Function at 0x408c08
Capabilities:
Accept command line arguments
Enumerate gui resources
Get token membership
Move file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4b2185
mov eax, dword fs:[0]
push eax
sub esp, 0x608
mov eax, dword [0x4d8c20]
xor eax, esp
mov dword [esp + 0x600], eax
push ebx
push esi
push edi
mov eax, dword [0x4d8c20]
xor eax, esp
push eax
lea eax, [esp + 0x618]
mov dword fs:[0], eax
xor ebx, ebx
lea eax, [esp + 0x18]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
lea eax, [esp + 0x278]
mov edi, ecx
push eax
mov dword [esp + 0x4c], edi
mov dword [esp + 0x27c], ebx
mov word [esp + 0x280], 0x500
mov dword [esp + 0x44], ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov dword [esp + 0x14], eax
cmp eax, ebx
je 0x408cb1
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x1c]
push ebx
call dword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x408ca7
mov dword [esp + 0x14], ebx
push dword [esp + 0x18]
call dword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [esp + 0x14], ebx
setne byte [esp + 0x18]
cmp byte [edi + 0xa8], bl
jne 0x408e63
call fcn.0041a0d0
test al, al
jne 0x408e63
cmp byte [esp + 0x18], bl
je 0x408e63
xor eax, eax
push 0x208
mov word [esp + 0x400], ax
lea eax, [esp + 0x402]
push ebx
push eax
call fcn.0047f860
add esp, 0xc
push 0x105
lea eax, [esp + 0x400]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [esp + 0x14], ebx
cmp word [esp + 0x3fc], bx
je 0x409447
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [esp + 0x294]
call fcn.00403758
lea ecx, [esp + 0x2c8]
push 0x4ba6a4
push ecx
mov ecx, eax
mov dword [esp + 0x628], ebx
call fcn.00405536
pop ecx
pop ecx
push ebx
push 1
lea ecx, [esp + 0x298]
mov byte [esp + 0x628], 2
call fcn.00403d84
cmp dword [esp + 0x2dc], 8
mov eax, dword [esp + 0x2c8]
jae 0x408d82
lea eax, [esp + 0x2c8]
lea ecx, [esp + 0x14]
push ecx
push eax
lea ecx, [esp + 0x404]
call fcn.00421540
pop ecx
pop ecx
test al, al
jne 0x408e47
push 0x30
push str.main.cpp
lea esi, [esp + 0x2c]
call fcn.00414f70
push str.failed_to_deelevate
push ecx
mov esi, eax
mov byte [esp + 0x628], 3
call fcn.00405810
pop ecx
mov esi, eax
call fcn.00405900
mov esi, eax
cmp esi, ebx
je 0x408e0b
lea edi, [esi + 0x10]
cmp edi, ebx
je 0x408ddd
lea eax, [esi + 0x20]
jmp 0x408ddf
xor eax, eax
lea ecx, [esp + 0x3fc]
push ecx
push eax
call fcn.00407256
pop ecx
pop ecx
cmp edi, ebx
je 0x408df8
lea eax, [esi + 0x20]
jmp 0x408dfa
xor eax, eax
push str._cmdline:
push eax
call fcn.004075b4
mov edi, dword [esp + 0x28]
pop ecx
pop ecx
push str._exitcode:
push ecx
lea ecx, [esp + 0x2d0]
call fcn.004058e2
pop ecx
mov esi, eax
call fcn.00405900
cmp eax, ebx
je 0x408e36
push dword [esp + 0x14]
add eax, 0x20
