Function at 0x406cd0
Capabilities:
Check if file exists
Check os version
Get file attributes
Persist via run registry key
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48aeeb
mov eax, dword fs:[0]
push eax
mov eax, 0x43380
call fcn.00467480
mov eax, dword [0x4c4754]
xor eax, ebp
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x42e14], 0
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0xc], 0
jne 0x406d17
call fcn.0040fa60
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040fe80
add esp, 4
lea ecx, [ebp - 0x10fb8]
call fcn.0040a880
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
mov dword [ebp - 0x10fb8], 0x48febc
mov dword [ebp - 0x42e1c], 8
mov dword [ebp - 0x42e18], 0x20
lea edx, [ebp - 0x42e1c]
push edx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov dword [ebp - 4], 3
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0
jne 0x406d8c
push 0
push 0
lea ecx, [ebp - 0x10fb8]
call fcn.0040a990
push 0x48e604
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
mov word [ebp - 0x10744], 0
push 0x100
lea ecx, [ebp - 0x10744]
push ecx
push 0x48e638
push 0x48e648
push 0x80000002
call fcn.0040cf00
add esp, 0x14
test eax, eax
je 0x406e2f
push 1
push 0
lea edx, [ebp - 0x10744]
push edx
push 0x48e694
call fcn.0040ffb0
add esp, 0x10
movzx eax, word [ebp - 0x10744]
cmp eax, 0x35
jge 0x406e2f
push 0
lea ecx, [ebp - 0x10744]
push ecx
push str.RoboForm_requires_Internet_Explorer_5.0_or_higher._Please__update_IE_and_run_Setup_again.
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42d94], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42d94]
jmp 0x409602
push 1
push 0
push 0
push str.RunSfx_____START
call fcn.0040ffb0
add esp, 0x10
mov dword [ebp - 0x211d8], 1
push 1
lea edx, [ebp - 0x211d8]
push edx
call fcn.00414d10
add esp, 8
cmp dword [ebp - 0x211d8], 0
je 0x406e72
mov dword [ebp - 0x43350], 0x48e708
jmp 0x406e7c
mov dword [ebp - 0x43350], 0x48e710
push 1
call fcn.0040c810
push eax
mov eax, dword [ebp - 0x43350]
push eax
push 0x48e718
call fcn.0040ffb0
add esp, 0x10
push str.Testing_Integrity...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
push 0x64
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x2140c], ecx
cmp dword [ebp + 0x10], 0
jne 0x406ee4
lea edx, [ebp - 0x21824]
mov dword [ebp - 0x2140c], edx
push 0x104
lea eax, [ebp - 0x21824]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x10f98], 0
mov dword [ebp - 0x10f94], 0
mov dword [ebp - 0x10f90], 0
mov dword [ebp - 0x10f8c], 0
mov dword [ebp - 0x10f88], 0
mov byte [ebp - 4], 4
push 3
push 0x80000000
mov ecx, dword [ebp - 0x2140c]
push ecx
lea ecx, [ebp - 0x10f98]
call fcn.0040ccf0
test eax, eax
jne 0x406f8a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, dword [ebp - 0x2140c]
push edx
push str.Cant_extract_from_SFX
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42d98], 0xfffffffd
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42d98]
jmp 0x409602
mov eax, dword [ebp - 0x10f8c]
mov dword [ebp - 0x42e68], eax
mov ecx, dword [ebp - 0x10f90]
mov dword [ebp - 0x42e6c], ecx
mov edx, dword [ebp - 0x42e68]
push edx
mov eax, dword [ebp - 0x42e6c]
push eax
call fcn.0040a5c0
add esp, 8
test eax, eax
jne 0x40700a
push 0
mov ecx, dword [ebp - 0x2140c]
push ecx
push str.Corrupted_Setup_File
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42d9c], 0xfffffffd
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42d9c]
jmp 0x409602
push 0xc8
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
push 0x104
lea edx, [ebp - 0x10644]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0040fd50
add esp, 0xc
movzx ecx, al
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0
jne 0x407055
push 0x104
lea edx, [ebp - 0x10644]
push edx
call fcn.0040f1d0
add esp, 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4070a4
push 0
push 0
push str.Cannot_get_create_writeable_temporary_file_folder
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42da0], 0xfffffffc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42da0]
jmp 0x409602
push 1
push 0
lea eax, [ebp - 0x10644]
push eax
push str.GetTempPath:
call fcn.0040ffb0
add esp, 0x10
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 0xc], 0
je 0x40712f
push 0x104
lea edx, [ebp - 0x10f84]
push edx
push str._unpack
mov eax, dword [ebp + 8]
push eax
call fcn.0040f780
add esp, 0x10
test eax, eax
jne 0x407112
push 1
push 0
lea ecx, [ebp - 0x10644]
push ecx
push str.Bad_Unpack_path__Will_use_TEMP_folder
call fcn.0040ffb0
add esp, 0x10
lea edx, [ebp - 0x10644]
push edx
lea eax, [ebp - 0x10f84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 1
push 0
lea ecx, [ebp - 0x10f84]
push ecx
push str.Unpack_path
call fcn.0040ffb0
add esp, 0x10
jmp 0x4071ea
lea edx, [ebp - 0x10f84]
push edx
lea eax, [ebp - 0x10644]
push eax
call fcn.0040a710
add esp, 8
mov dword [ebp - 0x2182c], eax
cmp dword [ebp - 0x2182c], 0
jne 0x407198
push 1
push 0
push 0x4c9510
push str.Bad_TEMP__Try_to_create_temp_folder_near
call fcn.0040ffb0
add esp, 0x10
push 0x4c74f0
lea ecx, [ebp - 0x10644]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea edx, [ebp - 0x10f84]
push edx
lea eax, [ebp - 0x10644]
push eax
call fcn.0040a710
add esp, 8
mov dword [ebp - 0x2182c], eax
cmp dword [ebp - 0x2182c], 0
jne 0x4071ea
push 0
push 0
push str.Cant_create_temp_folder_to_unpack_files
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42da4], 0xfffffffc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42da4]
jmp 0x409602
push str.Extracting_Program_Files...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
push 0x190
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
