Function at 0x403c40
Capabilities:
Contain obfuscated stackstrings
Delete file
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x190e8
call fcn.004376b0
sub rsp, rax
xor esi, esi
mov rdi, rcx
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x160], rsi
mov byte [rsp + 0x84], sil
mov byte [rsp + 0x90], sil
call fcn.004011a0
lea r12d, [rsi + 1]
cmp al, sil
je 0x403ccf
lea rdx, [rsp + 0x188]
lea rcx, [0x0054c260]
xor r8d, r8d
mov dword [rsp + 0x188], r12d
mov qword [rsp + 0x190], rsi
mov dword [rsp + 0x198], esi
mov dword [rsp + 0x19c], esi
call sub.gdiplus.dll_GdiplusStartup
lea rcx, str.kernel32
mov byte [rsp + 0x170], sil
mov dword [rsp + 0x80], esi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.IsWow64Process
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp rax, rsi
mov rbx, rax
je 0x403d16
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rdx, [rsp + 0x80]
mov rcx, rax
call rbx
cmp dword [rsp + 0x80], esi
mov r13d, 0x40
lea rdx, [0x0043c7b4]
lea r8d, [r13 - 0x20]
lea rcx, [rsp + 0x170]
je 0x403d3b
mov r8d, r13d
call fcn.00416480
call fcn.00409978
mov bl, 0x5c
mov rcx, rdi
mov byte [rsp + 0xb0], 0x59
mov byte [rsp + 0xb1], 0xbd
mov r14, rax
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb2], 0xc9
mov byte [rsp + 0xb3], 0x52
mov byte [rsp + 0xb4], 0xaa
mov byte [rsp + 0xb5], 0x35
mov byte [rsp + 0xb6], 0xad
mov byte [rsp + 0xb7], 0xbb
mov byte [rsp + 0xb8], 0x10
mov byte [rsp + 0xb9], 0xef
mov byte [rsp + 0xba], 0xde
mov byte [rsp + 0xbb], 0x67
mov byte [rsp + 0xbc], 0x2c
mov byte [rsp + 0xbd], 0x47
mov byte [rsp + 0xbe], 0xe0
mov byte [rsp + 0xbf], 0xb5
mov byte [rsp + 0xc0], 0xd4
mov byte [rsp + 0xc1], 0x82
mov byte [rsp + 0xc2], 0x1f
mov byte [rsp + 0xc3], 0x81
mov byte [rsp + 0xc4], 0x52
mov byte [rsp + 0xc5], 0xa1
mov byte [rsp + 0xc6], 2
mov byte [rsp + 0xc7], 0x44
mov byte [rsp + 0xc8], 0x2a
mov byte [rsp + 0xc9], 0xeb
mov byte [rsp + 0xca], 0xaa
mov byte [rsp + 0xcb], 0x7b
mov byte [rsp + 0xcc], 0x79
mov byte [rsp + 0xcd], 0x3b
mov byte [rsp + 0xce], 0x93
mov byte [rsp + 0xcf], 0x45
mov byte [rsp + 0xd0], 0xae
mov byte [rsp + 0xd1], 0xd2
mov byte [rsp + 0xd2], 9
mov byte [rsp + 0xd3], 0x7a
mov byte [rsp + 0xd4], 0x3e
mov byte [rsp + 0xd5], 0x2f
mov byte [rsp + 0xd6], 0x2e
mov byte [rsp + 0xd7], 0xfa
mov byte [rsp + 0xd8], 0xff
mov byte [rsp + 0xd9], 0x1d
mov byte [rsp + 0xda], 0xf0
mov byte [rsp + 0xdb], 0x9b
mov byte [rsp + 0xdc], 0x19
mov byte [rsp + 0xdd], 0x7c
mov byte [rsp + 0xde], 0x15
mov byte [rsp + 0xdf], 0xb8
mov byte [rsp + 0xe0], 0x1e
mov byte [rsp + 0xe1], 0x6d
mov byte [rsp + 0xe2], 0xc6
mov byte [rsp + 0xe3], 0x10
mov byte [rsp + 0xe4], 0x41
mov byte [rsp + 0xe5], 0x7e
mov byte [rsp + 0xe6], bl
mov byte [rsp + 0xe7], 0xed
mov byte [rsp + 0xe8], 0x51
mov byte [rsp + 0xe9], 0xb1
mov byte [rsp + 0xea], 0x19
mov byte [rsp + 0xeb], 0x1c
mov byte [rsp + 0xec], 0x3c
mov byte [rsp + 0xed], 0xe2
mov byte [rsp + 0xee], 0x94
mov byte [rsp + 0xef], 0xd8
call fcn.00415600
mov ebp, 0x400
cmp rax, 3
jb 0x403f85
cmp byte [rdi], bl
jne 0x403f6d
cmp byte [rdi + 1], bl
je 0x403f78
cmp byte [rdi + 1], 0x3a
jne 0x403f85
cmp byte [rdi + 2], bl
jne 0x403f85
mov rbx, rdi
mov qword [rsp + 0x138], rdi
jmp 0x403fad
mov rcx, rbp
call fcn.004153f0
mov edx, ebp
mov rcx, rax
mov rbx, rax
mov qword [rsp + 0x138], rax
call fcn.00419230
mov rdx, rdi
mov rcx, rbx
call fcn.0040a1c8
lea rcx, str._Extractor__The_absolute_wrapper_path_is__s_n
mov rdx, rbx
call fcn.0040a274
lea rcx, str._Extractor__The_executable_name_is__s_n
mov rdx, rdi
call fcn.0040a274
lea rdx, [0x0043c2c8]
mov rcx, rdi
call fcn.004171f0
cmp rax, rsi
mov rbp, rax
jne 0x403ffa
lea rcx, str._Extractor___Failed_to_extract_wrapper_params___couldnt_open_file__s_n
mov rdx, rdi
call fcn.0040a274
mov ecx, r12d
call fcn.004169d0
int3
lea r9, str.Params
lea rdx, [rsp + 0xb0]
mov r8d, r13d
mov rcx, rax
call fcn.0040a104
cmp eax, 0xffffffff
jne 0x404022
mov ecx, r12d
call fcn.004169d0
int3
lea rcx, str._Extractor__Found_Params_marker._Extracting_now..._n
call fcn.0040a274
mov ecx, 0x30d40
call fcn.004153f0
xor edx, edx
mov r8d, 0x30d40
mov rcx, rax
mov qword [rsp + 0x120], rax
call fcn.00417400
lea rdx, str.Params_Count
mov r8d, 0x28
mov rcx, rbp
mov r15b, sil
call fcn.00409828
mov rcx, rax
call fcn.00416ea0
lea rcx, [0x0043dd70]
mov r13d, eax
call fcn.0040a274
lea rcx, [0x0043dd78]
call fcn.0040a274
lea rcx, str._Processing__d_dynamic_properties_n
mov edx, r13d
call fcn.0040a274
lea rcx, [0x0043dd78]
call fcn.0040a274
cmp r13d, esi
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa0], rax
mov r12d, esi
jle 0x4043a7
mov r14, qword [rsp + 0x120]
mov edi, dword [rsp + 0x90]
lea rdx, str.Param_Name
mov r8d, 0x400
mov rcx, rbp
call fcn.00409828
lea rdx, str.Param_Value
mov r8d, 0x30d40
mov rcx, rbp
mov rsi, rax
call fcn.00409828
mov rcx, rax
mov rbx, rax
call fcn.00415600
cmp rax, 0x64
jbe 0x404143
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
