Function at 0x426e90
Capabilities:
Accept command line arguments
Check os version
Contain obfuscated stackstrings
Get common file path
Get startup folder
Identify system language via api
Parse pe header
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d80be
mov eax, dword fs:[0]
push eax
mov eax, 0x1b3c
call fcn.00494660
mov eax, dword [0x520078]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x136c], eax
mov dword [ebp - 0x124c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xbb8], 0
mov dword [ebp - 0xbb4], 0
mov byte [ebp - 4], 0
mov dword [ebp - 0xbb4], 7
mov byte [ebp - 4], 0
lea eax, [ebp - 0xbc8]
cmp dword [ebp - 0xbb4], 8
mov dword [ebp - 0xbb8], 0
cmovae eax, dword [ebp - 0xbc8]
xor ecx, ecx
mov byte [ebp - 4], 0x1a
mov word [eax], cx
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xb20], ecx
mov dword [ebp - 0xb1c], ecx
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xb1c], 7
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xb30]
cmp dword [ebp - 0xb1c], 8
mov dword [ebp - 0xb20], ecx
cmovae eax, dword [ebp - 0xb30]
mov byte [ebp - 4], 0x36
mov word [eax], cx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0xb08], ecx
mov dword [ebp - 0xb04], ecx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0xb04], 7
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0xb18]
cmp dword [ebp - 0xb04], 8
mov dword [ebp - 0xb08], ecx
cmovae eax, dword [ebp - 0xb18]
mov byte [ebp - 4], 0x52
mov word [eax], cx
mov byte [ebp - 4], 0x54
mov dword [ebp - 0xcc0], ecx
mov dword [ebp - 0xcbc], ecx
mov byte [ebp - 4], 0x54
mov dword [ebp - 0xcbc], 7
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0xcd0]
cmp dword [ebp - 0xcbc], 8
mov dword [ebp - 0xcc0], ecx
cmovae eax, dword [ebp - 0xcd0]
mov byte [ebp - 4], 0x6e
mov word [eax], cx
mov byte [ebp - 4], 0x70
mov dword [ebp - 0xca8], ecx
mov dword [ebp - 0xca4], ecx
mov byte [ebp - 4], 0x70
mov dword [ebp - 0xca4], 7
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0xcb8]
cmp dword [ebp - 0xca4], 8
mov dword [ebp - 0xca8], ecx
cmovae eax, dword [ebp - 0xcb8]
mov byte [ebp - 4], 0x8a
mov word [eax], cx
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0xc78], ecx
mov dword [ebp - 0xc74], ecx
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0xc74], 7
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0xc88]
cmp dword [ebp - 0xc74], 8
mov dword [ebp - 0xc78], ecx
cmovae eax, dword [ebp - 0xc88]
mov byte [ebp - 4], 0xa6
mov word [eax], cx
mov byte [ebp - 4], 0xa8
mov dword [ebp - 0xbe8], ecx
mov dword [ebp - 0xbe4], ecx
mov byte [ebp - 4], 0xa8
mov dword [ebp - 0xbe4], 7
mov byte [ebp - 4], 0xa8
lea eax, [ebp - 0xbf8]
cmp dword [ebp - 0xbe4], 8
mov dword [ebp - 0xbe8], ecx
cmovae eax, dword [ebp - 0xbf8]
mov byte [ebp - 4], 0xc2
mov word [eax], cx
push 0x34
push ecx
lea eax, [ebp - 0xb7c]
mov byte [ebp - 4], 0xc4
push eax
call fcn.004ad200
add esp, 0xc
mov byte [ebp - 4], 0xc5
mov dword [ebp - 0x1304], 0
mov dword [ebp - 0x1300], 0
mov byte [ebp - 4], 0xc5
mov dword [ebp - 0x1300], 7
mov byte [ebp - 4], 0xc5
lea eax, [ebp - 0x1314]
cmp dword [ebp - 0x1300], 8
mov dword [ebp - 0x1304], 0
cmovae eax, dword [ebp - 0x1314]
xor ecx, ecx
mov byte [ebp - 4], 0xdf
mov word [eax], cx
lea eax, [ebp - 0x1314]
mov byte [ebp - 4], 0xe0
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b140
mov byte [ebp - 4], 0xe3
cmp dword [ebp - 0x1300], 8
jb 0x42716a
mov byte [ebp - 4], 0xe3
mov ecx, dword [ebp - 0x1314]
mov byte [ebp - 4], 0xe3
mov eax, dword [ebp - 0x1300]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1314]
call fcn.004155f0
mov byte [ebp - 4], 0xe3
mov dword [ebp - 0x1300], 7
mov byte [ebp - 4], 0xe3
lea eax, [ebp - 0x1314]
cmp dword [ebp - 0x1300], 8
mov dword [ebp - 0x1304], 0
cmovae eax, dword [ebp - 0x1314]
xor ecx, ecx
mov byte [ebp - 4], 0xfd
mov word [eax], cx
push 0xc0
push ecx
lea eax, [ebp - 0xf80]
mov byte [ebp - 4], 0xfe
push eax
call fcn.004ad200
add esp, 0xc
mov byte [ebp - 4], 0xe2
lea ecx, [ebp - 0xf80]
call fcn.0041d810
mov dword [ebp - 4], 0x101
mov dword [ebp - method.std::_Ref_count_base.virtual_0], 0x4f5998
mov byte [ebp - 4], 0
mov dword [ebp - method.Concurrency::details::SchedulerBase.virtual_68], 0x4f69f0
push 0x3c
lea eax, [ebp - 0xe60]
mov dword [ebp - 4], 0x102
push 0
push eax
call fcn.004ad200
add esp, 8
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0xe60]
call fcn.0041a230
mov dword [ebp - 4], 0x103
mov dword [ebp - 0xae8], 0xffffffff
mov byte [ebp - 4], 4
mov dword [ebp - 0xbd0], 0
mov dword [ebp - 0xbcc], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0xbcc], 7
mov byte [ebp - 4], 4
lea eax, [ebp - 0xbe0]
cmp dword [ebp - 0xbcc], 8
mov dword [ebp - 0xbd0], 0
cmovae eax, dword [ebp - 0xbe0]
xor ecx, ecx
mov byte [ebp - 4], 0x1e
mov word [eax], cx
mov byte [ebp - 4], 0x1f
mov byte [ebp - 0x1245], cl
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
mov dword [ebp - 0x1250], 0
seta byte [ebp - 0x1252]
mov byte [ebp - 4], 0x20
xorps xmm0, xmm0
movq qword [ebp - 0xb88], xmm0
mov dword [ebp - 0xb80], 0
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb84], 0
mov dword [ebp - 0xb80], 0
lea ecx, [ebp - 0x1230]
mov byte [ebp - 4], 0x22
call fcn.0042a810
push 0x80
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x23
push 0
push eax
call fcn.004ad200
add esp, 0xc
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xb90], 0
mov dword [ebp - 0xb8c], 0
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xb8c], 7
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0xba0]
cmp dword [ebp - 0xb8c], 8
mov dword [ebp - 0xb90], 0
cmovae eax, dword [ebp - 0xba0]
xor ecx, ecx
mov byte [ebp - 4], 0x3e
mov word [eax], cx
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xb38], ecx
mov dword [ebp - 0xb34], ecx
