Function at 0x41b9c0
Capabilities:
Accept command line arguments
Check if file exists
Encode data using base64
Get common file path
Get file attributes
Identify system language via api
Parse pe header
Query environment variable

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e3ae3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x1304
call fcn.004a5850
mov eax, dword [0x522104]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebx + 8]
xor edi, edi
mov dword [ebp - 0x1234], edi
xorps xmm0, xmm0
mov dword [ebp - 0x1244], eax
xor eax, eax
movups xmmword [ebp - 0xbb0], xmm0
mov dword [ebp - 0x1224], edi
mov dword [ebp - 0x123c], eax
mov dword [ebp - 0xba0], eax
mov dword [ebp - 0xb9c], 7
mov word [ebp - 0xbb0], ax
mov dword [ebp - 4], eax
movups xmmword [ebp - 0xb50], xmm0
mov dword [ebp - 0xb40], eax
mov dword [ebp - 0xb3c], 7
mov word [ebp - 0xb50], ax
movups xmmword [ebp - 0xaf0], xmm0
mov dword [ebp - 0xae0], eax
mov dword [ebp - 0xadc], 7
mov word [ebp - 0xaf0], ax
movups xmmword [ebp - 0xea0], xmm0
mov dword [ebp - 0xe90], eax
mov dword [ebp - 0xe8c], 7
mov word [ebp - 0xea0], ax
movups xmmword [ebp - 0xe58], xmm0
mov dword [ebp - 0xe48], eax
mov dword [ebp - 0xe44], 7
mov word [ebp - 0xe58], ax
movups xmmword [ebp - 0xe70], xmm0
mov dword [ebp - 0xe60], eax
mov dword [ebp - 0xe5c], 7
mov word [ebp - 0xe70], ax
movups xmmword [ebp - 0xc24], xmm0
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc10], 7
mov word [ebp - 0xc24], ax
push 0x34
push eax
lea eax, [ebp - 0xc0c]
push eax
call fcn.004a7c50
xorps xmm0, xmm0
mov byte [ebp - 0xbf4], 0
add esp, 0xc
mov dword [ebp - 0xbe0], edi
movups xmmword [ebp - 0xbf0], xmm0
mov dword [ebp - 0xbdc], edi
push 0xc0
lea eax, [ebp - 0xf60]
push edi
push eax
call fcn.004a7c50
add esp, 0xc
lea ecx, [ebp - 0xf60]
call fcn.004103f0
push 0x74
lea eax, [ebp - 0xdac]
mov dword [ebp - method.ProgressAnimator.virtual_0], 0x503d10
push edi
push eax
call fcn.004a7c50
add esp, 0xc
mov dword [ebp - fcn.0040ef40], vtable.ProgressCallback.0
mov dword [ebp - 0xd8c], edi
mov dword [ebp - 0xd88], edi
mov dword [ebp - 0xd84], edi
xorps xmm0, xmm0
mov dword [ebp - 0xd68], edi
movups xmmword [ebp - 0xd78], xmm0
mov dword [ebp - 0xd64], 7
xor eax, eax
mov word [ebp - 0xd78], ax
movups xmmword [ebp - 0xd60], xmm0
mov dword [ebp - 0xd50], eax
mov dword [ebp - 0xd4c], 7
mov word [ebp - 0xd60], ax
mov byte [ebp - 4], 0xb
push 0x38
mov dword [ebp - 0xd48], eax
mov dword [ebp - 0xd40], eax
mov dword [ebp - 0xd3c], eax
call fcn.004a4ca1
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0xd40], eax
lea eax, [ebp - 0xda8]
mov byte [ebp - 4], 0xc
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ecx
push 1
sub esp, 8
call fcn.00474180
mov ecx, dword [ebp - 0xd88]
add esp, 0x10
cmp dword [ebp - 0xd8c], ecx
mov dword [ebp - 0xd90], eax
cmovne ecx, dword [ebp - 0xd8c]
xor eax, eax
mov dword [ebp - 0xd88], ecx
lea ecx, [ebp - 0xd48]
mov byte [ebp - 0xd44], 0
xchg dword [ecx], eax
lea eax, [ebp - 0x1250]
mov byte [ebp - 0xd7c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1270], 0x64
push eax
lea ecx, [ebp - 0xd40]
movlpd qword [ebp - 0x1268], xmm0
mov dword [ebp - 0x126c], edi
mov byte [ebp - 0x1278], 1
mov dword [ebp - 0x1260], edi
mov dword [ebp - 0x1250], edi
call fcn.0040f9c0
movups xmm0, xmmword [ebp - 0x1278]
lea ecx, [ebp - 0xd40]
mov dword [ebp - 0x122c], 1
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x1268]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0x122c]
push eax
call fcn.0040f9c0
movups xmm0, xmmword [ebp - 0x1278]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x1268]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0xda8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0xda8]
mov dword [ebp - 0xd80], edi
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xorps xmm0, xmm0
mov dword [ebp - 0x1250], 0xffffffff
xor eax, eax
mov dword [ebp - 0xcac], edi
movups xmmword [ebp - 0xcbc], xmm0
mov dword [ebp - 0xca8], 7
mov word [ebp - 0xcbc], ax
mov byte [ebp - 0x1204], al
movq qword [ebp - 0xbbc], xmm0
mov dword [ebp - 0xbb4], eax
mov dword [ebp - 0x1248], eax
mov dword [ebp - 0x1284], eax
mov dword [ebp - 0xbbc], eax
mov dword [ebp - 0xbb8], eax
mov dword [ebp - 0xbb4], eax
lea ecx, [ebp - 0x1200]
call fcn.00420540
push 0x80
lea eax, [ebp - 0xa0]
push edi
push eax
call fcn.004a7c50
xorps xmm0, xmm0
mov dword [ebp - 0xc2c], edi
xor eax, eax
mov dword [ebp - 0xc28], 7
movups xmmword [ebp - 0xc3c], xmm0
add esp, 0xc
mov word [ebp - 0xc3c], ax
movups xmmword [ebp - 0xc88], xmm0
mov dword [ebp - 0xc78], eax
mov dword [ebp - 0xc74], 7
mov word [ebp - 0xc88], ax
movups xmmword [ebp - 0xca4], xmm0
mov dword [ebp - 0xc94], eax
mov dword [ebp - 0xc90], 7
mov word [ebp - 0xca4], ax
push 0x81e
push eax
mov word [ebp - 0xac8], ax
lea eax, [ebp - 0xac6]
push eax
call fcn.004a7c50
or eax, 0xffffffff
mov dword [ebp - 0xcc4], edi
mov dword [ebp - 0x127c], eax
xorps xmm0, xmm0
xor al, al
mov dword [ebp - 0xcc0], 7
mov dword [ebp - 0x124c], eax
add esp, 0xc
mov byte [ebp - 0x1235], al
xor eax, eax
movups xmmword [ebp - 0xcd4], xmm0
mov word [ebp - 0xcd4], ax
mov edi, 1
mov byte [ebp - 4], 0x14
mov ecx, edi
call fcn.0046bd50
sub esp, 8
mov ecx, edi
call fcn.0047c870
add esp, 8
call fcn.0047cac0
xor ecx, ecx
call fcn.0046bf00
call fcn.0047d4e0
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522bd4]
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b8a0
xorps xmm0, xmm0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xb10], edx
mov dword [ebp - 0xb0c], 0xfd
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040bd70
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41becd
push str.Entering_SFX_stub_guarded_code_section.
lea eax, [ebp - 0xb20]
push eax
push 2
call fcn.00410350
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x122c], ecx
test ecx, ecx
je 0x41bf26
or edi, 0xffffffff
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41bf21
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x122c]
call esi
mov eax, edi
mov edi, dword [ebp - 0x122c]
lock xadd dword [edi + 8], eax
jne 0x41bf21
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, edi
call esi
mov edi, 1
push 1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0xc0c]
call fcn.00420cf0
mov ecx, str.silent
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41bf42
sub ecx, edx
sar ecx, 1
push ecx
push str.silent
lea ecx, [ebp - 0xc0c]
call fcn.004168c0
test eax, eax
je 0x41bfac
call fcn.004148b0
sub esp, 8
mov esi, eax
mov ecx, esp
push str.silent
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
push esi
push ecx
mov edx, str.stub_loading
mov ecx, eax
call fcn.00421e20
mov ecx, dword [ebp - 0x1204]
add esp, 8
test al, al
movzx ecx, cl
cmove ecx, edi
mov dword [ebp - 0x1204], ecx
mov ecx, str.AdminUpgrade
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41bfb4
sub ecx, edx
sar ecx, 1
push ecx
push str.AdminUpgrade
lea ecx, [ebp - 0xc0c]
call fcn.004168c0
mov ecx, dword [ebp - 0x1204]
test eax, eax
movzx ecx, cl
cmovne ecx, edi
mov dword [ebp - 0x1254], ecx
mov byte [ebp - 0x127d], cl
mov ecx, 0x503e00
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41bff6
sub ecx, edx
sar ecx, 1
push ecx
push 0x503e00
lea ecx, [ebp - 0xc0c]
call fcn.004168c0
test eax, eax
mov dword [ebp - 0x122c], 0
setne al
xor ecx, ecx
mov byte [ebp - 0x123d], al
call fcn.0048ff80
test al, al
je 0x41c191
lea ecx, [ebp - 0x122c]
call fcn.0041b8e0
test al, al
je 0x41c191
cmp dword [ebp - 0x122c], 0x3000
jae 0x41c191
cmp byte [ebp - 0x1254], 0
jne 0x41c07a
push 0x10
push str.Installation_failed
push str.We_are_sorry_but_the_installer_must_be_run_at_high_integrity_level__n_nTip:_Run_it_under_an_Administrator_account_or_use_a_different_browser_to_download_the_installer.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 0x10
mov dword [ebp - 0xb30], 0x116
mov eax, esp
mov dword [ebp - 0xb2c], 0x19
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea ecx, [ebp - 0x1270]
call fcn.00421e40
lea ecx, [ebp - 0xcd4]
call fcn.0040ab30
lea ecx, [ebp - 0xca4]
call fcn.0040ab30
lea ecx, [ebp - 0xc88]
call fcn.0040ab30
lea ecx, [ebp - 0xc3c]
call fcn.0040ab30
lea ecx, [ebp - 0x1200]
call fcn.00420790
lea ecx, [ebp - 0xbbc]
call fcn.0040c3d0
lea ecx, [ebp - 0xcbc]
call fcn.0040ab30
lea ecx, [ebp - 0xdac]
call fcn.0040eef0
lea ecx, [ebp - 0xf60]
call fcn.004104b0
lea ecx, [ebp - 0xc0c]
call fcn.00420760
lea ecx, [ebp - 0xc24]
call fcn.0040ab30
lea ecx, [ebp - 0xe70]
call fcn.0040ab30
lea ecx, [ebp - 0xe58]
call fcn.0040ab30
lea ecx, [ebp - 0xea0]
call fcn.0040ab30
lea ecx, [ebp - 0xaf0]
call fcn.0040ab30
lea ecx, [ebp - 0xb50]
call fcn.0040ab30
lea ecx, [ebp - 0xbb0]
call fcn.0040ab30
mov eax, 0x7c
jmp 0x420486
call fcn.0048fe10
cmp eax, 5
jne 0x41c1e9
call fcn.004148b0
mov esi, eax
lea ecx, [ebp - 0xb08]
mov eax, dword [ebp - 0x1244]
push eax
call fcn.0040aae0
push esi
mov byte [ebp - 4], 0x16
mov edi, 1
push ecx
mov edx, str._arm64
mov dword [ebp - 0x1224], edi
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1234], edi
call fcn.00421e20
add esp, 8
mov byte [ebp - 0x121d], 1
test al, al
je 0x41c1f0
mov byte [ebp - 0x121d], 0
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x1224]
test al, 1
je 0x41c21b
and eax, 0xfffffffe
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1234], eax
call fcn.0040ab30
cmp byte [ebp - 0x121d], 0
je 0x41c35c
cmp byte [ebp - 0x1254], 0
jne 0x41c245
push 0x10
push str.Installation_failed
push str.We_are_sorry_but_the_Avast_Antivirus_installer_cannot_run_on_arm64_devices._n_nTip:_Check_our_website_if_there_is_a_supported_version.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 0x10
mov dword [ebp - 0xb30], 0x11f
mov eax, esp
mov dword [ebp - 0xb2c], 0x19
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea ecx, [ebp - 0x1270]
call fcn.00421ef0
lea ecx, [ebp - 0xcd4]
call fcn.0040ab30
lea ecx, [ebp - 0xca4]