mov byte [ebp - 0x10951], 1
mov byte [ebp - 0x21401], 0
call fcn.004101e0
mov dword [ebp - 0x42f00], eax
mov ecx, dword [ebp - 0x42f00]
add ecx, 0x14
mov dword [ebp - 0x42dac], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp + 8]
push edx
call fcn.00401ee0
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x42dac]
call fcn.00401f30
mov byte [ebp - 4], 6
push 0
push 1
push 0
push 0x48e89c
lea ecx, [ebp - 0x42dac]
push ecx
call fcn.00414770
add esp, 0x14
xor edx, edx
test eax, eax
setge dl
mov byte [ebp - 0x42da5], dl
mov byte [ebp - 4], 7
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x42dac]
sub eax, 0x14
mov dword [ebp - 0x42f04], eax
mov ecx, dword [ebp - 0x42f04]
call fcn.004102a0
movzx ecx, byte [ebp - 0x42da5]
test ecx, ecx
je 0x4072d0
push 1
push 0
push 0
push str.Install_Everywhere:_by_command_line
call fcn.0040ffb0
add esp, 0x10
mov byte [ebp - 0x10951], 0
mov byte [ebp - 0x21401], 1
jmp 0x407512
call fcn.004101e0
mov dword [ebp - 0x42f08], eax
mov edx, dword [ebp - 0x42f08]
add edx, 0x14
mov dword [ebp - 0x42db4], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp + 8]
push eax
call fcn.00401ee0
add esp, 4
push eax
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x42db4]
call fcn.00401f30
mov byte [ebp - 4], 9
push 0
push 1
push 0
push 0x48e8c8
lea edx, [ebp - 0x42db4]
push edx
call fcn.00414770
add esp, 0x14
xor ecx, ecx
test eax, eax
setge cl
mov byte [ebp - 0x42dad], cl
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x42db4]
sub edx, 0x14
mov dword [ebp - 0x42f0c], edx
mov ecx, dword [ebp - 0x42f0c]
call fcn.004102a0
movzx eax, byte [ebp - 0x42dad]
test eax, eax
je 0x407388
push 1
push 0
push 0
push str.Install_Desktop:_by_command_line
call fcn.0040ffb0
add esp, 0x10
mov byte [ebp - 0x10951], 0
mov byte [ebp - 0x21401], 0
jmp 0x407512
call fcn.004101e0
mov dword [ebp - 0x42f10], eax
mov ecx, dword [ebp - 0x42f10]
add ecx, 0x14
mov dword [ebp - 0x42dbc], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp + 8]
push edx
call fcn.00401ee0
add esp, 4
push eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x42dbc]
call fcn.00401f30
mov byte [ebp - 4], 0xc
push 0
push 1
push 0
push str._combined
lea ecx, [ebp - 0x42dbc]
push ecx
call fcn.00414770
add esp, 0x14
xor edx, edx
test eax, eax
setge dl
mov byte [ebp - 0x42db5], dl
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x42dbc]
sub eax, 0x14
mov dword [ebp - 0x42f14], eax
mov ecx, dword [ebp - 0x42f14]
call fcn.004102a0
movzx ecx, byte [ebp - 0x42db5]
test ecx, ecx
je 0x407440
push 1
push 0
push 0
push str.Install_Combined:_by_command_line
call fcn.0040ffb0
add esp, 0x10
mov byte [ebp - 0x10951], 1
mov byte [ebp - 0x21401], 0
jmp 0x407512
mov dword [ebp - 0x21834], 0
mov edx, dword [ebp - 0x10f8c]
mov dword [ebp - 0x42f18], edx
mov eax, dword [ebp - 0x10f90]
mov dword [ebp - 0x42f1c], eax
lea ecx, [ebp - 0x21834]
push ecx
push str.mode
mov edx, dword [ebp - 0x42f18]
push edx
mov eax, dword [ebp - 0x42f1c]
push eax
call fcn.0040ca90
add esp, 0x10
mov dword [ebp - 0x21830], eax
cmp dword [ebp - 0x21830], 0
je 0x407512
cmp dword [ebp - 0x21834], 1
jb 0x407512
mov ecx, dword [ebp - 0x21830]
movzx dx, byte [ecx]
mov word [ebp - 0x21838], dx
movzx eax, word [ebp - 0x21838]
mov dword [ebp - 0x43354], eax
cmp dword [ebp - 0x43354], 0x30
je 0x4074ce
cmp dword [ebp - 0x43354], 0x31
je 0x4074f1
jmp 0x407512
push 1
push 0
push 0
push str.Install_Desktop:_by_dist
call fcn.0040ffb0
add esp, 0x10
mov byte [ebp - 0x10951], 0
mov byte [ebp - 0x21401], 0
jmp 0x407512
push 1
push 0
push 0
push str.Install_Everywhere:_by_dist
call fcn.0040ffb0
add esp, 0x10
mov byte [ebp - 0x10951], 0
mov byte [ebp - 0x21401], 1
movzx ecx, byte [ebp - 0x10951]
test ecx, ecx
je 0x407564
mov edx, dword [ebp + 0xc]
cmp dword [edx], 0
jne 0x40752e
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x10], 0
je 0x407551
push 1
push 0
push 0
push str.Install__unattended_:_Desktop
call fcn.0040ffb0
add esp, 0x10
mov byte [ebp - 0x10951], 0
mov byte [ebp - 0x21401], 0
jmp 0x407564
push 1
push 0
push 0
push str.Install:_Combined
call fcn.0040ffb0
add esp, 0x10
mov ecx, dword [ebp - 0x10fb4]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x407577
jmp 0x407594
lea ecx, [ebp - 0x10fb8]
call fcn.00409b30
push 0x48e9a4
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0xa
lea ecx, [ebp - 0x211f4]
call fcn.0040afe0
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x20fc0], 0
lea eax, [ebp - 0x10f84]
push eax
push 0x48e9c4
lea ecx, [ebp - 0x21a44]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x21a48], 0
mov edx, dword [ebp - 0x10f8c]
mov dword [ebp - 0x42f3c], edx
mov eax, dword [ebp - 0x10f90]
mov dword [ebp - 0x42f40], eax
lea ecx, [ebp - 0x21a48]
push ecx
push 0x48e9e0
mov edx, dword [ebp - 0x42f3c]
push edx
mov eax, dword [ebp - 0x42f40]
push eax
call fcn.0040ca90
add esp, 0x10
mov dword [ebp - 0x21a4c], eax
cmp dword [ebp - 0x21a4c], 0
je 0x407661
cmp dword [ebp - 0x21a48], 0
jbe 0x407661
lea ecx, [ebp - 0x211f4]
push ecx
lea edx, [ebp - 0x10f84]
push edx
push str.config
lea eax, [ebp - 0x10f98]
push eax
call fcn.0040a120
add esp, 0x10
mov dword [ebp - 0x21a50], eax
xor ecx, ecx
cmp dword [ebp - 0x21a50], 0
setge cl
mov dword [ebp - 0x20fc0], ecx
cmp dword [ebp - 0x20fc0], 0
je 0x407676
mov dword [ebp - 0x43358], str.Custom_Config_Ver
jmp 0x407680
mov dword [ebp - 0x43358], str.Ordinary_Configuration
push 1
push 0
push 0
mov edx, dword [ebp - 0x43358]
push edx
call fcn.00410090
add esp, 0x10
lea eax, [ebp - 0x21a44]
push eax
push 0x103
lea ecx, [ebp - 0x10d64]
push ecx
push 0