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xb34], 7
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0xb48]
cmp dword [ebp - 0xb34], 8
mov dword [ebp - 0xb38], ecx
cmovae eax, dword [ebp - 0xb48]
mov byte [ebp - 4], 0x5a
mov word [eax], cx
push 0x820
push ecx
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 0x5b
push eax
call fcn.004ad200
or edi, 0xffffffff
mov dword [ebp - 0xc18], 0
add esp, 0xc
mov dword [ebp - 0x1268], edi
mov dword [ebp - 0xc14], 0
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0xc14], 7
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0xc28]
cmp dword [ebp - 0xc14], 8
mov dword [ebp - 0xc18], 0
cmovae eax, dword [ebp - 0xc28]
xor ecx, ecx
mov byte [ebp - 4], 0x75
push ecx
mov word [eax], cx
lea ecx, [ebp - 0xc28]
push 0x4f409c
mov byte [ebp - 4], 0x5b
call fcn.00415460
mov ebx, 1
mov byte [ebp - 4], 0x76
mov ecx, ebx
call fcn.004572c0
cmp dword [0x525b20], 0
jne 0x4274c7
mov ecx, ebx
call fcn.004572c0
test eax, eax
jne 0x4274cd
mov ecx, 0x525b80
call fcn.0045b570
test eax, eax
jne 0x4274cd
call fcn.0044fbe0
mov ecx, ebx
call fcn.00443d30
test eax, eax
jne 0x4274cd
call fcn.00444e80
call fcn.0045adf0
mov esi, dword [0x525b24]
mov byte [ebp - 4], 0x7e
mov byte [ebp - 4], 0x7d
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 0x76
test eax, eax
je 0x4274c7
mov byte [ebp - 4], 0x82
mov byte [ebp - 4], 0x81
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 0x76
cmp eax, ebx
jb 0x4274b9
mov byte [ebp - 4], 0x86
mov ecx, esi
mov byte [ebp - 4], 0x85
mov eax, dword [esi + 0x10]
push 0x4f407c
push ebx
dec eax
mov byte [ebp - 4], 0x76
push eax
call fcn.0044fb00
test eax, eax
je 0x4274c7
push 1
push 0x4f407c
mov ecx, esi
call fcn.00414c90
inc dword [0x525b20]
call fcn.00444ed0
xor ecx, ecx
call fcn.004573a0
call fcn.00445c40
mov edx, str.Entering_Avast_SFX_stub_guarded_code_section.
mov ecx, 0x526cdc
call fcn.0041fef0
lea ecx, [ebp - 0x1b48]
call fcn.004799b0
mov ecx, dword [eax + 4]
cmp ecx, 6
jne 0x427512
cmp dword [eax + 8], 0
je 0x42751f
cmp ecx, ecx
jne 0x427512
cmp dword [eax + 8], 1
je 0x42751f
cmp ecx, ecx
ja 0x42751f
cmp ecx, 6
jne 0x427528
cmp dword [eax + 8], 2
jb 0x427528
push ecx
call fcn.00472050
add esp, 4
push 0xc0
lea eax, [ebp - 0x1040]
mov byte [ebp - 4], 0x89
push 0
push eax
call fcn.004ad200
add esp, 0xc
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x1040]
call fcn.0041d810
push 0x5277f0
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 0x8a
call fcn.0041da20
test eax, eax
jne 0x427a2f
push 0x34
push eax
lea eax, [ebp - 0xd94]
mov byte [ebp - 4], 0x8b
push eax
call fcn.004ad200
add esp, 0xc
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0x131c], 0
mov dword [ebp - 0x1318], 0
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0x1318], 7
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0x132c]
cmp dword [ebp - 0x1318], 8
mov dword [ebp - 0x131c], 0
cmovae eax, dword [ebp - 0x132c]
xor ecx, ecx
mov byte [ebp - 4], 0xa6
mov word [eax], cx
lea eax, [ebp - 0x132c]
mov byte [ebp - 4], 0xa7
push eax
lea ecx, [ebp - 0xd94]
call fcn.0042b140
mov byte [ebp - 4], 0xaa
cmp dword [ebp - 0x1318], 8
jb 0x427619
mov byte [ebp - 4], 0xaa
mov ecx, dword [ebp - 0x132c]
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0x1318]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x132c]
call fcn.004155f0
mov byte [ebp - 4], 0xaa
mov dword [ebp - 0x1318], 7
mov byte [ebp - 4], 0xaa
lea eax, [ebp - 0x132c]
cmp dword [ebp - 0x1318], 8
mov dword [ebp - 0x131c], 0
cmovae eax, dword [ebp - 0x132c]
xor ecx, ecx
mov byte [ebp - 4], 0xc4
mov word [eax], cx
lea eax, [ebp - 0x1040]
push ecx
push eax
lea ecx, [ebp - 0xd94]
mov byte [ebp - 4], 0xa9
call fcn.0042b9f0
push str.is_avg_product
lea ecx, [ebp - 0x1408]
call fcn.00415560
lea eax, [ebp - 0x1408]
mov byte [ebp - 4], 0xc5
push eax
lea ecx, [ebp - 0xd94]
call fcn.004221c0
mov bl, al
mov byte [ebp - 4], 0xc6
cmp dword [ebp - 0x13f4], 8
jb 0x4276c0
mov byte [ebp - 4], 0xc6
mov ecx, dword [ebp - 0x1408]
mov byte [ebp - 4], 0xc6
mov eax, dword [ebp - 0x13f4]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1408]
call fcn.004155f0
mov byte [ebp - 4], 0xc6
mov dword [ebp - 0x13f4], 7
mov byte [ebp - 4], 0xc6
lea eax, [ebp - 0x1408]
cmp dword [ebp - 0x13f4], 8
mov dword [ebp - 0x13f8], 0
cmovae eax, dword [ebp - 0x1408]
xor ecx, ecx
mov byte [ebp - 4], 0xe0
mov word [eax], cx
lea ecx, [ebp - 0x1234]
mov byte [ebp - 4], 0xa9
mov dword [ebp - 0x1234], 2
test bl, bl
jne 0x42771b
mov dword [ebp - 0x1234], 1
call fcn.00460a20
push str.edition
lea ecx, [ebp - 0x1390]
call fcn.00415560
lea eax, [ebp - 0x1390]
mov byte [ebp - 4], 0xe1
push eax
lea ecx, [ebp - 0xd94]
call fcn.004221c0
mov bl, al
mov byte [ebp - 4], 0xe2
cmp dword [ebp - 0x137c], 8
jb 0x427777
mov byte [ebp - 4], 0xe2
mov ecx, dword [ebp - 0x1390]
mov byte [ebp - 4], 0xe2
mov eax, dword [ebp - 0x137c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1390]
call fcn.004155f0
mov byte [ebp - 4], 0xe2
mov dword [ebp - 0x137c], 7
mov byte [ebp - 4], 0xe2
lea eax, [ebp - 0x1390]
cmp dword [ebp - 0x137c], 8
mov dword [ebp - 0x1380], 0
cmovae eax, dword [ebp - 0x1390]
xor ecx, ecx
mov byte [ebp - 4], 0xfc
mov word [eax], cx
mov byte [ebp - 4], 0xa9
test bl, bl
je 0x42788f
push str.edition
lea ecx, [ebp - 0x13f0]
call fcn.00415560
lea eax, [ebp - 0x13f0]
mov byte [ebp - 4], 0xfd
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xd7c]
call fcn.0042d060
mov eax, dword [ebp - 0x125c]
add eax, 0x28
mov dword [ebp - 4], 0x201
mov dword [ebp - 4], 0x1ff
cmp dword [eax + 0x14], 8
jb 0x427808
mov eax, dword [eax]
push eax
mov byte [ebp - 4], 0xfd
call fcn.004b9c27
mov edi, eax
add esp, 4
mov dword [ebp - 0x1268], edi
mov dword [ebp - 4], 0x202
cmp dword [ebp - 0x13dc], 8
jb 0x42784f