push eax
call fcn.0040a3e8
lea ecx, [esp + 0x24]
mov byte [esp + 0x620], 2
call fcn.00415130
or dword [esp + 0x620], 0xffffffff
push ebx
push 1
lea ecx, [esp + 0x2d0]
call fcn.00403d84
jmp 0x409447
mov ecx, edi
call fcn.00401944
cmp byte [edi + 0xaa], bl
je 0x409415
lea esi, [edi + 0x38]
cmp dword [esi + 0x14], 8
mov dword [esp + 0x14], esi
jb 0x408e87
mov eax, dword [esi]
jmp 0x408e89
mov eax, esi
push eax
push 0x6b
call fcn.0041ae60
pop ecx
pop ecx
test al, al
jne 0x408efd
cmp dword [esi + 0x14], 8
jb 0x408ea5
mov eax, dword [esi]
mov dword [esp + 0x14], eax
jmp 0x408ea9
mov dword [esp + 0x14], esi
push 0x104
push str.install.cpp
lea esi, [esp + 0x2c]
call fcn.00414f70
push str.failed_to_unzip_resource_to_folder
push ecx
mov esi, eax
mov dword [esp + 0x628], 4
call fcn.00405810
pop ecx
mov esi, eax
call fcn.00405900
lea ecx, [esp + 0x14]
mov esi, eax
call fcn.00405834
or dword [esp + 0x620], 0xffffffff
lea ecx, [esp + 0x24]
call fcn.00415130
jmp 0x409415
lea eax, [esp + 0x250]
lea esi, [esp + 0x258]
mov dword [esp + 0x250], 2
call fcn.00419170
mov dword [esp + 0x620], 5
cmp dword [esp + 0x268], ebx
jne 0x408f8c
push 0x10c
push str.install.cpp
lea esi, [esp + 0x2c]
call fcn.00414f70
push str.user_data_path_is_empty
push ecx
mov esi, eax
mov byte [esp + 0x628], 6
call fcn.00405810
pop ecx
mov esi, eax
call fcn.00405900
lea ecx, [esp + 0x24]
mov byte [esp + 0x620], 5
call fcn.00415130
or dword [esp + 0x620], 0xffffffff
push ebx
push 1
lea ecx, [esp + 0x260]
call fcn.00403d84
jmp 0x409415
lea eax, [esp + 0x290]
push str.Default
push eax
lea ebx, [esp + 0x260]
call fcn.004054c5
pop ecx
pop ecx
push eax
mov ecx, ebx
mov byte [esp + 0x624], 7
call fcn.00403c3f
xor esi, esi
push 0
inc esi
push esi
lea ecx, [esp + 0x298]
mov byte [esp + 0x628], 5
call fcn.00403d84
lea eax, [esp + 0x290]
push str.Cookies
push eax
call fcn.004054c5
cmp dword [eax + 0x14], 8
pop ecx
pop ecx
jb 0x408fed
mov eax, dword [eax]
call fcn.00419200
xor ebx, ebx
push ebx
push esi
lea ecx, [esp + 0x298]
mov byte [esp + 0x27], al
call fcn.00403d84
cmp byte [esp + 0x1f], bl
je 0x409027
or dword [esp + 0x620], 0xffffffff
push ebx
push esi
lea ecx, [esp + 0x260]
call fcn.00403d84
jmp 0x409413
cmp dword [esp + 0x26c], 8
mov eax, dword [esp + 0x258]
jae 0x40903f
lea eax, [esp + 0x258]
call fcn.004191e0
test al, al
jne 0x409065
cmp dword [esp + 0x26c], 8
mov ecx, dword [esp + 0x258]
jae 0x409060
lea ecx, [esp + 0x258]
call fcn.004193e0
mov edi, dword [esp + 0x20]
lea eax, [esp + 0x300]
push str.__browser
add edi, 0x8c
push eax
call fcn.00405855
lea ecx, [esp + 0x27c]
push str.___output_path_
push ecx
mov ecx, eax
mov byte [esp + 0x630], 8
call fcn.00405536
lea ecx, [esp + 0x268]
push ecx