push str.ShortProductName
push str.CONFIG
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 0x2183c], eax
cmp dword [ebp - 0x2183c], 0
je 0x407717
lea edx, [ebp - 0x10d64]
push edx
push str._s_Setup
lea eax, [ebp - 0x21c5c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov ecx, dword [ebp - 0x10fb4]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x4076f8
jmp 0x407717
lea ecx, [ebp - 0x10fb8]
call fcn.00409b30
lea edx, [ebp - 0x21c5c]
push edx
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, dword [ebp + 0xc]
xor edx, edx
cmp dword [ecx], 0
sete dl
mov dword [ebp - 0x42f60], edx
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x40773b
jmp 0x407763
mov ecx, dword [ebp - 0x42f60]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp dword [ebp - 0x20fc0], 0
je 0x4077ea
mov dword [ebp - 0x21c64], 0
mov ecx, dword [ebp - 0x10f8c]
mov dword [ebp - 0x42f64], ecx
mov edx, dword [ebp - 0x10f90]
mov dword [ebp - 0x42f68], edx
lea eax, [ebp - 0x21c64]
push eax
push 0x48ea9c
mov ecx, dword [ebp - 0x42f64]
push ecx
mov edx, dword [ebp - 0x42f68]
push edx
call fcn.0040ca90
add esp, 0x10
mov dword [ebp - 0x21c60], eax
cmp dword [ebp - 0x21c60], 0
je 0x4077ea
cmp dword [ebp - 0x21c64], 0
jbe 0x4077ea
lea eax, [ebp - 0x211f4]
push eax
lea ecx, [ebp - 0x10f84]
push ecx
push str.confres
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a120
add esp, 0x10
mov dword [ebp - 0x211dc], 0
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x14], 0
jne 0x4079e6
push 0
lea ecx, [ebp - 0x10f84]
push ecx
push 0x48eabc
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a120
add esp, 0x10
mov dword [ebp - 0x21e74], eax
cmp dword [ebp - 0x21e74], 0
jge 0x40789e
mov eax, dword [ebp - 0x21e74]
push eax
lea ecx, [ebp - 0x10f84]
push ecx
push str.Cant_unpack_roboform.bin_to
push 0
call fcn.0040b330
add esp, 0x10
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42dc0], 0xfffffffd
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42dc0]
jmp 0x409602
call fcn.004145e0
movzx eax, al
test eax, eax
je 0x4078ee
push 0
lea ecx, [ebp - 0x10f84]
push ecx
push 0x48eaf0
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a120
add esp, 0x10
mov dword [ebp - 0x21e74], eax
cmp dword [ebp - 0x21e74], 0
jge 0x4078ee
push 1
mov eax, dword [ebp - 0x21e74]
push eax
push 0
push str.No_x64_binaries_to_unpack__or_an_error_occurred
call fcn.00410090
add esp, 0x10
push str.Extracting_Language_Files...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
push 0x2bc
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
push 0
lea ecx, [ebp - 0x10f84]
push ecx
push str.langs
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a120
add esp, 0x10
mov dword [ebp - 0x21e74], eax
xor eax, eax
cmp dword [ebp - 0x21e74], 0
setge al
mov dword [ebp - 0x21e70], eax
cmp dword [ebp - 0x21e70], 0
je 0x407958
mov dword [ebp - 0x4335c], str.MULTILANGUAGE_Ver
jmp 0x407962
mov dword [ebp - 0x4335c], str.ENGLISH_Ver
push 1
push 0
push 0
mov ecx, dword [ebp - 0x4335c]
push ecx
call fcn.00410090
add esp, 0x10
push 0x320
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
push str.Extracting...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
lea edx, [ebp - 0x10f84]
push edx
push str._s_affid.txt
lea eax, [ebp - 0x21e6c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 1
lea ecx, [ebp - 0x21e6c]
push ecx
push 0x48ec14
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a380
add esp, 0x10
mov dword [ebp - 0x21e74], eax
push 0x384
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
mov dword [ebp - 0x21828], 0
mov eax, dword [ebp + 0xc]
cmp dword [eax + 8], 0
jne 0x407a85
mov ecx, dword [ebp - 0x10f8c]
mov dword [ebp - 0x4302c], ecx
mov edx, dword [ebp - 0x10f90]
mov dword [ebp - 0x43030], edx
lea eax, [ebp - 0x21e7c]
push eax
push 0x48ec20
mov ecx, dword [ebp - 0x4302c]
push ecx
mov edx, dword [ebp - 0x43030]
push edx
call fcn.0040ca90
add esp, 0x10
mov dword [ebp - 0x21e78], eax
xor eax, eax
cmp dword [ebp - 0x21e78], 0
setne al
mov dword [ebp - 0x21828], eax
cmp dword [ebp - 0x21828], 0
je 0x407a64
mov dword [ebp - 0x43360], str.PORTABLE_Ver
jmp 0x407a6e
mov dword [ebp - 0x43360], str.FIXED_Ver
push 1
push 0
push 0
mov ecx, dword [ebp - 0x43360]
push ecx
call fcn.0040ffb0
add esp, 0x10
jmp 0x407a98
push 1
push 0
push 0
push str.FORCE_FIXED_Ver
call fcn.0040ffb0
add esp, 0x10
cmp dword [ebp - 0x21828], 0
je 0x407b44
mov dword [ebp - 0x21e80], 0
mov edx, dword [ebp - 0x10f8c]
mov dword [ebp - 0x43034], edx
mov eax, dword [ebp - 0x10f90]
mov dword [ebp - 0x43038], eax
lea ecx, [ebp - 0x21e80]
push ecx
push 0x48ec60
mov edx, dword [ebp - 0x43034]
push edx
mov eax, dword [ebp - 0x43038]
push eax
call fcn.0040ca90
add esp, 0x10
mov dword [ebp - 0x21e84], eax
cmp dword [ebp - 0x21e84], 0
je 0x407b1e
cmp dword [ebp - 0x21e80], 0
jbe 0x407b1e
push 0
lea ecx, [ebp - 0x10f84]
push ecx
push 0x48ec70
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a120
add esp, 0x10
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0xc], 0
je 0x407b44
push 0
lea ecx, [ebp - 0x10f84]
push ecx
push 0x48ec80
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a120
add esp, 0x10
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0xc], 0
je 0x407bbf
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 0x14], 0
jne 0x407b62
mov dword [ebp - 0x43364], 0
jmp 0x407b78
mov edx, dword [ebp - 0x20fc0]
neg edx
sbb edx, edx
and edx, 3
add edx, 0xfffffffd
mov dword [ebp - 0x43364], edx
mov eax, dword [ebp - 0x43364]
mov dword [ebp - 0x42dc4], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42dc4]
jmp 0x409602
push 0x208