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x13f0]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x13dc]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13f0]
call fcn.004155f0
mov byte [ebp - 4], 2
mov dword [ebp - 0x13dc], 7
mov byte [ebp - 4], 2
lea eax, [ebp - 0x13f0]
cmp dword [ebp - 0x13dc], 8
mov dword [ebp - 0x13e0], 0
cmovae eax, dword [ebp - 0x13f0]
mov byte [ebp - 4], 0x1c
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
push str.sub_edition
lea ecx, [ebp - 0x13d8]
call fcn.00415560
lea eax, [ebp - 0x13d8]
mov dword [ebp - 4], 0x21d
push eax
lea ecx, [ebp - 0xd94]
call fcn.004221c0
mov bl, al
mov dword [ebp - 4], 0x21e
cmp dword [ebp - 0x13c4], 8
jb 0x4278ec
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x13d8]
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x13c4]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13d8]
call fcn.004155f0
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x13c4], 7
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x13d8]
cmp dword [ebp - 0x13c4], 8
mov dword [ebp - 0x13c8], 0
cmovae eax, dword [ebp - 0x13d8]
xor ecx, ecx
mov byte [ebp - 4], 0x38
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
test bl, bl
je 0x427a1e
push str.sub_edition
lea ecx, [ebp - 0x13c0]
call fcn.00415560
lea eax, [ebp - 0x13c0]
mov dword [ebp - 4], 0x239
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xd7c]
call fcn.0042d060
mov edx, dword [ebp - 0x125c]
add edx, 0x28
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x3b
cmp dword [edx + 0x14], 8
jb 0x42797d
mov edx, dword [edx]
mov byte [ebp - 4], 0x39
cmp word [edx], 0
jne 0x42798b
xor ecx, ecx
jmp 0x42799f
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427990
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xc28]
call fcn.00415460
mov dword [ebp - 4], 0x23e
cmp dword [ebp - 0x13ac], 8
jb 0x4279de
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x13c0]
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x13ac]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13c0]
call fcn.004155f0
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x13ac], 7
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x13c0]
cmp dword [ebp - 0x13ac], 8
mov dword [ebp - 0x13b0], 0
cmovae eax, dword [ebp - 0x13c0]
mov byte [ebp - 4], 0x58
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
lea ecx, [ebp - 0xd94]
mov byte [ebp - 4], 0x8a
call fcn.0042aff0
jmp 0x427a44
lea ecx, [ebp - 0x1234]
mov dword [ebp - 0x1234], 1
call fcn.00460a20
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 0x76
call fcn.0041d910
push 0
lea eax, [ebp - 0x1238]
mov dword [ebp - 0x1238], 0
push eax
push 1
push str.O:BAG:BAD:P_A_CIOI_FA___SY__A_CIOI_FA___BA__A_CIOI_FRFX___BU_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
mov eax, dword [ebp - 0x1238]
push str.._
mov dword [ebp - 0x1240], eax
lea eax, [ebp - 0x8b0]
push 0x410
push eax
mov dword [ebp - 0x1244], 0xc
mov dword [ebp - 0x123c], 0
call fcn.004befb0
add esp, 0xc
lea eax, [ebp - 0x8a8]
push 0
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov dword [ebp - 0x12d4], 0
mov dword [ebp - 0x12d0], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12d0], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12e4]
cmp dword [ebp - 0x12d0], 8
mov dword [ebp - 0x12d4], 0
cmovae eax, dword [ebp - 0x12e4]
xor ecx, ecx
mov dword [ebp - 4], 0x272
mov word [eax], cx
lea ecx, [ebp - 0x12e4]
push 1
push 0x4f407c
mov dword [ebp - 4], 0x176
call fcn.00415460
mov dword [ebp - 4], 0x273
call fcn.00460e00
mov ecx, eax
call fcn.00472ae0
mov byte [ebp - 4], 0x74
cmp dword [eax + 0x14], 8
jb 0x427b4d
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x12e4]
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x1450]
call fcn.00414c20
add esp, 4
mov byte [ebp - 4], 0x78
cmp dword [eax + 0x14], 8
jb 0x427b72
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 0x77
push 0x410
push eax
call fcn.004b9da9
add esp, 0xc
mov byte [ebp - 4], 0x7b
cmp dword [ebp - 0x143c], 8
jb 0x427bba
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x1450]
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0x143c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1450]
call fcn.004155f0
mov byte [ebp - 4], 0x7b
mov dword [ebp - 0x143c], 7
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x1450]
cmp dword [ebp - 0x143c], 8
mov dword [ebp - 0x1440], 0
cmovae eax, dword [ebp - 0x1450]
xor ecx, ecx
mov byte [ebp - 4], 0x95
mov word [eax], cx
mov dword [ebp - 4], 0x296
cmp dword [ebp - 0x12d0], 8
jb 0x427c25
mov byte [ebp - 4], 0x96
mov ecx, dword [ebp - 0x12e4]
mov byte [ebp - 4], 0x96
mov eax, dword [ebp - 0x12d0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12e4]
call fcn.004155f0
mov byte [ebp - 4], 0x96
mov dword [ebp - 0x12d0], 7
mov byte [ebp - 4], 0x96
lea eax, [ebp - 0x12e4]
cmp dword [ebp - 0x12d0], 8
mov dword [ebp - 0x12d4], 0
cmovae eax, dword [ebp - 0x12e4]
xor ecx, ecx
mov byte [ebp - 4], 0xb0
mov word [eax], cx
lea edx, [ebp - 0x1244]
xor eax, eax
mov dword [ebp - 4], 0x176
cmp dword [ebp - 0x1238], eax
lea ecx, [ebp - 0x8b0]
cmove edx, eax
call fcn.00415df0
push dword [ebp - 0x1238]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x1a20]
mov dword [ebp - 0x1238], 0
call fcn.004799b0
mov ecx, dword [eax + 4]
cmp ecx, 6
jne 0x427cbc
cmp dword [eax + 8], 0
je 0x427cc9
cmp ecx, ecx
jne 0x427cbc
cmp dword [eax + 8], 1
je 0x427cc9
cmp ecx, ecx
ja 0x427cc9
cmp ecx, 6
jne 0x427cda
cmp dword [eax + 8], 2
jb 0x427cda
call fcn.0042bf80
mov esi, eax
mov ecx, esi
call dword [0x4e3310]
call esi
cmp edi, 0xffffffff
jne 0x427d81
lea ecx, [ebp - 0x1438]
call fcn.00431ac0
mov dword [ebp - 4], 0x2b2
cmp dword [eax + 0x14], 8
jb 0x427cfd
mov eax, dword [eax]
push str.LogsClear.log
mov edx, eax
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0xbe0]
