Function at 0x4272c0
Capabilities:
Accept command line arguments
Check os version
Contain obfuscated stackstrings
Get common file path
Get startup folder
Identify system language via api
Parse pe header
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d845e
mov eax, dword fs:[0]
push eax
mov eax, 0x1b3c
call fcn.00494a60
mov eax, dword [0x520078]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x136c], eax
mov dword [ebp - 0x124c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xbb8], 0
mov dword [ebp - 0xbb4], 0
mov byte [ebp - 4], 0
mov dword [ebp - 0xbb4], 7
mov byte [ebp - 4], 0
lea eax, [ebp - 0xbc8]
cmp dword [ebp - 0xbb4], 8
mov dword [ebp - 0xbb8], 0
cmovae eax, dword [ebp - 0xbc8]
xor ecx, ecx
mov byte [ebp - 4], 0x1a
mov word [eax], cx
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xb20], ecx
mov dword [ebp - 0xb1c], ecx
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xb1c], 7
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xb30]
cmp dword [ebp - 0xb1c], 8
mov dword [ebp - 0xb20], ecx
cmovae eax, dword [ebp - 0xb30]
mov byte [ebp - 4], 0x36
mov word [eax], cx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0xb08], ecx
mov dword [ebp - 0xb04], ecx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0xb04], 7
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0xb18]
cmp dword [ebp - 0xb04], 8
mov dword [ebp - 0xb08], ecx
cmovae eax, dword [ebp - 0xb18]
mov byte [ebp - 4], 0x52
mov word [eax], cx
mov byte [ebp - 4], 0x54
mov dword [ebp - 0xcc0], ecx
mov dword [ebp - 0xcbc], ecx
mov byte [ebp - 4], 0x54
mov dword [ebp - 0xcbc], 7
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0xcd0]
cmp dword [ebp - 0xcbc], 8
mov dword [ebp - 0xcc0], ecx
cmovae eax, dword [ebp - 0xcd0]
mov byte [ebp - 4], 0x6e
mov word [eax], cx
mov byte [ebp - 4], 0x70
mov dword [ebp - 0xca8], ecx
mov dword [ebp - 0xca4], ecx
mov byte [ebp - 4], 0x70
mov dword [ebp - 0xca4], 7
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0xcb8]
cmp dword [ebp - 0xca4], 8
mov dword [ebp - 0xca8], ecx
cmovae eax, dword [ebp - 0xcb8]
mov byte [ebp - 4], 0x8a
mov word [eax], cx
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0xc78], ecx
mov dword [ebp - 0xc74], ecx
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0xc74], 7
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0xc88]
cmp dword [ebp - 0xc74], 8
mov dword [ebp - 0xc78], ecx
cmovae eax, dword [ebp - 0xc88]
mov byte [ebp - 4], 0xa6
mov word [eax], cx
mov byte [ebp - 4], 0xa8
mov dword [ebp - 0xbe8], ecx
mov dword [ebp - 0xbe4], ecx
mov byte [ebp - 4], 0xa8
mov dword [ebp - 0xbe4], 7
mov byte [ebp - 4], 0xa8
lea eax, [ebp - 0xbf8]
cmp dword [ebp - 0xbe4], 8
mov dword [ebp - 0xbe8], ecx
cmovae eax, dword [ebp - 0xbf8]
mov byte [ebp - 4], 0xc2
mov word [eax], cx
push 0x34
push ecx
lea eax, [ebp - 0xb7c]
mov byte [ebp - 4], 0xc4
push eax
call fcn.004ad5f0
add esp, 0xc
mov byte [ebp - 4], 0xc5
mov dword [ebp - 0x1304], 0
mov dword [ebp - 0x1300], 0
mov byte [ebp - 4], 0xc5
mov dword [ebp - 0x1300], 7
mov byte [ebp - 4], 0xc5
lea eax, [ebp - 0x1314]
cmp dword [ebp - 0x1300], 8
mov dword [ebp - 0x1304], 0
cmovae eax, dword [ebp - 0x1314]
xor ecx, ecx
mov byte [ebp - 4], 0xdf
mov word [eax], cx
lea eax, [ebp - 0x1314]
mov byte [ebp - 4], 0xe0
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b570
mov byte [ebp - 4], 0xe3
cmp dword [ebp - 0x1300], 8
jb 0x42759a
mov byte [ebp - 4], 0xe3
mov ecx, dword [ebp - 0x1314]
mov byte [ebp - 4], 0xe3
mov eax, dword [ebp - 0x1300]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1314]
call fcn.00415a10
mov byte [ebp - 4], 0xe3
mov dword [ebp - 0x1300], 7
mov byte [ebp - 4], 0xe3
lea eax, [ebp - 0x1314]
cmp dword [ebp - 0x1300], 8
mov dword [ebp - 0x1304], 0
cmovae eax, dword [ebp - 0x1314]
xor ecx, ecx
mov byte [ebp - 4], 0xfd
mov word [eax], cx
push 0xc0
push ecx
lea eax, [ebp - 0xf80]
mov byte [ebp - 4], 0xfe
push eax
call fcn.004ad5f0
add esp, 0xc
mov byte [ebp - 4], 0xe2
lea ecx, [ebp - 0xf80]
call fcn.0041dc40
mov dword [ebp - 4], 0x101
mov dword [ebp - method.std::_Ref_count_base.virtual_0], 0x4f5998
mov byte [ebp - 4], 0
mov dword [ebp - method.Concurrency::details::SchedulerBase.virtual_68], 0x4f69f0
push 0x3c
lea eax, [ebp - 0xe60]
mov dword [ebp - 4], 0x102
push 0
push eax
call fcn.004ad5f0
add esp, 8
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0xe60]
call fcn.0041a650
mov dword [ebp - 4], 0x103
mov dword [ebp - 0xae8], 0xffffffff
mov byte [ebp - 4], 4
mov dword [ebp - 0xbd0], 0
mov dword [ebp - 0xbcc], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0xbcc], 7
mov byte [ebp - 4], 4
lea eax, [ebp - 0xbe0]
cmp dword [ebp - 0xbcc], 8
mov dword [ebp - 0xbd0], 0
cmovae eax, dword [ebp - 0xbe0]
xor ecx, ecx
mov byte [ebp - 4], 0x1e
mov word [eax], cx
mov byte [ebp - 4], 0x1f
mov byte [ebp - 0x1245], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
mov dword [ebp - 0x1250], 0
seta byte [ebp - 0x1252]
mov byte [ebp - 4], 0x20
xorps xmm0, xmm0
movq qword [ebp - 0xb88], xmm0
mov dword [ebp - 0xb80], 0
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb84], 0
mov dword [ebp - 0xb80], 0
lea ecx, [ebp - 0x1230]
mov byte [ebp - 4], 0x22
call fcn.0042ac40
push 0x80
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x23
push 0
push eax
call fcn.004ad5f0
add esp, 0xc
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xb90], 0
mov dword [ebp - 0xb8c], 0
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xb8c], 7
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0xba0]
cmp dword [ebp - 0xb8c], 8
mov dword [ebp - 0xb90], 0
cmovae eax, dword [ebp - 0xba0]
xor ecx, ecx
mov byte [ebp - 4], 0x3e
mov word [eax], cx
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xb38], ecx
mov dword [ebp - 0xb34], ecx
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xb34], 7
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0xb48]
cmp dword [ebp - 0xb34], 8
mov dword [ebp - 0xb38], ecx
cmovae eax, dword [ebp - 0xb48]
mov byte [ebp - 4], 0x5a
mov word [eax], cx
push 0x820
push ecx
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 0x5b
push eax
call fcn.004ad5f0
or edi, 0xffffffff
mov dword [ebp - 0xc18], 0
add esp, 0xc
mov dword [ebp - 0x1268], edi
mov dword [ebp - 0xc14], 0
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0xc14], 7
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0xc28]
cmp dword [ebp - 0xc14], 8
mov dword [ebp - 0xc18], 0
cmovae eax, dword [ebp - 0xc28]
xor ecx, ecx
mov byte [ebp - 4], 0x75
push ecx
mov word [eax], cx
lea ecx, [ebp - 0xc28]
push 0x4f409c
mov byte [ebp - 4], 0x5b
call fcn.00415880
mov ebx, 1
mov byte [ebp - 4], 0x76
mov ecx, ebx
call fcn.00457630
cmp dword [0x526110], 0
jne 0x4278f7
mov ecx, ebx
call fcn.00457630
test eax, eax
jne 0x4278fd
mov ecx, 0x526170
call fcn.0045b8e0
test eax, eax
jne 0x4278fd
call fcn.0044ff50
mov ecx, ebx
call fcn.004440a0
test eax, eax
jne 0x4278fd
call fcn.004451f0
call fcn.0045b160
mov esi, dword [0x526114]
mov byte [ebp - 4], 0x7e
mov byte [ebp - 4], 0x7d
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 0x76
test eax, eax
je 0x4278f7
mov byte [ebp - 4], 0x82
mov byte [ebp - 4], 0x81
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 0x76
cmp eax, ebx
jb 0x4278e9
mov byte [ebp - 4], 0x86
mov ecx, esi
mov byte [ebp - 4], 0x85
mov eax, dword [esi + 0x10]
push 0x4f407c
push ebx
dec eax
mov byte [ebp - 4], 0x76
push eax
call fcn.0044fe70
test eax, eax
je 0x4278f7
push 1
push 0x4f407c
mov ecx, esi
call fcn.004150b0
inc dword [0x526110]
call fcn.00445240
xor ecx, ecx
call fcn.00457710
call fcn.00445fb0
mov edx, str.Entering_Avast_SFX_stub_guarded_code_section.