mov r8d, 0x63
call fcn.00417280
mov byte [rsp + 0x113], 0
lea r9, [rsp + 0xb0]
lea rcx, str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x40414d
mov r9, rbx
lea rcx, str._DynProps__Dynamic_Param__d:__s__s__n
mov r8, rsi
mov edx, r12d
call fcn.0040a274
lea rdx, str.jwdyna_
mov rcx, r14
call fcn.004096f0
mov rdx, rsi
mov rcx, r14
call fcn.00409780
mov rdx, rbx
mov rcx, r14
call fcn.004096f0
lea rdx, str.update_url
mov rcx, rsi
call fcn.00417900
test eax, eax
jne 0x4041a7
lea rcx, str._DynProps__Dynamic_Update_URL:__s_n
mov rdx, rbx
mov qword [rsp + 0xa0], rbx
call fcn.0040a274
lea rdx, str.match_versions
mov rcx, rsi
call fcn.00417900
test eax, eax
jne 0x4041d3
lea rdx, str.true
mov rcx, rbx
call fcn.00417900
test eax, eax
sete byte [rsp + 0x84]
lea rdx, str.wrapper_autotest
mov rcx, rsi
call fcn.00417900
mov ecx, 1
movzx edi, dil
test eax, eax
lea rdx, str.show_no_ui
cmove edi, ecx
mov rcx, rsi
call fcn.00417900
test eax, eax
jne 0x404221
lea rdx, str.true
mov rcx, rbx
call fcn.00417900
movzx r15d, r15b
test eax, eax
mov eax, 1
cmove r15d, eax
lea rdx, str.force_spawn
mov rcx, rsi
call fcn.00417900
test eax, eax
jne 0x404250
lea rdx, str.true
mov rcx, rbx
call fcn.00417900
xor ecx, ecx
test eax, eax
sete cl
mov dword [0x0054c280], ecx
lea rdx, str.splash_buffer
mov rcx, rsi
call fcn.00417900
test eax, eax
jne 0x40427e
mov rcx, rbx
call fcn.00415600
test rax, rax
je 0x40427e
mov rcx, rbx
call fcn.00416ea0
mov dword [0x0054c394], eax
lea rdx, str.splash_image
mov rcx, rsi
call fcn.00417900
test eax, eax
jne 0x404319
mov rcx, rbx
call fcn.00415600
mov rdx, rbx
cmp rax, 0x64
jae 0x4042af
lea rcx, str._DynProps__Splash_Image_is__s_n
jmp 0x4042d9
lea rcx, [rsp + 0xb0]
mov r8d, 0x63
call fcn.00417280
mov byte [rsp + 0x113], 0
lea rdx, [rsp + 0xb0]
lea rcx, str._DynProps__Splash_Image_is__s..._n
call fcn.0040a274
lea rcx, str._DynProps__Base64_decoding_image..._n
call fcn.0040a274
mov rcx, rbx
call fcn.00415600
lea r8, [rsp + 0x180]
mov rcx, rbx
mov rdx, rax
call fcn.004013d4
lea rcx, str._DynProps__Decode_complete_n
mov qword [rsp + 0x160], rax
call fcn.0040a274
lea rdx, str.jre_name
mov rcx, rsi
call fcn.00417900
test eax, eax
jne 0x404357
lea rcx, [rsp + 0x30c0]
mov rdx, rbx
mov byte [rsp + 0x30c0], al
call fcn.004156c0
lea rdx, [rsp + 0x30c0]
lea rcx, str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.0040a274
lea rdx, str.windows_app_id
mov rcx, rsi
call fcn.00417900
xor esi, esi
cmp eax, esi
jne 0x404383
lea rcx, str._DynProps__Windows_APP_ID_is__s_n
mov rdx, rbx
call fcn.0040a274
mov rcx, rbx
call fcn.004038dc
add r12d, 1
cmp r12d, r13d
jl 0x4040d1
mov r14, qword [rsp + 0xa8]
mov dword [rsp + 0x90], edi
mov rdi, qword [rsp + 0x19130]
lea rcx, str.Processing_dynamic_properties_n
call fcn.0040a478
cmp byte [rsp + 0x19158], sil
je 0x4043c9
lea rcx, str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.0040a274
lea rcx, [0x0043dd70]
call fcn.0040a274
lea rcx, str.Extracting_wrapper_tail_n
call fcn.0040a440
mov rcx, rbp
call fcn.00419c90
lea rdx, [0x0043c2c8]
mov rcx, rdi
call fcn.004171f0
cmp rax, rsi
mov rbx, rax
mov qword [rsp + 0x140], rax
jne 0x404422
lea rcx, str._Extractor___Failed_to_extract_wrapper_tail___couldnt_open_file__s_n
mov rdx, rdi
call fcn.0040a274
mov ecx, 1
call fcn.004169d0
int3
lea r9, str.Tail
mov r8d, 0x80
mov rdx, r14
mov rcx, rax
call fcn.0040a104
cmp eax, 0xffffffff
jne 0x404448
lea ecx, [rax + 2]
call fcn.004169d0
int3
lea rcx, str._Extractor__Found_tail_marker_n
call fcn.0040a274
mov edi, 0x400
lea rdx, str.App_Name
mov r8d, edi
mov rcx, rbx
call fcn.00409828
lea rdx, str.App_Version
mov r8d, edi
mov rcx, rbx
mov r14, rax
call fcn.00409828
lea rdx, str.JRE_Version
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x98], rax
call fcn.00409828
lea rdx, str.GU_Version
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x150], rax
call fcn.00409828
lea rdx, str.Min_Splash_MS
mov r8d, edi
mov rcx, rbx
mov r12, rax
call fcn.00409828
lea rdx, str.Signature_Public_Key
mov r8d, 0x2000
mov rcx, rbx
mov qword [rsp + 0x148], rax
call fcn.00409828
lea rdx, str.Can_Override_Splash
mov r8d, edi
mov rcx, rbx
mov rsi, rax
call fcn.00409828
lea rdx, str.Install_Type
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x168], rax
call fcn.00409828
lea rdx, str.Silent_Parameter
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x130], rax
call fcn.00409828
lea rdx, str.Required_Java_Version
mov r8d, edi
mov rcx, rbx
mov rbp, rax
call fcn.00409828
lea rdx, str.Update_URL
mov r8d, 0x1388
mov rcx, rbx
mov r13, rax
mov qword [rsp + 0xa8], rax
call fcn.00409828
test r13, r13
mov rbx, rax
mov qword [rsp + 0x128], rax
je 0x404590
mov rcx, r13
call fcn.00415600
test rax, rax
je 0x404590
lea rcx, str._Extractor__Required_Java_version__s_n
mov rdx, r13
call fcn.0040a274
lea rdx, [0x0043c844]
mov rcx, rbx
call fcn.00417900
test eax, eax
jne 0x4045bf
mov rdi, qword [rsp + 0xa0]
lea rcx, str._Extractor__Will_use_Dynamic_Update_URL:__s_n
