Function at 0x42f4fa
Capabilities:
Accept command line arguments
Check internet connectivity via wininet
Contain obfuscated stackstrings
Create thread
Get common file path
Parse pe header
Read file on windows

Disassembly:
push ebp
sub esp, 0x8f8
lea ebp, [esp - 4]
mov eax, dword [0x4fc5b0]
xor eax, ebp
mov dword [ebp + 0x8f8], eax
push 0x168
mov eax, 0x4bf22a
call fcn.00492516
and dword [ebp - 0x5c], 0
lea eax, [ebp - 0x2c]
push eax
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp + 0x8e4]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea ecx, [ebp - 0x1c]
call fcn.004703d0
push dword [ebp + 0x8ee]
and dword [ebp - 4], 0
push dword [ebp + 0x8ec]
lea ecx, [ebp - 0x1c]
push dword [ebp + 0x8e4]
push dword [ebp + 0x8ea]
push dword [ebp + 0x8e6]
push str.Now__UTC__:__02d__02d__04d__02d:_02d_n
call fcn.0042914c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00470660
push dword [ebp - 0x2c]
lea eax, [esi + 0xf8]
push 0x4cf918
push eax
call fcn.00471330
mov edi, 0x4fee64
add esp, 0xc
mov ecx, edi
call fcn.0041bb3b
mov ecx, 0x4ff29c
call fcn.0042a478
mov ebx, str.help
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._help
mov dword [ebp - 4], 1
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Show_the_short_help._Use__help_long_to_show_the_long_help.
mov byte [ebp - 4], 2
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Show_this_help
mov byte [ebp - 4], 3
call fcn.00470680
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 1
call fcn.0041bd62
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00470660
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00470680
mov byte [ebp - 4], 6
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
call fcn.0041bc40
lea ecx, [ebp - 0x2c]
mov ebx, eax
mov byte [ebp - 4], 5
call fcn.00470660
test ebx, ebx
je 0x42f659
push 0
mov ecx, 0x4ff084
call fcn.0045b521
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x510]
call fcn.00419d72
push str.help_long
lea ecx, [ebp - 0x1c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._help_long
mov dword [ebp - 4], 7
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Show_the_long_help
push ebx
mov byte [ebp - 4], 8
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 9
call fcn.00470680
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 7
call fcn.0041bd62
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
call fcn.00470660
push str.help_long
lea ecx, [ebp - 0x2c]
call fcn.00470680
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.0041bc40
lea ecx, [ebp - 0x2c]
mov ebx, eax
mov byte [ebp - 4], 0xb
call fcn.00470660
test ebx, ebx
je 0x42f70f
push 1
mov ecx, 0x4ff084
call fcn.0045b521
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x510]
call fcn.00419d72
push str.help_reg
lea ecx, [ebp - 0x1c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._help_reg
mov dword [ebp - 4], 0xd
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Show_short_help_for_reg_overrides
push ebx
mov byte [ebp - 4], 0xe
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0xf
call fcn.00470680
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0xd
call fcn.0041bd62
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x11
call fcn.00470660
push str.help_reg
lea ecx, [ebp - 0x2c]
call fcn.00470680
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x12
call fcn.0041bc40
lea ecx, [ebp - 0x2c]
mov ebx, eax
mov byte [ebp - 4], 0x11
call fcn.00470660
test ebx, ebx
je 0x42f7c5
push 0
mov ecx, 0x4feb50
call fcn.0045b521
push str.help_reg_long
lea ecx, [ebp - 0x2c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._help_reg_long
mov byte [ebp - 4], 0x13
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Show_long_help_for_reg_overrides
push ebx
mov byte [ebp - 4], 0x14
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0x15
call fcn.00470680
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x13
call fcn.0041bd62
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.00470660
push str.help_reg_long
lea ecx, [ebp - 0x24]
call fcn.00470680
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x18
call fcn.0041bc40
lea ecx, [ebp - 0x24]
mov ebx, eax
mov byte [ebp - 4], 0x17
call fcn.00470660
test ebx, ebx
je 0x42f869
push 1
mov ecx, 0x4feb50
call fcn.0045b521
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x11
call fcn.00419d72
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x89c]
call fcn.00419d72
mov ebx, str.uh_pre
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._uh_pre
mov dword [ebp - 4], 0x19
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Used_when_invoking_stub_in_non_admin_mode_to_generate_an_install_prompt_and_then_optionally_restart_stub_in_admin_mode_if_the_user_chose_to_install
mov byte [ebp - 4], 0x1a
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Used_when_invoking_stub_in_non_admin_mode_to_prompt
mov byte [ebp - 4], 0x1b
call fcn.00470680
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x860]
mov byte [ebp - 4], 0x19
call fcn.0041bd62
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1d
call fcn.00470660
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00470680
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x1e
call fcn.0041bc40
lea ecx, [ebp - 0x2c]
mov dword [esi + 0x1d4], eax
mov byte [ebp - 4], 0x1d
call fcn.00470660
push str.uh_post
lea ecx, [ebp - 0x2c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._uh_post
mov byte [ebp - 4], 0x1f
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Used_by_stub_when_called_with__uh_pre_to_re_call_itself_in_admin_mode.
push ebx
mov byte [ebp - 4], 0x20
call fcn.00470680
mov byte [ebp - 4], 0x21
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
call fcn.00470680
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x1f
call fcn.0041bd62
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.00470660
push str.uh_post
lea ecx, [ebp - 0x24]
call fcn.00470680
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x24
call fcn.0041bc40
lea ecx, [ebp - 0x24]
mov dword [esi + 0x1d8], eax
mov byte [ebp - 4], 0x23
call fcn.00470660
push str.pageflownum
lea ecx, [ebp - 0x24]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._pageflownum2
mov byte [ebp - 4], 0x25
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.This_specs_the_page_to_start_in_the_page_flow
push ebx
mov byte [ebp - 4], 0x26
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0x27
call fcn.00470680
push 4
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x25
call fcn.0041bd62
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x29
call fcn.00470660
push str.pageflownum
lea ecx, [ebp - 0x34]
call fcn.00470680
lea eax, [esi + 0x1dc]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x2a
call fcn.0041ba29
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x34]
call fcn.00470660
cmp dword [esi + 0x1d4], 0
lea ecx, [ebp - 0x34]
je 0x42fa6f
push str.stubstarted_pre
call fcn.00470680
mov byte [ebp - 4], 0x2b
jmp 0x42fa96
cmp dword [esi + 0x1d8], 0
je 0x42fa88
push str.stubstarted_post
call fcn.00470680
mov byte [ebp - 4], 0x2c
jmp 0x42fa96
push str.stubstarted_standalone
call fcn.00470680
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.004448f6
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x29
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x23
call fcn.00419d72
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x1d
call fcn.00419d72
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x860]
call fcn.00419d72
mov ebx, str.orgexename
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._orgexename_blah_
mov dword [ebp - 4], 0x2e
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.When_stub_first_runs__the_extractor_copies_the_stub_to_rnsetup.exe_in__temp__and_then_executes_it_there._The_extractor_will_pass_the_original_EXE_name_using_this_parameter._The_original_name_may_have_distcode_and_web_ID_imbedded_in_it.