call fcn.00415ba0
add esp, 4
mov dword [ebp - 4], 0x2b5
cmp dword [ebp - 0x1424], 8
jb 0x427d48
mov byte [ebp - 4], 0xb5
mov ecx, dword [ebp - 0x1438]
mov byte [ebp - 4], 0xb5
mov eax, dword [ebp - 0x1424]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1438]
call fcn.004155f0
mov byte [ebp - 4], 0xb5
mov dword [ebp - 0x1424], 7
mov byte [ebp - 4], 0xb5
lea eax, [ebp - 0x1438]
cmp dword [ebp - 0x1424], 8
mov dword [ebp - 0x1428], 0
cmovae eax, dword [ebp - 0x1438]
mov byte [ebp - 4], 0xcf
jmp 0x427e1a
lea ecx, [ebp - 0x1420]
call fcn.00431ac0
mov dword [ebp - 4], 0x2d1
cmp dword [eax + 0x14], 8
jb 0x427d9b
mov eax, dword [eax]
push str.LogsSetup.log
mov edx, eax
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0xbe0]
call fcn.00415ba0
add esp, 4
mov dword [ebp - 4], 0x2d4
cmp dword [ebp - 0x140c], 8
jb 0x427de6
mov byte [ebp - 4], 0xd4
mov ecx, dword [ebp - 0x1420]
mov byte [ebp - 4], 0xd4
mov eax, dword [ebp - 0x140c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1420]
call fcn.004155f0
mov byte [ebp - 4], 0xd4
mov dword [ebp - 0x140c], 7
mov byte [ebp - 4], 0xd4
lea eax, [ebp - 0x1420]
cmp dword [ebp - 0x140c], 8
mov dword [ebp - 0x1410], 0
cmovae eax, dword [ebp - 0x1420]
mov byte [ebp - 4], 0xee
xor ecx, ecx
mov word [eax], cx
mov eax, 0x5c
push 1
mov dword [ebp - 4], 0x176
mov word [ebp - 0xae4], ax
lea eax, [ebp - 0xae4]
push ecx
push eax
lea ecx, [ebp - 0xbe0]
call fcn.004170f0
push eax
push 0
lea eax, [ebp - 0x1468]
push eax
lea ecx, [ebp - 0xbe0]
call fcn.00416d40
mov dword [ebp - 4], 0x2f0
cmp dword [eax + 0x14], 8
jb 0x427e6b
mov eax, dword [eax]
xor edx, edx
mov byte [ebp - 4], 0xef
mov ecx, eax
call fcn.00415df0
mov dword [ebp - 4], 0x2f3
cmp dword [ebp - 0x1454], 8
jb 0x427ead
mov byte [ebp - 4], 0xf3
mov ecx, dword [ebp - 0x1468]
mov dword [ebp - 4], 0x2f3
mov eax, dword [ebp - 0x1454]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1468]
call fcn.004155f0
mov dword [ebp - 4], 0x2f3
mov dword [ebp - 0x1454], 7
mov dword [ebp - 4], 0x2f3
lea eax, [ebp - 0x1468]
cmp dword [ebp - 0x1454], 8
mov dword [ebp - 0x1458], 0
cmovae eax, dword [ebp - 0x1468]
xor ecx, ecx
mov dword [ebp - 4], 0x30d
mov word [eax], cx
mov dword [ebp - 4], 0x30e
lea ecx, [ebp - 0xbe0]
cmp dword [ebp - 0xbcc], 8
cmovae ecx, dword [ebp - 0xbe0]
sub esp, 8
mov dword [ebp - 4], 0x176
call fcn.00426530
add esp, 8
call fcn.00426420
lea ecx, [ebp - 0x1230]
call fcn.00432510
call fcn.00457af0
mov byte [ebp - 0xae1], al
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [ebp - 0x12ec], 0
mov dword [ebp - 0x12e8], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12e8], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12fc]
cmp dword [ebp - 0x12e8], 8
mov dword [ebp - 0x12ec], 0
cmovae eax, dword [ebp - 0x12fc]
mov dword [ebp - 4], 0x32a
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
cmp word [edx], cx
je 0x427fb5
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427fa6
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x12fc]
call fcn.00415460
push 1
lea eax, [ebp - 0x12fc]
mov dword [ebp - 4], 0x32b
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b9f0
mov dword [ebp - 4], 0x32c
cmp dword [ebp - 0x12e8], 8
jb 0x42800f
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x12fc]
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x12e8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12fc]
call fcn.004155f0
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x12e8], 7
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x12fc]
cmp dword [ebp - 0x12e8], 8
mov dword [ebp - 0x12ec], 0
cmovae eax, dword [ebp - 0x12fc]
mov byte [ebp - 4], 0x46
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12a4], ecx
mov dword [ebp - 0x12a0], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12a0], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12b4]
cmp dword [ebp - 0x12a0], 8
mov dword [ebp - 0x12a4], ecx
cmovae eax, dword [ebp - 0x12b4]
mov dword [ebp - 4], 0x360
mov ebx, 6
mov word [eax], cx
mov eax, ebx
mov dword [ebp - 4], 0x176
cmp word [str.silent], cx
cmove eax, ecx
lea ecx, [ebp - 0x12b4]
push eax
push str.silent
call fcn.00415460
mov dword [ebp - 4], 0x362
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1348], eax
lea eax, [ebp - 0x12b4]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422b70
mov esi, eax
mov byte [ebp - 4], 0x6e
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1378], eax
mov byte [ebp - 4], 0x61
cmp esi, dword [ebp - 0x1378]
je 0x42816f
mov byte [ebp - 4], 0x61
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0x79
mov byte [ebp - 4], 0x78
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0x7c
mov edi, dword [ebp - 0x12a4]
mov byte [ebp - 4], 0x80
cmp dword [edx + 0x14], 8
jb 0x42812f
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0x83
cmp dword [ebp - 0x12a0], 8
lea ecx, [ebp - 0x12b4]
push ebx
cmovae ecx, dword [ebp - 0x12b4]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x61
call fcn.00422f30
add esp, 0x10
mov ebx, 6
test eax, eax
js 0x42816f
mov dword [ebp - 0x14ac], esi
jmp 0x428183
mov byte [ebp - 4], 0x86
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x14a8], esi
mov byte [ebp - 4], 0x61
mov edi, dword [ebp - 0x1348]
mov dword [ebp - 4], 0x38e
cmp dword [ebp - 0x12a0], 8
jb 0x4281bb
mov byte [ebp - 4], 0x8e
mov ecx, dword [ebp - 0x12b4]
mov byte [ebp - 4], 0x8e
mov eax, dword [ebp - 0x12a0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12b4]
call fcn.004155f0
mov byte [ebp - 4], 0x8e
mov dword [ebp - 0x12a0], 7
mov byte [ebp - 4], 0x8e
lea eax, [ebp - 0x12b4]
cmp dword [ebp - 0x12a0], 8
mov dword [ebp - 0x12a4], 0
cmovae eax, dword [ebp - 0x12b4]
xor ecx, ecx
mov byte [ebp - 4], 0xa8
mov word [eax], cx
mov dword [ebp - 4], 0x176
cmp esi, edi
je 0x42844a
push str.silent