call fcn.0040ab30
lea ecx, [ebp - 0xc88]
call fcn.0040ab30
lea ecx, [ebp - 0xc3c]
call fcn.0040ab30
lea ecx, [ebp - 0x1200]
call fcn.00420790
lea ecx, [ebp - 0xbbc]
call fcn.0040c3d0
lea ecx, [ebp - 0xcbc]
call fcn.0040ab30
lea ecx, [ebp - 0xdac]
call fcn.0040eef0
lea ecx, [ebp - 0xf60]
call fcn.004104b0
lea ecx, [ebp - 0xc0c]
call fcn.00420760
lea ecx, [ebp - 0xc24]
call fcn.0040ab30
lea ecx, [ebp - 0xe70]
call fcn.0040ab30
lea ecx, [ebp - 0xe58]
call fcn.0040ab30
lea ecx, [ebp - 0xea0]
call fcn.0040ab30
lea ecx, [ebp - 0xaf0]
call fcn.0040ab30
lea ecx, [ebp - 0xb50]
call fcn.0040ab30
lea ecx, [ebp - 0xbb0]
call fcn.0040ab30
mov eax, 0xc1
jmp 0x420486
call fcn.0048ff00
test al, al
je 0x41c36e
push ecx
call fcn.00456fa0
add esp, 4
push 0xc0
lea eax, [ebp - 0x160]
push 0
push eax
call fcn.004a7c50
add esp, 0xc
lea ecx, [ebp - 0x160]
call fcn.004103f0
xor ecx, ecx
mov byte [ebp - 4], 0x17
call fcn.00414950
push eax
lea ecx, [ebp - 0x160]
call fcn.00410550
test eax, eax
jne 0x41c4ef
push 0x34
push eax
lea eax, [ebp - 0xde0]
push eax
call fcn.004a7c50
add esp, 0xc
lea ecx, [ebp - 0xde0]
call fcn.00420500
push 0
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x18
call fcn.0040abd0
push eax
lea ecx, [ebp - 0xde0]
call fcn.00420cf0
sub esp, 8
mov ecx, esp
push 0x502020
call fcn.00413860
lea ecx, [ebp - 0xde0]
call fcn.00416780
test al, al
je 0x41c436
sub esp, 8
mov ecx, esp
push 0x502020
call fcn.00413860
lea ecx, [ebp - 0xde0]
call fcn.00421210
mov ecx, eax
call fcn.0040abd0
push eax
call fcn.004b72d7
add esp, 4
mov dword [ebp - 0x127c], eax
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413860
lea ecx, [ebp - 0xde0]
call fcn.00416780
test al, al
je 0x41c481
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413860
lea ecx, [ebp - 0xde0]
call fcn.00421210
mov ecx, eax
call fcn.0040abd0
push eax
lea ecx, [ebp - 0xcd4]
call fcn.0040a880
sub esp, 8
mov ecx, esp
push 0x502030
call fcn.00413860
lea ecx, [ebp - 0xde0]
call fcn.00416780
test al, al
je 0x41c4e4
sub esp, 8
mov ecx, esp
push 0x502030
call fcn.00413860
lea ecx, [ebp - 0xde0]
call fcn.00421210
mov edx, 0x503e3c
mov ecx, eax
call fcn.00416e40
mov ecx, dword [ebp - 0x124c]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x124c], ecx
mov byte [ebp - 0x1235], cl
lea ecx, [ebp - 0xde0]
call fcn.00420760
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x14
call fcn.004104b0
push 0
lea eax, [ebp - 0x1204]
mov dword [ebp - 0x1204], 0
push eax
push 1
push str.O:BAG:BAD:P_A_CIOI_FA___SY__A_CIOI_FA___BA__A_CIOI_FRFX___BU_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
mov eax, dword [ebp - 0x1204]
lea ecx, [ebp - 0xac8]
mov edx, str.._
mov dword [ebp - 0x1218], 0xc
mov dword [ebp - 0x1214], eax
mov dword [ebp - 0x1210], 0
call fcn.00421fa0
push 0
push 0x23
lea eax, [ebp - 0xac0]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.00452830
mov ecx, eax
call fcn.0040abd0
push 0x500c78
lea ecx, [ebp - 0xb08]
mov esi, eax
call fcn.0040aae0
push esi
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1270]
call fcn.0040a450
add esp, 4
mov ecx, eax
call fcn.0040abd0
mov edx, eax
lea ecx, [ebp - 0xac8]
call fcn.00421fb0
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
xor eax, eax
lea esi, [ebp - 0x1218]
cmp dword [ebp - 0x1204], eax
lea ecx, [ebp - 0xb08]
cmove esi, eax
lea eax, [ebp - 0xac8]
push eax
call fcn.0040aae0
mov edx, esi
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb08]
call fcn.00487ea0
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
push dword [ebp - 0x1204]
call dword [sym.imp.KERNEL32.dll_LocalFree]
call fcn.00490110
test al, al
jne 0x41c627
call fcn.00490180
test al, al
je 0x41c74e
mov edx, str.SOFTWARE_
lea ecx, [ebp - 0xac8]
call fcn.00421fa0
lea ecx, [ebp - 0x2a8]
call fcn.00421fc0
call fcn.00452830
mov ecx, eax
call fcn.0040abd0
mov edx, eax
lea ecx, [ebp - 0xac8]
call fcn.00421fb0
mov edx, 0x502da0
lea ecx, [ebp - 0x2a8]
call fcn.00421fe0
call fcn.00452830
mov ecx, eax
call fcn.0040abd0
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.00421fe0
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0xac8]
call fcn.0048c7a0
test al, al
je 0x41c6cb
cmp byte [ebp - 0x121d], 0
je 0x41c6cb
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0x2a8]
call fcn.0048c7a0
test al, al
je 0x41c6cb
cmp byte [ebp - 0x121d], 0
je 0x41c6cb
lea ecx, [ebp - 0xac8]
call fcn.0048c600
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0x2a8]
call fcn.0048c7a0
test al, al
je 0x41c6f7
cmp byte [ebp - 0x121d], 0
je 0x41c6f7
push ecx
lea edx, [ebp - 0xac8]
call fcn.0048b8d0
jmp 0x41c74b
sub esp, 8
lea edx, [ebp - 0xac8]
call fcn.0048bac0
add esp, 8
test al, al
je 0x41c739
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0xac8]
call fcn.0048c7a0
test al, al
je 0x41c72a
cmp byte [ebp - 0x121d], 0
jne 0x41c74e
push ecx
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0xac8]
jmp 0x41c746
push ecx
lea edx, [ebp - 0xac8]
lea ecx, [ebp - 0x2a8]
call fcn.0048c2b0
add esp, 4
call fcn.0048ff00
test al, al
je 0x41c768
call fcn.00422000
mov esi, eax
mov ecx, esi
call dword [0x4ee33c]
call esi
call fcn.0042cbb0
lea ecx, [ebp - 0xad0]
push ecx
mov ecx, eax
call fcn.0040c570
sub esp, 8
cmp byte [ebp - 0x124c], 0
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
je 0x41c795
push str.LogsClear.log
jmp 0x41c79a
push str.LogsSetup.log
call fcn.00413860
push esi
push edi
lea ecx, [ebp - 0xcbc]
call fcn.00488310
add esp, 0x10
push ecx
push 0x5c
lea ecx, [ebp - 0xcbc]
call fcn.00421420
push eax
push 0
lea eax, [ebp - 0x1270]
push eax
lea ecx, [ebp - 0xcbc]
call fcn.0040e0c0
xor edx, edx
mov byte [ebp - 4], 0x1b
mov ecx, eax
call fcn.00487ea0
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
movzx esi, byte [ebp - 0x123d]
lea ecx, [ebp - 0xcbc]
sub esp, 8
xor esi, 1
add esi, esi
call fcn.0040abd0
mov edx, esi
mov ecx, eax
call fcn.0041a250
call fcn.0041a190
lea ecx, [ebp - 0x1200]
call fcn.0043b8c0
call fcn.0046cae0
mov ecx, esp
push str.language
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
sub esp, 8
mov ecx, esp
test al, al
je 0x41c876
push str.language
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
mov ecx, eax
call fcn.0040abd0
push eax
call fcn.004b72d7
movzx esi, ax
add esp, 4
mov dword [ebp - 0x122c], esi
jmp 0x41c8d3
push str.langid
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
test al, al
je 0x41c8c4
sub esp, 8
mov ecx, esp
push str.langid
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
mov ecx, eax
call fcn.0040abd0
push eax
call fcn.004b72d7
movzx esi, ax
add esp, 4
mov dword [ebp - 0x122c], esi
jmp 0x41c8d3
call fcn.0041b790
movzx eax, word [eax + 0x40]
mov dword [ebp - 0x122c], eax
sub esp, 8
mov ecx, esp
push 0x503e50
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
push eax
lea ecx, [ebp - 0xc3c]
call fcn.0040e8e0
sub esp, 8
mov ecx, esp
push str.ga_clientid
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
test al, al
je 0x41c948
sub esp, 8
mov ecx, esp
push str.ga_clientid
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040ea10
mov edi, dword [ebp - 0x1224]
or edi, 2
jmp 0x41c97b
lea eax, [ebp - 0xbd0]
push eax
call fcn.0048f7a0
add esp, 4
lea edx, [ebp - 0xb78]
lea ecx, [ebp - 0x1270]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb78], xmm0
call fcn.0041a9f0
mov edi, dword [ebp - 0x1224]
or edi, 4
push eax
lea ecx, [ebp - 0xc88]
mov dword [ebp - 0x1234], edi
mov dword [ebp - 0x1224], edi
call fcn.0040e930
mov eax, edi
test al, 4
je 0x41c9b9
and eax, 0xfffffffb
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1234], eax
call fcn.0040ab30
mov eax, dword [ebp - 0x1224]
mov dword [ebp - 4], 0x14
test al, 2
je 0x41c9de
and eax, 0xfffffffd
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1234], eax
call fcn.0040ab30
sub esp, 8
mov ecx, esp
push str.edat_dir
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
test al, al
je 0x41ca2b
sub esp, 8
mov ecx, esp
push str.edat_dir
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040ea10
or dword [ebp - 0x1224], 8
jmp 0x41ca42
push 0x500c84
lea ecx, [ebp - 0x1270]
call fcn.0040aae0
or dword [ebp - 0x1224], 0x10
push eax
lea ecx, [ebp - 0xca4]
call fcn.0040e930
mov eax, dword [ebp - 0x1224]
test al, 0x10
je 0x41ca72
and eax, 0xffffffef
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0x1224], eax
call fcn.0040ab30
mov eax, dword [ebp - 0x1224]
mov dword [ebp - 4], 0x14
test al, 8
je 0x41ca91
and eax, 0xfffffff7
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1224], eax
call fcn.0040ab30
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
test al, al
je 0x41cacb
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
jmp 0x41cad1
lea eax, [ebp - 0xcd4]
push eax
lea ecx, [ebp - 0xcd4]
call fcn.0040e8e0
sub esp, 8
mov ecx, esp
push str.ifeo
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
test al, al
sete byte [ebp - 0x127e]
xor ecx, ecx
call fcn.00414950
sub esp, 0x10
mov dword [ebp - 0x1204], eax
mov eax, esp
mov dword [ebp - 0xb30], 0x19a
mov dword [ebp - 0xb2c], 0x14
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea eax, [ebp - 0x1204]
push eax
lea ecx, [ebp - 0x1270]
call fcn.00422080
add esp, 4
mov ecx, 1
call fcn.0048ff80
test al, al
jne 0x41cd62
mov ecx, dword [ebp - 0x127c]
call fcn.0041aad0
test al, al
je 0x41cd62
cmp byte [ebp - 0x1254], 0
jne 0x41cbab
push 0x10
push str.Unsupported_system
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Please_upgrade_your_OS_at_least_to_Windows_7_SP1.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522bd4]
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b8a0
xorps xmm0, xmm0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xb10], edx
mov dword [ebp - 0xb0c], 0x1a4
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040bd70
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41cc1d
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Please_upgrade_your_OS_at_least_to_Windows_7_SP1.