mov rdx, rdi
call fcn.0040a274
mov r13, rdi
jmp 0x4045d1
lea rcx, str._Extractor__Will_use_Static_Update_URL:__s_n
mov rdx, rbx
call fcn.0040a274
mov r13, rbx
test r15b, r15b
jne 0x404627
test rbp, rbp
je 0x404624
mov rcx, rbp
call fcn.00415600
test rax, rax
je 0x404624
movsxd rdi, dword [rsp + 0x19138]
xor ebx, ebx
test rdi, rdi
jle 0x40461c
mov r15, qword [rsp + 0x19140]
mov rdx, qword [r15 + rbx*8]
mov rcx, rbp
call fcn.00417900
test eax, eax
je 0x404811
add rbx, 1
cmp rbx, rdi
jl 0x4045ff
mov rbx, qword [rsp + 0x128]
xor r15b, r15b
lea rcx, str._Extractor__Is_silent_install_is__d_n
movzx edx, r15b
call fcn.0040a274
lea rcx, str.Extracting_tail_n
call fcn.0040a478
lea rcx, str._Extractor__Setting_up_static_properties_n
call fcn.0040a274
mov r8, rbx
mov rbx, qword [rsp + 0x120]
lea rdx, str.update_url
mov rcx, rbx
call fcn.004097ec
mov r8, qword [rsp + 0x130]
lea rdx, str.install_type
mov rcx, rbx
call fcn.004097ec
mov r8, qword [rsp + 0x148]
lea rdx, str.min_splash_ms
mov rcx, rbx
call fcn.004097ec
lea rdx, str.jwsig_public_key
mov r8, rsi
mov rcx, rbx
call fcn.004097ec
mov r8, qword [rsp + 0x168]
lea rdx, str.can_override_splash
mov rcx, rbx
call fcn.004097ec
lea rdx, str.app_name
mov r8, r14
mov rcx, rbx
call fcn.004097ec
mov r8, qword [rsp + 0x98]
lea rdx, str.wrapper_app_version
mov rcx, rbx
call fcn.004097ec
lea rdx, str.wrapper_gu_version
mov r8, r12
mov rcx, rbx
call fcn.004097ec
lea rdx, str.silent_parameter
mov r8, rbp
mov rcx, rbx
call fcn.004097ec
mov r8, qword [rsp + 0xa8]
lea rdx, str.java_version
mov rcx, rbx
call fcn.004097ec
xor ebp, ebp
cmp r15b, bpl
je 0x404741
lea r8, str.true
lea rdx, str.show_no_ui
mov rcx, rbx
call fcn.004097ec
cmp rsi, rbp
je 0x40483b
mov rcx, rsi
call fcn.00415600
mov rcx, rsi
cmp rax, rbp
jbe 0x404821
call fcn.00415600
mov rbx, rax
shr rbx, 1
add rbx, 2
mov rcx, rbx
call fcn.004153f0
mov r8, rbx
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.00417400
mov r8, rsi
mov edx, ebx
mov rcx, rdi
call fcn.00409b8c
lea rcx, str._Extractor__Processed_public_key_of_length__d_n
mov edx, eax
mov ebx, eax
call fcn.0040a274
lea rcx, [0x0054c3c0]
lea rdx, str.LibTomMath
mov r8d, 0x188
call fcn.00415f50
mov ecx, 0x48
call fcn.004153f0
mov edx, ebx
mov rcx, rdi
mov r8, rax
mov rsi, rax
mov qword [rsp + 0x88], rax
call fcn.0040ccf0
cmp eax, ebp
je 0x404800
lea rcx, str.ERROR___unable_to_import_public_key._n
call fcn.004154c0
mov rcx, rsi
call fcn.004153b0
mov rsi, rbp
mov qword [rsp + 0x88], rbp
lea rcx, str._Extractor__Public_Key:__08X_n
mov rdx, rsi
call fcn.0040a274
jmp 0x404847
mov rbx, qword [rsp + 0x128]
mov r15b, 1
jmp 0x404627
call fcn.00415600
cmp rax, rbp
ja 0x404847
lea rcx, str._Extractor__Public_key_length__d__no_public_key__n
xor edx, edx
call fcn.0040a274
jmp 0x404847
lea rcx, str._Extractor__Public_key_empty__no_public_key__n
call fcn.0040a274
mov rcx, qword [rsp + 0x130]
call fcn.0040a648
lea rcx, str._Extractor__Shared_dir_is__s_n
mov rdx, rax
mov rbx, rax
call fcn.0040a274
lea rcx, str._Extractor__Update_URL_is_currently__s_n
mov rdx, r13
call fcn.0040a274
mov rcx, r13
call fcn.00415600
cmp eax, ebp
jle 0x404896
movsxd rcx, eax
cmp byte [rcx + r13 - 1], 0x2f
je 0x404896
mov byte [rcx + r13], 0x2f
mov byte [rcx + r13 + 1], bpl
lea rcx, str._Extractor__Update_URL_is_now__s_n
mov rdx, r13
call fcn.0040a274
lea rcx, [rsp + 0x9a0]
mov rdx, rbx
mov byte [rsp + 0x9a0], bpl
call fcn.004156c0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0x9a0]
call fcn.0040a1c8
lea rcx, [rsp + 0x9a0]
mov rdx, r14
call fcn.004156c0
lea rdx, [rsp + 0x9a0]
lea rcx, str._Extractor__Master_folder_is__s_n
call fcn.0040a274
lea rcx, [rsp + 0x9a0]
call fcn.0040129c
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x15630]
mov byte [rsp + 0x15630], bpl
call fcn.004156c0
lea rdx, str.JWApps
lea rcx, [rsp + 0x15630]
call fcn.0040a1c8
lea rdx, [rsp + 0x15630]
lea rcx, [rsp + 0x169c0]
mov byte [rsp + 0x169c0], bpl
call fcn.004156c0
lea rdx, str.JreNameOverride
lea rcx, [rsp + 0x169c0]
call fcn.0040a1c8
lea rdx, [0x0043d788]
lea rcx, [rsp + 0x169c0]
call fcn.004171f0
cmp rax, rbp
mov rdi, rax
je 0x4049f2
lea rcx, str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.0040a274
lea rdx, str.JRE_Override_App_Name
mov r8d, 0x1f4
mov rcx, rdi
call fcn.00409828
cmp rax, rbp
mov rbx, rax
je 0x4049c9
mov rcx, rax
call fcn.00415600
mov ecx, 1
cmp rax, rcx
jne 0x4049c9
cmp byte [rbx], 0x2d
jne 0x4049c9
lea rcx, str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x4049f9
lea rcx, [rsp + 0x30c0]
mov rdx, rbx
mov byte [rsp + 0x30c0], bpl
call fcn.004156c0
mov rcx, rdi
call fcn.00419c90
lea rcx, str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x4049f9
lea rcx, str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
lea rdx, [rsp + 0x30c0]
call fcn.0040a274
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0xb9b0]
mov byte [rsp + 0xb9b0], bpl
call fcn.004156c0
lea rdx, str.JWAppsSharedConfig