lea ecx, [ebp - 0x13a8]
call fcn.00415560
lea eax, [ebp - 0x13a8]
mov dword [ebp - 4], 0x3a9
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xb64]
call fcn.0042d060
mov ecx, dword [ebp - 0x125c]
mov byte [ebp - 4], 0xa9
add ecx, 0x28
mov byte [ebp - 4], 0xa9
mov dword [ebp - 0xaf0], 0
mov dword [ebp - 0xaec], 0
mov byte [ebp - 4], 0xa9
mov dword [ebp - 0xaec], 7
mov byte [ebp - 4], 0xa9
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
mov dword [ebp - 0xaf0], 0
cmovae eax, dword [ebp - 0xb00]
xor edx, edx
mov byte [ebp - 4], 0xc9
push 0xffffffffffffffff
push edx
push ecx
mov word [eax], dx
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0xa9
call fcn.00415110
mov byte [ebp - 4], 0xcc
cmp dword [ebp - 0x1394], 8
jb 0x4282d3
mov byte [ebp - 4], 0xcc
mov ecx, dword [ebp - 0x13a8]
mov byte [ebp - 4], 0xcc
mov eax, dword [ebp - 0x1394]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13a8]
call fcn.004155f0
mov byte [ebp - 4], 0xcc
mov dword [ebp - 0x1394], 7
mov byte [ebp - 4], 0xcc
lea eax, [ebp - 0x13a8]
cmp dword [ebp - 0x1394], 8
mov dword [ebp - 0x1398], 0
cmovae eax, dword [ebp - 0x13a8]
xor ecx, ecx
mov byte [ebp - 4], 0xe6
mov word [eax], cx
mov byte [ebp - 4], 0xe7
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
cmovae eax, dword [ebp - 0xb00]
mov byte [ebp - 4], 0xe7
mov dword [ebp - 0x134c], eax
mov byte [ebp - 4], 0xed
lea ecx, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
cmovae ecx, dword [ebp - 0xb00]
mov byte [ebp - 4], 0xed
mov eax, dword [ebp - 0xaf0]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x1350], eax
mov byte [ebp - 4], 0xf3
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
cmovae eax, dword [ebp - 0xb00]
mov byte [ebp - 4], 0xf3
mov dword [ebp - 0x1354], eax
lea eax, [ebp - 0x1234]
mov byte [ebp - 4], 0xcb
mov edx, dword [ebp - 0x1350]
mov ecx, dword [ebp - 0x1354]
push eax
push dword [ebp - 0x134c]
mov dword [ebp - 0x1234], fcn.004bef80
call fcn.0042d370
add esp, 8
lea ecx, [ebp - 0xb00]
push 8
push 0
push str.progress
call fcn.00417190
cmp eax, 0xffffffff
mov dword [ebp - 4], 0x3f9
sete byte [ebp - 0x1245]
mov byte [ebp - 4], 0xf9
cmp dword [ebp - 0xaec], 8
jb 0x428401
mov byte [ebp - 4], 0xf9
mov ecx, dword [ebp - 0xb00]
mov dword [ebp - 4], 0x3f9
mov eax, dword [ebp - 0xaec]
inc eax
push eax
push ecx
lea ecx, [ebp - 0xb00]
call fcn.004155f0
mov dword [ebp - 4], 0x3f9
mov dword [ebp - 0xaec], 7
mov dword [ebp - 4], 0x3f9
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
mov dword [ebp - 0xaf0], 0
cmovae eax, dword [ebp - 0xb00]
mov dword [ebp - 4], 0x413
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1274], 0
mov dword [ebp - 0x1270], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1270], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x1284]
cmp dword [ebp - 0x1270], 8
mov dword [ebp - 0x1274], 0
cmovae eax, dword [ebp - 0x1284]
xor ecx, ecx
mov dword [ebp - 4], 0x42d
mov word [eax], cx
mov eax, 0xc
mov dword [ebp - 4], 0x176
cmp word [str.AdminUpgrade], cx
cmove eax, ecx
lea ecx, [ebp - 0x1284]
push eax
push str.AdminUpgrade
call fcn.00415460
mov dword [ebp - 4], 0x42f
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1374], eax
lea eax, [ebp - 0x1284]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422b70
mov esi, eax
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1358], eax
mov byte [ebp - 4], 0x2e
cmp esi, dword [ebp - 0x1358]
je 0x428576
mov byte [ebp - 4], 0x2e
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 0x45
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0x49
mov edi, dword [ebp - 0x1274]
mov byte [ebp - 4], 0x4d
cmp dword [edx + 0x14], 8
jb 0x428536
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0x50
cmp dword [ebp - 0x1270], 8
lea ecx, [ebp - 0x1284]
push ebx
cmovae ecx, dword [ebp - 0x1284]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x2e
call fcn.00422f30
add esp, 0x10
mov ebx, 6
test eax, eax
js 0x428576
mov dword [ebp - 0x14a4], esi
jmp 0x42858a
mov byte [ebp - 4], 0x53
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x14a0], esi
mov byte [ebp - 4], 0x2e
mov edi, dword [ebp - 0x1374]
mov dword [ebp - 4], 0x45b
cmp dword [ebp - 0x1270], 8
jb 0x4285c2
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x1284]
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0x1270]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1284]
call fcn.004155f0
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0x1270], 7
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x1284]
cmp dword [ebp - 0x1270], 8
mov dword [ebp - 0x1274], 0
cmovae eax, dword [ebp - 0x1284]
mov byte [ebp - 4], 0x75
xor ecx, ecx
mov word [eax], cx
cmp esi, edi
movzx eax, byte [ebp - 0x1245]
mov ecx, 1
mov dword [ebp - 4], 0x176
cmovne eax, ecx
mov dword [ebp - 0x1234], eax
mov dword [ebp - 0x128c], 0
mov dword [ebp - 0x1288], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1288], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x129c]
cmp dword [ebp - 0x1288], 8
mov dword [ebp - 0x128c], 0
cmovae eax, dword [ebp - 0x129c]
xor ecx, ecx
mov dword [ebp - 4], 0x48f
mov word [eax], cx
mov eax, 5
mov dword [ebp - 4], 0x176
cmp word [0x4f5bc0], cx
cmove eax, ecx
lea ecx, [ebp - 0x129c]
push eax
push 0x4f5bc0
call fcn.00415460
mov dword [ebp - 4], 0x491
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1360], eax
lea eax, [ebp - 0x129c]
mov byte [ebp - 4], 0x90
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422b70
mov esi, eax
mov byte [ebp - 4], 0x9d
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x135c], eax
mov byte [ebp - 4], 0x90
cmp esi, dword [ebp - 0x135c]
je 0x428745
mov byte [ebp - 4], 0x90
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0xa8
mov byte [ebp - 4], 0xa7
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0xab
