov eax, 0x100000
push eax
call esi
lea ecx, [esp + 0x30c]
mov dword [ecx], ebx
mov dword [ecx + 4], eax
mov eax, dword [esp + 4]
mov dword [ecx + 8], eax
push edi
xor eax, eax
push eax
push ecx
push 3
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x413682
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0x20]
push eax
push esi
call fcn.00516ab0
add esp, 8
lea ecx, [esp + 0x1d0]
push esi
push 0x72
push str.ExecuteAsAdmin
push 1
call fcn.0045bec0
lea ebx, [esp + 0x20c]
mov ecx, ebx
push 0x52970a
push str.Installer_started_as_admin_has_been_unexpectedly_synced__wr
call fcn.004148f0
lea esi, [esp + 0xa0]
push edi
push esi
call fcn.004e5560
add esp, 8
movzx eax, byte [esi + 0xb]
test al, al
js 0x4135f2
and eax, 0x7f
jmp 0x413600
mov eax, dword [esp + 0xa4]
mov esi, dword [esp + 0xa0]
xor edi, edi
dec edi
mov ecx, ebx
push eax
push esi
call fcn.0047cfe0
cmp byte [esp + 0xab], 0
jns 0x413625
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x1d0]
call fcn.0045bf00
cmp byte [esp + 0x2b], 0
jns 0x413644
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x40]
call fcn.004a8b10
cmp byte [esp + 0x9f], 0
jns 0x413666
push dword [esp + 0x94]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x1b], 0
jns 0x413073
push dword [esp + 0x10]
call fcn.004e82d5
add esp, 4
jmp 0x413073
lea edi, [esp + 0x40]
push edi
call fcn.0041f180
add esp, 4
xor eax, eax
dec eax
lea esi, [esp + 0x78]
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
mov ecx, edi
push esi
call fcn.004a7e70
movzx eax, byte [esi + 0xb]
test al, al
js 0x4136b3
and eax, 0x7f
jmp 0x4136bb
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0x78]
lea edi, [esp + 0x1d0]
test eax, eax
js 0x4146e8
test esi, esi
jne 0x4136d6
test eax, eax
jne 0x4146d7
mov ecx, edi
push eax
push esi
call fcn.0049c050
push edi
call fcn.00487bc0
add esp, 4
mov ebx, eax
mov ecx, edi
call fcn.0049c100
test bl, bl
jne 0x41379e
call fcn.005183b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0xa0]
push eax
push esi
call fcn.00516ab0
add esp, 8
lea edi, [esp + 0x1d0]
mov ecx, edi
push esi
push 0x7c
push str.ExecuteAsAdmin
push 1
call fcn.0045bec0
lea ebx, [esp + 0x1d8]
lea ecx, [esp + 0x20c]
push 0x52971b
push str.Browser_archive
call fcn.004148f0
lea eax, [esp + 0x78]
mov ecx, ebx
push eax
call fcn.00414720
lea ecx, [eax + 0x34]
push 0x52972b
push str._does_not_exist
call fcn.004148f0
mov ecx, edi
call fcn.0045bf00
cmp byte [esi + 0xb], 0
jns 0x413784
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
xor edi, edi
dec edi
cmp byte [esp + 0x83], 0
jns 0x413644
push dword [esp + 0x78]
jmp 0x41363c
xor eax, eax
dec eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
push str.progress_window
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139bb
mov ebx, eax
cmp eax, 0xa
jbe 0x4137f8
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x1d0], eax
or esi, 0x80000000
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
jmp 0x413801
mov byte [esp + 0x1db], bl
mov eax, edi
lea esi, [eax + ebx]
cmp eax, str.progress_window
ja 0x413817
cmp esi, str.progress_window
ja 0x4146fe
test ebx, ebx
je 0x41382a
push ebx
push str.progress_window
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esi], 0
lea ebx, [esp + 0x6c]
lea ecx, [esp + 0x40]
push edi
push ebx
call fcn.004a79f0
cmp byte [esp + 0x1db], 0
jns 0x413855
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x77], 0
jns 0x413860
mov ebx, dword [esp + 0x6c]
xor edi, edi
push 0xa
push edi
push ebx