lea ecx, [ebp - 0x211d4]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x211d4]
push edx
call fcn.0040b1e0
add esp, 4
mov dword [ebp - 0x10950], eax
mov word [ebp - 0x1094c], 0
cmp dword [ebp - 0x10950], 0
je 0x407c0e
mov eax, dword [ebp - 0x10950]
push eax
lea ecx, [ebp - 0x1094c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebp - 0x10950], 0
je 0x407c41
mov edx, dword [ebp - 0x10950]
lea eax, [ebp - 0x211d4]
cmp edx, eax
je 0x407c41
mov ecx, dword [ebp - 0x10950]
mov word [ecx], 0
lea edx, [ebp - 0x211d4]
push edx
call fcn.0040f7b0
add esp, 4
mov dword [ebp - 0x10d78], 0
lea eax, [ebp - 0x211d4]
push eax
push str._InstallerDir
push 0x48ecb0
push 0x80000001
call fcn.0040d2f0
add esp, 0x10
mov dword [ebp - 0x10d78], eax
cmp dword [ebp - 0x10d78], 0
je 0x407cd5
mov ecx, dword [ebp - 0x10d78]
push ecx
push 0
push 0x48ece0
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42dc8], 0xfffffffb
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42dc8]
jmp 0x409602
push 0x48ed28
push 0x48ed3c
push 0x80000001
call fcn.0040d5a0
add esp, 0xc
movzx edx, byte [ebp - 0x10951]
test edx, edx
je 0x407d03
mov dword [ebp - 0x43368], 0
jmp 0x407d19
movzx eax, byte [ebp - 0x21401]
neg eax
sbb eax, eax
neg eax
add eax, 1
mov dword [ebp - 0x43368], eax
mov ecx, dword [ebp - 0x43368]
push ecx
push str._InstallerType
push 0x48ed8c
push 0x80000001
call fcn.0040d440
add esp, 0x10
mov dword [ebp - 0x10d78], eax
cmp dword [ebp - 0x10d78], 0
je 0x407da3
mov edx, dword [ebp - 0x10d78]
push edx
push 0
push str.Roboform_Setup_can_not_write_registry_settings_and_will_be_cancelled
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42dcc], 0xfffffffb
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42dcc]
jmp 0x409602
mov dword [ebp - 0x20fcc], str._options
mov dword [ebp - 0x20fc8], str._passwd
mov dword [ebp - 0x20fc4], 0
mov dword [ebp - 0x21e88], 0
jmp 0x407ddc
mov eax, dword [ebp - 0x21e88]
add eax, 1
mov dword [ebp - 0x21e88], eax
mov ecx, dword [ebp - 0x21e88]
cmp dword [ebp + ecx*4 - 0x20fcc], 0
je 0x4080ca
mov word [ebp - 0x22094], 0
push 0x104
lea edx, [ebp - 0x22094]
push edx
mov eax, dword [ebp - 0x21e88]
mov ecx, dword [ebp + eax*4 - 0x20fcc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0040f780
add esp, 0x10
test eax, eax
je 0x407eac
lea eax, [ebp - 0x22094]
push eax
lea ecx, [ebp - 0x42dd4]
call fcn.00401de0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x42e14]
or ecx, 1
mov dword [ebp - 0x42e14], ecx
lea edx, [ebp - 0x42dd4]
push edx
lea eax, [ebp - 0x42dd8]
push eax
call fcn.004104f0
add esp, 8
mov dword [ebp - 0x4336c], eax
mov ecx, dword [ebp - 0x4336c]
mov dword [ebp - 0x43370], ecx
mov dword [ebp - 4], 0x10
mov edx, dword [ebp - 0x42e14]
or edx, 2
mov dword [ebp - 0x42e14], edx
mov eax, dword [ebp - 0x43370]
push eax
call fcn.00412c70
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x407eac
mov dword [ebp - 0x43374], 1
jmp 0x407eb6
mov dword [ebp - 0x43374], 0
mov dl, byte [ebp - 0x43374]
mov byte [ebp - 0x42dcd], dl
mov dword [ebp - 4], 0xf
mov eax, dword [ebp - 0x42e14]
and eax, 2
je 0x407f00
and dword [ebp - 0x42e14], 0xfffffffd
mov dword [ebp - 4], 0x11
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x42dd8]
sub ecx, 0x14
mov dword [ebp - 0x43064], ecx
mov ecx, dword [ebp - 0x43064]
call fcn.004102a0
mov dword [ebp - 4], 0xe
mov edx, dword [ebp - 0x42e14]
and edx, 1
je 0x407f3b
and dword [ebp - 0x42e14], 0xfffffffe
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x42dd4]
sub eax, 0x14
mov dword [ebp - 0x43068], eax
mov ecx, dword [ebp - 0x43068]
call fcn.004102a0
movzx ecx, byte [ebp - 0x42dcd]
test ecx, ecx
je 0x4080c5
mov word [ebp - 0x2229c], 0
lea edx, [ebp - 0x211d4]
push edx
lea eax, [ebp - 0x2229c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x2229c]
push ecx
call fcn.0040b260
add esp, 4
lea edx, [ebp - 0x22094]
push edx
lea eax, [ebp - 0x2229c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea ecx, [ebp - 0x2229c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x408008
push 2
lea edx, [ebp - 0x2229c]
push edx
push str.Could_not_find_the_specified_file:
push 0
call fcn.0040b330
add esp, 0x10
lea eax, [ebp - 0x10f84]
push eax
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42ddc], 0xffffffff
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42ddc]
jmp 0x409602
push 1
push 0
push str.param___copy_file:
mov ecx, dword [ebp - 0x21e88]
mov edx, dword [ebp + ecx*4 - 0x20fcc]
push edx
call fcn.00410090
add esp, 0x10
push 1
push 0
lea eax, [ebp - 0x2229c]
push eax
push str.__________________from
call fcn.0040ffb0
add esp, 0x10
lea ecx, [ebp - 0x10f84]
push ecx
lea edx, [ebp - 0x2229c]
push edx
call fcn.0040be90
add esp, 8
test eax, eax
jne 0x4080c5
push 2
lea eax, [ebp - 0x2229c]
push eax
push str.Could_not_copy_the_specified_file:
push 0
call fcn.0040b330
add esp, 0x10
lea ecx, [ebp - 0x10f84]
push ecx
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42de0], 0xffffffff
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42de0]
jmp 0x409602
jmp 0x407dcd
cmp dword [ebp - 0x21828], 0
je 0x4080df
mov dword [ebp - 0x43378], 0x48eeb4
jmp 0x4080e9
mov dword [ebp - 0x43378], 0x48eebc
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x43378]
push eax
push 0x48eec4
lea ecx, [ebp - 0x10024]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0x3e8
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x40812c
jmp 0x408150
xor eax, eax
neg eax
sbb eax, eax
and eax, 5
push eax
mov ecx, dword [ebp - 0x10fb4]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
push 1
push 0x48eed0
push 0x48eef0
push 0x80000001
call fcn.0040d440