mov byte [ebp - 4], 0x2f
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.This_is_the_original_EXE_name_before_the_Extractor_was_called
mov byte [ebp - 4], 0x30
call fcn.00470680
push 4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x2e
call fcn.0041bd62
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x32
call fcn.00470660
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00470680
lea ebx, [esi + 0x1cc]
push ebx
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x33
call fcn.0041ba29
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0x32
call fcn.00470660
cmp dword [ebp - 0x48], 0
je 0x42fd40
push ebx
lea ecx, [ebp - 0x3c]
call fcn.004705c0
push 4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x34
call fcn.00470df0
push str..exe
push eax
mov byte [ebp - 4], 0x35
call fcn.0040d567
pop ecx
pop ecx
lea ecx, [ebp - 0x14]
mov bl, al
mov byte [ebp - 4], 0x34
call fcn.00470660
test bl, bl
je 0x42fbf2
lea ecx, [ebp - 0x3c]
call fcn.004703e0
sub eax, 4
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00470e50
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x36
call fcn.00470710
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x34
call fcn.00470660
push 2
push 0x5f
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00471000
push 3
push 0x5f
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x37
call fcn.00471000
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x38
call fcn.0040d4fd
test al, al
jne 0x42fd1c
lea ecx, [ebp - 0x24]
call fcn.004715d0
lea ecx, [ebp - 0x24]
call fcn.004703e0
cmp byte [ebp - 0x1d], 0xff
lea eax, [ebp - 0x24]
jne 0x42fc46
mov eax, dword [ebp - 0x24]
cmp byte [eax], 0x72
jne 0x42fcc3
lea ecx, [ebp - 0x24]
call fcn.004703e0
cmp eax, 5
jb 0x42fcc3
lea ecx, [ebp - 0x24]
call fcn.004703e0
cmp eax, 0xa
ja 0x42fcc3
lea eax, [ebp - 0x24]
lea ebx, [esi + 0x168]
push eax
mov ecx, ebx
call fcn.00470710
push 0x4d4b04
lea ecx, [ebp - 0x4c]
call fcn.00470680
push 0x4d02f4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.00470680
push ebx
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x3a
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.00470660
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x38
call fcn.00470660
jmp 0x42fccf
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x34]
call fcn.00470710
lea ecx, [ebp - 0x34]
call fcn.004715d0
lea ecx, [ebp - 0x34]
call fcn.0040d4fd
test al, al
jne 0x42fd1c
lea ecx, [ebp - 0x34]
call fcn.004703e0
cmp eax, 0x20
jne 0x42fd1c
cmp byte [ebp - 0x2d], 0xff
lea eax, [ebp - 0x34]
jne 0x42fcfc
mov eax, dword [ebp - 0x34]
push 0x4d4af0
push eax
call fcn.00424c1f
pop ecx
pop ecx
test eax, eax
jne 0x42fd1c
lea eax, [ebp - 0x34]
push eax
lea ecx, [esi + 0x170]
call fcn.00470710
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x37
call fcn.00470660
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x34
call fcn.00470660
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x32
call fcn.00470660
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x510]
call fcn.00419d72
mov ebx, 0x4d08c4
push ebx
lea ecx, [ebp - 0xb8]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._log_blah_blah
mov dword [ebp - 4], 0x3b
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.An_ampersand_char_followed_by_the_rest_of_the_command_line_is_appended__t_tto_a_standard_log_line_and_written_to_the_http_log._The_program__t_timmediately_exits.
mov byte [ebp - 4], 0x3c
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Write_text_to_the_http_log_and_exit_the_program
mov byte [ebp - 4], 0x3d
call fcn.00470680
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x3b
call fcn.0041bd62
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3f
call fcn.00470660
or dword [ebp - 0xb0], 0xffffffff
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x40
call fcn.0041bc58
lea ecx, [ebp - 0x1c]
mov ebx, eax
mov byte [ebp - 4], 0x3f
call fcn.00470660
test ebx, ebx
je 0x42fe67
mov eax, dword [ebp - 0xb0]
inc eax
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call fcn.004712e0
push eax
lea eax, [ebp - 0x34]
push 0x4cfb0c
push eax
mov byte [ebp - 4], 0x41
call fcn.00470fb0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x43
call fcn.00470660
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x34]
push ecx
mov ecx, esi
call dword [eax + 0x10]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x3f
call fcn.00470660
xor esi, esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.00419d72
mov eax, esi
jmp 0x432c62
mov ebx, str.stubselfupdate
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._stubselfupdate__distcode_
mov byte [ebp - 4], 0x44
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Specifies_that_this_stub_was_downloaded_and_called_by_an_older_stub._The_distcode_is_from_the_original_Stub_execution
mov byte [ebp - 4], 0x45
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.This_stub_was_downloaded_and_called_by_an_older_stub.
mov byte [ebp - 4], 0x46
call fcn.00470680
push 3
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x44
call fcn.0041bd62
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.00470660
lea ecx, [esi + 0xd8]
push 0x4cfa1a
call fcn.004707b0
push ebx
lea ecx, [ebp - 0x24]
call fcn.00470680
lea eax, [esi + 0xd8]
push eax
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x49
call fcn.0041ba29
lea ecx, [ebp - 0x24]
mov dword [esi + 0x15c], eax
mov byte [ebp - 4], 0x48
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.00419d72
lea ecx, [ebp - 0x1c]
call fcn.004703d0
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x1c]
push ecx
push eax
push str.SoftwareRealNetworksConfigOutputLog
push SysReAllocString
mov byte [ebp - 4], 0x4a
call fcn.0041085a
add esp, 0x18
push str.output
lea ecx, [ebp - 0x34]
call fcn.00470680
push ecx
mov byte [ebp - 4], 0x4b
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._output
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Keep_a_copy_of_the_log_in_c:logaction.txt._Obsolete_
push ebx
mov byte [ebp - 4], 0x4c
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0x4d
call fcn.00470680
push 0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x4b
call fcn.0041bd62
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x4f
call fcn.00470660
push str.output
lea ecx, [ebp - 0x68]
call fcn.00470680
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x50
mov dword [ebp - 0x5c], 1
call fcn.0041bc40
test eax, eax
jne 0x42ffed
lea ecx, [ebp - 0x1c]
call fcn.0040d4fd
test al, al
je 0x42ffed
xor bl, bl
jmp 0x42ffef
mov bl, 1
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0x4f
call fcn.00470660
test bl, bl
je 0x430016
push 0x4d03c4
push str.c:logaction.txt
call fcn.00492fff
pop ecx
pop ecx
mov dword [esi + 0x2c], eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x4a
call fcn.00419d72
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x3f
call fcn.00470660
mov ebx, str.datecheck
push ebx
lea ecx, [ebp - 0x68]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._datecheckTF
mov byte [ebp - 4], 0x51
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Specifies_that_the_stub_caller_vouches_for_its_own_source__e.g._UpgradeHelper.exe_is_always_downloaded_from_RealN_and_will_pass__datecheckT._Stub_will_vouch_for_itself_if_its_own_digital_signature_timestamp_is_less_than_a_certain_age__currently_2_weeks__and_will_pass__datecheckTF_accordingly._Stubs_EXEs_that_are_too_old_to_even_have_this_code_will_not_pass_the__datecheck_param_at_all_indicating_that_our_source_is_unvouched._This_is_used_to_configure_the_Ask.com_DLP_offer.
mov byte [ebp - 4], 0x52
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Specifies_that_the_stub_caller_vouches_for_its_own_source.
mov byte [ebp - 4], 0x53
call fcn.00470680
push 2
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x51
call fcn.0041bd62
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x55
call fcn.00470660
and dword [esi + 0x158], 0
lea ecx, [ebp - 0x1c]
call fcn.004703d0
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x56
call fcn.00470680
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x57
call fcn.0041ba29
lea ecx, [ebp - 0x2c]
mov ebx, eax
mov byte [ebp - 4], 0x56
call fcn.00470660
test ebx, ebx
je 0x430107
lea eax, [ebp - 0x1c]
push 0x4d468c
push eax
mov dword [esi + 0x158], 1
call fcn.0040d567
pop ecx
pop ecx
xor ecx, ecx
test al, al
setne cl
mov dword [esi + 0x154], ecx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x55
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.00419d72
push edi
lea ecx, [ebp - 0x98]
call fcn.004705c0
push eax
lea eax, [ebp - 0x90]
push str.Run____strCmdLine_
push eax
mov byte [ebp - 4], 0x58
call fcn.00470fb0
push 0x4d16f4
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x59
call fcn.00470f60
push eax
mov byte [ebp - 4], 0x5a
call fcn.004126e0
add esp, 0x1c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x59
call fcn.00470660
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x58
call fcn.00470660
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x3f
call fcn.00470660
lea eax, [esi + 0x190]
push eax
lea eax, [ebp - 0x78]
push str.Stamp_Data__Lang:
push eax
call fcn.00470fb0
mov ebx, 0x4d4660
push ebx
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x5b
call fcn.00470f60
push str._r_n_____________Prod:
push eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x5c
call fcn.00470f60
lea ecx, [esi + 0x178]
push ecx
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00470f10
push ebx
push eax