call fcn.004feaa1
add esp, 0xc
lea ebx, [esp + 0x64]
mov dword [ebx], method.std::__Cr::locale::facet.virtual_0
mov dword [ebx + 4], eax
push 0x130
push 0xff
lea esi, [esp + 0x1d8]
push esi
call fcn.004ec220
add esp, 0xc
mov ecx, esi
push edi
push edi
push edi
push ebx
call fcn.004205d0
lea eax, [esp + 0x78]
mov ecx, esi
lea edx, [esp + 0x40]
push edx
push eax
call fcn.004293c0
mov ebx, eax
lea ecx, [esp + 0xa0]
push 0x8c
push str.ExecuteAsAdmin
push edi
call fcn.0045baa0
lea edi, [esp + 0xdc]
mov ecx, edi
push 0x529747
push str.RunModule_results:_success
call fcn.004148f0
movzx eax, bl
lea esi, [esp + 0x20]
mov ebx, eax
push eax
push esi
call fcn.004e5290
add esp, 8
movzx eax, byte [esi + 0xb]
test al, al
js 0x413902
and eax, 0x7f
jmp 0x41390a
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov ecx, edi
push eax
push esi
call fcn.0047cfe0
cmp byte [esp + 0x2b], 0
jns 0x413926
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
mov ecx, edi
push 0x529754
push str._error_code
call fcn.004148f0
lea esi, [esp + 0x20]
push dword [esp + 0x28c]
push esi
call fcn.004e5290
add esp, 8
movzx eax, byte [esi + 0xb]
test al, al
js 0x413958
and eax, 0x7f
jmp 0x413960
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov ecx, edi
push eax
push esi
call fcn.0047cfe0
cmp byte [esp + 0x2b], 0
jns 0x41397c
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0xa0]
call fcn.0045bd40
lea ecx, [esp + 0x1d0]
call fcn.00421020
lea ecx, [esp + 0x64]
call fcn.004117a0
cmp byte [esp + 0x77], 0
mov edi, ebx
jns 0x413786
push dword [esp + 0x6c]
call fcn.004e82d5
add esp, 4
jmp 0x413786
lea ecx, [esp + 0x1d0]
call fcn.004148d0
lea ecx, [esp + 0x10]
call fcn.004148d0
xor edi, edi
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x12f
push str.wWinMain
push edi
call fcn.0045baa0
lea ecx, [esp + 0xdc]
push 0x52951c
push str.Installing_in_silent_mode.
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
call fcn.004a7210
mov dword [esp + 4], eax
push 0x130
push 0xff
push esi
call fcn.004ec220
add esp, 0xc
mov ecx, esi
push 1
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x1d8]
push eax
push edi
call fcn.004205d0
push str.make_browser_default_after_import
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139c7
mov ebx, eax
cmp eax, 0xa
ja 0x413a63
lea eax, [esp + 0x10]
mov byte [eax + 0xb], bl
jmp 0x413a84
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x10], eax
or esi, 0x80000000
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], ebx
lea esi, [eax + ebx]
cmp eax, str.make_browser_default_after_import
ja 0x413a9a
cmp esi, str.make_browser_default_after_import
ja 0x4146fe
test ebx, ebx
je 0x413aad
push ebx
push str.make_browser_default_after_import
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esi], 0
lea esi, [esp + 0x10]
mov ecx, dword [esp + 4]
push esi
call fcn.004a7750
movzx eax, al
lea ecx, [esp + 0xa0]
push eax
call fcn.00429280
cmp byte [esi + 0xb], 0
jns 0x413ae0
push dword [esp + 0x10]
call fcn.004e82d5
add esp, 4
push str.send_statistics
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139c7
mov ebx, eax
cmp eax, 0xa
jbe 0x413b22
mov edi, ebx
or edi, 7
inc edi
push edi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x10], eax
or edi, 0x80000000
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebx
jmp 0x413b29
lea eax, [esp + 0x10]
mov byte [eax + 0xb], bl
lea edi, [eax + ebx]
cmp eax, str.send_statistics
ja 0x413b3f
cmp edi, str.send_statistics
ja 0x4146fe
test ebx, ebx