mov ecx, 0x5272cc
call fcn.00420320
lea ecx, [ebp - 0x1b48]
call fcn.00479d20
mov ecx, dword [eax + 4]
cmp ecx, 6
jne 0x427942
cmp dword [eax + 8], 0
je 0x42794f
cmp ecx, ecx
jne 0x427942
cmp dword [eax + 8], 1
je 0x42794f
cmp ecx, ecx
ja 0x42794f
cmp ecx, 6
jne 0x427958
cmp dword [eax + 8], 2
jb 0x427958
push ecx
call fcn.004723c0
add esp, 4
push 0xc0
lea eax, [ebp - 0x1040]
mov byte [ebp - 4], 0x89
push 0
push eax
call fcn.004ad5f0
add esp, 0xc
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x1040]
call fcn.0041dc40
push 0x527de0
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 0x8a
call fcn.0041de50
test eax, eax
jne 0x427e5f
push 0x34
push eax
lea eax, [ebp - 0xd94]
mov byte [ebp - 4], 0x8b
push eax
call fcn.004ad5f0
add esp, 0xc
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0x131c], 0
mov dword [ebp - 0x1318], 0
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0x1318], 7
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0x132c]
cmp dword [ebp - 0x1318], 8
mov dword [ebp - 0x131c], 0
cmovae eax, dword [ebp - 0x132c]
xor ecx, ecx
mov byte [ebp - 4], 0xa6
mov word [eax], cx
lea eax, [ebp - 0x132c]
mov byte [ebp - 4], 0xa7
push eax
lea ecx, [ebp - 0xd94]
call fcn.0042b570
mov byte [ebp - 4], 0xaa
cmp dword [ebp - 0x1318], 8
jb 0x427a49
mov byte [ebp - 4], 0xaa
mov ecx, dword [ebp - 0x132c]
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0x1318]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x132c]
call fcn.00415a10
mov byte [ebp - 4], 0xaa
mov dword [ebp - 0x1318], 7
mov byte [ebp - 4], 0xaa
lea eax, [ebp - 0x132c]
cmp dword [ebp - 0x1318], 8
mov dword [ebp - 0x131c], 0
cmovae eax, dword [ebp - 0x132c]
xor ecx, ecx
mov byte [ebp - 4], 0xc4
mov word [eax], cx
lea eax, [ebp - 0x1040]
push ecx
push eax
lea ecx, [ebp - 0xd94]
mov byte [ebp - 4], 0xa9
call fcn.0042be20
push str.is_avg_product
lea ecx, [ebp - 0x1408]
call fcn.00415980
lea eax, [ebp - 0x1408]
mov byte [ebp - 4], 0xc5
push eax
lea ecx, [ebp - 0xd94]
call fcn.004225e0
mov bl, al
mov byte [ebp - 4], 0xc6
cmp dword [ebp - 0x13f4], 8
jb 0x427af0
mov byte [ebp - 4], 0xc6
mov ecx, dword [ebp - 0x1408]
mov byte [ebp - 4], 0xc6
mov eax, dword [ebp - 0x13f4]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1408]
call fcn.00415a10
mov byte [ebp - 4], 0xc6
mov dword [ebp - 0x13f4], 7
mov byte [ebp - 4], 0xc6
lea eax, [ebp - 0x1408]
cmp dword [ebp - 0x13f4], 8
mov dword [ebp - 0x13f8], 0
cmovae eax, dword [ebp - 0x1408]
xor ecx, ecx
mov byte [ebp - 4], 0xe0
mov word [eax], cx
lea ecx, [ebp - 0x1234]
mov byte [ebp - 4], 0xa9
mov dword [ebp - 0x1234], 2
test bl, bl
jne 0x427b4b
mov dword [ebp - 0x1234], 1
call fcn.00460d90
push str.edition
lea ecx, [ebp - 0x1390]
call fcn.00415980
lea eax, [ebp - 0x1390]
mov byte [ebp - 4], 0xe1
push eax
lea ecx, [ebp - 0xd94]
call fcn.004225e0
mov bl, al
mov byte [ebp - 4], 0xe2
cmp dword [ebp - 0x137c], 8
jb 0x427ba7
mov byte [ebp - 4], 0xe2
mov ecx, dword [ebp - 0x1390]
mov byte [ebp - 4], 0xe2
mov eax, dword [ebp - 0x137c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1390]
call fcn.00415a10
mov byte [ebp - 4], 0xe2
mov dword [ebp - 0x137c], 7
mov byte [ebp - 4], 0xe2
lea eax, [ebp - 0x1390]
cmp dword [ebp - 0x137c], 8
mov dword [ebp - 0x1380], 0
cmovae eax, dword [ebp - 0x1390]
xor ecx, ecx
mov byte [ebp - 4], 0xfc
mov word [eax], cx
mov byte [ebp - 4], 0xa9
test bl, bl
je 0x427cbf
push str.edition
lea ecx, [ebp - 0x13f0]
call fcn.00415980
lea eax, [ebp - 0x13f0]
mov byte [ebp - 4], 0xfd
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xd7c]
call fcn.0042d490
mov eax, dword [ebp - 0x125c]
add eax, 0x28
mov dword [ebp - 4], 0x201
mov dword [ebp - 4], 0x1ff
cmp dword [eax + 0x14], 8
jb 0x427c38
mov eax, dword [eax]
push eax
mov byte [ebp - 4], 0xfd
call fcn.004ba01c
mov edi, eax
add esp, 4
mov dword [ebp - 0x1268], edi
mov dword [ebp - 4], 0x202
cmp dword [ebp - 0x13dc], 8
jb 0x427c7f
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x13f0]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x13dc]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13f0]
call fcn.00415a10
mov byte [ebp - 4], 2
mov dword [ebp - 0x13dc], 7
mov byte [ebp - 4], 2
lea eax, [ebp - 0x13f0]
cmp dword [ebp - 0x13dc], 8
mov dword [ebp - 0x13e0], 0
cmovae eax, dword [ebp - 0x13f0]
mov byte [ebp - 4], 0x1c
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
push str.sub_edition
lea ecx, [ebp - 0x13d8]
call fcn.00415980
lea eax, [ebp - 0x13d8]
mov dword [ebp - 4], 0x21d
push eax
lea ecx, [ebp - 0xd94]
call fcn.004225e0
mov bl, al
mov dword [ebp - 4], 0x21e
cmp dword [ebp - 0x13c4], 8
jb 0x427d1c
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x13d8]
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x13c4]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13d8]
call fcn.00415a10
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x13c4], 7
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x13d8]
cmp dword [ebp - 0x13c4], 8
mov dword [ebp - 0x13c8], 0
cmovae eax, dword [ebp - 0x13d8]
xor ecx, ecx
mov byte [ebp - 4], 0x38
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
test bl, bl
je 0x427e4e
push str.sub_edition
lea ecx, [ebp - 0x13c0]
call fcn.00415980
lea eax, [ebp - 0x13c0]
mov dword [ebp - 4], 0x239
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xd7c]
call fcn.0042d490
mov edx, dword [ebp - 0x125c]
add edx, 0x28
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x3b
cmp dword [edx + 0x14], 8
jb 0x427dad
mov edx, dword [edx]
mov byte [ebp - 4], 0x39
cmp word [edx], 0
jne 0x427dbb
xor ecx, ecx
jmp 0x427dcf
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427dc0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xc28]
call fcn.00415880
mov dword [ebp - 4], 0x23e
cmp dword [ebp - 0x13ac], 8
jb 0x427e0e
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x13c0]
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x13ac]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13c0]
call fcn.00415a10
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x13ac], 7
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x13c0]
cmp dword [ebp - 0x13ac], 8
mov dword [ebp - 0x13b0], 0
cmovae eax, dword [ebp - 0x13c0]
mov byte [ebp - 4], 0x58
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
lea ecx, [ebp - 0xd94]
mov byte [ebp - 4], 0x8a
call fcn.0042b420
jmp 0x427e74
lea ecx, [ebp - 0x1234]
mov dword [ebp - 0x1234], 1
call fcn.00460d90
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 0x76
call fcn.0041dd40
push 0
lea eax, [ebp - 0x1238]
mov dword [ebp - 0x1238], 0
push eax
push 1
push str.O:BAG:BAD:P_A_CIOI_FA___SY__A_CIOI_FA___BA__A_CIOI_FRFX___BU_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
mov eax, dword [ebp - 0x1238]
push str.._
mov dword [ebp - 0x1240], eax
lea eax, [ebp - 0x8b0]
push 0x410
push eax
mov dword [ebp - 0x1244], 0xc
mov dword [ebp - 0x123c], 0
call fcn.004bf400
add esp, 0xc
lea eax, [ebp - 0x8a8]
push 0
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov dword [ebp - 0x12d4], 0
mov dword [ebp - 0x12d0], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12d0], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12e4]
cmp dword [ebp - 0x12d0], 8
mov dword [ebp - 0x12d4], 0
cmovae eax, dword [ebp - 0x12e4]
xor ecx, ecx
mov dword [ebp - 4], 0x272
mov word [eax], cx
lea ecx, [ebp - 0x12e4]
push 1
push 0x4f407c
mov dword [ebp - 4], 0x176
call fcn.00415880
mov dword [ebp - 4], 0x273
call fcn.00461170
mov ecx, eax
call fcn.00472e50
mov byte [ebp - 4], 0x74
cmp dword [eax + 0x14], 8
jb 0x427f7d
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x12e4]
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x1450]
call fcn.00415040
add esp, 4
mov byte [ebp - 4], 0x78
cmp dword [eax + 0x14], 8
jb 0x427fa2
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 0x77
push 0x410
push eax
call fcn.004ba179
add esp, 0xc
mov byte [ebp - 4], 0x7b
cmp dword [ebp - 0x143c], 8
jb 0x427fea
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x1450]
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0x143c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1450]
call fcn.00415a10
mov byte [ebp - 4], 0x7b
mov dword [ebp - 0x143c], 7