lea ecx, [esp + 0x2a4]
push ecx
mov ecx, eax
mov byte [esp + 0x638], 9
call fcn.004058c0
lea ecx, [esp + 0x2e0]
push str.____targetBROWSER
push ecx
mov ecx, eax
mov byte [esp + 0x640], 0xa
call fcn.00405536
add esp, 0x20
push ebx
push esi
lea ecx, [esp + 0x298]
call fcn.00403d84
push ebx
push esi
lea ecx, [esp + 0x27c]
call fcn.00403d84
push ebx
push esi
lea ecx, [esp + 0x308]
mov byte [esp + 0x628], 0xe
call fcn.00403d84
mov edi, dword [esp + 0x20]
cmp byte [edi + 0xab], bl
je 0x40915b
lea eax, [esp + 0x2ac]
push str.PANEL
push eax
lea ebx, [esp + 0x2d0]
call fcn.004054c5
pop ecx
pop ecx
push eax
mov ecx, ebx
mov byte [esp + 0x624], 0xf
call fcn.00403c3f
push 0
push esi
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x628], 0xe
call fcn.00403d84
mov ebx, dword [esp + 0x14]
lea eax, [esp + 0x2ac]
push 0x4b98c0
push eax
call fcn.004054c5
pop ecx
pop ecx
mov byte [esp + 0x620], 0x10
cmp dword [esp + 0x2dc], 8
mov edx, dword [esp + 0x2c8]
jae 0x409193
lea edx, [esp + 0x2c8]
cmp dword [eax + 0x14], 8
jb 0x40919b
mov eax, dword [eax]
push 0x927c0
push 0
mov ecx, eax
call fcn.0041a4a0
pop ecx
pop ecx
mov bl, al
push 0
neg bl
push esi
lea ecx, [esp + 0x2b4]
sbb bl, bl
mov byte [esp + 0x628], 0xe
call fcn.00403d84
inc bl
je 0x40922f
push 0x120
push str.install.cpp
lea esi, [esp + 0x2c]
call fcn.00414f70
mov esi, eax
mov byte [esp + 0x620], 0x11
call fcn.00405810
mov esi, eax
test esi, esi
je 0x40920f
lea eax, [esi + 0x10]
test eax, eax
je 0x409200
lea eax, [esi + 0x20]
jmp 0x409202
xor eax, eax
push str.running_getdata.exe_faled_cmdline:
push eax
call fcn.00407256
pop ecx
pop ecx
lea ecx, [esp + 0x2c8]
call fcn.004058e2
lea ecx, [esp + 0x24]
mov byte [esp + 0x620], 0xe
call fcn.00415130
xor esi, esi
inc esi
cmp byte [edi + 0xab], 0
je 0x4093e9
and dword [esp + 0x2bc], 0
xor eax, eax
mov esi, str.data.xml
push esi
lea ecx, [esp + 0x2b0]
mov dword [esp + 0x2c4], 7
mov word [esp + 0x2b0], ax
call fcn.00403d5d
mov byte [esp + 0x620], 0x12
push dword [esp + 0x14]
lea ebx, [esp + 0x2b0]
lea edi, [esp + 0x2e8]
call fcn.00419220
pop ecx
push 0
push 1
mov ecx, ebx
mov byte [esp + 0x628], 0x14
call fcn.00403d84
cmp dword [esp + 0x2f8], 8
mov eax, dword [esp + 0x2e4]
jae 0x4092b1
mov eax, edi
call fcn.00419200
test al, al
je 0x4093d6
and dword [esp + 0x2a0], 0
xor eax, eax
push esi
lea ecx, [esp + 0x294]
mov dword [esp + 0x2a8], 7
mov word [esp + 0x294], ax
call fcn.00403d5d
lea esi, [esp + 0x300]
mov byte [esp + 0x620], 0x15
call fcn.004193a0
push eax
lea ebx, [esp + 0x294]
lea edi, [esp + 0x278]
mov byte [esp + 0x624], 0x16
call fcn.00419220
pop ecx
xor ebx, ebx
push 0
inc ebx
push ebx
mov ecx, esi
call fcn.00403d84
push 0
push ebx
lea ecx, [esp + 0x298]