lea eax, [ebp - 0xb20]
push eax
push 7
call fcn.00410350
mov byte [ebp - 4], 0x14
or edi, 0xffffffff
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1204], ecx
test ecx, ecx
je 0x41cc75
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41cc75
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1204]
call esi
mov ecx, dword [ebp - 0x1204]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41cc75
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1204]
call esi
xor esi, esi
call fcn.0046c8b0
call fcn.0047cbf0
sub esp, 8
xor ecx, ecx
call fcn.0047c870
add esp, 8
xor ecx, ecx
call fcn.0046bd50
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x1250], eax
test eax, eax
je 0x4201fc
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, str.Reboot.txt
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
mov dword [ebp - 0x1228], eax
mov dword [eax], str.Reboot.txt
lea eax, [ecx + 2]
mov dword [ebp - 0x121c], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41cce0
sub ecx, dword [ebp - 0x121c]
mov eax, dword [ebp - 0x1228]
push dword [ebp - 0x1250]
sar ecx, 1
push edx
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xb50]
call fcn.00488310
add esp, 0x10
lea eax, [ebp - 0xb50]
cmp dword [ebp - 0xb3c], 8
cmovae eax, dword [ebp - 0xb50]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41cd3c
mov byte [ebp - 0x1235], 1
test al, 0x10
je 0x41cd43
mov byte [ebp - 0x1235], 0
cmp byte [ebp - 0x123d], 0
lea ecx, [ebp - 0xaf0]
je 0x4201e3
mov dl, 1
call fcn.00489080
jmp 0x4201ee
push str.wintrust.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x41cd95
push str.CryptCATAdminAcquireContext2
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
setne al
test al, al
jne 0x41ce1b
mov ecx, dword [ebp - 0x127c]
call fcn.0041aad0
test al, al
je 0x41ce1b
cmp byte [ebp - 0x1254], 0
jne 0x41cdc1
push 0x10
push str.Unsupported_system
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Windows_7_KB3033929_is_required.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 0x10
mov dword [ebp - 0xb30], 0x1ad
mov eax, esp
mov dword [ebp - 0xb2c], 0x1d
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea ecx, [ebp - 0x1270]
call fcn.00422140
or edi, 0xffffffff
jmp 0x41cc75
lea eax, [ebp - 0x1250]
push eax
sub esp, 8
lea eax, [ebp - 0xc24]
lea edx, [ebp - 0xe70]
lea ecx, [ebp - 0xe58]
push eax
call fcn.0043b670
add esp, 0x10
mov byte [ebp - 0x121d], al
test al, al
je 0x41ce70
cmp dword [ebp - 0x112c], 8
lea ecx, [ebp - 0x1140]
lea eax, [ebp - 0xa0]
cmovae ecx, dword [ebp - 0x1140]
push ecx
push 0x40
push eax
call fcn.004bc698
add esp, 0xc
cmp word [ebp - 0xa0], 0
jne 0x41cf93
mov ecx, 0x503dac
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ce86
sub ecx, edx
sar ecx, 1
push ecx
push 0x503dac
lea ecx, [ebp - 0xc0c]
call fcn.004168c0
test eax, eax
je 0x41cef8
sub esp, 8
mov ecx, esp
push 0x503dac
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
cmp dword [eax + 0x10], 0x24
jne 0x41cef8
sub esp, 8
mov ecx, esp
push 0x503dac
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
mov ecx, eax
call fcn.0040abd0
mov edx, eax
lea ecx, [ebp - 0xa0]
call fcn.004221f0
cmp word [ebp - 0xa0], 0
jne 0x41cf93
call fcn.0048f6a0
mov dword [ebp - 0xb30], eax
mov dword [ebp - 0xb2c], edx
call fcn.0048f6a0
mov dword [ebp - 0xb28], eax
lea ecx, [ebp - 0x1270]
mov eax, dword [ebp - 0xb2a]
and eax, 0xfff
mov dword [ebp - 0xb24], edx
or eax, 0x4000
lea edx, [ebp - 0xb78]
mov word [ebp - 0xb2a], ax
mov al, byte [ebp - 0xb28]
and al, 0x3f
or al, 0x80
mov byte [ebp - 0xb28], al
movups xmm0, xmmword [ebp - 0xb30]
movups xmmword [ebp - 0xb78], xmm0
call fcn.0041a9f0
cmp dword [eax + 0x14], 8
jb 0x41cf76
mov eax, dword [eax]
push eax
lea eax, [ebp - 0xa0]
push 0x40
push eax
call fcn.004bc698
add esp, 0xc
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
cmp byte [ebp - 0x124c], 0
jne 0x41d24d
cmp byte [ebp - 0x121d], 0
jne 0x41d24d
cmp byte [ebp - 0x1050], 0
jne 0x41d24d
lea ecx, [ebp - 0xb68]
call fcn.0040a8b0
mov byte [ebp - 4], 0x1f
call fcn.00452710
push 0x500bd0
mov edx, eax
lea ecx, [ebp - 0x1270]
call fcn.0040a3e0
add esp, 4
mov ecx, eax
call fcn.0040abd0
mov ecx, eax
call fcn.004156e0
lea ecx, [ebp - 0x1270]
mov byte [ebp - 0x122d], al
call fcn.0040ab30
call fcn.00452710
cmp byte [ebp - 0x122d], 0
lea ecx, [ebp - 0x1270]
mov edx, eax
je 0x41d041
push 0x500bd0
call fcn.0040a3e0
add esp, 4
lea ecx, [ebp - 0xb68]
push eax
call fcn.0040e930
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
jmp 0x41d0d1
push str.FsBlk
call fcn.0040a3e0
add esp, 4
mov ecx, eax
call fcn.0040abd0
mov ecx, eax
call fcn.004156e0
lea ecx, [ebp - 0x1270]
mov byte [ebp - 0x122d], al
call fcn.0040ab30
cmp byte [ebp - 0x122d], 0
je 0x41d0a9
call fcn.00452710
push str.FsBlk
mov edx, eax
lea ecx, [ebp - 0x1270]
call fcn.0040a3e0
add esp, 4
lea ecx, [ebp - 0xb68]
push eax
call fcn.0040e930
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
jmp 0x41d0d1
call fcn.004534b0
mov ecx, eax
call fcn.0040abd0
mov ecx, eax
call fcn.004156e0
test al, al
je 0x41d0d1
call fcn.004534b0
push eax
lea ecx, [ebp - 0xb68]
call fcn.0040e8e0
cmp dword [ebp - 0xb58], 0
je 0x41d23e
call fcn.004533d0
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040ea10
cmp byte [ebp - 0x1254], 0
mov eax, 0xa003
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x123c], eax
jne 0x41d191
call fcn.00452560
cmp eax, 2
mov ecx, str.avastClear.exe
mov edi, str.avgClear.exe
cmovne edi, ecx
lea ecx, [ebp - 0xb68]
call fcn.0040abd0
lea ecx, [ebp - 0xb08]
mov esi, eax
call fcn.0040abd0
push edi
push esi
push eax
push str.The_installer_has_detected_corrupted__s_installation_on_this_computer__service__s_is_running___thus_this_installer_cannot_continue._Use_the__s_utility_to_fix_the_problem_or_contact_our_support_team.
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004147b0
add esp, 0x18
lea ecx, [ebp - 0xb08]
call fcn.0040abd0
push eax
push str.Corrupted__s_detected.
lea eax, [ebp - 0x2a0]
push 0x100
push eax
call fcn.004147b0
add esp, 0x10
lea eax, [ebp - 0x2a0]
push 0x10
push eax
lea eax, [ebp - 0xac8]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xb68]
call fcn.0040abd0
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1250], eax
call fcn.0040abd0
sub esp, 0x10
mov dword [ebp - 0x1244], eax
mov eax, esp
mov dword [ebp - 0xb30], 0x1d6
mov dword [ebp - 0xb2c], 0x21
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea eax, [ebp - 0x1250]
push eax
lea eax, [ebp - 0x1244]
push eax
lea ecx, [ebp - 0x1270]
call fcn.00422200
add esp, 8
lea ecx, [ebp - 0xb08]
call fcn.0040ab30
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
mov esi, dword [ebp - 0x123c]
or edi, 0xffffffff
jmp 0x41cc77
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
push 0x529d78
lea ecx, [ebp - 0xf60]
call fcn.00410550
mov esi, eax
mov dword [ebp - 0x123c], esi
mov dword [ebp - 0x1204], esi
test esi, esi
je 0x41d322
cmp byte [ebp - 0x1254], 0
jne 0x41d2b4
xor ecx, ecx
call fcn.00414950
push esi
push eax
push str.The_installer_cannot_open_the_SFX_archive__s.__code_0x_x__r_n_r_nIts_probably_caused_by_corrupted_installer_thus_please_try_to_download_it_again.