add esp, 0x10
mov dword [ebp - 0x21400], 0
mov dword [ebp - 0x21618], 0
push 0
push 1
push 1
lea eax, [ebp - 0x21618]
push eax
lea ecx, [ebp - 0x10024]
push ecx
push 0x48ef20
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040c370
add esp, 0x1c
mov dword [ebp - 0x21400], eax
cmp dword [ebp - 0x21400], 0
jge 0x408230
mov eax, dword [ebp - 0x21400]
push eax
lea ecx, [ebp - 0x10f84]
push ecx
push str.Can_not_run
push 0
call fcn.0040b330
add esp, 0x10
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42de4], 0xfffffffa
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42de4]
jmp 0x409602
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x1c]
push eax
push str._CancelInstall
push 0x48ef6c
push 0x80000001
call fcn.0040d190
add esp, 0x10
cmp dword [ebp - 0x1c], 0
je 0x4082cf
push 1
mov ecx, dword [ebp - 0x21618]
push ecx
push 0
push str.RfWipeout_cancelled
call fcn.0040ffb0
add esp, 0x10
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42de8], 0xfffffff8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42de8]
jmp 0x409602
mov word [ebp - 0x21614], 0
cmp dword [ebp - 0x21828], 0
je 0x4082ed
mov dword [ebp - 0x4337c], str.RoboFormFolderPort
jmp 0x4082f7
mov dword [ebp - 0x4337c], str.RoboFormFolder
push 0x208
lea eax, [ebp - 0x21614]
push eax
mov ecx, dword [ebp - 0x4337c]
push ecx
push 0x48eff8
push 0x80000001
call fcn.0040cf00
add esp, 0x14
mov dword [ebp - 0x10d78], eax
push 1
push 0
lea edx, [ebp - 0x21614]
push edx
push str.RoboFormFolder_set_to
call fcn.0040ffb0
add esp, 0x10
cmp dword [ebp - 0x10d78], 0
jne 0x408354
lea eax, [ebp - 0x21614]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x4083c0
mov ecx, dword [ebp - 0x10d78]
push ecx
push 0
push str.Installation_folder_is_not_specified._Please__run_Setup_again_and_report_this_error_to_ask_roboform.com
push 0
call fcn.0040b330
add esp, 0x10
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42dec], 0xfffffff7
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42dec]
jmp 0x409602
lea eax, [ebp - 0x21614]
push eax
call fcn.0040f7b0
add esp, 4
push 0x208
lea ecx, [ebp - 0x10b5c]
push ecx
push str.LocalizationFile
push 0x48f0d0
push 0x80000001
call fcn.0040cf00
add esp, 0x14
mov dword [ebp - 0x10d78], eax
mov dword [ebp - 0x10d7c], 0
cmp dword [ebp - 0x21828], 0
jne 0x40846b
push 0x80
lea edx, [ebp - 0x2231c]
push edx
push str._UseAdminFiles
push 0x48f130
push 0x80000001
call fcn.0040cf00
add esp, 0x14
mov dword [ebp - 0x10d78], eax
push 1
push 0
lea eax, [ebp - 0x2231c]
push eax
push str._UseAdminFiles:
call fcn.0040ffb0
add esp, 0x10
push 0x48f174
lea ecx, [ebp - 0x2231c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x10d7c], eax
mov dword [ebp - 0x21408], 1
lea edx, [ebp - 0x21408]
push edx
push str._WasFresh
push 0x48f190
push 0x80000001
call fcn.0040d190
add esp, 0x10
push str.Copying_Files...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
push 0
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
mov eax, dword [ebp - 0x211dc]
neg eax
sbb eax, eax
and eax, 0xfffffff3
add eax, 0x1e
push eax
lea ecx, [ebp - 0x10fb8]
call fcn.00409ad0
mov ecx, dword [ebp + 0xc]
xor edx, edx
cmp dword [ecx], 0
sete dl
mov dword [ebp - 0x43138], edx
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x4084f0
jmp 0x408518
mov ecx, dword [ebp - 0x43138]
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [0x4c5ce4], 0
cmp dword [ebp - 0x10d7c], 0
jne 0x40854a
push 0
lea ecx, [ebp - 0x21614]
push ecx
push 0x40c070
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040bab0
add esp, 0x10
jmp 0x40855d
push 1
push 0
push 0
push str.____Copying_files_skipped_by_bUseAdmin
call fcn.0040ffb0
add esp, 0x10
cmp dword [ebp - 0x21828], 0
je 0x4085db
cmp dword [0x4c5ce4], 0
je 0x4085db
push 0
lea eax, [ebp - 0x21614]
push eax
push 0x48f210
push 0
call fcn.0040b330
add esp, 0x10
lea ecx, [ebp - 0x10f84]
push ecx
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42df0], 0xfffffff6
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42df0]
jmp 0x409602
mov word [ebp - 0x1043c], 0
mov word [ebp - 0x1022c], 0
mov dword [ebp - 0x10d74], 0x48f258
mov dword [ebp - 0x10d70], str.roboform.dll
mov dword [ebp - 0x10d6c], str.affid.txt
lea edx, [ebp - 0x1022c]
mov dword [ebp - 0x10d68], edx
mov dword [ebp - 0x10230], 4
lea eax, [ebp - 0x10b5c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x408678
mov ecx, dword [ebp - 0x10230]
mov edx, dword [ebp + ecx*4 - 0x10d78]
add edx, 8
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp dword [ebp - 0x10], eax
jge 0x408678
lea eax, [ebp - 0x10b5c]
push eax
push str._s.rfi
mov ecx, dword [ebp - 0x10230]
mov edx, dword [ebp + ecx*4 - 0x10d78]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x408689
mov eax, dword [ebp - 0x10230]
mov dword [ebp + eax*4 - 0x10d78], 0
cmp dword [ebp - 0x21828], 0
je 0x408af1
push 0x208
lea ecx, [ebp - 0x1043c]
push ecx
push str._PortableRootFolder
push 0x48f2e0
push 0x80000001
call fcn.0040cf00
add esp, 0x14
mov dword [ebp - 0x10d78], eax
cmp dword [ebp - 0x10d78], 0
jne 0x4086d9
lea edx, [ebp - 0x1043c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x408745
mov eax, dword [ebp - 0x10d78]
push eax
push 0
push str.Root_folder_for_RoboForm2Go_is_not_specified._Please__run_Setup_again_and_report_this_error_to_ask_roboform.com
push 0
call fcn.0040b330
add esp, 0x10
lea ecx, [ebp - 0x10f84]
push ecx
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42df4], 0xfffffff5
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42df4]
jmp 0x409602
cmp dword [ebp - 0x20fc0], 0
je 0x40877e
lea edx, [ebp - 0x10d64]
push edx
push str.Copying__s_Files...