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x1450]
cmp dword [ebp - 0x143c], 8
mov dword [ebp - 0x1440], 0
cmovae eax, dword [ebp - 0x1450]
xor ecx, ecx
mov byte [ebp - 4], 0x95
mov word [eax], cx
mov dword [ebp - 4], 0x296
cmp dword [ebp - 0x12d0], 8
jb 0x428055
mov byte [ebp - 4], 0x96
mov ecx, dword [ebp - 0x12e4]
mov byte [ebp - 4], 0x96
mov eax, dword [ebp - 0x12d0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12e4]
call fcn.00415a10
mov byte [ebp - 4], 0x96
mov dword [ebp - 0x12d0], 7
mov byte [ebp - 4], 0x96
lea eax, [ebp - 0x12e4]
cmp dword [ebp - 0x12d0], 8
mov dword [ebp - 0x12d4], 0
cmovae eax, dword [ebp - 0x12e4]
xor ecx, ecx
mov byte [ebp - 4], 0xb0
mov word [eax], cx
lea edx, [ebp - 0x1244]
xor eax, eax
mov dword [ebp - 4], 0x176
cmp dword [ebp - 0x1238], eax
lea ecx, [ebp - 0x8b0]
cmove edx, eax
call fcn.00416210
push dword [ebp - 0x1238]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x1a20]
mov dword [ebp - 0x1238], 0
call fcn.00479d20
mov ecx, dword [eax + 4]
cmp ecx, 6
jne 0x4280ec
cmp dword [eax + 8], 0
je 0x4280f9
cmp ecx, ecx
jne 0x4280ec
cmp dword [eax + 8], 1
je 0x4280f9
cmp ecx, ecx
ja 0x4280f9
cmp ecx, 6
jne 0x42810a
cmp dword [eax + 8], 2
jb 0x42810a
call fcn.0042c3b0
mov esi, eax
mov ecx, esi
call dword [0x4e3310]
call esi
cmp edi, 0xffffffff
jne 0x4281b1
lea ecx, [ebp - 0x1438]
call fcn.00431ef0
mov dword [ebp - 4], 0x2b2
cmp dword [eax + 0x14], 8
jb 0x42812d
mov eax, dword [eax]
push str.LogsClear.log
mov edx, eax
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0xbe0]
call fcn.00415fc0
add esp, 4
mov dword [ebp - 4], 0x2b5
cmp dword [ebp - 0x1424], 8
jb 0x428178
mov byte [ebp - 4], 0xb5
mov ecx, dword [ebp - 0x1438]
mov byte [ebp - 4], 0xb5
mov eax, dword [ebp - 0x1424]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1438]
call fcn.00415a10
mov byte [ebp - 4], 0xb5
mov dword [ebp - 0x1424], 7
mov byte [ebp - 4], 0xb5
lea eax, [ebp - 0x1438]
cmp dword [ebp - 0x1424], 8
mov dword [ebp - 0x1428], 0
cmovae eax, dword [ebp - 0x1438]
mov byte [ebp - 4], 0xcf
jmp 0x42824a
lea ecx, [ebp - 0x1420]
call fcn.00431ef0
mov dword [ebp - 4], 0x2d1
cmp dword [eax + 0x14], 8
jb 0x4281cb
mov eax, dword [eax]
push str.LogsSetup.log
mov edx, eax
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0xbe0]
call fcn.00415fc0
add esp, 4
mov dword [ebp - 4], 0x2d4
cmp dword [ebp - 0x140c], 8
jb 0x428216
mov byte [ebp - 4], 0xd4
mov ecx, dword [ebp - 0x1420]
mov byte [ebp - 4], 0xd4
mov eax, dword [ebp - 0x140c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1420]
call fcn.00415a10
mov byte [ebp - 4], 0xd4
mov dword [ebp - 0x140c], 7
mov byte [ebp - 4], 0xd4
lea eax, [ebp - 0x1420]
cmp dword [ebp - 0x140c], 8
mov dword [ebp - 0x1410], 0
cmovae eax, dword [ebp - 0x1420]
mov byte [ebp - 4], 0xee
xor ecx, ecx
mov word [eax], cx
mov eax, 0x5c
push 1
mov dword [ebp - 4], 0x176
mov word [ebp - 0xae4], ax
lea eax, [ebp - 0xae4]
push ecx
push eax
lea ecx, [ebp - 0xbe0]
call fcn.00417510
push eax
push 0
lea eax, [ebp - 0x1468]
push eax
lea ecx, [ebp - 0xbe0]
call fcn.00417160
mov dword [ebp - 4], 0x2f0
cmp dword [eax + 0x14], 8
jb 0x42829b
mov eax, dword [eax]
xor edx, edx
mov byte [ebp - 4], 0xef
mov ecx, eax
call fcn.00416210
mov dword [ebp - 4], 0x2f3
cmp dword [ebp - 0x1454], 8
jb 0x4282dd
mov byte [ebp - 4], 0xf3
mov ecx, dword [ebp - 0x1468]
mov dword [ebp - 4], 0x2f3
mov eax, dword [ebp - 0x1454]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1468]
call fcn.00415a10
mov dword [ebp - 4], 0x2f3
mov dword [ebp - 0x1454], 7
mov dword [ebp - 4], 0x2f3
lea eax, [ebp - 0x1468]
cmp dword [ebp - 0x1454], 8
mov dword [ebp - 0x1458], 0
cmovae eax, dword [ebp - 0x1468]
xor ecx, ecx
mov dword [ebp - 4], 0x30d
mov word [eax], cx
mov dword [ebp - 4], 0x30e
lea ecx, [ebp - 0xbe0]
cmp dword [ebp - 0xbcc], 8
cmovae ecx, dword [ebp - 0xbe0]
sub esp, 8
mov dword [ebp - 4], 0x176
call fcn.00426960
add esp, 8
call fcn.00426850
lea ecx, [ebp - 0x1230]
call fcn.00432940
call fcn.00457e60
mov byte [ebp - 0xae1], al
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [ebp - 0x12ec], 0
mov dword [ebp - 0x12e8], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12e8], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12fc]
cmp dword [ebp - 0x12e8], 8
mov dword [ebp - 0x12ec], 0
cmovae eax, dword [ebp - 0x12fc]
mov dword [ebp - 4], 0x32a
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
cmp word [edx], cx
je 0x4283e5
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4283d6
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x12fc]
call fcn.00415880
push 1
lea eax, [ebp - 0x12fc]
mov dword [ebp - 4], 0x32b
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042be20
mov dword [ebp - 4], 0x32c
cmp dword [ebp - 0x12e8], 8
jb 0x42843f
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x12fc]
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x12e8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12fc]
call fcn.00415a10
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x12e8], 7
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x12fc]
cmp dword [ebp - 0x12e8], 8
mov dword [ebp - 0x12ec], 0
cmovae eax, dword [ebp - 0x12fc]
mov byte [ebp - 4], 0x46
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12a0], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12a0], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12b4]
cmp dword [ebp - 0x12a0], 8
mov dword [ebp - 0x12a4], ecx
cmovae eax, dword [ebp - 0x12b4]
mov dword [ebp - 4], 0x360
mov ebx, 6
mov word [eax], cx
mov eax, ebx
mov dword [ebp - 4], 0x176
cmp word [str.silent], cx
cmove eax, ecx
lea ecx, [ebp - 0x12b4]
push eax
push str.silent
call fcn.00415880
mov dword [ebp - 4], 0x362
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1348], eax
lea eax, [ebp - 0x12b4]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422f90
mov esi, eax
mov byte [ebp - 4], 0x6e
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1378], eax
mov byte [ebp - 4], 0x61
cmp esi, dword [ebp - 0x1378]
je 0x42859f
mov byte [ebp - 4], 0x61
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0x79
mov byte [ebp - 4], 0x78
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0x7c
mov edi, dword [ebp - 0x12a4]
mov byte [ebp - 4], 0x80
cmp dword [edx + 0x14], 8
jb 0x42855f
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0x83
cmp dword [ebp - 0x12a0], 8
lea ecx, [ebp - 0x12b4]
push ebx
cmovae ecx, dword [ebp - 0x12b4]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x61
call fcn.00423350
add esp, 0x10
mov ebx, 6
test eax, eax
js 0x42859f
mov dword [ebp - 0x14ac], esi
jmp 0x4285b3
mov byte [ebp - 4], 0x86
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x14a8], esi
mov byte [ebp - 4], 0x61
mov edi, dword [ebp - 0x1348]
mov dword [ebp - 4], 0x38e
cmp dword [ebp - 0x12a0], 8
jb 0x4285eb
mov byte [ebp - 4], 0x8e
mov ecx, dword [ebp - 0x12b4]
mov byte [ebp - 4], 0x8e
mov eax, dword [ebp - 0x12a0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12b4]
call fcn.00415a10
mov byte [ebp - 4], 0x8e
mov dword [ebp - 0x12a0], 7
mov byte [ebp - 4], 0x8e
lea eax, [ebp - 0x12b4]
cmp dword [ebp - 0x12a0], 8
mov dword [ebp - 0x12a4], 0
cmovae eax, dword [ebp - 0x12b4]
xor ecx, ecx
mov byte [ebp - 4], 0xa8
mov word [eax], cx
mov dword [ebp - 4], 0x176
cmp esi, edi
je 0x42887a
push str.silent
lea ecx, [ebp - 0x13a8]
call fcn.00415980
lea eax, [ebp - 0x13a8]
mov dword [ebp - 4], 0x3a9
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xb64]
call fcn.0042d490
mov ecx, dword [ebp - 0x125c]
mov byte [ebp - 4], 0xa9
add ecx, 0x28
mov byte [ebp - 4], 0xa9
mov dword [ebp - 0xaf0], 0
mov dword [ebp - 0xaec], 0
mov byte [ebp - 4], 0xa9
mov dword [ebp - 0xaec], 7
mov byte [ebp - 4], 0xa9
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
mov dword [ebp - 0xaf0], 0
cmovae eax, dword [ebp - 0xb00]
xor edx, edx
mov byte [ebp - 4], 0xc9
push 0xffffffffffffffff
push edx
push ecx
mov word [eax], dx
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0xa9
call fcn.00415530
mov byte [ebp - 4], 0xcc
cmp dword [ebp - 0x1394], 8
jb 0x428703
mov byte [ebp - 4], 0xcc
mov ecx, dword [ebp - 0x13a8]
mov byte [ebp - 4], 0xcc
mov eax, dword [ebp - 0x1394]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13a8]