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004147b0
add esp, 0x14
lea eax, [ebp - 0xac8]
push 0x10
push str.Installation_failed
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522bd4]
mov dword [ebp - 0x1250], 0x529d78
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b8a0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xb20]
lea eax, [ebp - 0x1204]
mov dword [ebp - 0xb10], edx
push eax
lea eax, [ebp - 0x1250]
mov dword [ebp - 0xb0c], 0x1e4
push eax
mov edx, str.Cannot_open_the_SFX_archive__s__code_0x_x_
call fcn.00422220
add esp, 8
or edi, 0xffffffff
jmp 0x41cc77
lea ecx, [ebp - 0x1270]
call fcn.00414a10
mov esi, eax
lea eax, [ebp - 0xaf0]
cmp eax, esi
je 0x41d36a
mov ecx, eax
call fcn.0040ab30
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xaf0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xae0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
mov edx, str._TMPPATH_
lea ecx, [ebp - 0xf60]
cmovae eax, dword [ebp - 0xaf0]
push eax
call fcn.00415330
add esp, 4
lea eax, [ebp - 0xf60]
cmp dword [ebp - 0xf4c], 8
lea ecx, [ebp - 0xc0c]
cmovae eax, dword [ebp - 0xf60]
push 0
push eax
call fcn.00420cf0
mov esi, dword [ebp - 0xc2c]
test esi, esi
jne 0x41d413
sub esp, 8
mov ecx, esp
push 0x503e50
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
test al, al
je 0x41d413
sub esp, 8
mov ecx, esp
push 0x503e50
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
push eax
lea ecx, [ebp - 0xc3c]
call fcn.0040e8e0
mov esi, dword [ebp - 0xc2c]
cmp dword [ebp - 0xcc4], 0
je 0x41d447
lea eax, [ebp - 0xcd4]
push eax
sub esp, 0xc
mov ecx, esp
push str.sub_edition
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
add esp, 4
mov ecx, eax
call fcn.0040e8e0
test esi, esi
jne 0x41d49a
call fcn.004148b0
xor ecx, ecx
mov esi, eax
call fcn.00414950
push eax
lea ecx, [ebp - 0x1270]
call fcn.0040aae0
mov byte [ebp - 4], 0x21
mov edx, str._x64.exe
mov edi, dword [ebp - 0x1224]
push ecx
or edi, 0x20
mov ecx, eax
push esi
mov dword [ebp - 0x1224], edi
mov dword [ebp - 0x1234], edi
call fcn.004222e0
add esp, 8
mov byte [ebp - 0x122d], 1
test al, al
je 0x41d4a1
mov byte [ebp - 0x122d], 0
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x1224]
test al, 0x20
je 0x41d4c6
and eax, 0xffffffdf
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0x1224], eax
call fcn.0040ab30
cmp byte [ebp - 0x122d], 0
je 0x41d6e2
xorps xmm0, xmm0
mov dword [ebp - 0x1210], 0
push 0x500c78
lea ecx, [ebp - 0x129c]
movq qword [ebp - 0x1218], xmm0
call fcn.0040aae0
xor ecx, ecx
mov byte [ebp - 4], 0x22
call fcn.00414950
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040aae0
sub esp, 8
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x129c]
lea edx, [ebp - 0xb08]
lea ecx, [ebp - 0x1218]
push 1
push eax
call fcn.0040d240
add esp, 0x10
lea ecx, [ebp - 0xb08]
call fcn.0040ab30
lea ecx, [ebp - 0x129c]
mov byte [ebp - 4], 0x26
call fcn.0040ab30
lea ecx, [ebp - 0x1218]
call fcn.0040bf80
cmp eax, 2
jb 0x41d6d3
mov eax, dword [ebp - 0x1214]
lea ecx, [ebp - 0xb20]
add eax, 0xffffffe8
push eax
call fcn.0040ea10
sub esp, 8
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb20]
call fcn.00421470
mov esi, eax
cmp esi, 0xffffffff
je 0x41d6c8
push esi
push 0x5034e0
lea ecx, [ebp - 0xb20]
call fcn.0040c4f0
cmp eax, 0xffffffff
jne 0x41d5c3
push esi
push 0x502774
lea ecx, [ebp - 0xb20]
call fcn.0040c4f0
cmp eax, 0xffffffff
je 0x41d6c8
sub eax, esi
lea ecx, [ebp - 0xb20]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0xb98]
push eax
call fcn.0040e0c0
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0xb88], 3
jne 0x41d6bd
push 1
lea ecx, [ebp - 0xb98]
call fcn.0040e910
cmp word [eax], 0x30
jb 0x41d6bd
push 1
lea ecx, [ebp - 0xb98]
call fcn.0040e910
cmp word [eax], 0x39
ja 0x41d6bd
call fcn.00452560
cmp eax, 2
lea ecx, [ebp - 0xb08]
lea eax, [ebp - 0xb98]
push eax
jne 0x41d646
mov edx, str.mmm_bav_ppc_999_
call fcn.00422330
add esp, 4
mov byte [ebp - 4], 0x29
jmp 0x41d657
mov edx, str.mmm_ava_ppc_999_
call fcn.00422330
add esp, 4
mov byte [ebp - 4], 0x2a
push 0x5034e4
mov edx, eax
lea ecx, [ebp - 0x1270]
call fcn.0040a450
add esp, 4
lea ecx, [ebp - 0xc3c]
push eax
call fcn.0040e930
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x28
call fcn.0040ab30
lea eax, [ebp - 0xc3c]
push eax
sub esp, 0xc
mov ecx, esp
push 0x503e50
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
add esp, 4
mov ecx, eax
call fcn.0040e8e0
lea ecx, [ebp - 0xb98]
call fcn.0040ab30
lea ecx, [ebp - 0xb20]
call fcn.0040ab30
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x14
call fcn.0040c7b0
lea ecx, [ebp - 0x1204]
mov dword [ebp - 0x1204], 0
call fcn.0047ebf0
xorps xmm0, xmm0
mov dword [ebp - 0xcdc], 0
xor eax, eax
mov dword [ebp - 0xcd8], 7
movups xmmword [ebp - 0xcec], xmm0
mov word [ebp - 0xcec], ax
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x1204], 2
jl 0x41d740
push str.Loading
lea ecx, [ebp - 0xcec]
call fcn.0040a880
jmp 0x41d7ce
cmp byte [ebp - 0x124c], 0
je 0x41d769
push str._Clear
push ecx
call fcn.004533d0
add esp, 4
lea ecx, [ebp - 0x1270]
mov edx, eax
call fcn.0040a3e0
add esp, 4
jmp 0x41d7b7
mov esi, dword [ebp - 0x127c]
mov ecx, esi
call fcn.0041aad0
test al, al
je 0x41d79c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x409
cmp ax, cx
jne 0x41d79c
push str.Setting_up_Avast_One_installation...
lea ecx, [ebp - 0xcec]
call fcn.0040a880
jmp 0x41d7ce
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov edx, esi
push eax
push ecx
lea ecx, [ebp - 0x1270]
call fcn.0041ab40
add esp, 8
push eax
lea ecx, [ebp - 0xcec]
call fcn.0040e930
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
mov ecx, dword [ebp - 0x127c]
cmp ecx, 0xffffffff
jne 0x41d7fd
mov ecx, dword [ebp - 0x107c]
cmp ecx, 0xffffffff
jne 0x41d7fd
call fcn.00452560
sub eax, 2
neg eax
sbb eax, eax
add eax, 0x3ea
mov dword [ebp - 0x1204], eax
jmp 0x41d831
cmp ecx, 0x13
jne 0x41d809
mov esi, 0x3eb
jmp 0x41d837
call fcn.0041aad0
test al, al
je 0x41d819
mov esi, 0x3ec
jmp 0x41d837
call fcn.0041ab20
xor ecx, ecx
test al, al
setne cl
add ecx, 0x3e9
mov dword [ebp - 0x1204], ecx
mov esi, dword [ebp - 0x1204]
push 0x58
lea eax, [ebp - 0x1018]
push 0
push eax
call fcn.004a7c50
add esp, 0xc
lea eax, [ebp - 0xcec]
push eax
push esi
push ecx
lea ecx, [ebp - 0x1018]
call fcn.00418970
lea eax, [ebp - 0xc8c]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0xdac]
call fcn.0040ef40
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0xdac]
call fcn.0040ef40
cmp byte [ebp - 0x1254], 0
jne 0x41d89a
lea ecx, [ebp - 0x1018]
call fcn.004192a0
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
xorps xmm0, xmm0
mov dword [ebp - 0xb88], 0
cmovae edx, dword [ebp - 0xaf0]
mov ecx, edx
mov dword [ebp - 0xb84], 0
movups xmmword [ebp - 0xb98], xmm0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d8d1
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xb98]
call fcn.0040aa50
mov byte [ebp - 4], 0x2d
mov eax, 0x490
mov esi, dword [ebp - 0xed0]
mov edi, dword [ebp - 0xecc]
mov dword [ebp - 0x1204], eax
cmp esi, edi
je 0x41d9ba
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x41d91a
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
push 0xb
push str.servers.def
push 0
call fcn.0040d370
add esp, 0xc
test eax, eax
je 0x41d93e
add esi, 0x40
cmp esi, edi
jne 0x41d910
jmp 0x41d9ba
cmp dword [ebp - 0xb84], 8
lea edx, [ebp - 0xb98]
xorps xmm0, xmm0
mov dword [ebp - 0xb10], 0
cmovae edx, dword [ebp - 0xb98]
mov ecx, edx
mov dword [ebp - 0xb0c], 0
movups xmmword [ebp - 0xb20], xmm0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d975
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xb20]
call fcn.0040aa50
push ecx
push esi
lea eax, [ebp - 0xb20]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xf60]
call fcn.00411860
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0x1204], eax
call fcn.0040ab30
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x2c
call fcn.0040ab30
mov eax, dword [ebp - 0x1204]
test eax, eax
je 0x41da60
mov edx, eax
lea ecx, [ebp - 0xb08]
call fcn.0042bd70
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.0040abd0
sub esp, 0x10
mov dword [ebp - 0x1204], eax
mov eax, esp
mov dword [ebp - 0xb30], 0x259
mov dword [ebp - 0xb2c], 0x1d
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea eax, [ebp - 0x1204]
push eax
lea ecx, [ebp - 0x1270]
call fcn.00422390
add esp, 4
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xb08]
call fcn.0040ab30
cmp byte [ebp - 0x124c], 0
jne 0x41e497
call fcn.0041b620
test al, al
je 0x41dadd
sub esp, 8
mov ecx, esp
push 0x502030
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00416780
test al, al
je 0x41dadd
sub esp, 8
mov ecx, esp
push 0x502030
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
cmp dword [eax + 0x10], 0
jne 0x41dadd
push 0x503e48
sub esp, 0xc
mov ecx, esp
push 0x502030
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
add esp, 4
mov ecx, eax
call fcn.0040a880
cmp dword [ebp - 0xc94], 0
je 0x41e001
lea ecx, [ebp - 0xca4]
call fcn.00487ac0
test al, al
je 0x41df94
push str..edat
lea ecx, [ebp - 0xb08]
call fcn.0040aae0
push 1
lea eax, [ebp - 0xb08]
mov byte [ebp - 4], 0x30
push 0
push eax
lea edx, [ebp - 0xca4]
lea ecx, [ebp - 0xb2c]
call fcn.00489680
add esp, 0xc
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x32
call fcn.0040ab30
mov esi, dword [ebp - 0xb2c]
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0x1204], esi
mov dword [ebp - 0x1228], eax
cmp esi, eax
je 0x41df83
nop
lea eax, [ebp - 0xad0]
mov ecx, esi
push eax
call fcn.0040c570
lea ecx, [ebp - 0xb68]
push dword [eax + 4]
push dword [eax]
call fcn.00487b60
add esp, 8
lea eax, [ebp - 0xad8]
mov byte [ebp - 4], 0x33
push eax
mov ecx, esi
call fcn.0040c570
lea ecx, [ebp - 0xc54]
push dword [eax + 4]
push dword [eax]
call fcn.00487ae0
add esp, 8
mov byte [ebp - 4], 0x34
call fcn.004148b0
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12e0]
push eax
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.elic
call fcn.00413860
mov edx, dword [ebp - 0x1234]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414930
add esp, 0x10
test eax, eax
jne 0x41dbfc
push str.license.avastlic
jmp 0x41dd8e
call fcn.004148b0
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12e8]
push eax
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ebcf
call fcn.00413860
mov edx, dword [ebp - 0x1234]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414930
add esp, 0x10
test eax, eax
jne 0x41dc4e
push str.bcc.cfg.tmp
jmp 0x41dd8e
call fcn.004148b0
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12f0]
push eax
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ebpk
call fcn.00413860
mov edx, dword [ebp - 0x1234]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414930