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5e
call fcn.00470f60
push str._r_n_____________Version:
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x5f
call fcn.00470f60
add esp, 0x48
lea ecx, [esi + 0x198]
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x60
call fcn.00470f10
push ebx
push eax
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 4], 0x61
call fcn.00470f60
push str._r_n_____________DistCode:
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x62
call fcn.00470f60
lea ecx, [esi + 0x168]
push ecx
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x63
call fcn.00470f10
push ebx
push eax
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 0x64
call fcn.00470f60
push str._r_n_____________OEM:
push eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x65
call fcn.00470f60
add esp, 0x48
lea ecx, [esi + 0x63c]
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x66
call fcn.00470f10
push eax
mov byte [ebp - 4], 0x67
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x66
call fcn.00470660
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x65
call fcn.00470660
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x64
call fcn.00470660
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x63
call fcn.00470660
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x62
call fcn.00470660
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x61
call fcn.00470660
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x60
call fcn.00470660
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x2c]
call fcn.00470660
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x5e
call fcn.00470660
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x5d
call fcn.00470660
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x5c
call fcn.00470660
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x5b
call fcn.00470660
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3f
call fcn.00470660
push 0xa
pop ebx
push ebx
lea eax, [ebp + 0x8d8]
push eax
push 6
call fcn.004b9bd1
push ebx
lea eax, [ebp + 0x87c]
push eax
push 9
call fcn.004b9bd1
push ebx
lea eax, [ebp + 0x8b8]
push eax
push 0
call fcn.004b9bd1
push ebx
lea eax, [ebp + 0x52c]
push eax
push 0x20
call fcn.004b9bd1
add esp, 0x30
push str.NOLOG_complete_version_
lea ecx, [ebp - 0x44]
call fcn.00470680
lea ecx, [ebp + 0x8d8]
push ecx
push eax
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 4], 0x68
call fcn.00470f60
mov ebx, 0x4cfa18
push ebx
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x69
call fcn.00470f60
lea ecx, [ebp + 0x87c]
push ecx
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x6a
call fcn.00470f60
push ebx
push eax
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 0x6b
call fcn.00470f60
lea ecx, [ebp + 0x8b8]
push ecx
push eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x6c
call fcn.00470f60
push ebx
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x6d
call fcn.00470f60
add esp, 0x48
lea ecx, [ebp + 0x52c]
push ecx
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x6e
call fcn.00470f60
push eax
mov byte [ebp - 4], 0x6f
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x6e
call fcn.00470660
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x6d
call fcn.00470660
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x6c
call fcn.00470660
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x6b
call fcn.00470660
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x6a
call fcn.00470660
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x69
call fcn.00470660
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x68
call fcn.00470660
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x3f
call fcn.00470660
mov ebx, str.detectionxml
push ebx
lea ecx, [ebp - 0x68]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._detectionxml__filepath_
mov byte [ebp - 4], 0x70
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Specifies_the_filepath_to_an_alternate_detection_XML
mov byte [ebp - 4], 0x71
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Specifies_alternate_detection_XML
mov byte [ebp - 4], 0x72
call fcn.00470680
push 3
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x70
call fcn.0041bd62
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x74
call fcn.00470660
push str.Specify_alternate_detection_XML_file_to_the_one_in__temp__rninst1ui_datainst_config..._Examples:_n_t_t_t_n_t_t_t____c:_tempmyinst_detect.xml_n_t_t_t_______or_n_t_t_t____file:__c:_tempmyinst_detect.xml_n_t_t_t_______or_n_t_t_t____http:__server_5.9_stub_xml_inst_detect.xml
lea ecx, [ebp - 0x24]
call fcn.00470680
push str.Specify_alternate_detection_XML
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x75
call fcn.00470680
push str.DetectionXML
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x76
call fcn.00470680
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x77
call fcn.0041a75e
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x79
call fcn.00470660
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x7a
call fcn.00470660
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x7b
call fcn.00470660
lea ecx, [ebp - 0x14]
call fcn.004703d0
push ebx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x7c
call fcn.00470680
lea eax, [esi + 0x1004]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x7d
call fcn.0041ba29
lea ecx, [ebp - 0x34]
mov ebx, eax
mov byte [ebp - 4], 0x7c
call fcn.00470660
test ebx, ebx
je 0x4305e8
lea eax, [esi + 0x1004]
push eax
lea eax, [ebp - 0x44]
push str.m_strXMLDetectFile_from_cmd_line_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0x7e
call fcn.004126e0
lea ecx, [ebp - 0x44]
jmp 0x4306aa
push str.DetectionXML
lea ecx, [ebp - 0x34]
call fcn.00470680
lea eax, [ebp - 0x34]
mov ebx, 0x4ff29c
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x7f
call fcn.0041a122
mov ecx, eax
call fcn.00419b7a
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0x7c
call fcn.00470660
cmp dword [ebp - 0x48], 0
je 0x4306b6
push str.DetectionXML
lea ecx, [ebp - 0x34]
call fcn.00470680
lea eax, [ebp - 0x34]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x80
call fcn.0041a122
mov ecx, eax
call fcn.0041f9c9
lea ebx, [esi + 0x1004]
push eax
mov ecx, ebx
call fcn.004707b0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x7c
call fcn.00470660
push ebx
lea eax, [ebp - 0x44]
push str.DetectionXML_Override_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0x81
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x7c
call fcn.00470660
push ebx
lea eax, [ebp - 0x78]
push str.m_strXMLDetectFile_from_reg_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0x82
call fcn.004126e0
lea ecx, [ebp - 0x78]
add esp, 0x10
mov byte [ebp - 4], 0x7c
call fcn.00470660
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x7b
call fcn.00470660
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x74
call fcn.00419c15
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x3f
call fcn.00419d72
mov ebx, str.forceinstall
push ebx
lea ecx, [ebp - 0x68]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._forceinstall
mov byte [ebp - 4], 0x83
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Ignore_common_setup_errors_during_development_e.g._bad_MD5_checksum
mov byte [ebp - 4], 0x84
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Ignore_common_setup_errors_during_development
mov byte [ebp - 4], 0x85
call fcn.00470680
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x83
call fcn.0041bd62
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x87
call fcn.00470660
push str.Debug_support._Skip_miscellaneous_requirements_like_bad_or_missing_MD5__etc._so_that_stub_will_run_on_a_dev_machine_without_a_lot_of_effort.
lea ecx, [ebp - 0x24]
call fcn.00470680
push str.Debug_support._Skip_misc_requirements_like_bad_MD5
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x88
call fcn.00470680
push str.ForceInstall
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x89
call fcn.00470680
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x8a
call fcn.0041a75e
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x8c
call fcn.00470660
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x8d
call fcn.00470660
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x8e
call fcn.00470660
lea ecx, [ebp - 0x44]
call fcn.004703d0
push ebx
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x8f
call fcn.00470680
lea eax, [ebp - 0x80]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x90
mov dword [ebp - 0x5c], 2
call fcn.0041bc40
test eax, eax
jne 0x430823
push str.ForceInstall
lea ecx, [ebp - 0x34]
call fcn.00470680
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x4ff29c
mov dword [ebp - 4], 0x91
mov dword [ebp - 0x5c], 6
call fcn.0041a122
mov ecx, eax
call fcn.00419b7a
test eax, eax
jne 0x430823
xor bl, bl
jmp 0x430825
mov bl, 1
test byte [ebp - 0x5c], 4
mov dword [ebp - 4], 0x90
je 0x43083e
and dword [ebp - 0x5c], 0xfffffffb
lea ecx, [ebp - 0x34]
call fcn.00470660
test byte [ebp - 0x5c], 2
mov dword [ebp - 4], 0x8f
je 0x430857
and dword [ebp - 0x5c], 0xfffffffd
lea ecx, [ebp - 0x80]
call fcn.00470660
test bl, bl
je 0x430865
mov dword [esi + 0x1000], 1
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x8e
call fcn.00470660
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x87
call fcn.00419c15
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x3f
call fcn.00419d72
push str.detection
lea ecx, [ebp - 0x80]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._detection
mov byte [ebp - 4], 0x92