lea rcx, [rsp + 0xb9b0]
call fcn.0040a1c8
lea rcx, [rsp + 0xb9b0]
call fcn.0040a184
mov rcx, r12
mov bpl, 1
call fcn.00415600
test rax, rax
jne 0x404a65
lea rcx, str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.0040a274
xor bpl, bpl
jmp 0x404a74
lea rcx, str._Extractor__GenericUpdater_version_is__s_n
mov rdx, r12
call fcn.0040a274
mov rbx, qword [rsp + 0x98]
mov rcx, rbx
call fcn.00415600
test rax, rax
jne 0x404a97
lea rcx, str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.0040a274
jmp 0x404aa6
lea rcx, str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
mov rdx, rbx
call fcn.0040a274
lea rcx, str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.0040a274
lea rdx, str.JWrapper
lea rcx, [rsp + 0x9a0]
call fcn.0040a4b0
lea rdx, [rsp + 0x30c0]
lea rcx, [rsp + 0x9a0]
mov rsi, rax
call fcn.0040a4b0
mov rdi, rax
lea rax, str.java.exe
test rdi, rdi
je 0x404bc0
lea r9, [0x0043bde8]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x1a0]
mov r8, rdi
mov qword [rsp + 0x20], rax
call fcn.0040a230
lea rcx, [rsp + 0x1a0]
call fcn.00409d40
xor ebx, ebx
lea r9, [0x0043bde8]
test eax, eax
lea rax, str.javaw.exe
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x1a0]
mov r8, rdi
mov qword [rsp + 0x20], rax
setne bl
call fcn.0040a230
test ebx, ebx
je 0x404b70
lea rcx, [rsp + 0x1a0]
call fcn.00409d40
test eax, eax
je 0x404b70
mov ebx, 1
jmp 0x404b72
xor ebx, ebx
lea rax, str.rt.jar
lea r9, [0x0043bde4]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x1a0]
mov r8, rdi
mov qword [rsp + 0x20], rax
call fcn.0040a230
test ebx, ebx
je 0x404bb2
lea rcx, [rsp + 0x1a0]
call fcn.00409d40
test eax, eax
jne 0x404bc0
lea rcx, str._Extractor__The_existing_JRE__s_is_broken._Instructing_the_wrapper_to_update._n
call fcn.0040a274
xor edi, edi
test rsi, rsi
je 0x404d5b
test rdi, rdi
je 0x404d5b
lea rcx, str._Extractor__Latest_GU_version_exists:__s_n
mov rdx, rsi
call fcn.0040a274
lea rcx, str._Extractor__Existing_JRE_exists:__s_n
mov rdx, rdi
call fcn.0040a274
mov rcx, rsi
call fcn.0040a788
mov rcx, r12
mov ebx, eax
call fcn.00416ea0
test bpl, bpl
je 0x404c17
cmp eax, ebx
jle 0x404c17
lea rcx, str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x404d62
lea rcx, str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.0040a274
test bpl, bpl
je 0x404c86
mov rcx, qword [rsp + 0x98]
call fcn.00415600
test rax, rax
je 0x404c86
lea rcx, [rsp + 0x9a0]
mov rdx, r14
call fcn.0040a4b0
test rax, rax
je 0x404d52
mov rcx, rax
call fcn.0040a788
mov rcx, qword [rsp + 0x98]
mov ebx, eax
call fcn.00416ea0
cmp eax, ebx
jle 0x404c7a
lea rcx, str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x404d62
lea rcx, str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.0040a274
lea rcx, str._Extractor__Running_without_extraction_now_n
call fcn.0040a274
mov rcx, qword [rsp + 0x140]
call fcn.00419c90
cmp byte [rsp + 0x19158], 0
jne 0x404d4a
mov r9, qword [rsp + 0x19140]
mov r8d, dword [rsp + 0x19138]
mov rdx, qword [rsp + 0x120]
lea rax, [rsp + 0x107f0]
lea rcx, [rsp + 0x9a0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x138]
mov byte [rsp + 0x68], 0
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x58], rax
mov al, byte [rsp + 0x84]
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], 0
lea rax, [rsp + 0x30c0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
call fcn.00401cdc
xor ecx, ecx
call fcn.004169d0
int3
lea rcx, str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x404d62
lea rcx, str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.0040a274
test rdi, rdi
lea rcx, str._Extractor__Note:_No_latest_JRE_version_exists_n
je 0x404d7a
lea rcx, str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.0040a274
xor edi, edi
lea rcx, str._Extractor__Note:_No_latest_GU_version_exists_n
cmp rsi, rdi
je 0x404d94
lea rcx, str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.0040a274
cmp bpl, dil
jne 0x404db5
lea rcx, str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.0040a274
mov ecx, 1
call fcn.004169d0
int3
lea rcx, [rsp + 0x9a0]
call fcn.0040a184
lea r8, str.JWrapper
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0xcd40]
mov r9, r12
call fcn.00401b00
lea r8, str.JWrapper
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x57e0]
mov r9, r12
call fcn.00401b68
mov rbp, qword [rsp + 0x98]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x17d50]
mov r9, rbp
mov r8, r14
call fcn.00401b00
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0xf460]
mov r9, rbp
mov r8, r14
call fcn.00401b68
lea rdx, [rsp + 0xcd40]
lea rcx, str._Extractor__GU_folder_is__s_n
call fcn.0040a274
lea rdx, [rsp + 0x57e0]
lea rcx, str._Extractor__GU_temp_is__s_n
call fcn.0040a274
lea rcx, [rsp + 0x57e0]
call fcn.0040a184
cmp eax, edi
je 0x404e8e
lea rcx, str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
call fcn.0040a274
mov ecx, 1
call fcn.004169d0
int3
lea rdx, [rsp + 0x57e0]
lea rcx, [rsp + 0x6b70]
mov byte [rsp + 0x6b70], dil