je 0x413b52
push ebx
push str.send_statistics
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [edi], 0
mov ecx, dword [esp + 4]
push esi
call fcn.004a7750
mov ecx, eax
mov al, 1
test cl, cl
jne 0x413b73
lea ecx, [esp + 0x1d0]
call fcn.0041a500
mov byte [esp + 0x111], al
cmp byte [esp + 0x1b], 0
jns 0x413b8d
push dword [esp + 0x10]
call fcn.004e82d5
add esp, 4
push str.disableyapin
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139c7
mov ebx, eax
cmp eax, 0xa
jbe 0x413bcf
mov edi, ebx
or edi, 7
inc edi
push edi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x10], eax
or edi, 0x80000000
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebx
jmp 0x413bd5
mov byte [esp + 0x1b], bl
mov eax, esi
lea edi, [eax + ebx]
cmp eax, str.disableyapin
ja 0x413beb
cmp edi, str.disableyapin
ja 0x4146fe
test ebx, ebx
je 0x413bfe
push ebx
push str.disableyapin
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [edi], 0
mov ecx, dword [esp + 4]
push esi
call fcn.004a7750
xor al, 1
mov byte [esp + 0x112], al
cmp byte [esp + 0x1b], 0
jns 0x413c27
push dword [esp + 0x10]
call fcn.004e82d5
add esp, 4
lea edi, [esp + 0xa0]
mov ecx, edi
call fcn.004213b0
mov ebx, dword [edi + 0xbc]
mov ecx, edi
call fcn.00421020
lea ecx, [esp + 0xa0]
push 0x13e
push str.wWinMain
push 0
call fcn.0045baa0
lea ecx, [esp + 0xdc]
push 0x529537
push str.Installer_exit_with_code:
call fcn.004148f0
lea esi, [esp + 0x10]
mov edi, ebx
push ebx
push esi
call fcn.004e5290
add esp, 8
movzx eax, byte [esi + 0xb]
test al, al
js 0x413c8d
and eax, 0x7f
jmp 0x413c95
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
lea ecx, [esp + 0xdc]
push eax
push esi
call fcn.0047cfe0
cmp byte [esp + 0x1b], 0
jns 0x413cb6
push dword [esp + 0x10]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0xa0]
call fcn.0045bd40
cmp byte [esp + 0x83], 0
jns 0x413cd8
push dword [esp + 0x78]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x1d0]
call fcn.00417a70
lea ecx, [esp + 0x20]
call fcn.0041dd60
cmp byte [esp + 0x317], 0
jns 0x413d06
push dword [esp + 0x30c]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x9f], 0
jns 0x413e02
push dword [esp + 0x94]
call fcn.004e82d5
add esp, 4
jmp 0x413e02
mov edi, str.wWinMain
xor ebx, ebx
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0xe0
push edi
push ebx
call fcn.0045baa0
lea ecx, [esp + 0x20c]
push 0x52945c
push str.Another_installer_instance_is_already_running.
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
lea ecx, [esp + 0x1d0]
push 0xe1
push edi
push ebx
call fcn.0045baa0
lea esi, [esp + 0x20c]
mov ecx, esi
push 0x52947a
push str.Master_installer_process_id:
call fcn.004148f0
push dword [section.SHARED]
lea edi, [esp + 0xa4]
push edi
call fcn.004e5560
add esp, 8
movzx eax, byte [esp + 0xab]
test al, al
js 0x413db3
and eax, 0x7f
jmp 0x413dc1
mov eax, dword [esp + 0xa4]
mov edi, dword [esp + 0xa0]
mov ecx, esi
push eax
push edi
call fcn.0047cfe0
cmp byte [esp + 0xab], 0
jns 0x413de3
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x1d0]
call fcn.0045bd40
push dword [section.SHARED]
call fcn.0043d270
add esp, 4
mov edi, 0x258
lea ecx, [esp + 0x6c]
call fcn.0043b350
lea ecx, [esp + 0x40]
call fcn.00440500
jmp 0x413073
pcmpeqd xmm0, xmm0
lea ecx, [esp + 0x40]
movdqu xmmword [ecx + 0xc], xmm0
movdqa xmmword [ecx], xmm0
call fcn.00440480
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0xdc
push str.wWinMain
push 0
call fcn.0045baa0
call fcn.004114c0
mov ecx, str.Full_installer_mode.