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Run_script_test
push ebx
mov byte [ebp - 4], 0x93
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0x94
call fcn.00470680
push 0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x92
call fcn.0041bd62
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x96
call fcn.00470660
push str.detection
lea ecx, [ebp - 0x68]
call fcn.00470680
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x97
call fcn.0041bc40
lea ecx, [ebp - 0x68]
mov ebx, eax
mov byte [ebp - 4], 0x96
call fcn.00470660
test ebx, ebx
je 0x430938
and dword [esi + 0x1024], 0
mov dword [esi + 0x101c], 1
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.00419d72
xor ebx, ebx
lea ecx, [ebp - 0x1c]
mov dword [esi + 0xac0], ebx
call fcn.004703d0
push ebx
push ebx
lea eax, [ebp - 0x1c]
push eax
push ebx
push str.SoftwareRealNetworksConfigDetectionLog
push SysReAllocString
mov byte [ebp - 4], 0x98
call fcn.0041085a
add esp, 0x18
push str.detectionlog
lea ecx, [ebp - 0x80]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._detectionlog
mov byte [ebp - 4], 0x99
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Turn_on_script_logging
push ebx
mov byte [ebp - 4], 0x9a
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0x9b
call fcn.00470680
push 0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x99
call fcn.0041bd62
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x9d
call fcn.00470660
push str.detectionlog
lea ecx, [ebp - 0x68]
call fcn.00470680
or dword [ebp - 0x5c], 8
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x9e
call fcn.0041bc40
test eax, eax
jne 0x430a1a
lea eax, [ebp - 0x1c]
push 0x4cfa4c
push eax
call fcn.0040d567
pop ecx
pop ecx
test al, al
jne 0x430a1a
xor bl, bl
jmp 0x430a1c
mov bl, 1
test byte [ebp - 0x5c], 8
mov dword [ebp - 4], 0x9d
je 0x430a35
and dword [ebp - 0x5c], 0xfffffff7
lea ecx, [ebp - 0x68]
call fcn.00470660
test bl, bl
je 0x430a43
mov dword [esi + 0xac0], 1
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x98
call fcn.00419d72
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x3f
call fcn.00470660
mov ebx, str.noshortcircuit
push ebx
lea ecx, [ebp - 0x80]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._noshortcircuit
mov byte [ebp - 4], 0x9f
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Turn_off_short_circuit_evaluation_in_scripts_for_regression_tests._When_short_circuit__t_t_tis_on__the_default___lots_of_script_elements_dont_get_evaluated_because_they_are_logically__t_t_tirrelevant__e.g._once_an_element_in_an__and__group_is_FALSE__the_rest_of_the_group_need_not__t_t_tbe_evaluated__and_could_in_fact_contain_errors_that_would_be_missed._When_short_circuit_eval__t_t_tis_on_it_doesnt_change_the_ultimate_results
mov byte [ebp - 4], 0xa0
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str.Turn_off_short_circuit_evaluation_in_scripts_for_regression_tests
mov byte [ebp - 4], 0xa1
call fcn.00470680
push 0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x9f
call fcn.0041bd62
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa3
call fcn.00470660
push ebx
lea ecx, [ebp - 0x68]
call fcn.00470680
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa4
call fcn.0041bc40
neg eax
sbb eax, eax
inc eax
lea ecx, [ebp - 0x68]
mov dword [esi + 0xab0], eax
mov byte [ebp - 4], 0xa3
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.00419d72
push str.detectionerrormsg
lea ecx, [ebp - 0x2c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._detectionerrormsg
mov byte [ebp - 4], 0xa5
call fcn.00470680
push ecx
push ecx
mov byte [ebp - 4], 0xa6
mov ecx, esp
mov dword [ebp - 0x48], esp
mov ebx, str.Turn_on_MessageBox_detection_XML_errors
push ebx
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0xa7
call fcn.00470680
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xa5
call fcn.0041bd62
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa9
call fcn.00470660
push str.detectionerrormsg
lea ecx, [ebp - 0x24]
call fcn.00470680
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xaa
call fcn.0041bc40
lea ecx, [ebp - 0x24]
mov dword [esi + 0xab4], eax
mov byte [ebp - 4], 0xa9
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.00419d72
lea eax, [esi + 0xb8]
push eax
lea eax, [ebp - 0x44]
push str.Config_URL_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xab
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x3f
call fcn.00470660
push str.Specify_the_config_URL__the_locaion_of_the_config_XML._This_must_be_a_fully_specified_URL_and_overrides_the_address_set_in_the_stub_stamp_info._Example:_n_t_t_n_t_t____http:__server_config_en_config.xml_n_t_t_______or_n_t_t____file:__yellow.d.p.com_stubinstaller5.9_stubxmlconfig.xml
lea ecx, [ebp - 0xa4]
call fcn.00470680
push str.Specify_the_config_URL__the_locaion_of_the_config_XML
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xac
call fcn.00470680
mov ebx, 0x4d3e68
push ebx
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xad
call fcn.00470680
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xae
call fcn.0041a75e
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xb0
call fcn.00470660
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xb1
call fcn.00470660
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xb2
call fcn.00470660
push ebx
lea ecx, [ebp - 0x34]
call fcn.00470680
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x4ff29c
mov byte [ebp - 4], 0xb3
call fcn.0041a122
mov ecx, eax
call fcn.00419b7a
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0xb2
call fcn.00470660
cmp dword [ebp - 0x48], 0
je 0x430cf2
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ff29c
mov byte [ebp - 4], 0xb4
call fcn.0041a122
mov ecx, eax
call fcn.0041f9c9
lea ebx, [esi + 0xb8]
push eax
mov ecx, ebx
call fcn.004707b0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xb2
call fcn.00470660
push ebx
lea eax, [ebp - 0x44]
push str.Config_URL_Override_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xb5
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xb2
call fcn.00470660
lea eax, [esi + 0xc0]
push eax
lea eax, [ebp - 0x44]
push str.Backup_Config_URL_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xb6
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xb2
call fcn.00470660
push str.Specify_the_backup_config_URL__the_locaion_of_the_backup_config_XML._This_must_be_a_fully_specified_URL_and_overrides_the_address_set_in_the_stub_stamp_info._Example:_n_t_t_n_t_t____http:__server_config_en_config.xml_n_t_t_______or_n_t_t____file:__yellow.d.p.com_stubinstaller5.9_stubxmlconfig.xml
lea ecx, [ebp - 0x90]
call fcn.00470680
push str.Specify_the_backup_config_URL__the_locaion_of_the_backup_config_XML
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xb7
call fcn.00470680
mov ebx, str.BackupURL
push ebx
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb8
call fcn.00470680
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb9
call fcn.0041a75e
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xbb
call fcn.00470660
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xbc
call fcn.00470660
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xbd
call fcn.00470660
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ff29c
mov byte [ebp - 4], 0xbe
call fcn.0041a122
mov ecx, eax
call fcn.00419b7a
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0xbd
call fcn.00470660
cmp dword [ebp - 0x48], 0
je 0x430e45
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4ff29c
mov byte [ebp - 4], 0xbf
call fcn.0041a122
mov ecx, eax
call fcn.0041f9c9
lea ebx, [esi + 0xc0]
push eax
mov ecx, ebx
call fcn.004707b0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xbd
call fcn.00470660
push ebx
lea eax, [ebp - 0x44]
push str.Backup_Config_URL_Override_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xc0
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xbd
call fcn.00470660
mov ebx, str.verifyxml
push ebx
lea ecx, [ebp - 0x14]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str._verify__config_xml___detect_xml_
mov byte [ebp - 4], 0xc1
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Dev_support_to_check_a_config_XML_detection_XML_pair_for_syntax_semantic_errors._It_may_be_useful_to_include__noshortcircuit_to_cause_a_more_complete_check
mov byte [ebp - 4], 0xc2
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Check_config_XML_detection_XML_pair_syntax
mov byte [ebp - 4], 0xc3
call fcn.00470680
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xc1
call fcn.0041bd62
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc5
call fcn.00470660
and dword [ebp - 0x50], 0
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc6
call fcn.0041bc58
lea ecx, [ebp - 0x1c]
mov dword [esi + 0x150], eax
mov byte [ebp - 4], 0xc5
call fcn.00470660
cmp dword [esi + 0x150], 0
je 0x43113d
lea ecx, [ebp - 0x24]
call fcn.004703d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc7
call fcn.004703d0
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc8
call fcn.0041b580
test eax, eax
je 0x431572
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
call fcn.0041b580
test eax, eax
je 0x431572
mov ebx, 0x4d3ba4
push ebx
lea ecx, [ebp - 0x24]
call fcn.004704f0
cmp eax, 0xffffffff
jne 0x430f59
push ebx
lea ecx, [ebp - 0x2c]
call fcn.004704f0
cmp eax, 0xffffffff
je 0x430f77
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0xb8]
call fcn.00470710
lea eax, [ebp - 0x2c]
push eax
lea ecx, [esi + 0x1004]
call fcn.00470710
cmp byte [ebp - 0x1d], 0xff