mov byte [esp + 0x628], 0x19
call fcn.00403d84
mov eax, dword [esp + 0x274]
push 8
pop edi
cmp dword [esp + 0x288], edi
jae 0x409357
lea eax, [esp + 0x274]
call fcn.00419200
test al, al
jne 0x4093c7
lea esi, [esp + 0x2ac]
call fcn.004193a0
mov byte [esp + 0x620], 0x1a
cmp dword [eax + 0x14], edi
jb 0x40937b
mov eax, dword [eax]
mov ecx, eax
call fcn.004193e0
push 0
push ebx
lea ecx, [esp + 0x2b4]
call fcn.00403d84
mov ecx, dword [esp + 0x274]
cmp dword [esp + 0x288], edi
jae 0x4093a8
lea ecx, [esp + 0x274]
mov eax, dword [esp + 0x2e4]
cmp dword [esp + 0x2f8], edi
jae 0x4093bf
lea eax, [esp + 0x2e4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push 0
push ebx
lea ecx, [esp + 0x27c]
call fcn.00403d84
push 0
push 1
lea ecx, [esp + 0x2ec]
call fcn.00403d84
xor esi, esi
inc esi
push 0
push esi
lea ecx, [esp + 0x2d0]
call fcn.00403d84
or dword [esp + 0x620], 0xffffffff
push 0
push esi
lea ecx, [esp + 0x260]
call fcn.00403d84
mov edi, dword [esp + 0x20]
xor ebx, ebx
mov ecx, edi
call fcn.0040265b
test al, al
jne 0x409434
push ebx
push 1
mov edx, str.35.261
mov ecx, str.cmd_error_ext
call fcn.0040e9c0
pop ecx
pop ecx
mov ecx, edi
call fcn.00402be4
push dword [esp + 0x18]
mov ecx, edi
call fcn.00402d27
pop ecx
cmp byte [edi + 0xa8], bl
jne 0x40966b
cmp byte [edi + 0xac], bl
jne 0x409654
mov ecx, edi
call fcn.00401944
lea esi, [edi + 0x38]
cmp dword [esi + 0x14], 8
jb 0x409473
mov eax, dword [esi]
jmp 0x409475
mov eax, esi
push eax
push 0x6f
call fcn.0041ae60
pop ecx
pop ecx
test al, al
jne 0x4094fa
cmp dword [esi + 0x14], 8
jb 0x409491
mov eax, dword [esi]
mov dword [esp + 0x14], eax
jmp 0x409495
mov dword [esp + 0x14], esi
push 0x1fa
push str.install.cpp
lea esi, [esp + 0x2c]
call fcn.00414f70
mov esi, eax
mov dword [esp + 0x620], 0x1b
call fcn.00405810
mov esi, eax
cmp esi, ebx
je 0x4094db
lea eax, [esi + 0x10]
test eax, eax
je 0x4094cc
lea eax, [esi + 0x20]
jmp 0x4094ce
xor eax, eax
push str.failed_to_unzip_kometasettings_to
push eax
call fcn.00407256
pop ecx
pop ecx
lea ecx, [esp + 0x14]
call fcn.00405834
or dword [esp + 0x620], 0xffffffff
lea ecx, [esp + 0x24]
call fcn.00415130
jmp 0x409654
lea eax, [esp + 0x274]
push str.kometasettings.exe
push eax
mov ebx, esi
call fcn.004054c5
pop ecx
pop ecx
mov dword [esp + 0x620], 0x1c
xor eax, eax
xor ebx, ebx
push 0x4b9470
lea ecx, [esp + 0x25c]
mov dword [esp + 0x270], 7
mov dword [esp + 0x26c], ebx
mov word [esp + 0x25c], ax
call fcn.00403d5d
mov byte [esp + 0x620], 0x1d
cmp byte [edi + 0xa9], bl
je 0x40956b
push str.__makedefault
lea ecx, [esp + 0x25c]
call fcn.00403d5d
cmp dword [esp + 0x26c], 8
mov edx, dword [esp + 0x258]
jae 0x409583
lea edx, [esp + 0x258]
cmp dword [esp + 0x288], 8