mov edx, str.Lite_installer_mode.
test al, al
cmovne edx, ecx
lea ecx, [esp + 0x20c]
mov eax, 0x529418
mov edi, 0x52942d
cmovne edi, eax
push edi
push edx
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
xor eax, eax
dec eax
lea esi, [esp + 0x6c]
mov dword [esi + 4], eax
mov dword [esi], eax
mov ecx, esi
call fcn.0043b320
mov ecx, esi
call fcn.0043b380
test al, al
je 0x413d28
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [section.SHARED], eax
lea ecx, [esp + 0x1d0]
push 0xe8
push str.wWinMain
push 0
call fcn.0045baa0
lea esi, [esp + 0x20c]
mov ecx, esi
push 0x529491
push str.Installer_process_id:
call fcn.004148f0
lea edi, [esp + 0xa0]
push dword [section.SHARED]
push edi
call fcn.004e5560
add esp, 8
movzx eax, byte [edi + 0xb]
test al, al
js 0x413eff
and eax, 0x7f
jmp 0x413f0d
mov eax, dword [esp + 0xa4]
mov edi, dword [esp + 0xa0]
mov ecx, esi
push eax
push edi
call fcn.0047cfe0
cmp byte [esp + 0xab], 0
jns 0x413f2f
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x1d0]
call fcn.0045bd40
call fcn.004a7210
mov edi, eax
push str.silent
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139bb
mov ebx, eax
cmp eax, 0xa
jbe 0x413f8d
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x1d0], eax
or esi, 0x80000000
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
jmp 0x413f97
lea eax, [esp + 0x1d0]
mov byte [eax + 0xb], bl
lea esi, [eax + ebx]
cmp eax, str.silent
ja 0x413fad
cmp esi, str.silent
ja 0x4146fe
test ebx, ebx
je 0x413fc0
push ebx
push str.silent
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esi], 0
mov ecx, edi
lea eax, [esp + 0x1d0]
push eax
call fcn.004a7750
mov byte [esp + 4], al
cmp byte [esp + 0x1db], 0
jns 0x413fef
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
call fcn.004a7210
mov edi, eax
push str.system_level
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139bb
mov ebx, eax
cmp eax, 0xa
jbe 0x414041
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x1d0], eax
or esi, 0x80000000
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
jmp 0x41404b
lea eax, [esp + 0x1d0]
mov byte [eax + 0xb], bl
lea esi, [eax + ebx]
cmp eax, str.system_level
ja 0x414061
cmp esi, str.system_level
ja 0x4146fe
test ebx, ebx
je 0x414074
push ebx
push str.system_level
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esi], 0
mov ecx, edi
lea eax, [esp + 0x1d0]
push eax
call fcn.004a7750
mov byte [esp + 0xb], al
cmp byte [esp + 0x1db], 0
jns 0x4140a3
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
xor eax, eax
dec eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
call fcn.004a7210
mov edi, eax
push 0x52f020
call fcn.00503950
add esp, 4
cmp eax, 0x7ffffff8
jae 0x4139bb
mov ebx, eax
cmp eax, 0xa
jbe 0x41410d
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x1d0], eax
or esi, 0x80000000
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
jmp 0x41411b
mov byte [esp + 0x1db], bl
lea eax, [esp + 0x1d0]
lea esi, [eax + ebx]
cmp eax, 0x52f020
ja 0x414131
cmp esi, 0x52f020
ja 0x4146fe
test ebx, ebx
je 0x414144
push ebx
push 0x52f020
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esi], 0
lea edx, [esp + 0x94]
mov ecx, edi
lea eax, [esp + 0x1d0]
push eax
push edx
call fcn.004a7930
cmp byte [esp + 0x1db], 0
jns 0x414177
push dword [esp + 0x1d0]