call fcn.00415a10
mov byte [ebp - 4], 0xcc
mov dword [ebp - 0x1394], 7
mov byte [ebp - 4], 0xcc
lea eax, [ebp - 0x13a8]
cmp dword [ebp - 0x1394], 8
mov dword [ebp - 0x1398], 0
cmovae eax, dword [ebp - 0x13a8]
xor ecx, ecx
mov byte [ebp - 4], 0xe6
mov word [eax], cx
mov byte [ebp - 4], 0xe7
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
cmovae eax, dword [ebp - 0xb00]
mov byte [ebp - 4], 0xe7
mov dword [ebp - 0x134c], eax
mov byte [ebp - 4], 0xed
lea ecx, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
cmovae ecx, dword [ebp - 0xb00]
mov byte [ebp - 4], 0xed
mov eax, dword [ebp - 0xaf0]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x1350], eax
mov byte [ebp - 4], 0xf3
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
cmovae eax, dword [ebp - 0xb00]
mov byte [ebp - 4], 0xf3
mov dword [ebp - 0x1354], eax
lea eax, [ebp - 0x1234]
mov byte [ebp - 4], 0xcb
mov edx, dword [ebp - 0x1350]
mov ecx, dword [ebp - 0x1354]
push eax
push dword [ebp - 0x134c]
mov dword [ebp - 0x1234], fcn.004bf3d0
call fcn.0042d7a0
add esp, 8
lea ecx, [ebp - 0xb00]
push 8
push 0
push str.progress
call fcn.004175b0
cmp eax, 0xffffffff
mov dword [ebp - 4], 0x3f9
sete byte [ebp - 0x1245]
mov byte [ebp - 4], 0xf9
cmp dword [ebp - 0xaec], 8
jb 0x428831
mov byte [ebp - 4], 0xf9
mov ecx, dword [ebp - 0xb00]
mov dword [ebp - 4], 0x3f9
mov eax, dword [ebp - 0xaec]
inc eax
push eax
push ecx
lea ecx, [ebp - 0xb00]
call fcn.00415a10
mov dword [ebp - 4], 0x3f9
mov dword [ebp - 0xaec], 7
mov dword [ebp - 4], 0x3f9
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
mov dword [ebp - 0xaf0], 0
cmovae eax, dword [ebp - 0xb00]
mov dword [ebp - 4], 0x413
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1274], 0
mov dword [ebp - 0x1270], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1270], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x1284]
cmp dword [ebp - 0x1270], 8
mov dword [ebp - 0x1274], 0
cmovae eax, dword [ebp - 0x1284]
xor ecx, ecx
mov dword [ebp - 4], 0x42d
mov word [eax], cx
mov eax, 0xc
mov dword [ebp - 4], 0x176
cmp word [str.AdminUpgrade], cx
cmove eax, ecx
lea ecx, [ebp - 0x1284]
push eax
push str.AdminUpgrade
call fcn.00415880
mov dword [ebp - 4], 0x42f
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1374], eax
lea eax, [ebp - 0x1284]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422f90
mov esi, eax
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1358], eax
mov byte [ebp - 4], 0x2e
cmp esi, dword [ebp - 0x1358]
je 0x4289a6
mov byte [ebp - 4], 0x2e
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x45
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0x49
mov edi, dword [ebp - 0x1274]
mov byte [ebp - 4], 0x4d
cmp dword [edx + 0x14], 8
jb 0x428966
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0x50
cmp dword [ebp - 0x1270], 8
lea ecx, [ebp - 0x1284]
push ebx
cmovae ecx, dword [ebp - 0x1284]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x2e
call fcn.00423350
add esp, 0x10
mov ebx, 6
test eax, eax
js 0x4289a6
mov dword [ebp - 0x14a4], esi
jmp 0x4289ba
mov byte [ebp - 4], 0x53
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x14a0], esi
mov byte [ebp - 4], 0x2e
mov edi, dword [ebp - 0x1374]
mov dword [ebp - 4], 0x45b
cmp dword [ebp - 0x1270], 8
jb 0x4289f2
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x1284]
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0x1270]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1284]
call fcn.00415a10
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0x1270], 7
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x1284]
cmp dword [ebp - 0x1270], 8
mov dword [ebp - 0x1274], 0
cmovae eax, dword [ebp - 0x1284]
mov byte [ebp - 4], 0x75
xor ecx, ecx
mov word [eax], cx
cmp esi, edi
movzx eax, byte [ebp - 0x1245]
mov ecx, 1
mov dword [ebp - 4], 0x176
cmovne eax, ecx
mov dword [ebp - 0x1234], eax
mov dword [ebp - 0x128c], 0
mov dword [ebp - 0x1288], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1288], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x129c]
cmp dword [ebp - 0x1288], 8
mov dword [ebp - 0x128c], 0
cmovae eax, dword [ebp - 0x129c]
xor ecx, ecx
mov dword [ebp - 4], 0x48f
mov word [eax], cx
mov eax, 5
mov dword [ebp - 4], 0x176
cmp word [0x4f5bc0], cx
cmove eax, ecx
lea ecx, [ebp - 0x129c]
push eax
push 0x4f5bc0
call fcn.00415880
mov dword [ebp - 4], 0x491
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1360], eax
lea eax, [ebp - 0x129c]
mov byte [ebp - 4], 0x90
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422f90
mov esi, eax
mov byte [ebp - 4], 0x9d
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x135c], eax
mov byte [ebp - 4], 0x90
cmp esi, dword [ebp - 0x135c]
je 0x428b75
mov byte [ebp - 4], 0x90
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0xa8
mov byte [ebp - 4], 0xa7
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0xab
mov edi, dword [ebp - 0x128c]
mov byte [ebp - 4], 0xaf
cmp dword [edx + 0x14], 8
jb 0x428b35
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0xb2
cmp dword [ebp - 0x1288], 8
lea ecx, [ebp - 0x129c]
push ebx
cmovae ecx, dword [ebp - 0x129c]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x90
call fcn.00423350
add esp, 0x10
mov ebx, 6
test eax, eax
js 0x428b75
mov dword [ebp - 0x1484], esi
jmp 0x428b89
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x1488], esi
mov byte [ebp - 4], 0x90
cmp esi, dword [ebp - 0x1360]
setne byte [ebp - 0x1370]
mov dword [ebp - 4], 0x4bd
cmp dword [ebp - 0x1288], 8
jb 0x428bc8
mov byte [ebp - 4], 0xbd
mov ecx, dword [ebp - 0x129c]
mov byte [ebp - 4], 0xbd
mov eax, dword [ebp - 0x1288]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x129c]
call fcn.00415a10
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0x1288], 7
mov byte [ebp - 4], 0xbd
lea eax, [ebp - 0x129c]
cmp dword [ebp - 0x1288], 8
mov dword [ebp - 0x128c], 0
cmovae eax, dword [ebp - 0x129c]
mov byte [ebp - 4], 0xd7
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12bc], ecx
mov dword [ebp - 0x12b8], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12b8], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12cc]
cmp dword [ebp - 0x12b8], 8
mov dword [ebp - 0x12bc], ecx
cmovae eax, dword [ebp - 0x12cc]
mov dword [ebp - 4], 0x4f1
mov word [eax], cx
xor eax, eax
mov dword [ebp - 4], 0x176
lea ecx, [ebp - 0x12cc]
cmp word [str.cookie], ax
cmove ebx, eax
push ebx
push str.cookie
call fcn.00415880
lea eax, [ebp - 0x12cc]
mov dword [ebp - 4], 0x4f2
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xb64]
call fcn.0042d490
mov eax, dword [ebp - 0x125c]
add eax, 0x28
mov byte [ebp - 4], 0xf2
lea ecx, [ebp - 0xba0]
cmp ecx, eax
je 0x428cb9
push 0xffffffffffffffff
push 0
push eax
mov byte [ebp - 4], 0xf2
call fcn.00415530
mov dword [ebp - 4], 0x517
cmp dword [ebp - 0x12b8], 8
jb 0x428ceb
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x12cc]
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x12b8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12cc]
call fcn.00415a10
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x12b8], 7
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x12cc]
cmp dword [ebp - 0x12b8], 8
mov dword [ebp - 0x12bc], 0
cmovae eax, dword [ebp - 0x12cc]
mov byte [ebp - 4], 0x31
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1334], ecx
mov dword [ebp - 0x1330], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1330], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x1344]
cmp dword [ebp - 0x1330], 8
mov dword [ebp - 0x1334], ecx
cmovae eax, dword [ebp - 0x1344]
mov dword [ebp - 4], 0x54b
mov word [eax], cx
mov eax, 0xb
mov dword [ebp - 4], 0x176
cmp word [str.ga_clientid], cx
cmove eax, ecx
lea ecx, [ebp - 0x1344]
push eax
push str.ga_clientid
call fcn.00415880
mov dword [ebp - 4], 0x54d
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1368], eax
lea eax, [ebp - 0x1344]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422f90
mov esi, eax
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1364], eax
mov byte [ebp - 4], 0x4c
cmp esi, dword [ebp - 0x1364]
je 0x428e44
mov byte [ebp - 4], 0x4c
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0x64
mov byte [ebp - 4], 0x63