mov edi, dword [ebp - 0x128c]
mov byte [ebp - 4], 0xaf
cmp dword [edx + 0x14], 8
jb 0x428705
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0xb2
cmp dword [ebp - 0x1288], 8
lea ecx, [ebp - 0x129c]
push ebx
cmovae ecx, dword [ebp - 0x129c]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x90
call fcn.00422f30
add esp, 0x10
mov ebx, 6
test eax, eax
js 0x428745
mov dword [ebp - 0x1484], esi
jmp 0x428759
mov byte [ebp - 4], 0xb5
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x1488], esi
mov byte [ebp - 4], 0x90
cmp esi, dword [ebp - 0x1360]
setne byte [ebp - 0x1370]
mov dword [ebp - 4], 0x4bd
cmp dword [ebp - 0x1288], 8
jb 0x428798
mov byte [ebp - 4], 0xbd
mov ecx, dword [ebp - 0x129c]
mov byte [ebp - 4], 0xbd
mov eax, dword [ebp - 0x1288]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x129c]
call fcn.004155f0
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0x1288], 7
mov byte [ebp - 4], 0xbd
lea eax, [ebp - 0x129c]
cmp dword [ebp - 0x1288], 8
mov dword [ebp - 0x128c], 0
cmovae eax, dword [ebp - 0x129c]
mov byte [ebp - 4], 0xd7
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12bc], ecx
mov dword [ebp - 0x12b8], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12b8], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12cc]
cmp dword [ebp - 0x12b8], 8
mov dword [ebp - 0x12bc], ecx
cmovae eax, dword [ebp - 0x12cc]
mov dword [ebp - 4], 0x4f1
mov word [eax], cx
xor eax, eax
mov dword [ebp - 4], 0x176
lea ecx, [ebp - 0x12cc]
cmp word [str.cookie], ax
cmove ebx, eax
push ebx
push str.cookie
call fcn.00415460
lea eax, [ebp - 0x12cc]
mov dword [ebp - 4], 0x4f2
push eax
lea eax, [ebp - 0x125c]
push eax
lea ecx, [ebp - 0xb64]
call fcn.0042d060
mov eax, dword [ebp - 0x125c]
add eax, 0x28
mov byte [ebp - 4], 0xf2
lea ecx, [ebp - 0xba0]
cmp ecx, eax
je 0x428889
push 0xffffffffffffffff
push 0
push eax
mov byte [ebp - 4], 0xf2
call fcn.00415110
mov dword [ebp - 4], 0x517
cmp dword [ebp - 0x12b8], 8
jb 0x4288bb
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x12cc]
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x12b8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12cc]
call fcn.004155f0
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x12b8], 7
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x12cc]
cmp dword [ebp - 0x12b8], 8
mov dword [ebp - 0x12bc], 0
cmovae eax, dword [ebp - 0x12cc]
mov byte [ebp - 4], 0x31
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1334], ecx
mov dword [ebp - 0x1330], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1330], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x1344]
cmp dword [ebp - 0x1330], 8
mov dword [ebp - 0x1334], ecx
cmovae eax, dword [ebp - 0x1344]
mov dword [ebp - 4], 0x54b
mov word [eax], cx
mov eax, 0xb
mov dword [ebp - 4], 0x176
cmp word [str.ga_clientid], cx
cmove eax, ecx
lea ecx, [ebp - 0x1344]
push eax
push str.ga_clientid
call fcn.00415460
mov dword [ebp - 4], 0x54d
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1368], eax
lea eax, [ebp - 0x1344]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0xb64]
call fcn.00422b70
mov esi, eax
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x1364], eax
mov byte [ebp - 4], 0x4c
cmp esi, dword [ebp - 0x1364]
je 0x428a14
mov byte [ebp - 4], 0x4c
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0x64
mov byte [ebp - 4], 0x63
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0x67
mov edi, dword [ebp - 0x1334]
mov byte [ebp - 4], 0x6b
cmp dword [edx + 0x14], 8
jb 0x4289d9
mov edx, dword [edx]
lea ebx, [ebp - 0xb64]
mov byte [ebp - 4], 0x6e
cmp dword [ebp - 0x1330], 8
lea ecx, [ebp - 0x1344]
push ebx
cmovae ecx, dword [ebp - 0x1344]
push 0xffffffffffffffff
push eax
push edi
mov byte [ebp - 4], 0x4c
call fcn.00422f30
add esp, 0x10
test eax, eax
js 0x428a14
mov dword [ebp - 0x149c], esi
jmp 0x428a28
mov byte [ebp - 4], 0x71
mov esi, dword [ebp - 0xb5c]
mov dword [ebp - 0x1498], esi
mov byte [ebp - 4], 0x4c
cmp esi, dword [ebp - 0x1368]
je 0x428aff
push str.ga_clientid
lea ecx, [ebp - 0x1548]
call fcn.00415560
lea eax, [ebp - 0x1548]
mov byte [ebp - 4], 0x79
push eax
lea eax, [ebp - 0x125c]
mov dword [ebp - 0x124c], 1
push eax
lea ecx, [ebp - 0xb64]
call fcn.0042d060
mov ecx, dword [ebp - 0x125c]
mov dword [ebp - 4], 0x579
add ecx, 0x28
mov dword [ebp - 4], 0x579
mov dword [ebp - 0x1470], 0
mov dword [ebp - 0x146c], 0
mov dword [ebp - 4], 0x579
mov dword [ebp - 0x146c], 7
mov dword [ebp - 4], 0x579
lea eax, [ebp - 0x1480]
cmp dword [ebp - 0x146c], 8
mov dword [ebp - 0x1470], 0
cmovae eax, dword [ebp - 0x1480]
xor edx, edx
mov dword [ebp - 4], 0x599
push 0xffffffffffffffff
push edx
push ecx
mov word [eax], dx
lea ecx, [ebp - 0x1480]
mov byte [ebp - 4], 0x79
call fcn.00415110
lea esi, [ebp - 0x1480]
mov dword [ebp - 4], 0x59a
mov ebx, 3
jmp 0x428b37
lea eax, [ebp - 0x18f8]
push eax
call fcn.0047bb60
add esp, 4
lea edx, [ebp - 0x1264]
lea ecx, [ebp - 0x17b8]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1264], xmm0
call fcn.004263c0
mov esi, eax
mov dword [ebp - 4], 0x59b
mov ebx, 4
mov dword [ebp - 0x124c], ebx
lea eax, [ebp - 0xb48]
mov dword [ebp - 4], 0x59c
cmp eax, esi
je 0x428bc6
mov byte [ebp - 4], 0x9c
cmp dword [ebp - 0xb34], 8
jb 0x428b7d
mov byte [ebp - 4], 0x9c
mov ecx, dword [ebp - 0xb48]
mov byte [ebp - 4], 0x9c
mov eax, dword [ebp - 0xb34]
inc eax
push eax
push ecx
lea ecx, [ebp - 0xb48]
call fcn.004155f0
mov byte [ebp - 4], 0x9c
mov dword [ebp - 0xb34], 7
mov byte [ebp - 4], 0x9c
lea eax, [ebp - 0xb48]
cmp dword [ebp - 0xb34], 8
mov dword [ebp - 0xb38], 0
cmovae eax, dword [ebp - 0xb48]
xor ecx, ecx
mov byte [ebp - 4], 0xb6
mov word [eax], cx
push esi
lea ecx, [ebp - 0xb48]
mov byte [ebp - 4], 0x9c
call fcn.00414f20
mov dword [ebp - 4], 0x59a
test bl, 4
je 0x428be6
and ebx, 0xfffffffb