lea eax, [ebp - 0x22734]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x22734]
push ecx
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
jmp 0x40878e
push str.Copying_RoboForm2Go_Files...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
push 0
lea edx, [ebp - 0x1043c]
push edx
push str.portable
lea eax, [ebp - 0x10f98]
push eax
call fcn.0040a120
add esp, 0x10
mov dword [ebp - 0x21400], eax
cmp dword [ebp - 0x21400], 0
jge 0x40882b
mov ecx, dword [ebp - 0x21400]
push ecx
lea edx, [ebp - 0x1043c]
push edx
push str.Cant_unpack_RoboForm2Go_files_to
push 0
call fcn.0040b330
add esp, 0x10
lea eax, [ebp - 0x10f84]
push eax
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42df8], 0xfffffff9
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42df8]
jmp 0x409602
push 0
lea ecx, [ebp - 0x1043c]
push ecx
push str.portres
lea edx, [ebp - 0x10f98]
push edx
call fcn.0040a120
add esp, 0x10
mov dword [ebp - 0x21400], eax
mov dword [ebp - 0x22738], 0
jmp 0x408869
mov eax, dword [ebp - 0x22738]
add eax, 1
mov dword [ebp - 0x22738], eax
mov ecx, dword [ebp - 0x22738]
cmp ecx, dword [ebp - 0x10230]
jge 0x4088ed
mov edx, dword [ebp - 0x22738]
cmp dword [ebp + edx*4 - 0x10d74], 0
je 0x4088ed
mov eax, dword [ebp - 0x22738]
mov ecx, dword [ebp + eax*4 - 0x10d74]
push ecx
lea edx, [ebp - 0x10f84]
push edx
push 0x48f42c
lea eax, [ebp - 0x22524]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x10644]
push ecx
lea edx, [ebp - 0x22524]
push edx
call fcn.0040be90
add esp, 8
test eax, eax
jne 0x4088e8
push 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x22524]
push eax
push 0x48f438
call fcn.0040ffb0
add esp, 0x10
jmp 0x40885a
mov ecx, dword [ebp - 0x211f4]
mov dword [ebp - 0x2252c], ecx
cmp dword [ebp - 0x2252c], 0
je 0x4089c6
xor edx, edx
cmp dword [ebp - 0x2252c], 0
setne dl
mov dword [ebp - 0x431ac], edx
cmp dword [ebp - 0x431ac], 0
jne 0x408938
push 0x5b7
push 0x48fe84
push 0x80004005
call fcn.00412870
add esp, 0xc
xor eax, eax
jne 0x408906
mov ecx, dword [ebp - 0x2252c]
mov dword [ebp - 0x431a8], ecx
mov edx, dword [ebp - 0x431a8]
mov eax, dword [edx]
mov dword [ebp - 0x2252c], eax
mov ecx, dword [ebp - 0x431a8]
add ecx, 8
mov dword [ebp - 0x2273c], ecx
mov edx, dword [ebp - 0x2273c]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x10f84]
push ecx
push 0x48f44c
lea edx, [ebp - 0x22524]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x10644]
push eax
lea ecx, [ebp - 0x22524]
push ecx
call fcn.0040be90
add esp, 8
test eax, eax
jne 0x4089c1
push 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [ebp - 0x22524]
push edx
push str.Err_copying_file
call fcn.0040ffb0
add esp, 0x10
jmp 0x4088f9
push 0x12c
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
push 0x190
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
lea eax, [ebp - 0x21614]
push eax
push str._sAiRoboForm_Portable.bin
lea ecx, [ebp - 0x22524]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 1
push 0
lea edx, [ebp - 0x21824]
push edx
push str.Copy_fr
call fcn.0040ffb0
add esp, 0x10
push 1
push 0
lea eax, [ebp - 0x22524]
push eax
push str.Copy_to
call fcn.0040ffb0
add esp, 0x10
push 0
lea ecx, [ebp - 0x22524]
push ecx
lea edx, [ebp - 0x21824]
push edx
call fcn.0040bd70
add esp, 0xc
mov dword [ebp - 0x22528], eax
cmp dword [ebp - 0x22528], 0
jne 0x408a76
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x22524]
push eax
push str.FAILED_to_copy_RoboForm2Go_to
push 1
call fcn.0040b330
add esp, 0x10
lea ecx, [ebp - 0x10b5c]
push ecx
lea edx, [ebp - 0x10f84]
push edx
push str._s_s.rfi
lea eax, [ebp - 0x22524]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x21614]
push ecx
lea edx, [ebp - 0x22524]
push edx
call fcn.0040be90
add esp, 8
lea eax, [ebp - 0x10f84]
push eax
push str._sconfig.rfo
lea ecx, [ebp - 0x22524]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x21614]
push edx
lea eax, [ebp - 0x22524]
push eax
call fcn.0040be90
add esp, 8
push 0x320
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
cmp dword [ebp - 0x21828], 0
jne 0x408d4b
cmp dword [ebp - 0x10d7c], 0
je 0x408d11
mov dword [ebp - 0x22748], 0
lea ecx, [ebp - 0x22748]
push ecx
push str._NetscapeAdapterNeeded
push 0x48f534
push 0x80000001
call fcn.0040d190
add esp, 0x10
mov dword [ebp - 0x22744], 0
lea edx, [ebp - 0x22744]
push edx
push str._AllUsers
push 0x48f578
push 0x80000001
call fcn.0040d190
add esp, 0x10
cmp dword [ebp - 0x22744], 0
jne 0x408b70
mov dword [ebp - 0x43380], 0x48f5a8
jmp 0x408b7a
mov dword [ebp - 0x43380], 0x48f5ac
mov eax, dword [ebp - 0x22748]
push eax
mov ecx, dword [ebp - 0x43380]
push ecx
lea edx, [ebp - 0x10644]
push edx
lea eax, [ebp - 0x21614]
push eax
lea ecx, [ebp - 0x10f84]
push ecx
push 0x48f5b0
lea edx, [ebp - 0x3274c]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push 1
push 1
push 1
lea eax, [ebp - 0x22740]
push eax
lea ecx, [ebp - 0x3274c]
push ecx
lea edx, [ebp - 0x1094c]
push edx
lea eax, [ebp - 0x211d4]
push eax
call fcn.0040c370
add esp, 0x1c
mov dword [ebp - 0x21400], eax
cmp dword [ebp - 0x21400], 0
jge 0x408c5c
mov ecx, dword [ebp - 0x21400]
push ecx
lea edx, [ebp - 0x1094c]
push edx
push str.Can_not_start_admin_process_to_copy_program_files
push 0
call fcn.0040b330
add esp, 0x10
lea eax, [ebp - 0x10f84]
push eax
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42dfc], 0xfffffffa
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42dfc]
jmp 0x409602
cmp dword [ebp - 0x22740], 0
je 0x408cdf
cmp dword [ebp - 0x22740], 0xfffffff6
je 0x408cdf
push 1
mov ecx, dword [ebp - 0x22740]
push ecx
lea edx, [ebp - 0x1094c]
push edx
push str.program_files_was_not_copied
call fcn.0040ffb0
add esp, 0x10
lea eax, [ebp - 0x10f84]
push eax
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42e00], 0xfffffff9