mov ecx, dword [esp + 0x274]
jae 0x40959b
lea ecx, [esp + 0x274]
push 0x493e0
push 5
call fcn.0041a4a0
pop ecx
pop ecx
test al, al
jne 0x40962c
cmp dword [esp + 0x288], 8
mov eax, dword [esp + 0x274]
jae 0x4095c5
lea eax, [esp + 0x274]
push 0x20a
push str.install.cpp
lea esi, [esp + 0x19c]
mov dword [esp + 0x1c], eax
call fcn.00414f70
mov esi, eax
mov byte [esp + 0x620], 0x1e
call fcn.00405810
mov esi, eax
cmp esi, ebx
je 0x40960f
lea eax, [esi + 0x10]
test eax, eax
je 0x409600
lea eax, [esi + 0x20]
jmp 0x409602
xor eax, eax
push str.FAILED_to_exec_kometasettings
push eax
call fcn.00407256
pop ecx
pop ecx
lea ecx, [esp + 0x14]
call fcn.00405834
lea ecx, [esp + 0x194]
mov byte [esp + 0x620], 0x1d
call fcn.00415130
push ebx
push 1
lea ecx, [esp + 0x260]
call fcn.00403d84
or dword [esp + 0x620], 0xffffffff
push ebx
push 1
lea ecx, [esp + 0x27c]
call fcn.00403d84
xor ebx, ebx
cmp byte [edi + 0xa8], bl
jne 0x40966b
call fcn.0041a0d0
test al, al
jne 0x40966b
cmp byte [esp + 0x18], bl
jne 0x409678
cmp byte [edi + 0xab], bl
je 0x409678
call fcn.004033ad
cmp byte [edi + 0xa8], bl
jne 0x409ccf
cmp byte [edi + 0xac], bl
jne 0x409ccf
lea eax, [edi + 0x1c]
cmp dword [eax + 0x14], 8
mov dword [esp + 0x14], eax
jb 0x40969f
mov eax, dword [eax]
call fcn.00419200
test al, al
jne 0x40975f
push 0x25c
push str.install.cpp
lea esi, [esp + 0x19c]
call fcn.00414f70
mov esi, eax
mov dword [esp + 0x620], 0x1f
call fcn.00405810
mov esi, eax
cmp esi, ebx
je 0x4096f1
lea eax, [esi + 0x10]
test eax, eax
je 0x4096e4
lea ebx, [esi + 0x20]
push str.failed_to_get_browser_path
push ebx
call fcn.00407256
pop ecx
pop ecx
mov ecx, dword [esp + 0x14]
call fcn.004058e2
or dword [esp + 0x620], 0xffffffff
lea ecx, [esp + 0x194]
call fcn.00415130
push 0x56
push str.main.cpp
lea esi, [esp + 0xe4]
call fcn.00414f70
push str.failed_to_start_browser
push ecx
mov esi, eax
mov dword [esp + 0x628], 0x31
call fcn.00405810
pop ecx
mov esi, eax
call fcn.00405900
or dword [esp + 0x620], 0xffffffff
lea ecx, [esp + 0xdc]
call fcn.00415130
mov eax, 0x7534
jmp 0x409cd1
xor eax, eax
push 0x4b9470
lea ecx, [esp + 0x25c]
mov dword [esp + 0x270], 7
mov dword [esp + 0x26c], ebx
mov word [esp + 0x25c], ax
call fcn.00403d5d
mov dword [esp + 0x620], 0x20
cmp dword [edi + 0x80], ebx
je 0x40982e
or dword [esp + 0x250], 0xffffffff
cmp dword [edi + 0x84], 0x10
jb 0x4097b9
mov edx, dword [edi + 0x70]
jmp 0x4097bc
lea edx, [edi + 0x70]
lea eax, [esp + 0x250]
call fcn.0040e130
push eax
lea ecx, [esp + 0x2cc]
call fcn.00403758
lea ecx, [esp + 0x300]
push 0x4ba450
push ecx
mov ecx, eax
mov byte [esp + 0x628], 0x21
call fcn.00405536
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x25c]
mov byte [esp + 0x624], 0x22