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0x67
mov edi, dword [ebp - 0x1334]
mov byte [ebp - 4], 0x6b
cmp dword [edx + 0x14], 8
jb 0x428e09
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0x6e
cmp dword [ebp - 0x1330], 8
lea ecx, [ebp - 0x1344]
push ebx
cmovae ecx, dword [ebp - 0x1344]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x4c
call fcn.00423350
add esp, 0x10
test eax, eax
js 0x428e44
mov dword [ebp - 0x149c], esi
jmp 0x428e58
mov byte [ebp - 4], 0x71
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x1498], esi
mov byte [ebp - 4], 0x4c
cmp esi, dword [ebp - 0x1368]
je 0x428f2f
push str.ga_clientid
lea ecx, [ebp - 0x1548]
call fcn.00415980
lea eax, [ebp - 0x1548]
mov byte [ebp - 4], 0x79
push eax
lea eax, [ebp - 0x125c]
mov dword [ebp - 0x124c], 1
push eax
lea ecx, [ebp - 0xb64]
call fcn.0042d490
mov ecx, dword [ebp - 0x125c]
mov dword [ebp - 4], 0x579
add ecx, 0x28
mov dword [ebp - 4], 0x579
mov dword [ebp - 0x1470], 0
mov dword [ebp - 0x146c], 0
mov dword [ebp - 4], 0x579
mov dword [ebp - 0x146c], 7
mov dword [ebp - 4], 0x579
lea eax, [ebp - 0x1480]
cmp dword [ebp - 0x146c], 8
mov dword [ebp - 0x1470], 0
cmovae eax, dword [ebp - 0x1480]
xor edx, edx
mov dword [ebp - 4], 0x599
push 0xffffffffffffffff
push edx
push ecx
mov word [eax], dx
lea ecx, [ebp - 0x1480]
mov byte [ebp - 4], 0x79
call fcn.00415530
lea esi, [ebp - 0x1480]
mov dword [ebp - 4], 0x59a
mov ebx, 3
jmp 0x428f67
lea eax, [ebp - 0x18f8]
push eax
call fcn.0047bed0
add esp, 4
lea edx, [ebp - 0x1264]
lea ecx, [ebp - 0x17b8]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1264], xmm0
call fcn.004267f0
mov esi, eax
mov dword [ebp - 4], 0x59b
mov ebx, 4
mov dword [ebp - 0x124c], ebx
lea eax, [ebp - 0xb48]
mov dword [ebp - 4], 0x59c
cmp eax, esi
je 0x428ff6
mov byte [ebp - 4], 0x9c
cmp dword [ebp - 0xb34], 8
jb 0x428fad
mov byte [ebp - 4], 0x9c
mov ecx, dword [ebp - 0xb48]
mov byte [ebp - 4], 0x9c
mov eax, dword [ebp - 0xb34]
inc eax
push eax
push ecx
lea ecx, [ebp - 0xb48]
call fcn.00415a10
mov byte [ebp - 4], 0x9c
mov dword [ebp - 0xb34], 7
mov byte [ebp - 4], 0x9c
lea eax, [ebp - 0xb48]
cmp dword [ebp - 0xb34], 8
mov dword [ebp - 0xb38], 0
cmovae eax, dword [ebp - 0xb48]
xor ecx, ecx
mov byte [ebp - 4], 0xb6
mov word [eax], cx
push esi
lea ecx, [ebp - 0xb48]
mov byte [ebp - 4], 0x9c
call fcn.00415340
mov dword [ebp - 4], 0x59a
test bl, 4
je 0x429016
and ebx, 0xfffffffb
lea ecx, [ebp - 0x17b8]
mov dword [ebp - 0x124c], ebx
call fcn.00415b40
mov dword [ebp - 4], 0x579
test bl, 2
je 0x429036
and ebx, 0xfffffffd
lea ecx, [ebp - 0x1480]
mov dword [ebp - 0x124c], ebx
call fcn.00415b40
mov dword [ebp - 4], 0x54c
test bl, 1
je 0x429056
and ebx, 0xfffffffe
lea ecx, [ebp - 0x1548]
mov dword [ebp - 0x124c], ebx
call fcn.00415b40
lea ecx, [ebp - 0x1344]
mov dword [ebp - 4], 0x176
call fcn.00415b40
xor ecx, ecx
call fcn.00420d20
push eax
mov edx, str.Running_SFX__s
mov ecx, 0x5272cc
call fcn.00418820
add esp, 4
lea eax, [ebp - 0xae8]
lea edx, [ebp - 0xc88]
lea ecx, [ebp - 0xcb8]
push eax
sub esp, 8
lea eax, [ebp - 0xbf8]
push eax
call fcn.004326f0
add esp, 0x10
mov byte [ebp - 0x1251], al
test al, al
je 0x4290c9
lea ecx, [ebp - 0x1170]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042c470
cmp word [ebp - 0x90], 0
jne 0x42915d
push str.guid
lea ecx, [ebp - 0x1578]
call fcn.00415980
lea eax, [ebp - 0x1578]
mov dword [ebp - 4], 0x5e0
or ebx, 8
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.004225e0
test al, al
je 0x42915d
push str.guid
lea ecx, [ebp - 0x1560]
call fcn.00415980
lea eax, [ebp - 0x1560]
mov dword [ebp - 4], 0x5e1
or ebx, 0x10
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.0042b540
mov dword [ebp - 4], 0x5e3
mov byte [ebp - 4], 0xe2
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0xe1
mov byte [ebp - 0x1245], 1
cmp eax, 0x24
je 0x429164
mov byte [ebp - 0x1245], 0
mov dword [ebp - 4], 0x5e0
test bl, 0x10
je 0x429184
and ebx, 0xffffffef
lea ecx, [ebp - 0x1560]
mov dword [ebp - 0x124c], ebx
call fcn.00415b40
mov dword [ebp - 4], 0x176
test bl, 8
je 0x4291a4
and ebx, 0xfffffff7
lea ecx, [ebp - 0x1578]
mov dword [ebp - 0x124c], ebx
call fcn.00415b40
cmp byte [ebp - 0x1245], 0
je 0x4291fc
push str.guid
lea ecx, [ebp - 0x1590]
call fcn.00415980
lea eax, [ebp - 0x1590]
mov dword [ebp - 4], 0x5e6
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
mov ecx, eax
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042c470
lea ecx, [ebp - 0x1590]
mov dword [ebp - 4], 0x176
call fcn.00415b40
cmp word [ebp - 0x90], 0
jne 0x42925d
lea eax, [ebp - 0x18e8]
push eax
call fcn.0047bed0
add esp, 4
lea edx, [ebp - 0x1264]
lea ecx, [ebp - 0x17d0]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1264], xmm0
call fcn.004267f0
mov ecx, eax
mov dword [ebp - 4], 0x5e7
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042c470
lea ecx, [ebp - 0x17d0]
mov dword [ebp - 4], 0x176
call fcn.00415b40
mov edi, dword [ebp - 0x1268]
cmp edi, 0xffffffff
je 0x4294df
cmp byte [ebp - 0x1251], 0
jne 0x4294df
cmp byte [ebp - 0x1090], 0
jne 0x4294df
lea ecx, [ebp - 0xc40]
call fcn.00415400
push 0x4f3fec
push ecx
mov dword [ebp - 4], 0x5e8
call fcn.00460d60
add esp, 4
lea ecx, [ebp - 0x17e8]
mov edx, eax
call fcn.00414f30
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xe9
call fcn.004159e0
mov ecx, eax
call fcn.004215c0
lea ecx, [ebp - 0x17e8]
mov byte [ebp - 4], 0xe8
mov bl, al
call fcn.00415b40
test bl, bl
je 0x42931f
push 0x4f3fec
push ecx
call fcn.00460d60
add esp, 4
lea ecx, [ebp - 0x1800]
mov edx, eax
call fcn.00414f30
add esp, 4
push eax
lea ecx, [ebp - 0xc40]
mov byte [ebp - 4], 0xea
call fcn.00419ec0
lea ecx, [ebp - 0x1800]
mov byte [ebp - 4], 0xe8
call fcn.00415b40
jmp 0x4293cb
push str.FsBlk
push ecx
call fcn.00460d60
add esp, 4
lea ecx, [ebp - 0x1818]
mov edx, eax
call fcn.00414f30
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xeb
call fcn.004159e0
mov ecx, eax
call fcn.004215c0
lea ecx, [ebp - 0x1818]
mov byte [ebp - 4], 0xe8
mov bl, al
call fcn.00415b40
test bl, bl
je 0x4293a3
push str.FsBlk
push ecx
call fcn.00460d60
add esp, 4
lea ecx, [ebp - 0x1830]
mov edx, eax
call fcn.00414f30
add esp, 4
push eax
lea ecx, [ebp - 0xc40]
mov byte [ebp - 4], 0xec
call fcn.00419ec0
lea ecx, [ebp - 0x1830]
mov byte [ebp - 4], 0xe8
call fcn.00415b40
jmp 0x4293cb
call fcn.00460d80
mov ecx, eax
call fcn.004159e0
mov ecx, eax
call fcn.004215c0
test al, al
je 0x4293cb
call fcn.00460d80
push eax
lea ecx, [ebp - 0xc40]
call fcn.00419800
mov byte [ebp - 4], 0xed
mov eax, dword [ebp - 0xc30]
mov byte [ebp - 4], 0xe8
test eax, eax
je 0x4294c7
call fcn.00460d70
push eax
lea ecx, [ebp - 0xd60]
call fcn.00419f40
mov byte [ebp - 4], 0xf1
cmp byte [ebp - 0x1234], 0
mov esi, dword [0x507610]
jne 0x42948d
call fcn.00460a50
cmp eax, 2
mov edx, str.avastClear.exe
mov ecx, str.avgClear.exe
cmovne ecx, edx
push ecx
lea ecx, [ebp - 0xc40]
call fcn.004159e0
push eax
lea ecx, [ebp - 0xd60]
call fcn.004159e0
push eax
push str.The_installer_has_detected_corrupted__s_installation_on_this_computer__service__s_is_running___thus_this_installer_cannot_continue._Use_the__s_utility_to_fix_the_problem_or_contact_our_support_team.
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420980
add esp, 0x18
lea ecx, [ebp - 0xd60]
call fcn.004159e0
push eax
push str.Corrupted__s_detected.
lea eax, [ebp - 0xab0]
push 0x100
push eax
call fcn.00420980
add esp, 0x10
lea eax, [ebp - 0xab0]
push 0x10
push eax
lea eax, [ebp - 0x8b0]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xc40]
call fcn.004159e0
push eax
lea ecx, [ebp - 0xd60]
call fcn.004159e0
push eax
call fcn.0042c480
add esp, 8
mov byte [ebp - 4], 0xe8
lea ecx, [ebp - 0xd60]
call fcn.00415b40
lea ecx, [ebp - 0xc40]
jmp 0x42aa60
lea ecx, [ebp - 0xc40]
mov dword [ebp - 4], 0x176
call fcn.00415b40
mov ebx, dword [ebp - 0x124c]
xor ecx, ecx
call fcn.00420d20
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041de50
mov esi, eax
test esi, esi
je 0x429559
cmp byte [ebp - 0x1234], 0
jne 0x429539
push esi
xor ecx, ecx
call fcn.00420d20
push eax
push str.The_installer_cannot_open_the_SFX_archive__s.__code_0x_x__r_n_r_nIts_probably_caused_by_corrupted_installer_thus_please_try_to_download_it_again.