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42e00]
jmp 0x409602
push 1
mov ecx, dword [ebp - 0x22740]
push ecx
lea edx, [ebp - 0x21614]
push edx
push str.Admin_process_moved_RF_program_files_to
call fcn.0040ffb0
add esp, 0x10
cmp dword [ebp - 0x22740], 0xfffffff6
jne 0x408d0f
mov dword [0x4c5ce4], 1
jmp 0x408d4b
lea eax, [ebp - 0x10fb8]
push eax
lea ecx, [ebp - 0x21614]
push ecx
push 0x40bf10
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040bab0
add esp, 0x10
push 1
push 0
lea eax, [ebp - 0x21614]
push eax
push 0x48f6b8
call fcn.0040ffb0
add esp, 0x10
cmp dword [ebp - 0x21828], 0
jne 0x408d72
cmp dword [ebp - 0x21408], 0
je 0x408d66
cmp dword [0x4c5ce4], 0
je 0x408d72
mov dword [ebp - 0x43384], 1
jmp 0x408d7c
mov dword [ebp - 0x43384], 0
mov ecx, dword [ebp - 0x43384]
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0
je 0x408d9e
push 1
push 0
push 0
push str.____REBOOT_required
call fcn.0040ffb0
add esp, 0x10
push 0x3de
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
cmp dword [ebp - 0x21828], 0
je 0x408dc3
mov dword [ebp - 0x43388], 0x48f6e8
jmp 0x408dcd
mov dword [ebp - 0x43388], 0x48f6f0
mov edx, dword [ebp - 0x43388]
push edx
lea eax, [ebp - 0x20fbc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 0
je 0x408dfb
push 0x48f6f8
lea edx, [ebp - 0x20fbc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x10], 0
je 0x408e16
push 0x48f6fc
lea ecx, [ebp - 0x20fbc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x104
lea edx, [ebp - 0x213fc]
push edx
push 0x48f700
mov eax, dword [ebp + 8]
push eax
call fcn.0040f780
add esp, 0x10
test eax, eax
je 0x408e6f
push str.__act_
lea ecx, [ebp - 0x20fbc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x213fc]
push edx
lea eax, [ebp - 0x20fbc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x48f71c
lea ecx, [ebp - 0x20fbc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
call fcn.004101e0
mov dword [ebp - 0x43258], eax
mov edx, dword [ebp - 0x43258]
add edx, 0x14
mov dword [ebp - 0x42e08], edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebp + 8]
push eax
call fcn.00401ee0
add esp, 4
push eax
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x42e08]
call fcn.00401f30
mov byte [ebp - 4], 0x14
push 0
push 1
push 0
push 0x48f720
lea edx, [ebp - 0x42e08]
push edx
call fcn.00414770
add esp, 0x14
xor ecx, ecx
test eax, eax
setge cl
mov byte [ebp - 0x42e01], cl
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x42e08]
sub edx, 0x14
mov dword [ebp - 0x4325c], edx
mov ecx, dword [ebp - 0x4325c]
call fcn.004102a0
movzx eax, byte [ebp - 0x42e01]
test eax, eax
je 0x408f13
push str.__lpip
lea ecx, [ebp - 0x20fbc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
cmp dword [ebp - 0x18], 0
je 0x4091aa
push 1
mov edx, dword [0x4c5ce4]
push edx
push 0
push str.RunSfx_____configuring_post_reboot
call fcn.0040ffb0
add esp, 0x10
push str.Configuring_Post_reboot_actions...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
push 0
lea eax, [ebp - 0x21614]
push eax
push 0x40c1c0
lea ecx, [ebp - 0x10f84]
push ecx
call fcn.0040bab0
add esp, 0x10
mov dword [ebp - 0x32750], eax
lea edx, [ebp - 0x10f84]
push edx
call fcn.0040a520
add esp, 4
cmp dword [ebp - 0x32750], 0
jne 0x408fd8
push 0
push 0
push str.Some_files_remain_locked_and_can_not_be_copied_after_reboot._nSetup_is_not_complete__you_must_reinstall_RoboForm_from_Administartor_account.
push 0
call fcn.0040b330
add esp, 0x10
mov dword [ebp - 0x42e0c], 0xfffffff6
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42e0c]
jmp 0x409602
mov dword [ebp - 0x32758], 0
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x43290], 0
lea eax, [ebp - 0x43298]
push eax
lea ecx, [ebp - 0x43290]
push ecx
push 0
push 0x2001f
push 0
push 0
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionRunOnce
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [ebp - 0x43294], eax
xor edx, edx
je 0x409030
mov eax, dword [ebp - 0x43298]
mov dword [0], eax
cmp dword [ebp - 0x43294], 0
jne 0x409081
mov dword [ebp - 0x4329c], 0
cmp dword [ebp - 0x32758], 0
je 0x409069
mov ecx, dword [ebp - 0x32758]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x4329c], eax
mov dword [ebp - 0x32758], 0
mov edx, dword [ebp - 0x4329c]
mov dword [ebp - 0x43294], edx
mov eax, dword [ebp - 0x43290]
mov dword [ebp - 0x32758], eax
mov ecx, dword [ebp - 0x43294]
mov dword [ebp - 0x32754], ecx
cmp dword [ebp - 0x32754], 0
je 0x4090b3
push 1
mov edx, dword [ebp - 0x32754]
push edx
push 0
push str.Failed_to_open_RunOnce
call fcn.0040ffb0
add esp, 0x10
jmp 0x409159
call dword [sym.imp.KERNEL32.dll_GetVersion]
and eax, 0xffff
movzx eax, ax
and eax, 0xff
movzx ecx, al
cmp ecx, 6
jb 0x4090f8
lea edx, [ebp - 0x20fbc]
push edx
push str.is__arg
lea eax, [ebp - 0x21614]
push eax
push str.__s_rfwipeout.exe___s_s
lea ecx, [ebp - 0x4275c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
jmp 0x40911b
lea edx, [ebp - 0x20fbc]
push edx
lea eax, [ebp - 0x21614]
push eax
push str.__sidentities.exe___s
lea ecx, [ebp - 0x4275c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0xffffffffffffffff
push 0
push 0x48f924
lea edx, [ebp - 0x4275c]
push edx
lea ecx, [ebp - 0x32758]
call fcn.00409620
mov dword [ebp - 0x32754], eax
push 1
mov eax, dword [ebp - 0x32754]
push eax
lea ecx, [ebp - 0x4275c]
push ecx
push str.Post_setup_scheduled
call fcn.0040ffb0
add esp, 0x10
mov edx, dword [ebp + 0xc]
cmp dword [edx + 0x10], 0
jne 0x409171
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.0040c910
add esp, 4
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x432a8], 0
cmp dword [ebp - 0x32758], 0
je 0x4091a5
mov edx, dword [ebp - 0x32758]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x432a8], eax
mov dword [ebp - 0x32758], 0
jmp 0x409581
push str.Deleting_Temporary_Files...