call fcn.00403c3f
push ebx
push 1
lea ecx, [esp + 0x308]
call fcn.00403d84
push ebx
push 1
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x628], 0x20
call fcn.00403d84
xor eax, eax
push str.SoftwareNetBoxKometaInstaller_
lea ecx, [esp + 0x294]
mov dword [esp + 0x2a8], 7
mov dword [esp + 0x2a4], ebx
mov word [esp + 0x294], ax
call fcn.00403d5d
lea eax, [esp + 0x2ac]
push eax
lea ebx, [esp + 0x294]
mov byte [esp + 0x624], 0x23
call fcn.0040e7d0
pop ecx
push 0
push 1
mov ecx, ebx
mov byte [esp + 0x628], 0x25
call fcn.00403d84
lea eax, [esp + 0x3c4]
push str.http:__kometa_browser.ru_welcome__guid
push eax
lea ebx, [esp + 0x260]
call fcn.004054c5
lea ecx, [esp + 0x2b4]
push ecx
lea ecx, [esp + 0x398]
push ecx
mov ecx, eax
mov byte [esp + 0x630], 0x26
call fcn.004058c0
lea ecx, [esp + 0x364]
push 0x4ba454
push ecx
mov ecx, eax
mov byte [esp + 0x638], 0x27
call fcn.00405536
lea ecx, [esp + 0x2fc]
push edi
push ecx
mov ecx, eax
mov byte [esp + 0x640], 0x28
call fcn.004058c0
add esp, 0x20
push eax
mov ecx, ebx
mov byte [esp + 0x624], 0x29
call fcn.00403c3f
xor esi, esi
xor edi, edi
push esi
inc edi
push edi
lea ecx, [esp + 0x2ec]
call fcn.00403d84
push esi
push edi
lea ecx, [esp + 0x35c]
call fcn.00403d84
push esi
push edi
lea ecx, [esp + 0x394]
call fcn.00403d84
push esi
push edi
lea ecx, [esp + 0x3cc]
mov byte [esp + 0x628], 0x25
call fcn.00403d84
call fcn.0041a170
test al, al
je 0x409992
lea eax, [esp + 0x338]
push str.___force_first_run
push eax
call fcn.004054c5
pop ecx
pop ecx
push eax
mov ecx, ebx
mov byte [esp + 0x624], 0x2a
call fcn.00403c3f
push esi
push edi
lea ecx, [esp + 0x340]
mov byte [esp + 0x628], 0x25
call fcn.00403d84
lea eax, [esp + 0x3a8]
push str.___start_maximized
push eax
lea ebx, [esp + 0x260]
call fcn.004054c5
pop ecx
pop ecx
push eax
mov ecx, ebx
mov byte [esp + 0x624], 0x2b
call fcn.00403c3f
xor ebx, ebx
push ebx
push 1
lea ecx, [esp + 0x3b0]
mov byte [esp + 0x628], 0x25
call fcn.00403d84
cmp byte [esp + 0x18], bl
je 0x409b53
call fcn.0041a0d0
test al, al
jne 0x409b53
mov edi, dword [esp + 0x14]
lea eax, [esp + 0x31c]
push 0x4ba0b0
push eax
call fcn.00405855
lea ecx, [esp + 0x3e8]
push 0x4ba0a8
push ecx
mov ecx, eax
mov byte [esp + 0x630], 0x2c
call fcn.00405536
lea ecx, [esp + 0x268]
push ecx
lea ecx, [esp + 0x384]
push ecx
mov ecx, eax
mov byte [esp + 0x638], 0x2d
call fcn.004058c0
add esp, 0x18
push eax
lea ecx, [esp + 0x25c]
mov byte [esp + 0x624], 0x2e
call fcn.00403c3f
push ebx
push 1
lea ecx, [esp + 0x378]
call fcn.00403d84
push ebx
push 1
lea ecx, [esp + 0x3e8]
call fcn.00403d84
push ebx
push 1
lea ecx, [esp + 0x324]
mov byte [esp + 0x628], 0x25
call fcn.00403d84
cmp dword [esp + 0x26c], 8
mov ecx, dword [esp + 0x258]