call fcn.004156c0
lea rdx, str.lzma.exe
lea rcx, [rsp + 0x6b70]
call fcn.0040a1c8
lea rdx, [rsp + 0x6b70]
lea rcx, str._Extractor__LZMA_path_is__s_n
call fcn.0040a274
mov r12, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x140]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x57e0]
lea rcx, [rsp + 0x6b70]
mov ebx, 0xffffffff
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], ebx
call fcn.00402ce8
lea r14d, [rbx + 2]
lea rcx, [rsp + 0x6b70]
mov dl, r14b
call fcn.004016d8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x57e0]
lea rcx, [rsp + 0x6b70]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x80], ebx
mov qword [rsp + 0x20], rax
call fcn.00402ce8
mov rax, qword [rsp + 0x168]
cmp rax, rdi
je 0x405062
lea rdx, [0x0043ec00]
mov rcx, rax
call fcn.00417900
cmp eax, edi
jne 0x405062
lea rcx, str._Extractor__Authorised_to_override_the_splash_image._n
call fcn.0040a274
mov r12, qword [rsp + 0x160]
cmp r12, rdi
je 0x40505a
mov rdi, qword [rsp + 0x180]
test rdi, rdi
je 0x405058
lea rdx, [rsp + 0x57e0]
lea rcx, [rsp + 0x1a0]
mov byte [rsp + 0x1a0], 0
call fcn.004156c0
lea rdx, str.nativesplash.png
lea rcx, [rsp + 0x1a0]
call fcn.0040a1c8
lea r11, [rsp + 0x1a0]
movsx eax, byte [r11]
cmp eax, 0x2f
jne 0x405008
mov byte [r11], 0x5c
add r11, r14
test eax, eax
jne 0x404ffb
lea rdx, [rsp + 0x1a0]
lea rcx, str._Extractor__Overwriting_splash_image_at__s_n
call fcn.0040a274
lea rdx, [0x0043c320]
lea rcx, [rsp + 0x1a0]
call fcn.004171f0
mov r8, rdi
mov rdx, r14
mov r9, rax
mov rcx, r12
mov rbx, rax
call fcn.00418f80
mov rcx, rbx
call fcn.00419c90
mov ebx, 0xffffffff
xor edi, edi
mov r12, qword [rsp + 0x88]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x57e0]
lea rcx, [rsp + 0x6b70]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x80], ebx
mov qword [rsp + 0x20], rax
call fcn.00402ce8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x57e0]
lea rcx, [rsp + 0x6b70]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x80], ebx
mov qword [rsp + 0x20], rax
call fcn.00402ce8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x57e0]
lea rcx, [rsp + 0x6b70]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], ebx
call fcn.00402ce8
lea rcx, str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.0040a274
lea rdx, [rsp + 0xcd40]
lea rcx, str._Extractor__Renaming_GU_folder_to__s_n
call fcn.0040a274
lea rdx, [rsp + 0xcd40]
lea rcx, [rsp + 0x57e0]
call fcn.00401558
lea rcx, str._Extractor__Recreating_GU_location_n
call fcn.0040a274
lea rdx, [rsp + 0xcd40]
lea rcx, [rsp + 0x57e0]
mov byte [rsp + 0x57e0], dil
call fcn.004156c0
lea rdx, [rsp + 0xcd40]
lea rcx, [rsp + 0x6b70]
mov byte [rsp + 0x6b70], dil
call fcn.004156c0
lea rdx, str.lzma.exe
lea rcx, [rsp + 0x6b70]
call fcn.0040a1c8
lea rdx, [rsp + 0x6b70]
lea rcx, str._Extractor__LZMA_path_is__s_n
call fcn.0040a274
lea rdx, [rsp + 0xcd40]
lea rcx, [rsp + 0x7f00]
mov byte [rsp + 0x7f00], dil
call fcn.004156c0
lea rdx, str.cacerts
lea rcx, [rsp + 0x7f00]
call fcn.0040a1c8
lea rdx, [rsp + 0x7f00]
lea rcx, str._Extractor__CACerts_override_path_is__s_n
call fcn.0040a274
lea rdx, [rsp + 0x57e0]
lea rcx, [rsp + 0x107f0]
mov byte [rsp + 0x107f0], dil
call fcn.004156c0
lea rdx, str.verpatch.exe
lea rcx, [rsp + 0x107f0]
call fcn.0040a1c8
lea rdx, [rsp + 0xcd40]
lea rcx, [rsp + 0x12f10]
mov byte [rsp + 0x12f10], dil
call fcn.004156c0
lea rdx, str.nativesplash.png
lea rcx, [rsp + 0x12f10]
call fcn.0040a1c8
lea rdx, [rsp + 0x12f10]
lea rcx, str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.0040a274
lea rcx, str._Extractor__Configuring_splash_n
call fcn.0040a274
lea rcx, [rsp + 0x12f10]
call fcn.0040718c
lea rcx, str._Extractor__Showing_splash_n
call fcn.0040a274
cmp r15b, dil
mov r14b, byte [rsp + 0x19158]
jne 0x4052a4
cmp r14b, dil
jne 0x4052a4
call fcn.00407240
mov ecx, ebx
call fcn.00407344
lea rcx, str._Extractor__Setting_up_a_JRE_n
call fcn.0040a274
mov rbx, qword [rsp + 0x150]
mov rcx, rbx
call fcn.00415600
cmp rax, rdi
jbe 0x405469
lea rcx, str.Extracting_Offline_JRE
call fcn.0040a440
lea rcx, str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.0040a274
lea r8, [rsp + 0x30c0]
lea rcx, [rsp + 0x57e0]
mov rdx, r13
call fcn.004037b8
lea r8, [rsp + 0x30c0]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x4450]
mov r9, rbx
call fcn.00401b68
lea rcx, [rsp + 0x4450]
call fcn.0040a184
lea r8, [rsp + 0x30c0]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x142a0]
mov r9, rbx
call fcn.00401b00
lea rcx, str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.0040a274
lea rdx, [rsp + 0x4450]
lea rcx, [rsp + 0x9290]
mov byte [rsp + 0x9290], dil
call fcn.004156c0
lea rdx, str.JRE.p2
lea rcx, [rsp + 0x9290]
call fcn.0040a1c8
lea rcx, [rsp + 0x4450]
call fcn.00401220
lea rcx, str._Extractor__UP200_path_is__s_n
mov rdx, rax
mov rbx, rax
call fcn.0040a274
lea rcx, str._Extractor__Extracting_JRE_archive..._n
call fcn.0040a274
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x4450]