add esp, 0x10
test eax, eax
jne 0x41dca0
push str.bcpub.key.tmp
jmp 0x41dd8e
call fcn.004148b0
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12f8]
push eax
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.erid
call fcn.00413860
mov edx, dword [ebp - 0x1234]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414930
add esp, 0x10
test eax, eax
jne 0x41dcf2
push str.rid.bin
jmp 0x41dd8e
call fcn.004148b0
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12d8]
push eax
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ecoo
call fcn.00413860
mov edx, dword [ebp - 0x1234]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414930
add esp, 0x10
test eax, eax
jne 0x41dd41
push str.cookie.bin
jmp 0x41dd8e
call fcn.004148b0
mov dword [ebp - 0x1234], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x1300]
push eax
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.eapt
call fcn.00413860
mov edx, dword [ebp - 0x1234]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414930
add esp, 0x10
test eax, eax
jne 0x41dd99
push str.pairing.bin
lea ecx, [ebp - 0xc54]
call fcn.0040a880
lea ecx, [ebp - 0xb20]
call fcn.0040a8b0
lea eax, [ebp - 0x1308]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0xc54]
call fcn.0040c570
lea ecx, [ebp - 0xaf0]
mov edi, dword [eax]
mov esi, dword [eax + 4]
lea eax, [ebp - 0x1214]
push eax
call fcn.0040c570
push esi
push edi
lea ecx, [ebp - 0xb20]
push dword [eax + 4]
push dword [eax]
call fcn.00488310
mov esi, dword [ebp - 0x1204]
lea edx, [ebp - 0xb20]
add esp, 8
mov ecx, esi
call fcn.00488f30
add esp, 8
test al, al
je 0x41de8e
lea ecx, [ebp - 0xb20]
call fcn.0040abd0
lea ecx, [ebp - 0xb68]
mov dword [ebp - 0x1204], eax
call fcn.0040abd0
sub esp, 0x10
mov dword [ebp - 0x1234], eax
mov eax, esp
mov dword [ebp - 0xbd0], 0x27e
mov dword [ebp - 0xbcc], 0x2c
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xbc8], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xbc4], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xbd0]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea eax, [ebp - 0x1204]
push eax
lea eax, [ebp - 0x1234]
push eax
lea ecx, [ebp - 0x1270]
call fcn.00422450
add esp, 8
jmp 0x41df49
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x129c]
call fcn.0042bd70
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.0040abd0
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0x1204], eax
call fcn.0040abd0
lea ecx, [ebp - 0xb68]
mov dword [ebp - 0x1234], eax
call fcn.0040abd0
sub esp, 0x10
mov dword [ebp - 0x123c], eax
mov eax, esp
mov dword [ebp - 0xb78], 0x280
mov dword [ebp - 0xb74], 0x2d
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb70], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb6c], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb78]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea eax, [ebp - 0x1204]
push eax
lea eax, [ebp - 0x1234]
push eax
lea eax, [ebp - 0x123c]
push eax
lea ecx, [ebp - 0x1270]
call fcn.00422470
add esp, 0xc
lea ecx, [ebp - 0x129c]
call fcn.0040ab30
lea ecx, [ebp - 0xb20]
call fcn.0040ab30
lea ecx, [ebp - 0xc54]
call fcn.0040ab30
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x32
call fcn.0040ab30
add esi, 0x18
mov dword [ebp - 0x1204], esi
cmp esi, dword [ebp - 0x1228]
jne 0x41db60
lea ecx, [ebp - 0xb2c]
mov byte [ebp - 4], 0x2c
call fcn.0040c7b0
jmp 0x41e001
lea ecx, [ebp - 0xca4]
call fcn.0040abd0
sub esp, 0x10
mov dword [ebp - 0x1228], eax
mov eax, esp
mov dword [ebp - 0xb78], 0x285
mov dword [ebp - 0xb74], 0x27
lea ecx, [ebp - 0x1270]
mov dword [ebp - 0xb70], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb6c], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb78]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040bb60
lea eax, [ebp - 0x1228]
push eax
lea ecx, [ebp - 0x1270]
call fcn.00422490
add esp, 4
cmp dword [ebp - 0xadc], 8
lea edi, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xec4]
cmovae edi, dword [ebp - 0xaf0]
test ecx, ecx
je 0x41e0ae
mov edx, dword [ebp - 0xec0]
test edx, edx
je 0x41e0ae
mov eax, dword [ebp - 0xf48]
sub ecx, edx
push 0
push ecx
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x4ee33c]
lea ecx, [ebp - 0xf48]
call esi
test eax, eax
js 0x41e0ae
mov eax, dword [ebp - 0xf48]
push dword [ebp - 0xec0]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x4ee33c]
lea ecx, [ebp - 0xf48]
call esi
mov dword [ebp - 0x1228], eax
test eax, eax
je 0x41e0ae
push edi
push dword [ebp - 0xec0]
push eax
call fcn.00412500
mov ecx, dword [ebp - 0xf48]
mov edi, eax
push dword [ebp - 0x1228]
mov esi, dword [ecx + 0x10]
mov ecx, esi
call dword [0x4ee33c]
lea ecx, [ebp - 0xf48]
call esi
test edi, edi
je 0x41e0c5
lea ecx, [ebp - 0xaf0]
call fcn.0040abd0
push eax
lea ecx, [ebp - 0xf60]
call fcn.00411ef0
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.cookie.bin
mov dword [eax + 4], 0xa
call fcn.00488310
add esp, 0x10
cmp dword [ebp - 0xc2c], 0
jne 0x41e1df
lea ecx, [ebp - 0xb50]
call fcn.00487aa0
test al, al
je 0x41e1df
xorps xmm0, xmm0
mov dword [ebp - 0x1210], 0
lea edx, [ebp - 0xb50]
movq qword [ebp - 0x1218], xmm0
lea ecx, [ebp - 0x1218]
call fcn.004224b0
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x1214]
mov eax, dword [ebp - 0x1218]
sub ecx, eax
push ecx
push eax
lea ecx, [ebp - 0xb08]
call fcn.004147d0
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x1270]
call fcn.00422580
add esp, 4
lea ecx, [ebp - 0xc3c]
push eax
call fcn.0040e930
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x37
call fcn.0040ecc0
lea eax, [ebp - 0xc3c]
push eax
sub esp, 0xc
mov ecx, esp
push 0x503e50
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
add esp, 4
mov ecx, eax
call fcn.0040e8e0
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x2c
call fcn.0040c3d0
sub esp, 0x18
lea eax, [ebp - 0xc3c]
mov ecx, esp
push eax
call fcn.0040ea10
lea eax, [ebp - 0xc0c]
push 0x529d78
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x1270]
call fcn.00415760
add esp, 0x20
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
xor edi, edi
nop dword [eax]
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [edi + 0x522bb4]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, dword [ebp - 0xae0]
mov esi, esp
mov dword [ebp - 0x1204], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x1228], eax
mov dword [esi], ecx
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e256
sub ecx, dword [ebp - 0x1228]
push dword [ebp - 0x1204]
sar ecx, 1
mov dword [esi + 4], ecx
lea ecx, [ebp - 0xb50]
push edx
call fcn.00488310
add esp, 0x10
lea eax, [ebp - 0xb50]
cmp dword [ebp - 0xb3c], 8
cmovae eax, dword [ebp - 0xb50]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41e35b
test al, 0x10
jne 0x41e35b
mov ecx, dword [edi + 0x522bb8]
mov esi, ecx
mov dword [ebp - 0x1228], ecx
lea edx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x41e2c0
sub esi, edx
sar esi, 1
push esi
push ecx
lea ecx, [ebp - 0xc0c]
call fcn.004168c0
mov ecx, eax
test ecx, ecx
jne 0x41e337
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov dword [ebp - 0x121c], esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x39
mov ecx, esp
push esi
push dword [ebp - 0x1228]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040aa50
lea ecx, [ebp - 0xc0c]
mov byte [ebp - 4], 0x2c
call fcn.00421490
mov ecx, eax
lea eax, [ebp - 0xb50]
cmp ecx, eax
je 0x41e35b
cmp dword [ebp - 0xb3c], 8
push dword [ebp - 0xb40]
cmovae eax, dword [ebp - 0xb50]
push eax
call fcn.0040a770
add edi, 8
cmp edi, 0x18
jb 0x41e220
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.aswOfferTool.exe
mov dword [eax + 4], 0x11
call fcn.00488310
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
cmovae edx, dword [ebp - 0xb50]
add esp, 0xc
push 0x7d1
call fcn.0040be50
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
mov eax, esp
cmovae edx, dword [ebp - 0xaf0]
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.GuiCust.dll
mov dword [eax + 4], 0xb
call fcn.00488310
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
cmovae edx, dword [ebp - 0xb50]
add esp, 0xc
push 0x7d0
call fcn.0040be50
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov edi, dword [ebp - 0xae0]
mov ecx, 0x5018f4
cmovae edx, dword [ebp - 0xaf0]
mov esi, esp
lea eax, [ecx + 2]
mov dword [esi], 0x5018f4
mov dword [ebp - 0x1228], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e450
sub ecx, dword [ebp - 0x1228]
sar ecx, 1
mov dword [esi + 4], ecx
lea ecx, [ebp - 0xb50]
push edi
push edx
call fcn.00488310
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
cmovae edx, dword [ebp - 0xb50]
add esp, 0xc
push 0x7d2
call fcn.0040be50
add esp, 8
push 0x5c
lea eax, [ebp - 0xe40]
push 0
push eax
call fcn.004a7c50
sub esp, 0xc
mov eax, 0x7ffffffe
mov ecx, esp
mov dword [ebp - 0x121c], ecx
mov edx, dword [ebp - 0xae0]
sub eax, edx
cmp eax, 0xc
jb 0x4204a6
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
push 0xc
cmovae eax, dword [ebp - 0xaf0]
push str._servers.def
push edx
push eax
push ecx
push dword [ebp - 0x121c]
call fcn.0040a4c0
mov eax, dword [ebp - 0x1224]
lea ecx, [ebp - 0xe40]
or eax, 0x200
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1234], eax
call fcn.0041a310
sub esp, 0x18
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0xc3c]
mov dword [ebp - 0x121c], esp
mov ecx, esp
push eax
call fcn.0040ea10
sub esp, 0x18
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0xc88]
mov dword [ebp - 0x1228], esp
mov ecx, esp
push eax
call fcn.0040ea10
sub esp, 0x18
mov byte [ebp - 4], 0x3c
mov edx, esp
lea ecx, [ebp - 0xa0]
xorps xmm0, xmm0
lea esi, [ecx + 2]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e570
sub ecx, esi
lea eax, [ebp - 0xa0]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0040aa50
lea eax, [ebp - 0xc0c]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0xe40]
call fcn.00425930
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 4
movups xmmword [ecx], xmm0
push str.stub
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040aa50
lea ecx, [ebp - 0xe40]
call fcn.00425d20
mov ecx, 0x529d78
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
mov dword [ebp - 0xb70], 0
movups xmmword [ebp - 0xb80], xmm0
mov dword [ebp - 0xb6c], 0
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e600
sub ecx, edx
sar ecx, 1
push ecx
push 0x529d78
lea ecx, [ebp - 0xb80]
call fcn.0040aa50
lea edx, [ebp - 0xb80]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xad8]
call fcn.00489190
xorps xmm0, xmm0
mov dword [ebp - 0xd24], 0
movq qword [ebp - 0xd2c], xmm0
mov byte [ebp - 0xd08], 0
mov al, byte [ebp - 0x123d]
lea esi, [ebp - 0xa0]
mov ecx, esi
mov byte [ebp - 4], 0x3f
mov byte [ebp - 0xd38], al
mov eax, dword [ebp - 0x127c]