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420980
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push str.Installation_failed
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
xor ecx, ecx
call fcn.00420d20
push eax
mov edx, str.Cannot_open_the_SFX_archive__s__code_0x_x_
mov ecx, 0x5272cc
call fcn.00420180
add esp, 8
jmp 0x42aa6c
cmp byte [ebp - 0xae1], 0
je 0x42956f
cmp byte [ebp - 0x1252], 0
je 0x42956f
mov al, 1
jmp 0x429571
xor al, al
push eax
lea ecx, [ebp - 0xb18]
call fcn.00420de0
add esp, 4
lea ecx, [ebp - 0xb18]
call fcn.004159e0
push eax
mov edx, str._TMPPATH_
lea ecx, [ebp - 0xf80]
call fcn.00421350
add esp, 4
lea eax, [ebp - 0xf80]
lea ecx, [ebp - 0xb7c]
push 0
push eax
call fcn.0042be20
mov dword [ebp - 4], 0x5f2
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 4], 0x176
test eax, eax
jne 0x429608
push str.cookie
lea ecx, [ebp - 0x15a8]
call fcn.00415980
lea eax, [ebp - 0x15a8]
mov dword [ebp - 4], 0x5f6
or ebx, 0x20
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.004225e0
mov byte [ebp - 0x1245], 1
test al, al
jne 0x42960f
mov byte [ebp - 0x1245], 0
mov dword [ebp - 4], 0x176
test bl, 0x20
je 0x42962f
and ebx, 0xffffffdf
lea ecx, [ebp - 0x15a8]
mov dword [ebp - 0x124c], ebx
call fcn.00415b40
cmp byte [ebp - 0x1245], 0
je 0x42967f
push str.cookie
lea ecx, [ebp - 0x15c0]
call fcn.00415980
lea eax, [ebp - 0x15c0]
mov dword [ebp - 4], 0x5f7
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
push eax
lea ecx, [ebp - 0xba0]
call fcn.00419800
lea ecx, [ebp - 0x15c0]
mov dword [ebp - 4], 0x176
call fcn.00415b40
push ecx
lea ecx, [ebp - 0xc10]
call fcn.00416a00
push 0x4f407c
lea ecx, [ebp - 0x1668]
call fcn.00415980
xor ecx, ecx
mov dword [ebp - 4], 0x5f8
call fcn.00420d20
push eax
lea ecx, [ebp - 0x15f0]
call fcn.00415980
sub esp, 0xc
mov byte [ebp - 4], 0xf9
lea eax, [ebp - 0x1668]
lea edx, [ebp - 0x15f0]
lea ecx, [ebp - 0xc10]
push eax
call fcn.004189c0
add esp, 0x10
lea ecx, [ebp - 0x15f0]
mov byte [ebp - 4], 0xfb
call fcn.00415b40
lea ecx, [ebp - 0x1668]
mov byte [ebp - 4], 0xfc
call fcn.00415b40
lea ecx, [ebp - 0xc10]
call fcn.004170c0
cmp eax, 2
jb 0x4298fb
call fcn.0042b610
push eax
lea ecx, [ebp - 0xd48]
call fcn.00419f40
sub esp, 8
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0xd48]
call fcn.004171a0
mov esi, eax
cmp esi, 0xffffffff
je 0x4298ec
push esi
push 0x4f6364
lea ecx, [ebp - 0xd48]
call fcn.004171b0
cmp eax, 0xffffffff
jne 0x429767
push esi
push 0x4f4344
lea ecx, [ebp - 0xd48]
call fcn.004171b0
cmp eax, 0xffffffff
je 0x4298ec
sub eax, esi
lea ecx, [ebp - 0xd48]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0xd00]
push eax
call fcn.00417160
mov dword [ebp - 4], 0x5ff
mov eax, dword [ebp - 0xcf0]
mov byte [ebp - 4], 0xfe
cmp eax, 3
jne 0x4298dd
push 1
lea ecx, [ebp - 0xd00]
call fcn.00419f70
cmp word [eax], 0x30
jb 0x4298dd
push 1
lea ecx, [ebp - 0xd00]
call fcn.00419f70
cmp word [eax], 0x39
ja 0x4298dd
call fcn.00460a50
cmp eax, 2
lea eax, [ebp - 0xd00]
push eax
jne 0x429830
mov edx, str.mmm_bav_ppc_999_
lea ecx, [ebp - 0x1878]
call fcn.0042c2a0
add esp, 4
push 0x4f6368
mov edx, eax
mov dword [ebp - 4], 0x603
lea ecx, [ebp - 0x1860]
call fcn.00415040
add esp, 4
push eax
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 4
call fcn.00419ec0
lea ecx, [ebp - 0x1860]
mov byte [ebp - 4], 3
call fcn.00415b40
lea ecx, [ebp - 0x1878]
jmp 0x429884
mov edx, str.mmm_ava_ppc_999_
lea ecx, [ebp - 0x18a8]
call fcn.0042c2a0
add esp, 4
push 0x4f6368
mov edx, eax
mov dword [ebp - 4], 0x605
lea ecx, [ebp - 0x1890]
call fcn.00415040
add esp, 4
push eax
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 6
call fcn.00419ec0
lea ecx, [ebp - 0x1890]
mov byte [ebp - 4], 5
call fcn.00415b40
lea ecx, [ebp - 0x18a8]
mov dword [ebp - 4], 0x5fe
call fcn.00415b40
push str.cookie
lea ecx, [ebp - 0x1608]
call fcn.00415980
lea eax, [ebp - 0xba0]
mov dword [ebp - 4], 0x607
push eax
push ecx
lea eax, [ebp - 0x1608]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.00419800
lea ecx, [ebp - 0x1608]
mov dword [ebp - 4], 0x5fe
call fcn.00415b40
lea ecx, [ebp - 0xd00]
mov byte [ebp - 4], 0xfd
call fcn.00415b40
lea ecx, [ebp - 0xd48]
mov byte [ebp - 4], 0xfc
call fcn.00415b40
lea ecx, [ebp - 0xc10]
mov dword [ebp - 4], 0x176
call fcn.004170e0
lea ecx, [ebp - 0xd18]
call fcn.00415400
mov dword [ebp - 4], 0x608
cmp edi, 0xffffffff
jne 0x42995a
push str._Clear
push ecx
call fcn.00460d70
add esp, 4
lea ecx, [ebp - 0x18c0]
mov edx, eax
call fcn.00414f30
add esp, 4
push eax
lea ecx, [ebp - 0xd18]
mov byte [ebp - 4], 9
call fcn.00419ec0
lea ecx, [ebp - 0x18c0]
jmp 0x42998c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
lea ecx, [ebp - 0x16f8]
push eax
push 1
mov edx, edi
call fcn.00427030
add esp, 8
push eax
lea ecx, [ebp - 0xd18]
mov byte [ebp - 4], 0xa
call fcn.00419ec0
lea ecx, [ebp - 0x16f8]
mov byte [ebp - 4], 8
call fcn.00415b40
push ecx
lea ecx, [ebp - 0xdf0]
call fcn.0042b200
lea eax, [ebp - 0xd18]
push eax
push ecx
lea ecx, [ebp - 0xdf0]
call fcn.00425670
lea eax, [ebp - 0xba4]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0xe60]
call fcn.0041a820
lea eax, [ebp - 0xdf0]
push eax
lea ecx, [ebp - 0xe60]
call fcn.0041a820
cmp byte [ebp - 0x1234], 0
jne 0x4299f0
lea ecx, [ebp - 0xdf0]
call fcn.00425f60
lea ecx, [ebp - 0xb18]
call fcn.004159e0
push eax
lea ecx, [ebp - 0x1620]
call fcn.00415980
lea eax, [ebp - 0x1620]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041f860
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0xb
mov esi, eax
call fcn.00415b40
test esi, esi
je 0x429a6c
mov edx, esi
lea ecx, [ebp - 0x1710]
call fcn.004319f0
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.004159e0
push eax
mov edx, str.The_installer_cannot_extract_servers.def_with_error__s_
mov ecx, 0x5272cc
call fcn.00418a70
add esp, 4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1710]
call fcn.00415b40
cmp edi, 0xffffffff
je 0x429e72
call fcn.00427200
test al, al
je 0x429b07
push 0x4f530c
lea ecx, [ebp - 0x1650]
call fcn.00415980
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0xe
or ebx, 0x40
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.004225e0
test al, al
je 0x429b07
push 0x4f530c
lea ecx, [ebp - 0x1638]
call fcn.00415980
lea eax, [ebp - 0x1638]
mov dword [ebp - 4], 0x60f
or ebx, 0x80
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.0042b540
mov dword [ebp - 4], 0x611
mov byte [ebp - 4], 0x10
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0xf
mov byte [ebp - 0x1245], 1
test eax, eax
je 0x429b0e
mov byte [ebp - 0x1245], 0
mov dword [ebp - 4], 0x60e
test bl, bl
jns 0x429b30
and ebx, 0xffffff7f
lea ecx, [ebp - 0x1638]
mov dword [ebp - 0x124c], ebx
call fcn.00415b40
mov dword [ebp - 4], 0x60b
test bl, 0x40
je 0x429b47
lea ecx, [ebp - 0x1650]
call fcn.00415b40
cmp byte [ebp - 0x1245], 0
je 0x429b95
push 0x4f530c
lea ecx, [ebp - 0x1680]
call fcn.00415980
push 0x4f5bac
push ecx
lea eax, [ebp - 0x1680]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.004153b0
lea ecx, [ebp - 0x1680]
mov byte [ebp - 4], 0xb
call fcn.00415b40
lea ecx, [ebp - 0xb18]
call fcn.004159e0
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041f2d0
test eax, eax
je 0x429bc7
lea ecx, [ebp - 0xb18]
call fcn.004159e0
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041f1d0
push str.cookie.bin
lea ecx, [ebp - 0xb18]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415fc0
add esp, 4
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xb90]
mov byte [ebp - 4], 0xb
test eax, eax
jne 0x429cf3
lea ecx, [ebp - 0xb30]
call fcn.00426f90
test al, al
je 0x429cf3
push ecx
lea ecx, [ebp - 0xc04]
call fcn.00416a00
lea edx, [ebp - 0xb30]
call fcn.00478030
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0xc00]
sub ecx, dword [ebp - 0xc04]
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0xc04]
push ecx
push eax
lea ecx, [ebp - 0x1740]
mov byte [ebp - 4], 0x19
call fcn.00420a30
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1728]
call fcn.0042c550
add esp, 4
push eax
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 0x26
call fcn.00419ec0
lea ecx, [ebp - 0x1728]
mov byte [ebp - 4], 0x25
call fcn.00415b40
lea ecx, [ebp - 0x1740]
mov byte [ebp - 4], 0x19
call fcn.0041a410
push str.cookie
lea ecx, [ebp - 0x1698]
call fcn.00415980
lea eax, [ebp - 0xba0]
mov byte [ebp - 4], 0x27
push eax
push ecx
lea eax, [ebp - 0x1698]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.00419800
lea ecx, [ebp - 0x1698]