lea rcx, [rsp + 0x6b70]
mov r9, rsi
mov rdx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x80], 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.00402ce8
lea rdx, [rsp + 0x30c0]
lea rcx, str._Extractor__Extracted_JRE__s_n
call fcn.0040a274
lea rcx, str._Extractor__Regenerating_jsa..._n
call fcn.0040a274
lea rcx, [rsp + 0x4450]
call fcn.004011d0
mov rbx, rax
call fcn.00408324
mov rdx, rbx
mov rcx, rax
mov rdi, rax
call fcn.00408394
lea rdx, str._Xshare:dump
mov rcx, rdi
call fcn.0040835c
xor edx, edx
mov rcx, rdi
call fcn.004083cc
mov rcx, rdi
call fcn.004153b0
lea rcx, str.Extracting_Offline_JRE
call fcn.0040a478
xor edi, edi
jmp 0x405de5
lea rcx, str.Setting_up_online_JRE
call fcn.0040a440
lea rcx, str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
mov byte [rsp + 0xb0], dil
call fcn.0040a274
mov ebx, 0x14
lea rdx, [rsp + 0x150]
mov r8d, 0xa
mov ecx, ebx
call fcn.00416560
lea rcx, str._JRESearch__Checking_for_JRE__d_n
mov edx, ebx
call fcn.0040a274
lea rcx, str.PROGRAMFILES
mov byte [rsp + 0x1d30], dil
call fcn.00419b10
lea rcx, [rsp + 0x1d30]
mov rdx, rax
call fcn.004156c0
cmp byte [rsp + 0x90], dil
lea rcx, [rsp + 0x1d30]
lea rdx, str.Java_JWAutoTest
jne 0x4054f5
lea rdx, str.Java
call fcn.0040a1c8
lea rdx, [0x0043bde0]
lea rcx, [rsp + 0x1d30]
call fcn.0040a1c8
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rcx, [rsp + 0x1d30]
call fcn.00401220
lea rcx, [rsp + 0x1d30]
mov rsi, rax
call fcn.004011d0
mov ecx, 0x1388
mov rbp, rax
call fcn.004153f0
lea rdx, [rsp + 0x1d30]
mov rcx, rax
mov rdi, rax
mov byte [rax], 0
call fcn.004156c0
lea rdx, [0x0043bde8]
mov rcx, rdi
call fcn.0040a1c8
lea rdx, str.java.exe
mov rcx, rdi
call fcn.0040a1c8
lea rcx, str._JRESearch__Looking_at_JRE__s_n
mov rdx, rbp
call fcn.0040a274
mov rcx, rbp
call fcn.00409d40
lea rcx, str._JRESearch__JRE_binary_exists_n
test eax, eax
mov r12d, eax
jne 0x4055ad
lea rcx, str._JRESearch__JRE_binary_does_NOT_exist_n
call fcn.0040a274
mov rcx, rsi
call fcn.00409d40
lea rcx, str._JRESearch__JRE_up200_exists_n
test eax, eax
mov esi, eax
jne 0x4055ce
lea rcx, str._JRESearch__JRE_up200_does_NOT_exist_n
call fcn.0040a274
mov rdx, qword [rsp + 0xa8]
mov rcx, rdi
call fcn.004039a0
lea rcx, str._JRESearch__JRE_version_is_OK_n
test eax, eax
mov edi, eax
jne 0x4055f7
lea rcx, str._JRESearch__JRE_version_is_NOT_OK_n
call fcn.0040a274
test r12d, r12d
je 0x4056d7
test esi, esi
je 0x4056d7
test edi, edi
je 0x4056d7
lea rcx, str._JRESearch__JRE_unpack200_exists__s_n
mov rdx, rbp
call fcn.0040a274
lea rdx, str.JWrapper
lea rcx, [rsp + 0x9a0]
call fcn.0040a4b0
xor edi, edi
cmp rax, rdi
je 0x40597c
mov rcx, qword [rsp + 0x138]
mov r9, qword [rsp + 0x19140]
mov r8d, dword [rsp + 0x19138]
mov rdx, qword [rsp + 0x120]
mov qword [rsp + 0x70], rdi
mov byte [rsp + 0x68], dil
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0xa0]
lea r12, [0x0043c584]
mov qword [rsp + 0x58], r12
mov byte [rsp + 0x50], dil
mov qword [rsp + 0x48], r12
lea esi, [rdi + 1]
mov dword [rsp + 0x40], esi
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x128]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x9a0]
mov qword [rsp + 0x20], rax
call fcn.00401cdc
cmp eax, 0x48
je 0x4058a7
lea rcx, str._JRESearch__JRE_failed_compatibility_test_n
call fcn.0040a274
jmp 0x4056e8
lea rcx, str._JRESearch__JRE_does_not_exist_or_does_not_have_unpack200_n
call fcn.0040a274
xor edi, edi
lea esi, [rdi + 1]
sub ebx, esi
cmp ebx, 5
jge 0x40548e
lea rcx, [rsp + 0xb0]
call fcn.00415600
cmp rax, rdi
jne 0x405d62
lea rcx, str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.0040a274
call fcn.00403760
lea rdx, [rsp + 0x57e0]
lea rcx, [rsp + 0xa620]
mov rbx, rax
mov byte [rsp + 0xa620], dil
call fcn.004156c0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0xa620]
call fcn.0040a1c8
lea rdx, [rsp + 0x30c0]
lea rcx, [rsp + 0xa620]
call fcn.004156c0
lea rdx, str._version.txt
lea rcx, [rsp + 0xa620]
call fcn.004156c0
lea rcx, [rsp + 0x1d30]
mov rdx, r13
mov byte [rsp + 0x1d30], dil
call fcn.004156c0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rdx, [rsp + 0x30c0]
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rdx, str._version.txt
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rdx, str._time
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rcx, [rsp + 0x1d30]
mov rdx, rbx
call fcn.004156c0
mov rcx, rbx
call fcn.004153b0
cmp r15b, dil
jne 0x405807
cmp r14b, dil
jne 0x405807
call fcn.00407240
lea rdx, [rsp + 0x1d30]
lea rcx, str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.0040a274
lea rdx, [rsp + 0xa620]
lea rcx, [rsp + 0x1d30]
call fcn.004077a0
cmp eax, edi
je 0x405d20
mov ecx, 0xffffffff
call fcn.00407344
lea rdx, [rsp + 0xa620]
lea rcx, str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.0040a274
lea rdx, [0x0043d788]
lea rcx, [rsp + 0xa620]
call fcn.004171f0
xor r12d, r12d
cmp rax, r12
mov rdi, rax
jne 0x405888
call fcn.004158a0