lea eax, [ebp - 0x24]
jne 0x430f83
mov eax, dword [ebp - 0x24]
xor ebx, ebx
push ebx
push 0x80
push 3
push ebx
push 1
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x48], eax
call fcn.004703d0
push ebx
lea eax, [ebp - 0x38]
push eax
push 0x2710
push 0x2711
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc9
mov dword [ebp - 0x38], ebx
call fcn.004710f0
push eax
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0x4d3ba0
lea ecx, [ebp - 0x1c]
call fcn.004704f0
push str._config
lea ecx, [ebp - 0x1c]
mov ebx, eax
call fcn.004704f0
cmp ebx, 0xffffffff
je 0x431016
cmp eax, 0xffffffff
je 0x431016
sub eax, ebx
test eax, eax
jle 0x431016
cmp eax, 0xf
jge 0x431016
lea eax, [ebp - 0x24]
lea ebx, [esi + 0xb8]
push eax
mov ecx, ebx
call fcn.00470710
lea eax, [ebp - 0x2c]
jmp 0x43102a
lea eax, [ebp - 0x2c]
lea ebx, [esi + 0xb8]
push eax
mov ecx, ebx
call fcn.00470710
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x1004]
call fcn.00470710
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc8
call fcn.00470660
push 0x4d3ba4
mov ecx, ebx
call fcn.004704f0
cmp eax, 0xffffffff
jne 0x431086
push ebx
lea eax, [ebp - 0x44]
push str.file:__
push eax
call fcn.00470fb0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xca
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xc8
call fcn.00470660
push 0x4d3ba4
lea ecx, [esi + 0x1004]
call fcn.004704f0
cmp eax, 0xffffffff
jne 0x4310cf
lea eax, [esi + 0x1004]
push eax
lea eax, [ebp - 0x44]
push str.file:__
push eax
call fcn.00470fb0
add esp, 0xc
push eax
lea ecx, [esi + 0x1004]
mov byte [ebp - 4], 0xcb
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xc8
call fcn.00470660
push ebx
lea eax, [ebp - 0x44]
push str.Config_XML_URL_Cmdline_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xcc
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xc8
call fcn.00470660
lea eax, [esi + 0x1004]
push eax
lea eax, [ebp - 0x78]
push str.m_strXMLDetectFile_from_cmd_line_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xcd
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xc8
call fcn.00470660
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc7
call fcn.00470660
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xc5
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.00419d72
push str.quiet
lea ecx, [ebp - 0x14]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._quiet
mov byte [ebp - 4], 0xd2
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
mov ebx, str.Turn_off_MessageBox_UI_for_INTERNAL_ASSERT_calls
push ebx
mov byte [ebp - 4], 0xd3
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push ebx
mov byte [ebp - 4], 0xd4
call fcn.00470680
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xd2
call fcn.0041bd62
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xd6
call fcn.00470660
push str.quiet
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd7
call fcn.0041bc40
neg eax
sbb eax, eax
inc eax
lea ecx, [ebp - 0x1c]
mov dword [0x4fa00c], eax
mov byte [ebp - 4], 0xd6
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.00419d72
cmp byte [0x4fee6b], 0xff
mov eax, edi
jne 0x431207
mov eax, dword [0x4fee64]
push str._add_log:
push eax
call fcn.00491770
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x431266
mov al, byte [ebx + 9]
add ebx, 0xa
cmp al, 0x22
jne 0x431266
lea ecx, [ebp - 0x1c]
call fcn.004703d0
mov byte [ebp - 4], 0xd8
test ebx, ebx
je 0x43124b
movzx eax, byte [ebx]
test al, al
je 0x43124b
cmp al, 0x22
je 0x43124b
push eax
lea ecx, [ebp - 0x1c]
call fcn.00470b60
inc ebx
jne 0x431234
lea eax, [ebp - 0x1c]
push eax
lea ecx, [esi + 0x1a0]
call fcn.00470710
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xbd
call fcn.00470660
push 0x4d08d4
lea ecx, [ebp - 0x14]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._loc__2_char_country_code_
mov byte [ebp - 4], 0xd9
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
mov ebx, str.Override_country_code
push ebx
mov byte [ebp - 4], 0xda
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push ebx
mov byte [ebp - 4], 0xdb
call fcn.00470680
push 4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xd9
call fcn.0041bd62
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xdd
call fcn.00470660
push 0x4d08d4
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [esi + 0x90]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xde
call fcn.0041ba29
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xdd
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.00419d72
mov ebx, str.home
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._home___org_path__
mov byte [ebp - 4], 0xdf
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Used_by_UpgradeHelper._This_specifies_the_path_where_the_stub_EXE_started_before_the_Extractor_is_called
mov byte [ebp - 4], 0xe0
call fcn.00470680
push ecx
push ecx
mov byte [ebp - 4], 0xe1
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Used_by_UpgradeHelper._Specifies_path_where_the_stub_EXE_started
call fcn.00470680
push 3
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xdf
call fcn.0041bd62
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe3
call fcn.00470660
push ebx
lea ecx, [ebp - 0x24]
call fcn.00470680
lea ebx, [esi + 0x98]
push ebx
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe4
call fcn.0041ba29
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xe3
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.00419d72
push str.location
lea ecx, [ebp - 0x54]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._location__c:_tempinstalldata_
mov byte [ebp - 4], 0xe5
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Specifies_a_flat_filespace_where_UpgradeHelper_has_placed_install_files__XML__CAB__etc._
mov byte [ebp - 4], 0xe6
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Specifies_a_flat_filespace_where_install_files_will_be_found.
mov byte [ebp - 4], 0xe7
call fcn.00470680
push 3
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xe5
call fcn.0041bd62
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xe9
call fcn.00470660
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
mov dword [ebp - 0x38], eax
call fcn.004934bf
pop ecx
xor eax, eax
push eax
push eax
push 0x104
lea ecx, [ebp + 0x258]
push ecx
push 0xffffffffffffffff
push dword [ebp - 0x38]
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp + 0x258]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00470680
push str._location__
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xea
call fcn.004704f0
lea ecx, [ebp - 0x1c]
cmp eax, 0xffffffff
je 0x43161d
add eax, 0xb
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004712e0
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xeb
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xea
call fcn.00470660
push 0x4e42c4
lea ecx, [esi + 0xc]
call fcn.004704f0
cmp eax, 0xffffffff
je 0x4314da
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [esi + 0xc]
call fcn.00470e50
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xec
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xea
call fcn.00470660
lea ecx, [esi + 0xc]
call fcn.0040d4fd
test al, al
jne 0x431527
push 1
push 0x5c
lea ecx, [ebp - 0x14]
call fcn.004711f0
or dword [ebp - 0x5c], 0x10
push 1
lea eax, [ebp - 0x44]
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xed
call fcn.00470df0
or dword [ebp - 0x5c], 0x20
lea ecx, [ebp - 0x14]
push ecx
push eax
mov dword [ebp - 4], 0xee
call fcn.0040d585
pop ecx
pop ecx
mov byte [ebp - 0x55], 1
test al, al
jne 0x43152b
mov byte [ebp - 0x55], 0
test byte [ebp - 0x5c], 0x20
mov dword [ebp - 4], 0xed
je 0x431544
and dword [ebp - 0x5c], 0xffffffdf
lea ecx, [ebp - 0x44]
call fcn.00470660
test byte [ebp - 0x5c], 0x10
mov dword [ebp - 4], 0xea
je 0x431559
lea ecx, [ebp - 0x14]
call fcn.00470660
cmp byte [ebp - 0x55], 0
je 0x4316c3
push 0x5c
lea ecx, [esi + 0xc]
call fcn.00470b60
jmp 0x4316c3
mov eax, str.LogDebug
cmp eax, str.NULL
je 0x431616
cmp eax, str.__noop
je 0x431616
push str.INTERNAL_ERROR:
lea ecx, [ebp - 0x90]
call fcn.00470680
push str._verifyxml_on_command_line_must_be_followed_by_full_config_XML_path_and_detect_XML_path
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xce
call fcn.00470f60
push 0x4cfe44
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0xcf
call fcn.00470f60
push 0x4cfa1a
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xd0
call fcn.00470f60
push eax
mov byte [ebp - 4], 0xd1
call fcn.004126e0
add esp, 0x28
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xd0
call fcn.00470660
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xcf
call fcn.00470660
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xce
call fcn.00470660
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc8
call fcn.00470660
push 1
call fcn.00498fcb
push str._location
call fcn.004704f0
cmp eax, 0xffffffff
je 0x4316c3
cmp byte [ebx + 7], 0xff
mov eax, ebx
jne 0x43163a
mov eax, dword [ebx]
test eax, eax
je 0x431649
push ebx
lea ecx, [esi + 0xc]
call fcn.00470710
jmp 0x4316c3
push 0x104
lea eax, [ebp + 0x408]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp + 0x408]
lea ebx, [esi + 0xc]
push eax
mov ecx, ebx
call fcn.004707b0
push ebx
lea eax, [ebp - 0x44]
push str.GetModuleFileName___
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xef
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xea
call fcn.00470660
push 0x5c
mov ecx, ebx
call fcn.004704c0
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, ebx
call fcn.00470e50