mov dword [ebp - 0xd2c], eax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e680
mov eax, dword [ebp - 0x122c]
sub ecx, edx
mov dx, word [ebp - 0xad6]
mov di, word [ebp - 0xad4]
movzx eax, ax
mov dword [ebp - 0xd24], eax
mov ax, word [ebp - 0xad8]
sar ecx, 1
mov dword [ebp - 0xd34], esi
mov dword [ebp - 0xd30], ecx
test ax, ax
jne 0x41e6d7
test dx, dx
jne 0x41e6d7
test di, di
jne 0x41e6d7
cmp word [ebp - 0xad2], di
je 0x41e6f4
movzx eax, al
shl ax, 8
movzx ecx, ax
movzx eax, dl
or ecx, eax
movzx eax, di
shl ecx, 0x10
or ecx, eax
mov dword [ebp - 0xd28], ecx
lea eax, [ebp - 0xc3c]
push eax
lea ecx, [ebp - 0xd20]
call fcn.0040ea10
xorps xmm0, xmm0
mov byte [ebp - 0xd08], 1
push 0
lea ecx, [ebp - 0xb68]
movq qword [ebp - 0xb58], xmm0
movups xmmword [ebp - 0xb68], xmm0
call fcn.004974e0
push 7
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x40
call fcn.004974e0
push eax
lea ecx, [ebp - 0xb68]
call fcn.00497960
lea ecx, [ebp - 0x1270]
call fcn.004978e0
lea eax, [ebp - 0xc88]
mov byte [ebp - 4], 0x41
push eax
push str.session_id
lea ecx, [ebp - 0xb68]
call fcn.0041afd0
cmp dword [ebp - 0xb6c], 8
lea eax, [ebp - 0xb80]
mov esi, dword [ebp - 0xb70]
mov edx, esi
cmovae eax, dword [ebp - 0xb80]
push 2
push 0x5081f0
push ecx
mov ecx, eax
mov dword [ebp - 0x122c], eax
call fcn.00450f10
add esp, 0xc
cmp eax, 0xffffffff
je 0x41e7c9
lea edx, [eax + 1]
cmp esi, edx
jb 0x4204ab
mov eax, dword [ebp - 0x122c]
sub esi, edx
or ecx, 0xffffffff
cmp esi, 0xffffffff
cmovb ecx, esi
lea eax, [eax + edx*2]
jmp 0x41e7d1
mov eax, dword [ebp - 0x122c]
mov ecx, esi
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0xb10], 0
push eax
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0xb0c], 0
movups xmmword [ebp - 0xb20], xmm0
call fcn.0040aa50
mov eax, dword [ebp - 0x1224]
or eax, 0x400
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1234], eax
lea eax, [ebp - 0xb20]
mov byte [ebp - 4], 0x42
push eax
push str.sfx_name
lea ecx, [ebp - 0xb68]
call fcn.0041afd0
lea ecx, [ebp - 0xb20]
call fcn.0040ab30
cmp word [ebp - 0xad8], 0
mov ax, word [ebp - 0xad6]
jne 0x41e861
test ax, ax
jne 0x41e861
test di, di
jne 0x41e861
cmp word [ebp - 0xad2], di
jne 0x41e861
xor cl, cl
jmp 0x41e863
mov cl, 1
test cl, cl
je 0x41e8f0
xorps xmm0, xmm0
mov dword [ebp - 0xb88], 0
xor ecx, ecx
mov dword [ebp - 0xb84], 7
movups xmmword [ebp - 0xb98], xmm0
mov word [ebp - 0xb98], cx
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xb98]
movzx esi, word [ebp - 0xad2]
push esi
movzx edx, di
push edx
mov dword [ebp - 0x1228], ecx
movzx ecx, ax
movzx eax, word [ebp - 0xad8]
push ecx
push eax
lea eax, [ebp - 0x1228]
push 0x5022f8
push eax
call fcn.0040e690
add esp, 0x18
lea eax, [ebp - 0xb98]
lea ecx, [ebp - 0xb68]
push eax
push str.sfx_version
call fcn.0041afd0
lea ecx, [ebp - 0xb98]
call fcn.0040ab30
cmp dword [ebp - 0xb6c], 8
lea eax, [ebp - 0xb80]
push 0
cmovae eax, dword [ebp - 0xb80]
push 0
push 3
push 0
push 7
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0xad4], esi
mov byte [ebp - 4], 0x44
cmp esi, 0xffffffff
je 0x41ea35
push 0
push 0
lea eax, [ebp - 0xad0]
mov dword [ebp - 0xad0], 0
push eax
push esi
mov dword [ebp - 0xacc], 0
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x41ea35
mov eax, dword [ebp - 0xad0]
mov edx, 0xe57a42bd
mul edx
mov ecx, 0xd6bf94d5
mov dword [ebp - 0x1218], eax
mov edi, edx
mov eax, dword [ebp - 0xad0]
mul ecx
mov ecx, 0xe57a42bd
mov dword [ebp - 0x122c], eax
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0x1204], edx
mul ecx
mov ecx, eax
mov dword [ebp - 0x1228], edx
mov eax, dword [ebp - 0xacc]
mov edx, 0xd6bf94d5
mul edx
add ecx, edi
mov dword [ebp - 0x123c], eax
mov eax, dword [ebp - 0x122c]
mov edi, dword [ebp - 0x123c]
mov dword [ebp - 0x121c], edx
mov edx, dword [ebp - 0x1228]
adc edx, 0
add eax, ecx
mov ecx, dword [ebp - 0x1204]
adc ecx, 0
mov dword [ebp - 0x1218], eax
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x121c]
adc eax, eax
add edi, edx
adc ecx, eax
shrd edi, ecx, 0x17
shr ecx, 0x17
sub edi, 0xb6109100
sbb ecx, 2
push ecx
push edi
lea ecx, [ebp - 0x1270]
call fcn.00424010
add esp, 8
push eax
push str.sfx_created
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x45
call fcn.0041afd0
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x44
call fcn.0040ab30
xorps xmm0, xmm0
lea ecx, [ebp - 0xc70]
push 0
movups xmmword [ebp - 0xc70], xmm0
movq qword [ebp - 0xc60], xmm0
call fcn.004974e0
push 7
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x46
call fcn.004974e0
push eax
lea ecx, [ebp - 0xc70]
call fcn.00497960
lea ecx, [ebp - 0x1270]
call fcn.004978e0
push str.instup
lea ecx, [ebp - 0xc70]
mov byte [ebp - 4], 0x47
call fcn.00497c00
lea ecx, [ebp - 0xb68]
push ecx
mov ecx, eax
call fcn.004979c0
push 0x5c
lea eax, [ebp - 0xfc0]
push 0
push eax
call fcn.004a7c50
add esp, 0xc
call fcn.00452560
dec eax
cmp eax, 5
ja case.0x41eac0.3
jmp dword [eax*4 + 0x4204dc]
mov edi, 1
jmp 0x41eae1
mov edi, 0x40
jmp 0x41eae1
mov edi, 0x258
jmp 0x41eae1
mov edi, 0x1f4
sub esp, 0x34
mov edx, esp
mov dword [ebp - 0x121c], edx
mov al, byte [ebp - 0xd38]
mov byte [edx], al
mov eax, dword [ebp - 0xd34]
mov ecx, dword [ebp - 0xd30]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov eax, dword [ebp - 0xd2c]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0xd28]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0xd24]
mov dword [edx + 0x14], eax
lea eax, [edx + 0x18]
mov dword [ebp - 0x121c], eax
mov byte [eax + 0x18], 0
mov byte [ebp - 4], 0x48
cmp byte [ebp - 0xd08], 0
je 0x41eb53
lea ecx, [ebp - 0xd20]
push ecx
mov ecx, eax
call fcn.0040ea10
mov eax, dword [ebp - 0x121c]
mov byte [eax + 0x18], 1
push edi
lea ecx, [ebp - 0xfc0]
mov byte [ebp - 4], 0x47
call fcn.0041b190
lea eax, [ebp - 0xc70]
mov byte [ebp - 4], 0x49
push eax
push ecx
lea ecx, [ebp - 0xfc0]
call fcn.00427890
lea ecx, [ebp - 0xf7c]
call fcn.0040ab30
cmp byte [ebp - 0xf80], 0
je 0x41eb99
lea ecx, [ebp - 0xf98]
call fcn.0040ab30
mov eax, dword [ebp - 0xfb8]
test eax, eax
je 0x41ebb9
mov eax, dword [eax]
push 1
mov edi, dword [eax]
mov ecx, edi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0xfb8]
call edi
lea ecx, [ebp - 0xc70]
call fcn.004978e0
cmp esi, 0xffffffff
je 0x41ebd0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb68]
call fcn.004978e0
cmp byte [ebp - 0xd08], 0
je 0x41ebef
lea ecx, [ebp - 0xd20]
call fcn.0040ab30
lea ecx, [ebp - 0xb80]
call fcn.0040ab30
mov dword [ebp - 4], 0x3a
mov edi, dword [ebp - 0x1224]
jmp 0x41ecd8
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
lea ecx, [ebp - 0xdac]
cmovae eax, dword [ebp - 0xaf0]
sub esp, 8
push ecx
push eax
lea ecx, [ebp - 0xf60]
call fcn.00412d80
mov esi, eax
mov dword [ebp - 0x123c], esi
test esi, esi
je 0x41eee6
cmp byte [ebp - 0x1254], 0
jne 0x41ed65
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
push esi
cmovae eax, dword [ebp - 0xaf0]
push eax
push str.The_installer_cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004147b0
add esp, 0x14
call fcn.0041b560
push 0x10
push eax
lea eax, [ebp - 0xac8]
push eax
push dword [ebp - 0xfd0]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0xadc], 8
lea edi, [ebp - 0xaf0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522bd4]
cmovae edi, dword [ebp - 0xaf0]
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b8a0
xorps xmm0, xmm0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xb10], edx
mov dword [ebp - 0xb0c], 0x2ef
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040bd70
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41eded
push esi
push edi
push str.Cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0xb20]
push eax
push 7
call fcn.00414620
mov ecx, dword [ebp - 0xacc]
or edi, 0xffffffff
mov dword [ebp - 0x122c], ecx
test ecx, ecx
je 0x41ee47
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41ee47
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x122c]
call esi
mov ecx, dword [ebp - 0x122c]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41ee41
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x122c]
call esi
mov esi, dword [ebp - 0x123c]
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0xdec]
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0x1228], ecx
cmp eax, ecx
je 0x41ee7b
mov esi, eax
mov ecx, esi
call fcn.00424130
add esi, 8
cmp esi, dword [ebp - 0x1228]
jne 0x41ee63
mov esi, dword [ebp - 0x123c]
lea ecx, [ebp - 0xdf0]
call fcn.004212e0
lea eax, [ebp - 0xe20]
push eax
call fcn.004a31ba
mov eax, dword [ebp - 0xe28]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xe28]
push eax
mov ecx, eax
call fcn.004173c0
push 0x40
push dword [ebp - 0xe28]
call fcn.004a4c93
add esp, 8
lea ecx, [ebp - 0xe40]
call fcn.0040ab30
lea ecx, [ebp - 0x1018]
call fcn.00418be0
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
jmp 0x41cc77
cmp byte [ebp - 0x127e], 0
je 0x41f0d8
push 0x4a
xorps xmm0, xmm0
mov dword [ebp - 0x12c0], 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0x12d0]
mov dword [ebp - 0x12bc], 0
movups xmmword [ebp - 0x12d0], xmm0
call fcn.0040aa50
mov ecx, str.instup.exe
mov byte [ebp - 4], 0x4d
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ef30
sub ecx, edx
sar ecx, 1
push ecx
push str.instup.exe
lea ecx, [ebp - 0x12d0]
call fcn.0040a6b0
mov dword [ebp - 0xc44], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc54], xmm0
mov dword [ebp - 0xc40], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x1000
movups xmmword [ebp - 0xc54], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc44], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x4e
lea edx, [ebp - 0xc54]
cmp dword [ebp - 0xc40], 8
mov ecx, 0x80000002
push 0x200
cmovae edx, dword [ebp - 0xc54]
call fcn.0048b970
add esp, 4
lea ecx, [ebp - 0xc54]
call fcn.0040ab30
lea ecx, [ebp - 0x12d0]
mov byte [ebp - 4], 0x3a
call fcn.0040ab30
push 0x4a
xorps xmm0, xmm0
mov dword [ebp - 0x128c], 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0x129c]
mov dword [ebp - 0x1288], 0
movups xmmword [ebp - 0x129c], xmm0
call fcn.0040aa50
mov ecx, str.instup.exe
mov byte [ebp - 4], 0x4f
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f020
sub ecx, edx
sar ecx, 1
push ecx
push str.instup.exe
lea ecx, [ebp - 0x129c]
call fcn.0040a6b0
mov dword [ebp - 0xc60], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc70], xmm0
mov dword [ebp - 0xc5c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x800
movups xmmword [ebp - 0xc70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x1224], edi
mov byte [ebp - 4], 0x50
lea edx, [ebp - 0xc70]
cmp dword [ebp - 0xc5c], 8
mov ecx, 0x80000002
push 0x100
cmovae edx, dword [ebp - 0xc70]
call fcn.0048b970
add esp, 4
lea ecx, [ebp - 0xc70]
call fcn.0040ab30