lea ecx, [ebp - 0x10fb8]
call fcn.00409a10
lea eax, [ebp - 0x10f84]
push eax
call fcn.0040a520
add esp, 4
mov dword [ebp - 0x42b70], 0
mov word [ebp - 0x42b6c], 0
push 0x104
lea ecx, [ebp - 0x42b6c]
push ecx
push str._setmp
mov edx, dword [ebp + 8]
push edx
call fcn.0040f780
add esp, 0x10
test eax, eax
je 0x409207
mov dword [ebp - 0x42b70], 1
mov word [ebp - 0x42964], 0
push 0x104
lea eax, [ebp - 0x42964]
push eax
push str._oldmp
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040f780
add esp, 0x10
mov edx, dword [ebp - 0x42b70]
neg edx
sbb edx, edx
and edx, 0xffffff38
add edx, 0x3e8
push edx
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x409262
jmp 0x409286
xor ecx, ecx
neg ecx
sbb ecx, ecx
and ecx, 5
push ecx
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp dword [ebp - 0x21828], 0
je 0x40929d
lea ecx, [ebp - 0x10644]
mov dword [ebp - 0x4338c], ecx
jmp 0x4092a9
lea edx, [ebp - 0x21614]
mov dword [ebp - 0x4338c], edx
push 0
push 1
push 1
push 0
lea eax, [ebp - 0x20fbc]
push eax
push 0x48f9a8
mov ecx, dword [ebp - 0x4338c]
push ecx
call fcn.0040c370
add esp, 0x1c
cmp dword [ebp - 0x21828], 0
je 0x40945d
mov dword [ebp - 0x42d84], 0
jmp 0x4092f4
mov edx, dword [ebp - 0x42d84]
add edx, 1
mov dword [ebp - 0x42d84], edx
mov eax, dword [ebp - 0x42d84]
cmp eax, dword [ebp - 0x10230]
jge 0x40937e
mov ecx, dword [ebp - 0x42d84]
cmp dword [ebp + ecx*4 - 0x10d74], 0
je 0x40937e
mov edx, dword [ebp - 0x42d84]
mov eax, dword [ebp + edx*4 - 0x10d74]
push eax
lea ecx, [ebp - 0x10644]
push ecx
push 0x48f9c8
lea edx, [ebp - 0x42d7c]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
lea eax, [ebp - 0x42d7c]
push eax
call fcn.0040bd00
add esp, 8
mov dword [ebp - 0x42d88], eax
cmp dword [ebp - 0x42d88], 0
jne 0x409379
push 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x42d7c]
push ecx
push 0x48f9d4
call fcn.0040ffb0
add esp, 0x10
jmp 0x4092e5
mov edx, dword [ebp - 0x211f4]
mov dword [ebp - 0x42d80], edx
cmp dword [ebp - 0x42d80], 0
je 0x40945d
xor eax, eax
cmp dword [ebp - 0x42d80], 0
setne al
mov dword [ebp - 0x432f8], eax
cmp dword [ebp - 0x432f8], 0
jne 0x4093c9
push 0x5b7
push 0x48fe84
push 0x80004005
call fcn.00412870
add esp, 0xc
xor ecx, ecx
jne 0x409397
mov edx, dword [ebp - 0x42d80]
mov dword [ebp - 0x432f4], edx
mov eax, dword [ebp - 0x432f4]
mov ecx, dword [eax]
mov dword [ebp - 0x42d80], ecx
mov edx, dword [ebp - 0x432f4]
add edx, 8
mov dword [ebp - 0x42d90], edx
mov eax, dword [ebp - 0x42d90]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x10644]
push edx
push 0x48f9e4
lea eax, [ebp - 0x42d7c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
lea ecx, [ebp - 0x42d7c]
push ecx
call fcn.0040bd00
add esp, 8
mov dword [ebp - 0x42d8c], eax
cmp dword [ebp - 0x42d8c], 0
jne 0x409458
push 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [ebp - 0x42d7c]
push edx
push str.Error_deleting
call fcn.0040ffb0
add esp, 0x10
jmp 0x40938a
cmp dword [ebp - 0x21828], 0
jne 0x409581
cmp dword [ebp - 0x42b70], 0
je 0x409581
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0
jne 0x4094b9
mov ecx, dword [ebp - 0x10fb4]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x409492
jmp 0x4094b9
mov edx, 1
neg edx
sbb edx, edx
and edx, 5
push edx
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 0x10fb4]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
push str._setmps__
lea edx, [ebp - 0x20fbc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x42b6c]
push eax
lea ecx, [ebp - 0x20fbc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x48fa14
lea edx, [ebp - 0x20fbc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x42964]
push eax
lea ecx, [ebp - 0x20fbc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x48fa1c
lea edx, [ebp - 0x20fbc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
push 1
push 1
push 0
lea eax, [ebp - 0x20fbc]
push eax
push 0x48fa20
lea ecx, [ebp - 0x21614]
push ecx
call fcn.0040c370
add esp, 0x1c
push 0x3e8
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x40955d
jmp 0x409581
xor eax, eax
neg eax
sbb eax, eax
and eax, 5
push eax
mov ecx, dword [ebp - 0x10fb4]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [ebp - 0x10fb4]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x3e8
lea ecx, [ebp - 0x10fb8]
call fcn.00409a70
push 1
push 0
push 0
push str.RunSfx_____END
call fcn.0040ffb0
add esp, 0x10
mov eax, dword [ebp - 0x10fb4]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4095c2
mov ecx, dword [ebp - 0x10fb4]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [ebp - 0x42e10], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x211f4]
call fcn.0040b030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10f98]
call fcn.0040ce40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10fb8]
call fcn.00409920
mov eax, dword [ebp - 0x42e10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.00466b32
mov esp, ebp
pop ebp
ret