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf0
call fcn.00470710
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xea
call fcn.00470660
lea ebx, [esi + 0xc]
push ebx
lea eax, [ebp - 0x44]
push str.m_strLocation_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xf1
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xea
call fcn.00470660
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xe9
call fcn.00470660
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.00419d72
mov ecx, ebx
call fcn.0040d4fd
test al, al
jne 0x4317c1
push ebx
lea ebx, [esi + 0xb8]
lea eax, [ebp - 0x44]
push ebx
push eax
call fcn.0040f0c0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf2
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xbd
call fcn.00470660
push 0
lea eax, [ebp - 0x78]
push ebx
push eax
call fcn.004113a0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf3
call fcn.00470710
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xbd
call fcn.00470660
lea eax, [esi + 0xc]
push eax
lea ebx, [esi + 0xc0]
lea eax, [ebp - 0x14]
push ebx
push eax
call fcn.0040f0c0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf4
call fcn.00470710
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xbd
call fcn.00470660
push 0
lea eax, [ebp - 0x1c]
push ebx
push eax
call fcn.004113a0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf5
call fcn.00470710
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xbd
call fcn.00470660
push 0x4d0930
lea ecx, [ebp - 0x14]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._distcode___new_distcode__
mov byte [ebp - 4], 0xf6
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
mov ebx, str.Manually_override_the_distcode
push ebx
mov byte [ebp - 4], 0xf7
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push ebx
mov byte [ebp - 4], 0xf8
call fcn.00470680
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xf6
call fcn.0041bd62
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xfa
call fcn.00470660
push 0x4d0930
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea ebx, [esi + 0x168]
push ebx
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xfb
call fcn.0041ba29
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0xfa
call fcn.00470660
cmp dword [ebp - 0x38], 0
je 0x43186a
mov ecx, ebx
call fcn.004715b0
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.00419d72
mov ebx, str.dynamicdistcode
push ebx
lea ecx, [ebp - 0x14]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._dynamicdistcode___distcode__
mov byte [ebp - 4], 0xfc
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Force_override_of_the_randomly_selected_dynamic_distcode_for_test_automation
mov byte [ebp - 4], 0xfd
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push str.Force_override_of_dynamic_distcode_for_test_automation
mov byte [ebp - 4], 0xfe
call fcn.00470680
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xfc
call fcn.0041bd62
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0x100
call fcn.00470660
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.0041bc40
lea ebx, [esi + 0x634]
cmp byte [ebx + 7], 0xff
je 0x431913
mov dword [ebp - 0x48], ebx
jmp 0x431918
mov eax, dword [ebx]
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0
call fcn.00470660
cmp dword [ebp - 0x48], 0
je 0x431931
mov ecx, ebx
call fcn.004715b0
lea ecx, [ebp + 0x510]
mov dword [ebp - 4], 0xbd
call fcn.00419d72
push 0x4d0840
lea ecx, [ebp - 0x14]
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._xml___filepath__
mov dword [ebp - 4], 0x102
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
mov ebx, str.Force_config_XML_to_be_read_from_a_local_filepath
push ebx
mov byte [ebp - 4], 3
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push ebx
mov byte [ebp - 4], 4
call fcn.00470680
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 2
call fcn.0041bd62
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 6
call fcn.00470660
lea ecx, [ebp - 0x24]
call fcn.004703d0
push 0x4d0840
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.00470680
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.0041ba29
lea ecx, [ebp - 0x1c]
mov ebx, eax
mov byte [ebp - 4], 7
call fcn.00470660
test ebx, ebx
je 0x431a76
lea eax, [ebp - 0x24]
push eax
call fcn.0040f340
lea ecx, [ebp - 0x24]
mov dword [esp], 0x4d3ba4
call fcn.004704f0
cmp eax, 0xffffffff
jne 0x431a3d
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x44]
push str.file:__
push eax
call fcn.00470fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 9
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 7
call fcn.00470660
lea eax, [ebp - 0x24]
lea ebx, [esi + 0xb8]
push eax
mov ecx, ebx
call fcn.00470710
push ebx
lea eax, [ebp - 0x44]
push str.Config_XML_URL_Cmdline_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0xa
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 7
call fcn.00470660
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 6
call fcn.00470660
mov ebx, 0xbd
lea ecx, [ebp + 0x510]
mov dword [ebp - 4], ebx
call fcn.00419d72
push str.before_GetProcessorID__
lea ecx, [ebp - 0x14]
call fcn.00470680
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 4], 0x10b
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], ebx
call fcn.00470660
lea eax, [ebp - 0x44]
push eax
call fcn.0040ed26
pop ecx
lea ecx, [esi + 0x138]
push eax
mov dword [ebp - 4], 0x10c
call fcn.00470710
lea ecx, [ebp - 0x44]
mov dword [ebp - 4], ebx
call fcn.00470660
lea eax, [ebp - 0x78]
push eax
call fcn.00414602
pop ecx
lea ecx, [esi + 0x140]
push eax
mov dword [ebp - 4], 0x10d
call fcn.00470710
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], ebx
call fcn.00470660
push 1
mov ebx, 0x4cfa1a
push ebx
push 0x4cfe44
lea ecx, [esi + 0x138]
call fcn.004715f0
push 1
push ebx
push 0x4cfe44
lea ecx, [esi + 0x140]
call fcn.004715f0
push 1
push ebx
push 0x4d080c
lea ecx, [esi + 0x140]
call fcn.004715f0
push str.Setup_GUID_stuff.
lea ecx, [ebp - 0x1c]
call fcn.00470680
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 4], 0x10e
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xbd
call fcn.00470660
lea ecx, [esi + 0xf0]
push ebx
call fcn.004707b0
lea ecx, [esi + 0xe8]
push ebx
call fcn.004707b0
xor eax, eax
mov word [ebp + 0x54c], ax
push 0x208
xor ebx, ebx
lea eax, [ebp + 0x54e]
push ebx
push eax
call fcn.00491e90
push 0x104
lea eax, [ebp + 0x759]
push ebx
push eax
mov byte [ebp + 0x758], bl
call fcn.00491e90
add esp, 0x18
lea eax, [ebp + 0x54c]
push eax
push ebx
push ebx
push 0x23
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push ebx
push ebx
push 0x105
lea eax, [ebp + 0x758]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0x54c]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp + 0x758]
push eax
lea ecx, [ebp - 0x70]
call fcn.00470680
push str.RealRealPlayer_
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0x10f
call fcn.00470ae0
cmp byte [ebp - 0x69], 0xff
lea eax, [ebp - 0x70]
jne 0x431c29
mov eax, dword [ebp - 0x70]
push 0
push eax
call fcn.0040e4bb
pop ecx
pop ecx
push str.setup_machine_GUID
lea ecx, [ebp - 0x14]
call fcn.00470680
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x10
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call fcn.00470660
push 0
lea ebx, [esi + 0xf0]
push ebx
push ecx
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
push str.S_1_5_18
lea ecx, [ebp - 0x70]
push ecx
push eax
call fcn.00470f60
add esp, 0xc
mov ecx, esi
call fcn.004363df
mov dword [ebp - 0x38], eax
test eax, eax
jns 0x431cea
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x44]
push str.Failed_creating_or_reading_machine_UUID__directory_
push eax
call fcn.00470fb0
push eax
mov byte [ebp - 4], 0x11
call fcn.004126e0
add esp, 0x10
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xf
call fcn.00470660
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00470660
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.00419c15
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.00419c15
mov esi, dword [ebp - 0x38]
jmp 0x42fe51
push str.systemguid
lea ecx, [ebp - 0x1c]
call fcn.00470680
push 0x4d02f4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x12
call fcn.00470680
push ebx
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x13
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x12
call fcn.00470660
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
call fcn.00470660
push str.setup_user_GUID
lea ecx, [ebp - 0x2c]
call fcn.00470680
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x14
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.00470660
lea ecx, [ebp - 0x1c]
call fcn.004703d0
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x15
call fcn.00415090
mov ebx, eax
pop ecx
test ebx, ebx
jns 0x431ddf
push str.Failed_to_get_logged_in_users_SID.
lea ecx, [ebp - 0x14]
call fcn.00470680
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x14]
push eax
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x15
call fcn.00470660
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
call fcn.00470660
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00470660
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.00419c15
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.00419c15
mov esi, ebx
jmp 0x42fe51
push 1
lea eax, [esi + 0xe8]
push eax
push ecx
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x70]
push ecx
push eax
call fcn.00470f10
add esp, 0xc
mov ecx, esi
call fcn.004363df
mov ebx, eax
test ebx, ebx
jns 0x431e23
push str.Failed_creating_or_reading_user_UUID.