lea rcx, str._JREDownload___Unable_to_open_version_file____d__n
mov edx, dword [rax]
call fcn.0040a274
lea rcx, str._JREDownload__Extracting_version:
mov ebp, r12d
call fcn.0040a274
mov rcx, rdi
call fcn.00416eb0
mov rsi, r12
jmp 0x4059cf
lea rcx, str._JRESearch__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.0040a274
lea r8, [rsp + 0x30c0]
lea rcx, [rsp + 0x57e0]
mov rdx, r13
call fcn.004037b8
lea rcx, str._JRESearch__JRE_is_valid__copying..._n
call fcn.0040a274
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30c0]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x4450]
call fcn.00401b68
lea rcx, [rsp + 0x4450]
call fcn.0040a184
lea rdx, [rsp + 0x4450]
lea rcx, [rsp + 0x1d30]
call fcn.004018a0
cmp eax, edi
jne 0x40596b
lea rdx, [rsp + 0x4450]
lea rcx, str._JRESearch__JRE_copied_to__s_OK_n
call fcn.0040a274
lea rdx, str.00000000000
lea rcx, [rsp + 0xb0]
mov byte [rsp + 0xb0], dil
call fcn.004156c0
lea rdx, [rsp + 0xb0]
lea rcx, str._JRESearch__Copied_JRE_version_is__s_n
call fcn.0040a274
jmp 0x4056f3
lea rcx, str._JRESearch__JRE_copy_failed__cannot_pick_up_existing_JRE_n
call fcn.0040a274
jmp 0x4056f3
lea rcx, str._JRESearch___No_latest_App_version_even_after_download__n
call fcn.0040a274
mov ecx, 1
call fcn.004169d0
int3
lea rcx, [0x0043f434]
mov edx, ebx
call fcn.0040a274
cmp ebx, 0xd
je 0x4059ef
cmp ebx, 0xa
je 0x4059ef
cmp ebx, 0x20
je 0x4059ef
cmp rsi, 0x32
mov byte [rsp + rsi + 0xb0], bl
jge 0x4059d8
mov eax, 1
mov rcx, rdi
add ebp, eax
add rsi, rax
call fcn.00416eb0
cmp eax, 0xffffffff
mov ebx, eax
jne 0x405993
jmp 0x4059fb
lea rcx, str._n_JREDownload__Version_invalid__too_long__n
call fcn.0040a274
mov ecx, 1
call fcn.004169d0
int3
lea rcx, str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.0040a274
lea rcx, [0x0043dd70]
call fcn.0040a274
cmp rdi, r12
je 0x405a14
mov rcx, rdi
call fcn.00419c90
movsxd rax, ebp
lea rdx, [rsp + 0xb0]
lea rcx, str._JREDownload__JRE_Version_is__s_n
mov byte [rsp + rax + 0xb0], r12b
call fcn.0040a274
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30c0]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x4450]
call fcn.00401b68
lea rcx, [rsp + 0x4450]
call fcn.0040a184
lea rdx, [rsp + 0x4450]
lea rcx, [rsp + 0x11b80]
mov byte [rsp + 0x11b80], r12b
call fcn.004156c0
lea rdx, str.JREArchive.p2.l2
lea rcx, [rsp + 0x11b80]
call fcn.0040a1c8
lea rcx, [rsp + 0x1d30]
mov rdx, r13
mov byte [rsp + 0x1d30], r12b
call fcn.004156c0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rdx, [rsp + 0x30c0]
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rdx, [0x0043c584]
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
lea rdx, str._archive.p2.l2
lea rcx, [rsp + 0x1d30]
call fcn.004156c0
cmp r15b, r12b
jne 0x405b23
cmp r14b, r12b
jne 0x405b23
call fcn.00407240
lea rcx, str._JREDownload__Downloading_JRE_n
call fcn.0040a274
lea rdx, [rsp + 0x11b80]
lea rcx, [rsp + 0x1d30]
call fcn.004077a0
cmp eax, r12d
je 0x405cdb
mov ecx, 0xffffffff
call fcn.00407344
lea rcx, str._JREDownload__JRE_Downloaded_OK__will_extract_n
call fcn.0040a274
lea rdx, [rsp + 0x4450]
lea rcx, [rsp + 0x9290]
mov byte [rsp + 0x9290], r12b
call fcn.004156c0
lea rdx, str.JREArchive.p2
lea rcx, [rsp + 0x9290]
call fcn.0040a1c8
call fcn.00408324
lea rdx, [rsp + 0x6b70]
mov rcx, rax
mov rbx, rax
call fcn.00408394
lea rdx, [0x0043d188]
mov rcx, rbx
call fcn.0040835c
lea rdx, [rsp + 0x11b80]
mov rcx, rbx
call fcn.0040835c
lea rdx, [rsp + 0x9290]
mov rcx, rbx
call fcn.0040835c
lea rcx, str._JREDownload__Decompressing_JRE_archive_n
call fcn.0040a274
xor edx, edx
mov rcx, rbx
call fcn.004083cc
cmp rax, r12
je 0x405c0d
lea rcx, str._JREDownload__Failed_to_decompress_JRE_archive_n
call fcn.0040a340
mov ecx, 1
call fcn.004169d0
int3
mov rcx, rbx
call fcn.004153b0
lea rcx, [rsp + 0x4450]
call fcn.00401220
lea rdx, [rsp + 0x4450]
lea rcx, str._JREDownload__Extracting_JRE_archive_to__s_n
mov rbx, rax
call fcn.0040a274
mov r12, qword [rsp + 0x88]
lea r8, [rsp + 0x4450]
lea rdx, [rsp + 0x9290]
mov rcx, rbx
mov r9, r12
call fcn.00403294
lea rcx, [rsp + 0x11b80]
call fcn.00417060
lea rcx, str._JREDownload__Done_extracting_JRE_archive_n
call fcn.0040a274
lea rcx, str._JREDownload__Regenerating_jsa..._n
call fcn.0040a274
lea rcx, [rsp + 0x4450]
call fcn.004011d0
mov rbx, rax
call fcn.00408324
mov rdx, rbx
mov rcx, rax
mov rdi, rax
call fcn.00408394
lea rdx, str._Xshare:dump
mov rcx, rdi
call fcn.0040835c
xor edx, edx
mov rcx, rdi
call fcn.004083cc
mov rcx, rdi
call fcn.004153b0
lea rcx, str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.0040a274
xor edi, edi
lea esi, [rdi + 1]
jmp 0x405d6a
cmp r15b, r12b
jne 0x405d09
cmp r14b, r12b
jne 0x405d09
call fcn.004011a0
cmp al, r12b
je 0x405cfd
lea rcx, [0x004491b0]
call fcn.00408804
jmp 0x405d09
lea rcx, [0x00449230]
call fcn.004061d0
lea rcx, str._JREDownload__Failed_to_download_JRE_n
call fcn.0040a340
mov ecx, 1
call fcn.004169d0
int3
cmp r15b, dil
jne 0x405d4e
cmp r14b, dil
jne 0x405d4e