lea ecx, [ebp - 0x129c]
mov byte [ebp - 4], 0x3a
call fcn.0040ab30
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov eax, dword [ebp - 0xae0]
mov ecx, str.instup.exe
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov edi, esp
mov dword [ebp - 0x1228], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x121c], eax
mov dword [edi], str.instup.exe
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f111
sub ecx, dword [ebp - 0x121c]
push dword [ebp - 0x1228]
sar ecx, 1
mov dword [edi + 4], ecx
lea ecx, [ebp - 0xbb0]
push edx
call fcn.00488310
add esp, 0x10
cmp byte [ebp - 0x121d], 0
je 0x41fb54
cmp byte [ebp - 0x124c], 0
jne 0x41f174
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0x127c]
mov edx, eax
call fcn.0041aae0
push 1
movzx ecx, al
push edx
push ecx
call fcn.0041a850
add esp, 0xc
xorps xmm0, xmm0
mov dword [ebp - 0xbc8], 0
xor eax, eax
mov dword [ebp - 0xbc4], 7
movups xmmword [ebp - 0xbd8], xmm0
mov word [ebp - 0xbd8], ax
push 0x40ab90
push fcn.0040a8b0
push 2
push 0x18
lea eax, [ebp - 0xddc]
mov byte [ebp - 4], 0x51
push eax
call fcn.004a5351
xorps xmm0, xmm0
mov dword [ebp - 0xb58], 0
xor eax, eax
mov dword [ebp - 0xb54], 7
movups xmmword [ebp - 0xb68], xmm0
mov word [ebp - 0xb68], ax
mov byte [ebp - 4], 0x53
lea edx, [ebp - 0xaf0]
cmp dword [ebp - 0xadc], 8
mov ecx, str.instup.exe
mov eax, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov edi, esp
mov dword [ebp - 0x1228], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x121c], eax
mov dword [edi], str.instup.exe
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f220
sub ecx, dword [ebp - 0x121c]
push dword [ebp - 0x1228]
sar ecx, 1
mov dword [edi + 4], ecx
lea ecx, [ebp - 0xddc]
push edx
call fcn.00488310
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov eax, dword [ebp - 0xae0]
mov ecx, str.Instup.dll
cmovae edx, dword [ebp - 0xaf0]
add esp, 8
mov edi, esp
mov dword [ebp - 0x1228], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x121c], eax
mov dword [edi], str.Instup.dll
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f281
sub ecx, dword [ebp - 0x121c]
push dword [ebp - 0x1228]
sar ecx, 1
mov dword [edi + 4], ecx
lea ecx, [ebp - 0xdc4]
push edx
call fcn.00488310
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov eax, dword [ebp - 0xc14]
mov ecx, str.instup.exe
cmovae edx, dword [ebp - 0xc24]
add esp, 8
mov edi, esp
mov dword [ebp - 0x1228], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x121c], eax
mov dword [edi], str.instup.exe
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f2e2
sub ecx, dword [ebp - 0x121c]
push dword [ebp - 0x1228]
sar ecx, 1
mov dword [edi + 4], ecx
lea ecx, [ebp - 0xbd8]
push edx
call fcn.00488310
add esp, 0x10
lea eax, [ebp - 0xbd8]
cmp dword [ebp - 0xbc4], 8
cmovae eax, dword [ebp - 0xbd8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41f4fa
test al, 0x10
jne 0x41f4fa
cmp dword [ebp - 0x1250], 0x7cb
jbe 0x41f4fa
lea eax, [ebp - 0xddc]
xor edi, edi
mov dword [ebp - 0x122c], eax
test esi, esi
jne 0x41fb12
cmp dword [ebp - 0x1248], esi
jne 0x41fb12
push 0x34
lea eax, [ebp - 0xf98]
push esi
push eax
call fcn.004a7c50
add esp, 0xc
lea ecx, [ebp - 0xf98]
call fcn.00420500
mov byte [ebp - 4], 0x54
push dword [ebp - 0x122c]
sub esp, 0xc
mov ecx, esp
push str.copy_sfx
call fcn.00413860
lea ecx, [ebp - 0xf98]
call fcn.00421210
add esp, 4
mov ecx, eax
call fcn.0040e8e0
push 0x500c84
sub esp, 0xc
mov ecx, esp
push str.wait
call fcn.00413860
lea ecx, [ebp - 0xf98]
call fcn.00421210
add esp, 4
mov ecx, eax
call fcn.0040a880
sub esp, 8
lea eax, [ebp - 0x1270]
lea ecx, [ebp - 0xf98]
push eax
call fcn.00420b00
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.0040abd0
lea ecx, [ebp - 0xbd8]
mov esi, eax
call fcn.0040abd0
push 0
lea ecx, [ebp - 0x1248]
mov edx, esi
push 0
push ecx
mov ecx, eax
call fcn.00414e50
add esp, 0xc
lea ecx, [ebp - 0x1270]
mov esi, eax
call fcn.0040ab30
lea ecx, [ebp - 0xf98]
mov byte [ebp - 4], 0x53
call fcn.00420760
add dword [ebp - 0x122c], 0x18
inc edi
cmp edi, 2
jb 0x41f357
test esi, esi
jne 0x41fb12
cmp dword [ebp - 0x1248], esi
jne 0x41fb12
lea eax, [ebp - 0x1214]
push eax
lea ecx, [ebp - 0xc24]
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push 0x503ee4
call fcn.00413860
push esi
push edi
lea ecx, [ebp - 0xb68]
call fcn.00488310
add esp, 0x10
lea eax, [ebp - 0x1214]
lea ecx, [ebp - 0xb68]
push eax
call fcn.0040c570
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.instup.exe
call fcn.00413860
push esi
push edi
lea ecx, [ebp - 0xb68]
call fcn.00488310
add esp, 0x10
lea ecx, [ebp - 0xb68]
call fcn.00487aa0
test al, al
je 0x41fb12
lea eax, [ebp - 0xb68]
push eax
lea ecx, [ebp - 0xbb0]
call fcn.0040e8e0
jmp 0x41fb12
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbd8]
mov dword [eax], str.setup.ovr
mov dword [eax + 4], 9
call fcn.00488310
add esp, 0x10
lea eax, [ebp - 0xbd8]
cmp dword [ebp - 0xbc4], 8
cmovae eax, dword [ebp - 0xbd8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41fb12
test al, 0x10
jne 0x41fb12
nop dword [eax]
nop word [eax + eax]
xorps xmm0, xmm0
mov dword [ebp - 0xcf4], 0
xor eax, eax
mov dword [ebp - 0xcf0], 7
movups xmmword [ebp - 0xd04], xmm0
mov word [ebp - 0xd04], ax
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0xb08]
push 8
push str._copysfx
movups xmmword [ebp - 0xb08], xmm0
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 0xaf4], eax
call fcn.0040aa50
push 2
push 0x503924
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x57
call fcn.0040a6b0
mov dword [ebp - 0xb10], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb0c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb20], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x1224], 0x40
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0xddc]
cmp dword [ebp - 0xdc8], 8
lea ecx, [ebp - 0xb20]
push dword [ebp - 0xdcc]
cmovae eax, dword [ebp - 0xddc]
push eax
call fcn.0040a6b0
mov dword [ebp - 0x12a4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x12b4], xmm0
mov dword [ebp - 0x12a0], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12b4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x12a4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x1224], 0x80
push 1
push 0x5022f4
lea ecx, [ebp - 0x12b4]
mov byte [ebp - 4], 0x59
call fcn.0040a6b0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb78], xmm0
movups xmmword [ebp - 0xb38], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xad0], xmm0
movq qword [ebp - 0xb28], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0xd04]
or dword [ebp - 0x1224], 0x100
call fcn.0040ab30
movups xmm0, xmmword [ebp - 0xb78]
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb24], 7
movups xmmword [ebp - 0xd04], xmm0
movq xmm0, qword [ebp - 0xad0]
movq qword [ebp - 0xcf4], xmm0
xor eax, eax
lea ecx, [ebp - 0xb38]
mov word [ebp - 0xb38], ax
call fcn.0040ab30
lea ecx, [ebp - 0x12b4]
call fcn.0040ab30
lea ecx, [ebp - 0xb20]
call fcn.0040ab30
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x56
call fcn.0040ab30
cmp dword [ebp - 0xcf0], 8
lea edx, [ebp - 0xd04]
push 0
cmovae edx, dword [ebp - 0xd04]
lea eax, [ebp - 0x1248]
cmp dword [ebp - 0xbc4], 8
lea ecx, [ebp - 0xbd8]
push 0
cmovae ecx, dword [ebp - 0xbd8]
push eax
call fcn.00414e50
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x41f80b
mov ecx, dword [ebp - 0x1248]
cmp ecx, 0x2000000a
jne 0x41f7e4
push 0xbb8
mov dword [ebp - 0x1248], 0xa004
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xd04]
call fcn.0040ab30
jmp 0x41f570
cmp ecx, 0x20000000
je 0x41f801
cmp ecx, 0x20000001
je 0x41f801
mov esi, 5
mov dword [ebp - 0x1248], esi
jmp 0x41f811
xor esi, esi
mov dword [ebp - 0x1248], esi
jmp 0x41f811
mov esi, dword [ebp - 0x1248]
lea ecx, [ebp - 0xd04]
mov byte [ebp - 4], 0x53
call fcn.0040ab30
test edi, edi
jne 0x41fb12
test esi, esi
jne 0x41fb12
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], 0x503940
mov dword [eax + 4], 3
call fcn.00488310
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
mov ecx, dword [ebp - 0xb40]
cmovae edx, dword [ebp - 0xb50]
add esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbb0]
mov dword [eax], str.avast.setup
mov dword [eax + 4], 0xb
call fcn.00488310
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x121c], eax
test eax, eax
je 0x41fb12
xorps xmm0, xmm0
mov dword [ebp - 0x1210], esi
movq qword [ebp - 0x1218], xmm0
mov dword [ebp - 0x1218], esi
mov dword [ebp - 0x1214], esi
mov dword [ebp - 0x1210], esi
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, eax
call fcn.00419310
add esp, 4
test al, al
je 0x41fafb
mov esi, dword [ebp - 0x1218]
cmp esi, dword [ebp - 0x1214]
je 0x41fafb
mov eax, dword fs:[0x2c]
mov edi, dword [eax]
push esi
lea ecx, [ebp - 0xb98]
call fcn.0040ea10
mov byte [ebp - 4], 0x5b
mov eax, dword [0x527ca0]
cmp eax, dword [edi + 4]
jle 0x41f965
push 0x527ca0
call fcn.004a502a
add esp, 4
cmp dword [0x527ca0], 0xffffffff
jne 0x41f965
mov byte [ebp - 4], 0x5c
call fcn.004a26e1
push 0x527ca0
mov dword [0x527c9c], eax
mov byte [ebp - 4], 0x5b
call fcn.004a4fe0
add esp, 4
cmp dword [ebp - 0xb84], 8
lea edx, [ebp - 0xb98]
mov ecx, dword [ebp - 0xb88]
cmovae edx, dword [ebp - 0xb98]
sub esp, 8
mov eax, esp
push ecx
push edx
mov edx, dword [0x527c9c]
mov ecx, 5
mov dword [eax], str.path
mov dword [eax + 4], 5
call fcn.00416ba0
add esp, 0x10
lea ecx, [ebp - 0xb98]
test eax, eax
je 0x41f9cd
mov byte [ebp - 4], 0x5a
call fcn.0040ab30
add esi, 0x18
cmp esi, dword [ebp - 0x1214]
jne 0x41f913
jmp 0x41fafb
mov eax, dword [ebp - 0xb88]
dec eax
push eax
call fcn.0040e910
cmp word [eax], 0x3b
je 0x41fa08
push 0x50396c
mov edx, esi
lea ecx, [ebp - 0x1270]
call fcn.0040a3e0
add esp, 4
mov ecx, esi
push eax
call fcn.0040e930
lea ecx, [ebp - 0x1270]
call fcn.0040ab30
mov edx, dword [esi + 0x10]
mov eax, 0x7ffffffe
mov edi, dword [ebp - 0xae0]
sub eax, edx
cmp eax, edi
jb 0x4204d1
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x41fa2a
mov ecx, dword [esi]
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
push edi
cmovae eax, dword [ebp - 0xaf0]
push eax
push edx
push ecx
push ecx
push dword [ebp - 0xad4]
lea ecx, [ebp - 0x1270]
call fcn.0040a4c0
push 1
push 0x50396c
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x5d
call fcn.0040a6b0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb80], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb70], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0xb80]
push eax
mov ecx, esi
call fcn.0040e930
lea ecx, [ebp - 0xb80]
call fcn.0040ab30
lea ecx, [ebp - 0x1270]
mov byte [ebp - 4], 0x5b
call fcn.0040ab30
lea edx, [ebp - 0x1218]
lea ecx, [ebp - 0xb2c]
call fcn.004194b0
push eax
lea ecx, [ebp - 0xbbc]
call fcn.00419680
lea ecx, [ebp - 0xb2c]