lea ecx, [ebp - 0x17b8]
mov dword [ebp - 0x124c], ebx
call fcn.00415720
mov dword [ebp - 4], 0x579
test bl, 2
je 0x428c06
and ebx, 0xfffffffd
lea ecx, [ebp - 0x1480]
mov dword [ebp - 0x124c], ebx
call fcn.00415720
mov dword [ebp - 4], 0x54c
test bl, 1
je 0x428c26
and ebx, 0xfffffffe
lea ecx, [ebp - 0x1548]
mov dword [ebp - 0x124c], ebx
call fcn.00415720
lea ecx, [ebp - 0x1344]
mov dword [ebp - 4], 0x176
call fcn.00415720
xor ecx, ecx
call fcn.00420900
push eax
mov edx, str.Running_SFX__s
mov ecx, 0x526cdc
call fcn.00418400
add esp, 4
lea eax, [ebp - 0xae8]
lea edx, [ebp - 0xc88]
lea ecx, [ebp - 0xcb8]
push eax
sub esp, 8
lea eax, [ebp - 0xbf8]
push eax
call fcn.004322c0
add esp, 0x10
mov byte [ebp - 0x1251], al
test al, al
je 0x428c99
lea ecx, [ebp - 0x1170]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042c040
cmp word [ebp - 0x90], 0
jne 0x428d2d
push str.guid
lea ecx, [ebp - 0x1578]
call fcn.00415560
lea eax, [ebp - 0x1578]
mov dword [ebp - 4], 0x5e0
or ebx, 8
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.004221c0
test al, al
je 0x428d2d
push str.guid
lea ecx, [ebp - 0x1560]
call fcn.00415560
lea eax, [ebp - 0x1560]
mov dword [ebp - 4], 0x5e1
or ebx, 0x10
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.0042b110
mov dword [ebp - 4], 0x5e3
mov byte [ebp - 4], 0xe2
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0xe1
mov byte [ebp - 0x1245], 1
cmp eax, 0x24
je 0x428d34
mov byte [ebp - 0x1245], 0
mov dword [ebp - 4], 0x5e0
test bl, 0x10
je 0x428d54
and ebx, 0xffffffef
lea ecx, [ebp - 0x1560]
mov dword [ebp - 0x124c], ebx
call fcn.00415720
mov dword [ebp - 4], 0x176
test bl, 8
je 0x428d74
and ebx, 0xfffffff7
lea ecx, [ebp - 0x1578]
mov dword [ebp - 0x124c], ebx
call fcn.00415720
cmp byte [ebp - 0x1245], 0
je 0x428dcc
push str.guid
lea ecx, [ebp - 0x1590]
call fcn.00415560
lea eax, [ebp - 0x1590]
mov dword [ebp - 4], 0x5e6
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
mov ecx, eax
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042c040
lea ecx, [ebp - 0x1590]
mov dword [ebp - 4], 0x176
call fcn.00415720
cmp word [ebp - 0x90], 0
jne 0x428e2d
lea eax, [ebp - 0x18e8]
push eax
call fcn.0047bb60
add esp, 4
lea edx, [ebp - 0x1264]
lea ecx, [ebp - 0x17d0]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1264], xmm0
call fcn.004263c0
mov ecx, eax
mov dword [ebp - 4], 0x5e7
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042c040
lea ecx, [ebp - 0x17d0]
mov dword [ebp - 4], 0x176
call fcn.00415720
mov edi, dword [ebp - 0x1268]
cmp edi, 0xffffffff
je 0x4290af
cmp byte [ebp - 0x1251], 0
jne 0x4290af
cmp byte [ebp - 0x1090], 0
jne 0x4290af
lea ecx, [ebp - 0xc40]
call fcn.00414fe0
push 0x4f3fec
push ecx
mov dword [ebp - 4], 0x5e8
call fcn.004609f0
add esp, 4
lea ecx, [ebp - 0x17e8]
mov edx, eax
call fcn.00414b10
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xe9
call fcn.004155c0
mov ecx, eax
call fcn.004211a0
lea ecx, [ebp - 0x17e8]
mov byte [ebp - 4], 0xe8
mov bl, al
call fcn.00415720
test bl, bl
je 0x428eef
push 0x4f3fec
push ecx
call fcn.004609f0
add esp, 4
lea ecx, [ebp - 0x1800]
mov edx, eax
call fcn.00414b10
add esp, 4
push eax
lea ecx, [ebp - 0xc40]
mov byte [ebp - 4], 0xea
call fcn.00419aa0
lea ecx, [ebp - 0x1800]
mov byte [ebp - 4], 0xe8
call fcn.00415720
jmp 0x428f9b
push str.FsBlk
push ecx
call fcn.004609f0
add esp, 4
lea ecx, [ebp - 0x1818]
mov edx, eax
call fcn.00414b10
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xeb
call fcn.004155c0
mov ecx, eax
call fcn.004211a0
lea ecx, [ebp - 0x1818]
mov byte [ebp - 4], 0xe8
mov bl, al
call fcn.00415720
test bl, bl
je 0x428f73
push str.FsBlk
push ecx
call fcn.004609f0
add esp, 4
lea ecx, [ebp - 0x1830]
mov edx, eax
call fcn.00414b10
add esp, 4
push eax
lea ecx, [ebp - 0xc40]
mov byte [ebp - 4], 0xec
call fcn.00419aa0
lea ecx, [ebp - 0x1830]
mov byte [ebp - 4], 0xe8
call fcn.00415720
jmp 0x428f9b
call fcn.00460a10
mov ecx, eax
call fcn.004155c0
mov ecx, eax
call fcn.004211a0
test al, al
je 0x428f9b
call fcn.00460a10
push eax
lea ecx, [ebp - 0xc40]
call fcn.004193e0
mov byte [ebp - 4], 0xed
mov eax, dword [ebp - 0xc30]
mov byte [ebp - 4], 0xe8
test eax, eax
je 0x429097
call fcn.00460a00
push eax
lea ecx, [ebp - 0xd60]
call fcn.00419b20
mov byte [ebp - 4], 0xf1
cmp byte [ebp - 0x1234], 0
mov esi, dword [0x507650]
jne 0x42905d
call fcn.004606e0
cmp eax, 2
mov edx, str.avastClear.exe
mov ecx, str.avgClear.exe
cmovne ecx, edx
push ecx
lea ecx, [ebp - 0xc40]
call fcn.004155c0
push eax
lea ecx, [ebp - 0xd60]
call fcn.004155c0
push eax
push str.The_installer_has_detected_corrupted__s_installation_on_this_computer__service__s_is_running___thus_this_installer_cannot_continue._Use_the__s_utility_to_fix_the_problem_or_contact_our_support_team.
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420550
add esp, 0x18
lea ecx, [ebp - 0xd60]
call fcn.004155c0
push eax
push str.Corrupted__s_detected.
lea eax, [ebp - 0xab0]
push 0x100
push eax
call fcn.00420550
add esp, 0x10
lea eax, [ebp - 0xab0]
push 0x10
push eax
lea eax, [ebp - 0x8b0]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xc40]
call fcn.004155c0
push eax
lea ecx, [ebp - 0xd60]
call fcn.004155c0
push eax
call fcn.0042c050
add esp, 8
mov byte [ebp - 4], 0xe8
lea ecx, [ebp - 0xd60]
call fcn.00415720
lea ecx, [ebp - 0xc40]
jmp 0x42a630
lea ecx, [ebp - 0xc40]
mov dword [ebp - 4], 0x176
call fcn.00415720
mov ebx, dword [ebp - 0x124c]
xor ecx, ecx
call fcn.00420900
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041da20
mov esi, eax
test esi, esi
je 0x429129
cmp byte [ebp - 0x1234], 0
jne 0x429109
push esi
xor ecx, ecx
call fcn.00420900
push eax
push str.The_installer_cannot_open_the_SFX_archive__s.__code_0x_x__r_n_r_nIts_probably_caused_by_corrupted_installer_thus_please_try_to_download_it_again.