call fcn.004e82d5
add esp, 4
lea ebx, [esp + 0x30c]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push ebx
call fcn.00439e90
add esp, 4
xor eax, eax
lea esi, [esp + 0x1d0]
mov ecx, esi
push 0xf3
push str.wWinMain
push eax
call fcn.0045baa0
lea edi, [esp + 0x1d8]
lea ecx, [esp + 0x20c]
push 0x5294a5
push str.Temporary_path_is:
call fcn.004148f0
mov ecx, edi
push ebx
call fcn.00414720
mov ecx, esi
call fcn.0045bd40
pcmpeqd xmm0, xmm0
lea edi, [esp + 0x20]
movdqu xmmword [edi + 0xc], xmm0
movdqa xmmword [edi], xmm0
mov ecx, edi
call fcn.0041dd30
mov ecx, edi
call fcn.0041deb0
push 0x138
push 0xff
push esi
call fcn.004ec220
add esp, 0xc
mov ecx, esi
push ebx
call fcn.004178f0
mov ecx, esi
lea eax, [esp + 0x94]
push eax
call fcn.004180a0
xor eax, eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x80], eax
lea edx, [esp + 0xa0]
mov byte [edx + 0xb], 4
cmp edx, 0x5294a6
ja 0x414258
lea eax, [esp + 0xa4]
cmp eax, 0x5294a6
ja 0x4146fe
mov dword [esp + 0xa0], 0x676e616c
mov byte [esp + 0xa4], 0
lea esi, [esp + 0x78]
lea ecx, [esp + 0x20]
push esi
push edx
call fcn.0041e860
mov ebx, eax
cmp byte [esp + 0xab], 0
jns 0x414295
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
lea edi, [esp + 0x34]
test bl, bl
je 0x4142aa
lea ecx, [esp + 0x228]
push esi
call fcn.004147e0
lea ecx, [esp + 0x1d0]
call fcn.00419370
call fcn.004e1db0
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0x30]
cmp ebx, edi
je 0x4142fc
lea esi, [esp + 0x5c]
jmp 0x4142db
mov eax, ecx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x4142cd
mov ebx, eax
cmp eax, edi
je 0x4142fc
lea eax, [ebx + 0x10]
lea edx, [ebx + 0x1c]
mov ecx, esi
push edx
push eax
call fcn.0044a710
mov ecx, dword [ebx + 4]
test ecx, ecx
jne 0x4142cd
mov eax, dword [ebx + 8]
cmp dword [eax], ebx
mov ebx, eax
jne 0x4142f1
jmp 0x4142d5
mov byte [esp + 0xab], 8
lea esi, [esp + 0xa0]
cmp esi, 0x5294ab
ja 0x414325
lea eax, [esp + 0xa8]
cmp eax, 0x5294ab
ja 0x4146fe
lea eax, [esp + 0x210]
mov dword [esp + 0xa4], 0x64695f64
mov dword [esp + 0xa0], 0x6e617262
mov byte [esp + 0xa8], 0
lea ecx, [esp + 0x5c]
push eax
push esi
call fcn.0044a710
cmp byte [esp + 0xab], 0
jns 0x41436e
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
mov byte [esp + 0xab], 0xa
cmp esi, 0x5294b4
ja 0x414390
lea eax, [esp + 0xaa]
cmp eax, 0x5294b4
ja 0x4146fe
lea eax, [esp + 0x21c]
mov word [esp + 0xa8], 0x656d
mov dword [esp + 0xa4], 0x616e5f64
mov dword [esp + 0xa0], 0x6e617262
mov byte [esp + 0xaa], 0
lea ecx, [esp + 0x5c]
push eax
push esi
call fcn.0044a710
cmp byte [esp + 0xab], 0
jns 0x4143e3
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
push 0x18
call fcn.004e82a5
add esp, 4
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa8], 0x80000018
mov dword [esp + 0xa4], 0x10
cmp eax, str.default_language
ja 0x414420
lea ecx, [eax + 0x10]
cmp ecx, str.default_language
ja 0x4146fe
lea edx, [esp + 0x228]
movdqu xmm0, xmmword [str.default_language]
movdqu xmmword [eax], xmm0
mov byte [eax + 0x10], 0
lea ecx, [esp + 0x5c]
push edx
push esi
call fcn.0044a710
cmp byte [esp + 0xab], 0
jns 0x41445b
push dword [esp + 0xa0]
call fcn.004e82d5
add esp, 4
call fcn.004114c0
cmp dword [esp + 0xc], 3
jg 0x414519
test al, al
je 0x414519
mov edi, 0x195
cmp byte [esp + 4], 0
jne 0x413cc2