mov byte [ebp - 4], 0x19
call fcn.00415b40
lea ecx, [ebp - 0xc04]
mov byte [ebp - 4], 0x28
call fcn.00417380
mov byte [ebp - 4], 0xb
sub esp, 0x18
lea eax, [ebp - 0xba0]
mov ecx, esp
mov dword [ebp - 0x124c], esp
push eax
call fcn.00419f40
xor ecx, ecx
mov byte [ebp - 4], 0x29
call fcn.00420d20
push eax
lea eax, [ebp - 0xb7c]
mov byte [ebp - 4], 0xb
push eax
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x1758]
call fcn.00421850
add esp, 0x20
lea ecx, [ebp - 0x1758]
call fcn.00415b40
xor esi, esi
push dword [esi + 0x520aac]
lea ecx, [ebp - 0xb18]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xb30]
call fcn.004159e0
mov ecx, eax
call fcn.00415f90
test al, al
je 0x429dc1
push dword [esi + 0x520ab0]
lea ecx, [ebp - 0x16b0]
call fcn.00415980
lea eax, [ebp - 0xb30]
mov byte [ebp - 4], 0x2a
push eax
push ecx
lea eax, [ebp - 0x16b0]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.00419800
lea ecx, [ebp - 0x16b0]
mov byte [ebp - 4], 0xb
call fcn.00415b40
add esi, 8
cmp esi, 0x18
jb 0x429d42
push str.aswOfferTool.exe
lea ecx, [ebp - 0xb18]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415fc0
push 0x7d1
lea ecx, [ebp - 0xb30]
call fcn.004159e0
mov edx, eax
call fcn.00416910
add esp, 8
lea ecx, [ebp - 0xb18]
push str.GuiCust.dll
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415fc0
push 0x7d0
lea ecx, [ebp - 0xb30]
call fcn.004159e0
mov edx, eax
call fcn.00416910
add esp, 8
lea ecx, [ebp - 0xb18]
push str.CustomInstallation.ini
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415fc0
push 0x7d2
lea ecx, [ebp - 0xb30]
call fcn.004159e0
mov edx, eax
call fcn.00416910
add esp, 8
push ecx
lea ecx, [ebp - 0xec0]
call fcn.0042b210
sub esp, 0x18
lea edx, [ebp - 0xb18]
mov ecx, esp
mov dword [ebp - 0x124c], esp
push str._servers.def
call fcn.00414f30
add esp, 4
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0xb
call fcn.00426a70
sub esp, 0x18
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0xba0]
mov dword [ebp - 0x124c], esp
mov ecx, esp
push eax
call fcn.00419f40
sub esp, 0x18
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0xb48]
mov dword [ebp - 0xae4], esp
mov ecx, esp
push eax
call fcn.00419f40
sub esp, 0x18
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x90]
mov dword [ebp - 0x1258], esp
mov ecx, esp
push eax
call fcn.00415980
lea eax, [ebp - 0xb7c]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0x2c
call fcn.0042f500
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1258], esp
push str.stub
call fcn.00415980
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0x2c
call fcn.0042fb90
push ecx
lea eax, [ebp - 0xe60]
push eax
lea ecx, [ebp - 0xb18]
call fcn.004159e0
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041f970
mov esi, eax
test esi, esi
je 0x429fd4
cmp byte [ebp - 0x1234], 0
jne 0x429fb0
push esi
lea ecx, [ebp - 0xb18]
call fcn.004159e0
push eax
push str.The_installer_cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420980
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push 0x4f5cb8
push eax
push dword [ebp - 0xda8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
lea ecx, [ebp - 0xb18]
call fcn.004159e0
push eax
mov edx, str.Cannot_extract_VPX_files_to__s__code_0x_x_
mov ecx, 0x5272cc
call fcn.00420180
add esp, 8
jmp 0x42aa3c
push str.instup.exe
lea ecx, [ebp - 0xb18]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xbc8]
call fcn.00415fc0
add esp, 4
cmp byte [ebp - 0x1251], 0
je 0x42a806
cmp edi, 0xffffffff
je 0x42a022
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, edi
call fcn.00426fe0
movzx eax, al
push eax
call fcn.00426e70
add esp, 0xc
lea ecx, [ebp - 0xc70]
call fcn.00415400
push fcn.00415b40
push fcn.00415400
push 2
push 0x18
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x31
push eax
call fcn.0049410c
lea ecx, [ebp - 0xca0]
mov byte [ebp - 4], 0x32
call fcn.00415400
push str.instup.exe
lea ecx, [ebp - 0xb18]
mov byte [ebp - 4], 0x33
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xae0]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xb18]
push str.Instup.dll
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xac8]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xbf8]
push str.instup.exe
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xc70]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xc70]
call fcn.004159e0
mov ecx, eax
call fcn.00415f90
test al, al
je 0x42a2aa
cmp dword [ebp - 0xae8], 0x7cb
jbe 0x42a2aa
xor edi, edi
lea ebx, [ebp - 0xae0]
test esi, esi
jne 0x42a7c7
cmp dword [ebp - 0x1250], esi
jne 0x42a7c7
push ecx
lea ecx, [ebp - 0xe24]
call fcn.0042ac30
lea ecx, [ebp - 0x1770]
call fcn.00415400
push eax
lea ecx, [ebp - 0xe24]
mov byte [ebp - 4], 0x34
call fcn.0042b570
lea ecx, [ebp - 0x1770]
mov byte [ebp - 4], 0x36
call fcn.00415b40
push str.copy_sfx
lea ecx, [ebp - 0x16c8]
call fcn.00415980
push ebx
push ecx
lea eax, [ebp - 0x16c8]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0xe24]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.00419800
lea ecx, [ebp - 0x16c8]
mov byte [ebp - 4], 0x36
call fcn.00415b40
push str.wait
lea ecx, [ebp - 0x16e0]
call fcn.00415980
push 0x4f409c
push ecx
lea eax, [ebp - 0x16e0]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0xe24]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.004153b0
lea ecx, [ebp - 0x16e0]
mov byte [ebp - 4], 0x36
call fcn.00415b40
lea eax, [ebp - 0x18d8]
push eax
lea ecx, [ebp - 0xe24]
call fcn.0042c140
push esi
push esi
lea ecx, [ebp - 0x1250]
mov byte [ebp - 4], 0x39
push ecx
mov ecx, eax
call fcn.004159e0
lea ecx, [ebp - 0xc70]
mov esi, eax
call fcn.004159e0
mov edx, esi
mov ecx, eax
call fcn.00421000
add esp, 0xc
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x18d8]
mov esi, eax
call fcn.00415b40
lea ecx, [ebp - 0xe24]
mov byte [ebp - 4], 0x33
call fcn.0042b420
inc edi
add ebx, 0x18
cmp edi, 2
jb 0x42a0f0
test esi, esi
jne 0x42a7c7
cmp dword [ebp - 0x1250], esi
jne 0x42a7c7
push 0x4f5b10
lea ecx, [ebp - 0xbf8]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xca0]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xca0]
push str.instup.exe
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xca0]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xca0]
call fcn.00426f90
test al, al
je 0x42a7c7
lea eax, [ebp - 0xca0]
push eax
lea ecx, [ebp - 0xbc8]
call fcn.00419800
jmp 0x42a7c7
push str.setup.ovr
lea ecx, [ebp - 0xbf8]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xc70]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xc70]
call fcn.004159e0
mov ecx, eax
call fcn.00415f90
test al, al
je 0x42a7c7
lea ecx, [ebp - 0xce8]
call fcn.00415400
push str._copysfx
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415980
push 0x4f6578
mov edx, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x14f4]
call fcn.00415040
add esp, 4
lea ecx, [ebp - 0xae0]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x14dc]
call fcn.00414ee0
add esp, 4
push 0x4f4078
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x14c4]
call fcn.00415040
add esp, 4
push eax
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x3e
call fcn.00419ec0
lea ecx, [ebp - 0x14c4]
mov byte [ebp - 4], 0x3d
call fcn.00415b40
lea ecx, [ebp - 0x14dc]
mov byte [ebp - 4], 0x3c
call fcn.00415b40
lea ecx, [ebp - 0x14f4]
mov byte [ebp - 4], 0x3b
call fcn.00415b40
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415b40
push 0
push 0
lea eax, [ebp - 0x1250]
push eax
lea ecx, [ebp - 0xce8]
call fcn.004159e0
lea ecx, [ebp - 0xc70]
mov esi, eax
call fcn.004159e0
mov edx, esi
mov ecx, eax
call fcn.00421000
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x42a52e
nop word [eax + eax]
mov ecx, dword [ebp - 0x1250]
cmp ecx, 0x2000000a
jne 0x42a50a
mov eax, dword [0x507614]
push 0xbb8
mov dword [ebp - 0x1250], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x33
call fcn.00415b40
lea ecx, [ebp - 0xce8]
call fcn.00415400
push str._copysfx
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415980
push 0x4f6578
mov edx, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x14f4]
call fcn.00415040
add esp, 4
lea ecx, [ebp - 0xae0]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x14dc]
call fcn.00414ee0
add esp, 4
push 0x4f4078
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x14c4]
call fcn.00415040
add esp, 4
push eax
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x3e
call fcn.00419ec0
lea ecx, [ebp - 0x14c4]
mov byte [ebp - 4], 0x3d
call fcn.00415b40
lea ecx, [ebp - 0x14dc]