call fcn.004011a0
cmp al, dil
je 0x405d42
lea rcx, [0x004491b0]
call fcn.00408804
jmp 0x405d4e
lea rcx, [0x00449230]
call fcn.004061d0
lea rcx, str._JREDownload__Failed_to_download_JRE_version_file_n
call fcn.0040a340
mov ecx, esi
call fcn.004169d0
int3
mov r12, qword [rsp + 0x88]
lea rcx, [rsp + 0xb0]
call fcn.00415600
cmp rax, rdi
jne 0x405d90
lea rcx, str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
call fcn.0040a340
mov ecx, esi
call fcn.004169d0
int3
lea rdx, [rsp + 0xb0]
lea rcx, str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.0040a274
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x30c0]
lea rdx, [rsp + 0x9a0]
lea rcx, [rsp + 0x142a0]
call fcn.00401b00
lea rcx, str.Setting_up_online_JRE
call fcn.0040a478
mov rsi, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x98]
lea rdx, [rsp + 0x142a0]
lea rcx, [rsp + 0x4450]
call fcn.00401558
lea rdx, [rsp + 0x142a0]
lea rcx, str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.0040a274
lea rcx, str._Extractor__JRE_setup._Overriding_cacerts._n
call fcn.0040a274
lea rcx, [rsp + 0x7f00]
call fcn.00409d40
cmp eax, edi
je 0x405e42
lea rdx, [rsp + 0x142a0]
lea rcx, [rsp + 0x7f00]
call fcn.00403b4c
jmp 0x405e4e
lea rcx, str._Extractor__Override_CACerts_does_not_exist._n
call fcn.0040a274
lea rdx, [rsp + 0xb9b0]
lea rcx, [rsp + 0xe0d0]
mov byte [rsp + 0xe0d0], dil
call fcn.004156c0
lea rdx, str.DetectedProxy
lea rcx, [rsp + 0xe0d0]
call fcn.0040a1c8
lea rcx, str._Extractor__Saving_proxy_configuration_n
call fcn.0040a274
cmp qword [0x0054c268], rdi
je 0x405fb5
lea rcx, str._Proxy__Saving_proxy_settings_now.
call fcn.0040a274
mov rbx, qword [0x0054c268]
lea rcx, [rsp + 0xe0d0]
cmp qword [rbx], rdi
jne 0x405ec0
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x405f29
lea rdx, [0x0043c320]
call fcn.004171f0
test rax, rax
mov rdi, rax
je 0x405f27
cmp qword [rbx], 0
je 0x405f1f
lea rcx, str._Proxy__Saved_proxy_list_n
call fcn.0040a274
mov rcx, qword [rbx]
mov rdx, rdi
call fcn.0041a890
cmp qword [rbx + 8], 0
je 0x405f1f
lea rcx, str._Proxy__Saved_proxy_bypass_list_n
call fcn.0040a274
lea rcx, [0x00440d0c]
mov rdx, rdi
call fcn.0041a890
mov rcx, qword [rbx + 8]
mov rdx, rdi
call fcn.0041a890
mov rcx, rdi
call fcn.00419c90
xor edi, edi
lea rcx, [rsp + 0x142a0]
call fcn.00401220
lea rcx, str._Extractor__UP200_path_is__s_n
mov rdx, rax
mov rbx, rax
call fcn.0040a274
mov rcx, rbp
call fcn.00415600
cmp rax, rdi
jbe 0x406051
lea rcx, str._Extractor__Offline_installer___app_to_extract.
call fcn.0040a274
lea rdx, [rsp + 0x17d50]
lea rcx, str._Extractor__APP_folder_is__s_n
call fcn.0040a274
lea rdx, [rsp + 0xf460]
lea rcx, str._Extractor__APP_temp_is__s_n
call fcn.0040a274
lea rcx, [rsp + 0xf460]
call fcn.0040a184
cmp eax, edi
je 0x405fc6
lea rcx, str.Unable_to_create_App_Temp_folder_n
call fcn.0040a340
mov ecx, 1
call fcn.004169d0
int3
lea rcx, str._Proxy__No_working_proxy_was_found__so_no_proxy_to_be_saved.
call fcn.0040a274
jmp 0x405f29
lea rcx, str._Extractor__Extracting_App..._n
mov rdx, rbx
call fcn.0040a274
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0xf460]
lea rcx, [rsp + 0x6b70]
mov r9, rsi
mov rdx, rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x80], 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.00402ce8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0xf460]
lea rcx, [rsp + 0x6b70]
mov r9, rsi
mov rdx, rbx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], 0xffffffff
call fcn.00402ce8
jmp 0x40605d
lea rcx, str._Extractor__Online_installer___no_app_to_extract_n
call fcn.0040a274
mov rcx, rbp
call fcn.00415600
cmp rax, rdi
jbe 0x406093
lea rdx, [rsp + 0x17d50]
lea rcx, [rsp + 0xf460]
call fcn.00401558
lea rdx, [rsp + 0x17d50]
lea rcx, str._Extractor__Renaming_App_folder_to__s_n
call fcn.0040a274
lea rdx, str.JWrapper
lea rcx, [rsp + 0x9a0]
call fcn.0040a4b0
cmp rax, rdi
mov rbx, rax
jne 0x4060c6
lea rcx, str.No_latest_App_version_even_after_download__n
call fcn.0040a340
mov ecx, 1
call fcn.004169d0
int3
call fcn.004011a0
cmp al, dil
je 0x4060de
lea rcx, [0x004491b0]
call fcn.00408804
jmp 0x4060ea
lea rcx, [0x00449230]
call fcn.004061d0
lea rcx, str._HttpDownloader__Cleaning_up..._n
call fcn.0040a274
call fcn.004011a0
cmp al, dil
je 0x40610c
mov rcx, qword [0x0054c260]
call sub.gdiplus.dll_GdiplusShutdown
lea rcx, str._Extractor__Will_now_run_latest_GU__s_n
mov rdx, rbx
call fcn.0040a274
mov rcx, rsi
call fcn.00419c90
cmp r14b, dil
jne 0x4061c5
mov r9, qword [rsp + 0x19140]
mov r8d, dword [rsp + 0x19138]
mov rdx, qword [rsp + 0x120]
lea rax, [rsp + 0x107f0]
lea rcx, [rsp + 0x9a0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x138]
mov byte [rsp + 0x68], dil
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x58], rax
mov al, byte [rsp + 0x84]
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], edi
lea rax, [rsp + 0x30c0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call fcn.00401cdc
xor ecx, ecx
call fcn.004169d0
int3