mov dword [esp + 0xa0], 0xffffffff
lea esi, [esp + 0x10]
push esi
call fcn.00446a30
add esp, 4
mov ebx, dword [esi]
mov eax, dword [ebx]
mov edi, dword [eax + 0xc]
mov ecx, edi
call dword [section..00cfg]
mov ecx, ebx
lea eax, [esp + 0x1d0]
push eax
lea eax, [esp + 0xa4]
push eax
call edi
mov edi, dword [esi]
mov dword [esi], 0
test edi, edi
je 0x4144dc
mov eax, dword [edi]
mov ebx, dword [eax]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push 1
call ebx
mov ecx, dword [esp + 0xa0]
xor esi, esi
push esi
call fcn.00436370
mov edi, dword [esp + 0xa0]
mov dword [esp + 0xa0], esi
test edi, edi
je 0x41450f
mov eax, dword [edi]
mov ebx, dword [eax]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, edi
push 1
call ebx
mov edi, 0x195
jmp 0x413cc2
lea eax, [esp + 0x88]
mov dword [eax], 0
push eax
call fcn.0043d0f0
add esp, 4
test al, al
jne 0x4145c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x10]
push eax
push edi
call fcn.00516ab0
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0x115
push str.wWinMain
push 1
call fcn.0045bec0
lea ecx, [esp + 0xdc]
push 0x5294e4
push str.CPU_is_not_supported
call fcn.004148f0
mov ecx, esi
call fcn.0045bf00
cmp byte [edi + 0xb], 0
jns 0x414595
push dword [esp + 0x10]
call fcn.004e82d5
add esp, 4
mov edi, 0x194
cmp byte [esp + 4], 0
jne 0x413cc2
push dword [esp + 0x88]
push dword [esp + 0x238]
call fcn.0043d140
add esp, 8
jmp 0x413cc2
movzx eax, byte [esp + 0xb]
push 0x25800000
push eax
call fcn.004a3830
add esp, 8
cmp byte [esp + 4], 0
jne 0x4139d0
test al, al
jne 0x414649
lea esi, [esp + 0xa0]
xor eax, eax
dec eax
mov dword [esi + 0x64], eax
mov dword [esi + 0x60], eax
pcmpeqd xmm0, xmm0
movdqa xmmword [esi + 0x50], xmm0
movdqa xmmword [esi + 0x40], xmm0
movdqa xmmword [esi + 0x30], xmm0
movdqa xmmword [esi + 0x20], xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
lea edi, [esp + 0x10]
push edi
call fcn.00431b20
add esp, 4
mov ecx, esi
push edi
push dword [esp + 0x238]
call fcn.004316f0
mov ecx, esi
push 0
call fcn.00436370
mov ecx, esi
call fcn.00431ce0
mov ebx, 0x193
jmp 0x413c42
push 0x148
call fcn.004e82a5
add esp, 4
mov ebx, eax
mov ecx, eax
push 1
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x1d8]
push eax
call fcn.004435f0
mov ecx, ebx
push 0
call fcn.00436370
cmp eax, 1
je 0x4146ba
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x12a
push str.wWinMain
push 0
call fcn.0045baa0
lea ecx, [esp + 0xdc]
push 0x529501
push str.User_cancelled_installation.
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
mov esi, 0x1f4
jmp 0x4146c3
mov eax, dword [ebx + 0x4c]
mov esi, dword [eax + 0xbc]
test ebx, ebx
je 0x4146d0
mov ecx, ebx
push 1
call fcn.00446980
mov ebx, esi
jmp 0x413c42
push str.string_view::string_view__CharT___size_t_:_received_nullptr
push str.__len__0____s___nullptr
push 0x13c
jmp 0x4146f7
push str.string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type
push str.__len___static_cast_size_type__numeric_limits_difference_type_::max___
push 0x13a
push str....._third_partylibc_srcinclude_string_view
jmp 0x414712
push str.char_traits::copy_overlapped_range
push str.__s2_____s1____s2_____s1____n
push 0xf3
push str....._third_partylibc_srcinclude__stringchar_traits.h
push str._s:_d:_assertion__s_failed:__s_n
call fcn.00457520
int3