lea ecx, [ebp - 0x14]
call fcn.00470680
mov byte [ebp - 4], 0x17
jmp 0x431d89
push str.userguid
lea ecx, [ebp - 0x2c]
call fcn.00470680
push 0x4d02f4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call fcn.00470680
lea eax, [esi + 0xe8]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x19
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call fcn.00470660
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x15
call fcn.00470660
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
call fcn.00470660
push str.exit_GUID_code
lea ecx, [ebp - 0x24]
call fcn.00470680
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xf
call fcn.00470660
push 0
lea eax, [esi + 0x88]
push eax
push 0x4d4b04
mov ebx, str.RealPlayer
push ebx
push SysReAllocString
call fcn.0041093e
push 0
lea eax, [esi + 0x80]
push eax
push str.OrigCode
push ebx
push SysReAllocString
call fcn.0041093e
add esp, 0x28
push str.ext_country
lea ecx, [ebp - 0x34]
call fcn.00470680
mov ebx, str.uh_settings
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1b
call fcn.00470680
lea eax, [esi + 0x1a8]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x1c
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1b
call fcn.00470660
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xf
call fcn.00470660
push str.ext_stamp_country
lea ecx, [ebp - 0x3c]
call fcn.00470680
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
call fcn.00470680
lea eax, [esi + 0x1a8]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x1e
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
call fcn.00470660
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xf
call fcn.00470660
push str.ext_language
lea ecx, [ebp - 0x4c]
call fcn.00470680
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.00470680
lea eax, [esi + 0x190]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x20
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.00470660
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00470660
push str.ext_distcode
lea ecx, [ebp - 0x54]
call fcn.00470680
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.00470680
lea ebx, [esi + 0x168]
push ebx
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x22
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x21
call fcn.00470660
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf
call fcn.00470660
push ebx
lea ecx, [esi + 0x188]
call fcn.00470710
and dword [esi + 0x30], 0
lea eax, [ebp + 0x8a8]
push eax
call fcn.00479a30
pop ecx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x88]
push ecx
mov ecx, eax
call fcn.00479790
lea ecx, [ebp + 0x8a8]
mov byte [ebp - 4], 0x25
call fcn.004798b0
cmp byte [ebp - 0x81], 0xff
lea eax, [ebp - 0x88]
jne 0x43206d
mov eax, dword [ebp - 0x88]
xor ebx, ebx
push ebx
push eax
call fcn.00410fef
pop ecx
pop ecx
lea ecx, [ebp - 0x24]
call fcn.004703d0
push ebx
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x26
call fcn.004710f0
push ebx
push eax
lea eax, [ebp - 0x24]
push str._srninst_d_
push eax
call fcn.00471330
add esp, 0x10
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp + 0x51c]
mov dword [ebp - 0x50], 1
call fcn.00479750
jmp 0x432107
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x25
call fcn.00470660
lea ecx, [ebp - 0x24]
call fcn.004703d0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x26
call fcn.004710f0
push dword [ebp - 0x50]
push eax
lea eax, [ebp - 0x24]
push str._srninst_d_
push eax
call fcn.00471330
add esp, 0x10
inc dword [ebp - 0x50]
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp + 0x51c]
call fcn.00479750
lea eax, [ebp + 0x51c]
push eax
mov byte [ebp - 4], 0x27
call fcn.00479990
mov ebx, eax
pop ecx
neg ebx
lea ecx, [ebp + 0x51c]
sbb bl, bl
mov byte [ebp - 4], 0x26
call fcn.004798b0
inc bl
je 0x4320bb
lea eax, [ebp - 0x24]
lea ebx, [esi + 0x60]
push eax
mov ecx, ebx
call fcn.00470710
push str.basepath
lea ecx, [ebp - 0x2c]
call fcn.00470680
push 0x4d02f4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x28
call fcn.00470680
push ebx
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x29
call fcn.004181f0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x28
call fcn.00470660
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call fcn.00470660
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x25
call fcn.00470660
lea eax, [ebp - 0x44]
push eax
mov ecx, esi
call fcn.00424c63
cmp byte [eax + 7], 0xff
mov byte [ebp - 4], 0x2a
jne 0x4321ad
mov eax, dword [eax]
push 5
push eax
call fcn.00410fef
pop ecx
pop ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x25
call fcn.00470660
lea eax, [ebp - 0x78]
push eax
mov ecx, esi
call fcn.0041d461
cmp byte [eax + 7], 0xff
mov byte [ebp - 4], 0x2b
jne 0x4321da
mov eax, dword [eax]
push 5
push eax
call fcn.00410fef
pop ecx
pop ecx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x25
call fcn.00470660
lea eax, [ebp - 0x9c]
push eax
push 0x20219
xor ebx, ebx
push ebx
push str.CLSIDf414c260_6ac0_11cf_b6d1_00aa00bbbb58
push SysReAllocString
mov dword [esi + 0x28], 1
mov dword [ebp - 0x9c], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x432271
push dword [ebp - 0x9c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x9c], ebx
cmp dword [esi + 0x1d4], ebx
jne 0x432580
lea ecx, [ebp - 0x24]
call fcn.004703d0
mov eax, 0x104
push eax
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x2e
call fcn.004710f0
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x432390
lea ecx, [ebp - 0x24]
jmp 0x432341
push str.actionwarningvaluejscript_disabled
lea ecx, [ebp - 0x14]
call fcn.00470680
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x14]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x2c
call dword [eax + 0x10]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
call fcn.00470660
push str.jscript.dll
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x48], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esi + 0x5c], eax
cmp eax, ebx
je 0x432301
push str.DllRegisterServer
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x38], eax
cmp eax, ebx
je 0x4322ef
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [ebp - 0x38]
test eax, eax
js 0x4322dd
mov dword [ebp - 0x48], 1
jmp 0x4322e6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x50], eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x4322f8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x48], ebx
jne 0x432232
lea ecx, [ebp - 0x2c]
call fcn.004703d0
push dword [ebp - 0x50]
lea eax, [ebp - 0x2c]
push str.actionerrorvaluejavascriptreturn_value_d
push eax
mov byte [ebp - 4], 0x2d
call fcn.00471330
mov eax, dword [esi]
add esp, 0xc
push ebx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi + 0x5c]
cmp eax, ebx
je 0x43233e
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esi + 0x5c], ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.00470660
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xf
call fcn.00470660
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00470660
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.00419c15
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.00419c15
mov esi, 0x80004005
jmp 0x42fe51
push 0xffffffffffffffff
lea ecx, [ebp - 0x24]
call fcn.00471180
push 3
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x24]
call fcn.00470e50
mov ebx, 0x5dc
push ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x2f
call fcn.00426b57
test eax, eax
lea ecx, [ebp - 0x44]
sets byte [ebp - 0x55]
mov byte [ebp - 4], 0x2e
call fcn.00470660
cmp byte [ebp - 0x55], 0
je 0x432477
push str.1500
lea ecx, [esi + 0x108]
call fcn.004707b0
push 2
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x24]
call fcn.00470e50
push eax
lea ecx, [esi + 0x100]
mov byte [ebp - 4], 0x30
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x2e
call fcn.00470660
push esi
lea ecx, [ebp + 0x1b0]
call fcn.0041dc5d
push 2
push 0x463
lea ecx, [ebp + 0x1b0]
mov byte [ebp - 4], 0x31
call fcn.0041f648
push str.actionerrorvaluelow_disk_space
lea ecx, [ebp - 0x14]
mov dword [esi + 0x14], 1
call fcn.00470680
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x14]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x32
call dword [eax + 0x10]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x31
call fcn.00470660
lea ecx, [ebp + 0x1b0]
mov byte [ebp - 4], 0x2e
call fcn.0041f6a4
jmp 0x432269
push str._progfiles_
lea ecx, [ebp - 0x24]
call fcn.004707b0
push 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004113a0
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x33
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x2e
call fcn.00470660
push 3
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x24]
call fcn.00470e50
push ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x34
call fcn.00426b57
test eax, eax
lea ecx, [ebp - 0x78]
sets bl
mov byte [ebp - 4], 0x2e
call fcn.00470660
test bl, bl
je 0x432572
push str.1500
lea ecx, [esi + 0x108]
call fcn.004707b0
push 2
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x24]
call fcn.00470e50
push eax
lea ecx, [esi + 0x100]
mov byte [ebp - 4], 0x35
call fcn.00470710
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x2e
call fcn.00470660
push esi
lea ecx, [ebp]
call fcn.0041dc5d
push 2
push 0x463
lea ecx, [ebp]
mov byte [ebp - 4], 0x36
call fcn.0041f648
push str.actionerrorvaluelow_disk_space
lea ecx, [ebp - 0x14]
mov dword [esi + 0x14], 1
call fcn.00470680