mov byte [ebp - 4], 0x3c
call fcn.00415b40
lea ecx, [ebp - 0x14f4]
mov byte [ebp - 4], 0x3b
call fcn.00415b40
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415b40
push 0
push 0
lea eax, [ebp - 0x1250]
push eax
lea ecx, [ebp - 0xce8]
call fcn.004159e0
lea ecx, [ebp - 0xc70]
mov esi, eax
call fcn.004159e0
mov edx, esi
mov ecx, eax
call fcn.00421000
mov esi, eax
add esp, 0xc
test esi, esi
je 0x42a3e0
jmp 0x42a52e
cmp ecx, 0x20000000
je 0x42a524
mov dword [ebp - 0x1250], 5
cmp ecx, 0x20000001
jne 0x42a52e
mov dword [ebp - 0x1250], 0
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x33
call fcn.00415b40
test esi, esi
jne 0x42a7c7
cmp dword [ebp - 0x1250], esi
jne 0x42a7c7
push 0x4f5b10
lea ecx, [ebp - 0xbf8]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xca0]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xca0]
push str.avast.setup
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xbc8]
call fcn.00415fc0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov edx, eax
mov dword [ebp - 0x124c], edx
test edx, edx
je 0x42a7c7
push ecx
lea ecx, [ebp - 0xbb0]
call fcn.00416a00
call fcn.00417140
mov eax, ecx
mov byte [ebp - 4], 0x3f
push eax
mov ecx, edx
call fcn.004261f0
add esp, 4
test al, al
je 0x42a7ac
mov byte [ebp - 4], 0x40
mov esi, dword [ebp - 0xbb0]
mov dword [ebp - 0xae8], esi
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0x126c], eax
mov byte [ebp - 4], 0x3f
cmp esi, dword [ebp - 0x126c]
je 0x42a7ac
push esi
lea ecx, [ebp - 0xc58]
call fcn.00419f40
lea eax, [ebp - 0x1494]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0xc58]
call fcn.00419ea0
mov ebx, eax
lea ecx, [ebp - 0xc58]
lea eax, [ebp - 0x1490]
push eax
call fcn.00419e70
mov edi, eax
lea ecx, [ebp - 0xc58]
lea eax, [ebp - 0x148c]
push eax
call fcn.00419ea0
push dword [ebx]
lea ecx, [ebp - 0x1258]
push dword [edi]
push dword [eax]
call fcn.0042c420
add esp, 0xc
lea ecx, [ebp - 0xc58]
push 0
push str.path
call fcn.004171b0
test eax, eax
je 0x42a6c2
lea ecx, [ebp - 0xc58]
mov byte [ebp - 4], 0x3f
call fcn.00415b40
push ecx
lea eax, [ebp - 0xae4]
push eax
lea ecx, [ebp - 0xae8]
call fcn.004264b0
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0x126c], eax
mov byte [ebp - 4], 0x3f
mov esi, dword [ebp - 0xae8]
cmp esi, dword [ebp - 0x126c]
jne 0x42a601
jmp 0x42a7ac
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0xc58]
mov eax, dword [ebp - 0xc48]
dec eax
mov byte [ebp - 4], 0x4c
push eax
call fcn.00419f70
cmp word [eax], 0x3b
je 0x42a713
push 0x4f65b8
mov edx, esi
lea ecx, [ebp - 0x1788]
call fcn.00414f30
add esp, 4
push eax
mov ecx, esi
mov byte [ebp - 4], 0x51
call fcn.00419ec0
lea ecx, [ebp - 0x1788]
mov byte [ebp - 4], 0x4c
call fcn.00415b40
lea eax, [ebp - 0xb18]
mov edx, esi
push eax
lea ecx, [ebp - 0x17a0]
call fcn.0042c590
add esp, 4
push 0x4f65b8
mov edx, eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1848]
call fcn.00415040
add esp, 4
push eax
mov ecx, esi
mov byte [ebp - 4], 0x53
call fcn.00419ec0
lea ecx, [ebp - 0x1848]
mov byte [ebp - 4], 0x52
call fcn.00415b40
lea ecx, [ebp - 0x17a0]
mov byte [ebp - 4], 0x4c
call fcn.00415b40
lea edx, [ebp - 0xbb0]
lea ecx, [ebp - 0x1518]
call fcn.00426310
push eax
lea ecx, [ebp - 0xb88]
mov byte [ebp - 4], 0x54
call fcn.004264d0
lea ecx, [ebp - 0x1518]
mov byte [ebp - 4], 0x55
call fcn.00417380
lea ecx, [ebp - 0xc58]
mov byte [ebp - 4], 0x3f
call fcn.00415b40
push dword [ebp - 0x124c]
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x33
call fcn.004170e0
lea ecx, [ebp - 0xca0]
mov byte [ebp - 4], 0x32
call fcn.00415b40
push fcn.00415b40
push 2
push 0x18
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x31
push eax
call fcn.00494175
lea ecx, [ebp - 0xc70]
mov byte [ebp - 4], 0x2c
call fcn.00415b40
mov edi, dword [ebp - 0x1268]
jmp 0x42a856
cmp edi, 0xffffffff
je 0x42a8a2
push str.guid
lea ecx, [ebp - 0x15d8]
call fcn.00415980
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x56
push eax
push ecx
lea eax, [ebp - 0x15d8]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.004153b0
lea ecx, [ebp - 0x15d8]
mov byte [ebp - 4], 0x2c
call fcn.00415b40
cmp edi, 0xffffffff
je 0x42a8a2
push str.ga_clientid
lea ecx, [ebp - 0x1530]
call fcn.00415980
lea eax, [ebp - 0xb48]
mov byte [ebp - 4], 0x57
push eax
push ecx
lea eax, [ebp - 0x1530]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b540
add esp, 4
mov ecx, eax
call fcn.00419800
lea ecx, [ebp - 0x1530]
mov byte [ebp - 4], 0x2c
call fcn.00415b40
lea ecx, [ebp - 0xbc8]
call fcn.004159e0
push eax
mov edx, str.Starting_installer_updater_executable__s
mov ecx, 0x5272cc
call fcn.00418820
add esp, 4
lea eax, [ebp - 0xd30]
lea ecx, [ebp - 0xb7c]
push eax
call fcn.0042c140
mov ebx, dword [ebp - 0x136c]
mov byte [ebp - 4], 0x58
test ebx, ebx
je 0x42a912
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a8e5
sub ecx, edx
sar ecx, 1
je 0x42a912
push 0x4f6618
lea ecx, [ebp - 0xd30]
call fcn.004151d0
push ebx
lea ecx, [ebp - 0xd30]
call fcn.004151d0
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0xb88]
mov eax, dword [ebp - 0xb84]
mov byte [ebp - 4], 0x58
cmp ecx, eax
jne 0x42a92e
xor eax, eax
jmp 0x42a938
mov byte [ebp - 4], 0x58
mov eax, dword [ebp - 0xb88]
push eax
xor ecx, ecx
lea eax, [ebp - 0xdf0]
cmp dword [ebp - 0xda8], ecx
cmove eax, ecx
lea ecx, [ebp - 0xd30]
push eax
lea eax, [ebp - 0x1250]
push eax
call fcn.004159e0
lea ecx, [ebp - 0xbc8]
mov esi, eax
call fcn.004159e0
mov edx, esi
mov ecx, eax
call fcn.00421000
mov esi, eax
add esp, 0xc
test esi, esi
je 0x42a9e3
cmp byte [ebp - 0x1234], 0
jne 0x42a9c5
push esi
lea ecx, [ebp - 0xbc8]
call fcn.004159e0
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420980
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push 0x4f5cb8
push eax
push dword [ebp - 0xda8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
lea ecx, [ebp - 0xbc8]
call fcn.004159e0
push eax
mov edx, str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
mov ecx, 0x5272cc
call fcn.00420180
jmp 0x42aa2a
mov esi, dword [ebp - 0x1250]
cmp edi, 0xffffffff
je 0x42aa18
mov ecx, edi
call fcn.00426fb0
test al, al
je 0x42aa18
call fcn.00427010
test al, al
jne 0x42aa18
test esi, esi
je 0x42aa18
cmp esi, dword [0x507610]
je 0x42aa18
call fcn.0042c670
call fcn.00421640
push esi
lea ecx, [ebp - 0xbc8]
call fcn.004159e0
push eax
call fcn.0042c740
add esp, 8
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd30]
call fcn.00415b40
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0xb
call fcn.00426b70
lea ecx, [ebp - 0xdf0]
mov byte [ebp - 4], 8
call fcn.004257e0
lea ecx, [ebp - 0xd18]
mov dword [ebp - 4], 0x176
call fcn.00415b40
push str.Reboot.txt
lea ecx, [ebp - 0xb18]
call fcn.004159e0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415fc0
add esp, 4
lea ecx, [ebp - 0xb30]
call fcn.004159e0
mov ecx, eax
call fcn.00415f90
push ecx
push dword [ebp - 0x1370]
lea ecx, [ebp - 0xb18]
mov bl, al
call fcn.004159e0
mov edx, 0x4f67cc
mov ecx, eax
call fcn.00416680
call fcn.00457cc0
call fcn.004453f0
xor ecx, ecx
call fcn.004450c0
sub esp, 0xc
xor edx, edx
push 0
push 0
push 0
push ecx
push 0
push 0
push 0
push 0
xor ecx, ecx
call fcn.0045d830
add esp, 0x34
xor ecx, ecx
call fcn.00457630
test bl, bl
je 0x42aafd
call fcn.004214a0
push esi
call fcn.0042c810
add esp, 4
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xc28]
call fcn.00415b40
lea ecx, [ebp - 0xb48]
mov byte [ebp - 4], 0x3f
call fcn.00415b40
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 0x23
call fcn.00415b40
lea ecx, [ebp - 0x1230]
mov byte [ebp - 4], 0x22
call fcn.0042adf0
lea ecx, [ebp - 0xb88]
mov dword [ebp - 4], 0x663
call fcn.00417380
lea ecx, [ebp - 0xbe0]
mov dword [ebp - 4], 0x103
call fcn.00415b40
lea ecx, [ebp - 0xe60]
mov dword [ebp - 4], 0xff
call fcn.0041a7b0
lea ecx, [ebp - 0xf80]
mov byte [ebp - 4], 0xe2
call fcn.0041dd40
lea ecx, [ebp - 0xb7c]
mov byte [ebp - 4], 0xc3
call fcn.0042b420
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0xa7
call fcn.00415b40
lea ecx, [ebp - 0xc88]
mov byte [ebp - 4], 0x8b
call fcn.00415b40
lea ecx, [ebp - 0xcb8]
mov byte [ebp - 4], 0x6f
call fcn.00415b40
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0x53
call fcn.00415b40
lea ecx, [ebp - 0xb18]
mov byte [ebp - 4], 0x37
call fcn.00415b40
lea ecx, [ebp - 0xb30]
mov byte [ebp - 4], 0x1b
call fcn.00415b40
lea ecx, [ebp - 0xbc8]
mov dword [ebp - 4], 0xffffffff
call fcn.00415b40
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00493bec
mov esp, ebp
pop ebp
ret 8