call fcn.0040c3d0
lea ecx, [ebp - 0xb98]
call fcn.0040ab30
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0x1284], eax
push dword [ebp - 0x121c]
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0x1218]
call fcn.0040c7b0
lea ecx, [ebp - 0xb68]
call fcn.0040ab30
push 0x40ab90
push 2
push 0x18
lea eax, [ebp - 0xddc]
mov byte [ebp - 4], 0x51
push eax
call fcn.004a53c5
lea ecx, [ebp - 0xbd8]
mov byte [ebp - 4], 0x3a
call fcn.0040ab30
cmp byte [ebp - 0x124c], 0
jne 0x41fc32
jmp 0x41fb8c
cmp byte [ebp - 0x124c], 0
jne 0x41fc32
lea eax, [ebp - 0xa0]
push eax
sub esp, 0xc
mov ecx, esp
push 0x503dac
call fcn.00413860
lea ecx, [ebp - 0xc0c]
call fcn.00421210
add esp, 4
mov ecx, eax
call fcn.0040a880
mov esi, str.ga_clientid
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x41fb94
sub esi, ecx
lea ecx, [ebp - 0xc0c]
sar esi, 1
push esi
push str.ga_clientid
call fcn.004168c0
mov ecx, eax
test ecx, ecx
jne 0x41fc0e
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov dword [ebp - 0xad4], esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, esp
push esi
movups xmmword [ecx], xmm0
push str.ga_clientid
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040aa50
lea ecx, [ebp - 0xc0c]
mov byte [ebp - 4], 0x3a
call fcn.00421490
mov ecx, eax
lea eax, [ebp - 0xc88]
cmp ecx, eax
je 0x41fc32
cmp dword [ebp - 0xc74], 8
push dword [ebp - 0xc78]
cmovae eax, dword [ebp - 0xc88]
push eax
call fcn.0040a770
cmp dword [ebp - 0xb9c], 8
lea esi, [ebp - 0xbb0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522bd4]
cmovae esi, dword [ebp - 0xbb0]
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b8a0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x38f
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040bd70
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41fcb9
push esi
push 0x503970
lea eax, [ebp - 0xb08]
push eax
push 2
call fcn.0040e1d0
mov byte [ebp - 4], 0x3a
or edi, 0xffffffff
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x122c], ecx
test ecx, ecx
je 0x41fd11
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41fd11
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x122c]
call esi
mov ecx, dword [ebp - 0x122c]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41fd11
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x122c]
call esi
sub esp, 8
lea eax, [ebp - 0xe88]
lea ecx, [ebp - 0xc0c]
push eax
call fcn.00420b00
mov byte [ebp - 4], 0x60
mov esi, dword [ebp - 0x1244]
test esi, esi
je 0x41fd8c
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41fd40
sub ecx, edx
sar ecx, 1
je 0x41fd8c
push 1
push 0x5039c8
lea ecx, [ebp - 0xe88]
call fcn.0040a6b0
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41fd70
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xe88]
call fcn.0040a6b0
mov eax, dword [ebp - 0x1284]
lea edx, [ebp - 0xe88]
xor ecx, ecx
mov esi, eax
cmp eax, dword [ebp - 0xbb8]
lea eax, [ebp - 0x1018]
cmove esi, ecx
cmp dword [ebp - 0xfd0], ecx
push esi
cmove eax, ecx
cmp dword [ebp - 0xe74], 8
push eax
cmovae edx, dword [ebp - 0xe88]
lea eax, [ebp - 0x1248]
cmp dword [ebp - 0xb9c], 8
lea ecx, [ebp - 0xbb0]
push eax
cmovae ecx, dword [ebp - 0xbb0]
call fcn.00414e50
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x123c], esi
test esi, esi
je 0x420043
cmp byte [ebp - 0x1254], 0
jne 0x41fea9
cmp dword [ebp - 0xb9c], 8
lea eax, [ebp - 0xbb0]
push esi
cmovae eax, dword [ebp - 0xbb0]
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004147b0
mov eax, dword fs:[0x2c]
add esp, 0x14
mov ecx, dword [eax]
mov eax, dword [0x529f80]
cmp eax, dword [ecx + 4]
jle 0x41fe8e
push 0x529f80
call fcn.004a502a
add esp, 4
cmp dword [0x529f80], 0xffffffff
jne 0x41fe8e
mov byte [ebp - 4], 0x61
call fcn.00452560
cmp eax, 1
mov byte [ebp - 4], 0x60
mov edx, 0x5027a8
mov ecx, str.Avast_Antivirus
cmovne ecx, edx
push 0x529f80
mov dword [0x529f84], ecx
call fcn.004a4fe0
add esp, 4
push 0x10
push dword [0x529f84]
lea eax, [ebp - 0xac8]
push eax
push dword [ebp - 0xfd0]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0xb9c], 8
lea eax, [ebp - 0xbb0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
cmovae eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x121c], eax
mov eax, dword [0x522bd4]
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b8a0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x3a1
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040bd70
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41ff3c
push esi
push dword [ebp - 0x121c]
lea eax, [ebp - 0xb08]
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
push eax
push 7
call fcn.00414620
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1244], ecx
test ecx, ecx
je 0x41ff93
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41ff93
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov ecx, dword [ebp - 0x1244]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41ff8d
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov esi, dword [ebp - 0x123c]
lea ecx, [ebp - 0xe88]
call fcn.0040ab30
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0xdec]
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0x1228], ecx
cmp eax, ecx
je 0x41ffd8
mov esi, eax
nop word [eax + eax]
mov ecx, esi
call fcn.00424130
add esi, 8
cmp esi, dword [ebp - 0x1228]
jne 0x41ffc0
mov esi, dword [ebp - 0x123c]
lea ecx, [ebp - 0xdf0]
call fcn.004212e0
lea eax, [ebp - 0xe20]
push eax
call fcn.004a31ba
mov eax, dword [ebp - 0xe28]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xe28]
push eax
mov ecx, eax
call fcn.004173c0
push 0x40
push dword [ebp - 0xe28]
call fcn.004a4c93
add esp, 8
lea ecx, [ebp - 0xe40]
call fcn.0040ab30
lea ecx, [ebp - 0x1018]
call fcn.00418be0
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
jmp 0x41cc77
cmp dword [ebp - 0xb9c], 8
lea eax, [ebp - 0xbb0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
cmovae eax, dword [ebp - 0xbb0]
mov esi, dword [ebp - 0x1248]
mov dword [ebp - 0x121c], eax
mov eax, dword [0x522bd4]
mov dword [ebp - 0x123c], esi
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b8a0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x3a9
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040bd70
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x4200e2
push esi
push dword [ebp - 0x121c]
lea eax, [ebp - 0xb08]
push str.Installer_updater_executable__s_finished__process_return_code_0x_x_
push eax
push 2
call fcn.00414620
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1244], ecx
test ecx, ecx
je 0x420139
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x420139
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov ecx, dword [ebp - 0x1244]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x420133
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov esi, dword [ebp - 0x123c]
lea ecx, [ebp - 0xe88]
call fcn.0040ab30
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0xdec]
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0x1228], ecx
cmp eax, ecx
je 0x420178
mov esi, eax
mov ecx, esi
call fcn.00424130
add esi, 8
cmp esi, dword [ebp - 0x1228]
jne 0x420160
mov esi, dword [ebp - 0x123c]
lea ecx, [ebp - 0xdf0]
call fcn.004212e0
lea eax, [ebp - 0xe20]
push eax
call fcn.004a31ba
mov eax, dword [ebp - 0xe28]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xe28]
push eax
mov ecx, eax
call fcn.004173c0
push 0x40
push dword [ebp - 0xe28]
call fcn.004a4c93
add esp, 8
lea ecx, [ebp - 0xe40]
call fcn.0040ab30
lea ecx, [ebp - 0x1018]
call fcn.00418be0
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], 0x14
call fcn.0040ab30
jmp 0x41cc77
sub esp, 8
call fcn.00487ff0
add esp, 8
cmp byte [ebp - 0x1235], 0
je 0x4201fc
call fcn.004154b0
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522bd4]
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b8a0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x3c6
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040bd70
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x42026f
push esi
push str.Leaving_SFX_stub_guarded_code_section__return_code_0x_x_
lea eax, [ebp - 0xb08]
push eax
push 2
call fcn.00414430
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1244], ecx
test ecx, ecx
je 0x4202bf
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x4202bf
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov eax, dword [ebp - 0x1244]
lock xadd dword [eax + 8], edi
dec edi
jne 0x4202bf
mov eax, dword [eax]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ee33c]
mov ecx, dword [ebp - 0x1244]
call esi
lea ecx, [ebp - 0xcd4]
call fcn.0040ab30
lea ecx, [ebp - 0xca4]
call fcn.0040ab30
lea ecx, [ebp - 0xc88]
call fcn.0040ab30
lea ecx, [ebp - 0xc3c]
call fcn.0040ab30
lea ecx, [ebp - 0x1200]
call fcn.00420790
mov edx, dword [ebp - 0x1284]
mov byte [ebp - 4], 0xe
test edx, edx
je 0x420334
mov ecx, dword [ebp - 0xbb4]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x42032a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4204d6
push ecx
push edx
call fcn.004a4c93
add esp, 8
lea ecx, [ebp - 0xcbc]
call fcn.0040ab30
lea eax, [ebp - 0xda8]
mov dword [ebp - fcn.0040ef40], vtable.ProgressCallback.0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0xd90]
test eax, eax
je 0x420367
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xd40]
call fcn.0040faa0
lea ecx, [ebp - 0xd60]
call fcn.0040ab30
lea ecx, [ebp - 0xd78]
call fcn.0040ab30
lea ecx, [ebp - 0xd8c]
call fcn.0040e880
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0xf48]
mov dword [ebp - 0xec4], 0
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0x4ee33c]
lea ecx, [ebp - 0xf48]
call esi
lea eax, [ebp - 0xebc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0xed0]
call fcn.00413760
lea ecx, [ebp - 0xee8]
call fcn.0040ab30
lea ecx, [ebp - 0xf00]
call fcn.0040ab30
lea ecx, [ebp - 0xf28]
call fcn.0040ab30
lea ecx, [ebp - 0xf48]
call fcn.004931c0
lea ecx, [ebp - 0xf60]
call fcn.0040ab30
lea ecx, [ebp - 0xbe4]
call fcn.0040c7b0
lea ecx, [ebp - 0xbf0]
call fcn.004219c0
cmp byte [ebp - 0xbf4], 0
je 0x420433
lea ecx, [ebp - 0xc0c]
call fcn.0040ab30
lea ecx, [ebp - 0xc24]
call fcn.0040ab30
lea ecx, [ebp - 0xe70]
call fcn.0040ab30
lea ecx, [ebp - 0xe58]
call fcn.0040ab30
lea ecx, [ebp - 0xea0]
call fcn.0040ab30
lea ecx, [ebp - 0xaf0]
call fcn.0040ab30
lea ecx, [ebp - 0xb50]
call fcn.0040ab30
lea ecx, [ebp - 0xbb0]
call fcn.0040ab30
mov eax, dword [ebp - 0x123c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004a4c5b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
call fcn.0040a8d0
call fcn.0040cc30
push str.Invalid_brand
lea ecx, [ebp - 0x131c]
call fcn.004923e0
push 0x51f0f4
lea eax, [ebp - 0x131c]
push eax
call fcn.004a765b
call fcn.0040a8d0
call fcn.004b14ff
nop
invalid