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x14]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x37
call dword [eax + 0x10]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x36
call fcn.00470660
lea ecx, [ebp]
jmp 0x432469
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x25
call fcn.00470660
xor ebx, ebx
lea ecx, [esi + 0xc]
call fcn.0040d4fd
push ebx
test al, al
jne 0x4325dd
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x38], ebx
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
jne 0x4325a5
mov dword [esi + 0x58], 1
lea ecx, [esi + 0xb8]
call fcn.0040d4fd
lea ecx, [ebp - 0x14]
test al, al
je 0x4326db
push str.actionerrorvaluemissing_xml_url
call fcn.00470680
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x14]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3a
call dword [eax + 0x10]
lea ecx, [ebp - 0x14]
jmp 0x432341
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x5c], ebx
jmp 0x432625
push esi
lea ecx, [ebp + 0x360]
call fcn.0041dc5d
push 3
push 0xab
lea ecx, [ebp + 0x360]
mov byte [ebp - 4], 0x38
call fcn.0041f648
cmp eax, 6
jne 0x432638
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 3
jge 0x432638
lea ecx, [ebp + 0x360]
mov byte [ebp - 4], 0x25
call fcn.0041f6a4
push ebx
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x4325e5
jmp 0x4325a5
cmp dword [ebp - 0x5c], 3
mov dword [esi + 0x14], 1
jl 0x43268b
push str.actionerrorvaluestub_update_failure
lea ecx, [ebp - 0x14]
call fcn.00470680
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x14]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x39
call dword [eax + 0x10]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x38
call fcn.00470660
push 1
mov ecx, esi
call fcn.0042b8d7
lea ecx, [ebp + 0x360]
mov byte [ebp - 4], 0x25
call fcn.0041f6a4
jmp 0x43234a
lea ecx, [ebp + 0x360]
mov byte [ebp - 4], 0x25
call fcn.0041f6a4
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xf
call fcn.00470660
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00470660
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.00419c15
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.00419c15
jmp 0x42fe4f
push str.testexit1
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._testexit1
mov byte [ebp - 4], 0x3b
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
mov ebx, str.Used_by_the_unit_tests_to_have_CMaster_exit_early
push ebx
mov byte [ebp - 4], 0x3c
call fcn.00470680
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push ebx
mov byte [ebp - 4], 0x3d
call fcn.00470680
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x860]
mov byte [ebp - 4], 0x3b
call fcn.0041bd62
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call fcn.00470660
push str.testexit1
lea ecx, [ebp - 0x2c]
call fcn.00470680
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x40
call fcn.0041bc40
lea ecx, [ebp - 0x2c]
mov ebx, eax
mov byte [ebp - 4], 0x3f
call fcn.00470660
lea ecx, [ebp + 0x860]
mov byte [ebp - 4], 0x25
call fcn.00419d72
test ebx, ebx
jne 0x43269a
lea ecx, [esi + 0xd8]
call fcn.0040d4fd
test al, al
je 0x432abd
push 0x4cfa1a
lea ecx, [ebp - 0x2c]
call fcn.00470680
push str.2.0.50727
lea ecx, [ebp + 0x524]
mov byte [ebp - 4], 0x41
call fcn.00470680
push 0x4d34e4
lea ecx, [ebp + 0x52c]
mov byte [ebp - 4], 0x42
call fcn.00470680
push 0x4d34e0
lea ecx, [ebp + 0x534]
mov byte [ebp - 4], 0x43
call fcn.00470680
push 0x4cfbd4
lea ecx, [ebp + 0x53c]
mov byte [ebp - 4], 0x44
call fcn.00470680
push 0x4d34dc
lea ecx, [ebp + 0x544]
mov byte [ebp - 4], 0x45
call fcn.00470680
lea eax, [ebp + 0x524]
mov byte [ebp - 4], 0x46
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x50], 5
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push dword [ebp - 0x5c]
call fcn.004705c0
call fcn.00410cb3
pop ecx
pop ecx
cmp eax, ebx
je 0x432859
lea ecx, [ebp - 0x2c]
call fcn.0040d4fd
test al, al
jne 0x43284e
push 0x4d1e7c
lea ecx, [ebp - 0x2c]
call fcn.00470ae0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x2c]
call fcn.00470bc0
add dword [ebp - 0x5c], 8
dec dword [ebp - 0x50]
jne 0x43281b
lea ecx, [ebp - 0x2c]
call fcn.0040d4fd
test al, al
je 0x43287b
push str.none
lea ecx, [ebp - 0x2c]
call fcn.004707b0
push str.normal
lea ecx, [ebp - 0x34]
call fcn.00470680
push str.uh_pre
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x47
call fcn.00470680
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x48
call fcn.0041bc40
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x47
call fcn.00470660
cmp dword [ebp - 0x38], ebx
je 0x4328c3
push str.prestub
jmp 0x4328f6
push str.pageflownum
lea ecx, [ebp - 0x14]
call fcn.00470680
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x49
call fcn.0041bc40
lea ecx, [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0x47
call fcn.00470660
cmp edi, ebx
je 0x4328fe
push str.poststub
lea ecx, [ebp - 0x34]
call fcn.004707b0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x8ec]
push str.actioninstallerstartedvalue
push eax
call fcn.00470fb0
push str.procid
push eax
lea eax, [ebp - 0x120]
push eax
mov byte [ebp - 4], 0x4a
call fcn.00470f60
lea ecx, [esi + 0x138]
push ecx
push eax
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x4b
call fcn.00470f10
push str.gpuid
push eax
lea eax, [ebp - 0x130]
push eax
mov byte [ebp - 4], 0x4c
call fcn.00470f60
lea ecx, [esi + 0x140]
push ecx
push eax
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 0x4d
call fcn.00470f10
push str.dotnetver
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x4e
call fcn.00470f60
add esp, 0x48
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x4f
call fcn.00470f10
push str.exename
push eax
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x50
call fcn.00470f60
lea ecx, [esi + 0x1cc]
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x51
call fcn.00470f10
push str.webuserid
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x52
call fcn.00470f60
lea ecx, [esi + 0x170]
push ecx
push eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x53
push eax
call fcn.00470f10
add esp, 0x3c
mov edx, dword [esi]
push ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x54
call dword [edx + 0x10]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x53
call fcn.00470660
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x52
call fcn.00470660
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x51
call fcn.00470660
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x50
call fcn.00470660
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x4f
call fcn.00470660
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x4e
call fcn.00470660
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x4d
call fcn.00470660
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x4c
call fcn.00470660
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x4b
call fcn.00470660
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x4a
call fcn.00470660
lea ecx, [ebp + 0x8ec]
mov byte [ebp - 4], 0x47
call fcn.00470660
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x46
call fcn.00470660
push fcn.00470660
push 5
push 8
lea eax, [ebp + 0x524]
push eax
mov byte [ebp - 4], 0x41
call fcn.00494648
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.00470660
jmp 0x432abf
xor ebx, ebx
mov ecx, esi
call fcn.0042a586
mov edi, eax
cmp edi, 0x8000aaa3
jne 0x432ad7
mov ecx, esi
call fcn.00428e71
cmp dword [esi + 0x150], ebx
je 0x432b46
cmp edi, ebx
jl 0x432b21
cmp dword [0x4fa00c], ebx
je 0x432b10
lea ecx, [ebp - 0x14]
call fcn.004703d0
push str.Verify_XMLs
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x55
call fcn.004707b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
call fcn.00470660
push str.No_XML_errors_detected
call fcn.004973bd
pop ecx
push ebx
jmp 0x431618
push str.An_XML_error_was_detected
call fcn.004973bd
cmp byte [0x4fe4d7], 0xff
pop ecx
mov eax, 0x4fe4d0
jne 0x432b3f
mov eax, dword [0x4fe4d0]
push eax
call fcn.004973bd
pop ecx
cmp edi, ebx
jl 0x43234a
cmp dword [esi + 0x150], ebx
jne 0x432c15
cmp dword [esi + 0x1d4], ebx
jne 0x432b86
lea eax, [ebp - 0x38]
push eax
push ebx
push esi
push 0x42bf52
push ebx
push ebx
mov dword [ebp - 0x38], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0xbb0], eax
cmp eax, ebx
je 0x43234a
cmp dword [esi + 0x1d8], ebx
je 0x432bb6
lea edi, [esi + 0x1dc]
mov ecx, edi
call fcn.0040d4fd
test al, al
jne 0x432bb6
cmp byte [edi + 7], 0xff
jne 0x432ba7
mov edi, dword [edi]
push edi
call fcn.004944a5
pop ecx
mov dword [esi + 0xb30], eax
jmp 0x432bc0
mov dword [esi + 0xb30], 1
push str.NOLOG:_about_to_call_ShowCurrentPage__
lea ecx, [ebp - 0x14]
call fcn.00470680
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x56
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x25
call fcn.00470660
mov ecx, esi
call fcn.0042c416
push str.NOLOG:_after_ShowCurrentPage__
lea ecx, [ebp - 0x54]
call fcn.00470680
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x57
call fcn.004126e0
pop ecx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x25
call fcn.00470660
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xf
call fcn.00470660
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00470660
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.00419c15
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.00419c15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.00419d72
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8f8]
xor ecx, ebp
call fcn.00492093
add ebp, 0x8fc
leave
ret