jae 0x409aa3
lea ecx, [esp + 0x258]
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 8
jb 0x409aaf
mov eax, dword [eax]
push ecx
mov edi, eax
call fcn.00421480
pop ecx
test al, al
jne 0x409be8
push 0x279
push str.install.cpp
lea esi, [esp + 0x2c]
call fcn.00414f70
push str._cmdline
push ecx
push str.Failed_to_deelevate
push ecx
mov esi, eax
mov byte [esp + 0x630], 0x2f
call fcn.00405810
pop ecx
mov esi, eax
call fcn.00405900
mov ecx, dword [esp + 0x1c]
mov esi, eax
call fcn.004058e2
pop ecx
mov esi, eax
call fcn.00405900
lea ecx, [esp + 0x258]
mov esi, eax
call fcn.004058e2
lea ecx, [esp + 0x24]
mov byte [esp + 0x620], 0x25
call fcn.00415130
push ebx
push 1
lea ecx, [esp + 0x2b4]
call fcn.00403d84
or dword [esp + 0x620], 0xffffffff
push ebx
push 1
lea ecx, [esp + 0x260]
call fcn.00403d84
jmp 0x40970e
cmp dword [esp + 0x26c], 8
mov edx, dword [esp + 0x258]
jae 0x409b6b
lea edx, [esp + 0x258]
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 8
jb 0x409b77
mov eax, dword [eax]
mov ecx, eax
call fcn.0041a230
test al, al
jne 0x409be8
push 0x281
push str.install.cpp
lea esi, [esp + 0xe4]
call fcn.00414f70
push str._cmdline
push ecx
push str.Failed_to_launch
push ecx
mov esi, eax
mov byte [esp + 0x630], 0x30
call fcn.00405810
pop ecx
mov esi, eax
call fcn.00405900
mov ecx, dword [esp + 0x1c]
mov esi, eax
call fcn.004058e2
pop ecx
mov esi, eax
call fcn.00405900
lea ecx, [esp + 0x258]
mov esi, eax
call fcn.004058e2
lea ecx, [esp + 0xdc]
jmp 0x409b1b
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
xor edi, edi
lea eax, [esp + 0x274]
push eax
push 0x40346d
mov dword [esp + 0x27c], ebx
mov dword [esp + 0x280], ebx
mov dword [esp + 0x284], ebx
mov dword [esp + 0x288], ebx
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [esp + 0x274], ebx
jne 0x409c31
cmp dword [esp + 0x278], ebx
je 0x409c69
cmp dword [esp + 0x27c], ebx
je 0x409c44
push ebx
push dword [esp + 0x280]
call esi
cmp dword [esp + 0x280], ebx
je 0x409c57
push ebx
push dword [esp + 0x284]
call esi
cmp dword [esp + 0x274], ebx
je 0x409c69
cmp dword [esp + 0x278], ebx
je 0x409c8d
mov eax, dword [esp + 0x20]
cmp byte [eax + 0xad], bl
jne 0x409c80
push 0x14a
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0x87
jb 0x409bf0
push 0x4ba3d0
push ebx
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, ebx
je 0x409cb1
push ebx
push 1
mov edx, str.35.261
mov ecx, str.cmd_assist_show
call fcn.0040e9c0
pop ecx
pop ecx
push ebx
push 1
lea ecx, [esp + 0x2b4]
call fcn.00403d84
push ebx
push 1
lea ecx, [esp + 0x260]
call fcn.00403d84
xor eax, eax
mov ecx, dword [esp + 0x618]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x600]
xor ecx, esp
call fcn.004751dc
mov esp, ebp
pop ebp
ret