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420550
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push str.Installation_failed
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
xor ecx, ecx
call fcn.00420900
push eax
mov edx, str.Cannot_open_the_SFX_archive__s__code_0x_x_
mov ecx, 0x526cdc
call fcn.0041fd50
add esp, 8
jmp 0x42a63c
cmp byte [ebp - 0xae1], 0
je 0x42913f
cmp byte [ebp - 0x1252], 0
je 0x42913f
mov al, 1
jmp 0x429141
xor al, al
push eax
lea ecx, [ebp - 0xb18]
call fcn.004209c0
add esp, 4
lea ecx, [ebp - 0xb18]
call fcn.004155c0
push eax
mov edx, str._TMPPATH_
lea ecx, [ebp - 0xf80]
call fcn.00420f30
add esp, 4
lea eax, [ebp - 0xf80]
lea ecx, [ebp - 0xb7c]
push 0
push eax
call fcn.0042b9f0
mov dword [ebp - 4], 0x5f2
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 4], 0x176
test eax, eax
jne 0x4291d8
push str.cookie
lea ecx, [ebp - 0x15a8]
call fcn.00415560
lea eax, [ebp - 0x15a8]
mov dword [ebp - 4], 0x5f6
or ebx, 0x20
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.004221c0
mov byte [ebp - 0x1245], 1
test al, al
jne 0x4291df
mov byte [ebp - 0x1245], 0
mov dword [ebp - 4], 0x176
test bl, 0x20
je 0x4291ff
and ebx, 0xffffffdf
lea ecx, [ebp - 0x15a8]
mov dword [ebp - 0x124c], ebx
call fcn.00415720
cmp byte [ebp - 0x1245], 0
je 0x42924f
push str.cookie
lea ecx, [ebp - 0x15c0]
call fcn.00415560
lea eax, [ebp - 0x15c0]
mov dword [ebp - 4], 0x5f7
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
push eax
lea ecx, [ebp - 0xba0]
call fcn.004193e0
lea ecx, [ebp - 0x15c0]
mov dword [ebp - 4], 0x176
call fcn.00415720
push ecx
lea ecx, [ebp - 0xc10]
call fcn.004165e0
push 0x4f407c
lea ecx, [ebp - 0x1668]
call fcn.00415560
xor ecx, ecx
mov dword [ebp - 4], 0x5f8
call fcn.00420900
push eax
lea ecx, [ebp - 0x15f0]
call fcn.00415560
sub esp, 0xc
mov byte [ebp - 4], 0xf9
lea eax, [ebp - 0x1668]
lea edx, [ebp - 0x15f0]
lea ecx, [ebp - 0xc10]
push eax
call fcn.004185a0
add esp, 0x10
lea ecx, [ebp - 0x15f0]
mov byte [ebp - 4], 0xfb
call fcn.00415720
lea ecx, [ebp - 0x1668]
mov byte [ebp - 4], 0xfc
call fcn.00415720
lea ecx, [ebp - 0xc10]
call fcn.00416ca0
cmp eax, 2
jb 0x4294cb
call fcn.0042b1e0
push eax
lea ecx, [ebp - 0xd48]
call fcn.00419b20
sub esp, 8
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0xd48]
call fcn.00416d80
mov esi, eax
cmp esi, 0xffffffff
je 0x4294bc
push esi
push 0x4f6364
lea ecx, [ebp - 0xd48]
call fcn.00416d90
cmp eax, 0xffffffff
jne 0x429337
push esi
push 0x4f4344
lea ecx, [ebp - 0xd48]
call fcn.00416d90
cmp eax, 0xffffffff
je 0x4294bc
sub eax, esi
lea ecx, [ebp - 0xd48]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0xd00]
push eax
call fcn.00416d40
mov dword [ebp - 4], 0x5ff
mov eax, dword [ebp - 0xcf0]
mov byte [ebp - 4], 0xfe
cmp eax, 3
jne 0x4294ad
push 1
lea ecx, [ebp - 0xd00]
call fcn.00419b50
cmp word [eax], 0x30
jb 0x4294ad
push 1
lea ecx, [ebp - 0xd00]
call fcn.00419b50
cmp word [eax], 0x39
ja 0x4294ad
call fcn.004606e0
cmp eax, 2
lea eax, [ebp - 0xd00]
push eax
jne 0x429400
mov edx, str.mmm_bav_ppc_999_
lea ecx, [ebp - 0x1878]
call fcn.0042be70
add esp, 4
push 0x4f6368
mov edx, eax
mov dword [ebp - 4], 0x603
lea ecx, [ebp - 0x1860]
call fcn.00414c20
add esp, 4
push eax
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 4
call fcn.00419aa0
lea ecx, [ebp - 0x1860]
mov byte [ebp - 4], 3
call fcn.00415720
lea ecx, [ebp - 0x1878]
jmp 0x429454
mov edx, str.mmm_ava_ppc_999_
lea ecx, [ebp - 0x18a8]
call fcn.0042be70
add esp, 4
push 0x4f6368
mov edx, eax
mov dword [ebp - 4], 0x605
lea ecx, [ebp - 0x1890]
call fcn.00414c20
add esp, 4
push eax
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 6
call fcn.00419aa0
lea ecx, [ebp - 0x1890]
mov byte [ebp - 4], 5
call fcn.00415720
lea ecx, [ebp - 0x18a8]
mov dword [ebp - 4], 0x5fe
call fcn.00415720
push str.cookie
lea ecx, [ebp - 0x1608]
call fcn.00415560
lea eax, [ebp - 0xba0]
mov dword [ebp - 4], 0x607
push eax
push ecx
lea eax, [ebp - 0x1608]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.004193e0
lea ecx, [ebp - 0x1608]
mov dword [ebp - 4], 0x5fe
call fcn.00415720
lea ecx, [ebp - 0xd00]
mov byte [ebp - 4], 0xfd
call fcn.00415720
lea ecx, [ebp - 0xd48]
mov byte [ebp - 4], 0xfc
call fcn.00415720
lea ecx, [ebp - 0xc10]
mov dword [ebp - 4], 0x176
call fcn.00416cc0
lea ecx, [ebp - 0xd18]
call fcn.00414fe0
mov dword [ebp - 4], 0x608
cmp edi, 0xffffffff
jne 0x42952a
push str._Clear
push ecx
call fcn.00460a00
add esp, 4
lea ecx, [ebp - 0x18c0]
mov edx, eax
call fcn.00414b10
add esp, 4
push eax
lea ecx, [ebp - 0xd18]
mov byte [ebp - 4], 9
call fcn.00419aa0
lea ecx, [ebp - 0x18c0]
jmp 0x42955c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
lea ecx, [ebp - 0x16f8]
push eax
push 1
mov edx, edi
call fcn.00426c00
add esp, 8
push eax
lea ecx, [ebp - 0xd18]
mov byte [ebp - 4], 0xa
call fcn.00419aa0
lea ecx, [ebp - 0x16f8]
mov byte [ebp - 4], 8
call fcn.00415720
push ecx
lea ecx, [ebp - 0xdf0]
call fcn.0042add0
lea eax, [ebp - 0xd18]
push eax
push ecx
lea ecx, [ebp - 0xdf0]
call fcn.00425250
lea eax, [ebp - 0xba4]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0xe60]
call fcn.0041a400
lea eax, [ebp - 0xdf0]
push eax
lea ecx, [ebp - 0xe60]
call fcn.0041a400
cmp byte [ebp - 0x1234], 0
jne 0x4295c0
lea ecx, [ebp - 0xdf0]
call fcn.00425b40
lea ecx, [ebp - 0xb18]
call fcn.004155c0
push eax
lea ecx, [ebp - 0x1620]
call fcn.00415560
lea eax, [ebp - 0x1620]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041f430
lea ecx, [ebp - 0x1620]
mov byte [ebp - 4], 0xb
mov esi, eax
call fcn.00415720
test esi, esi
je 0x42963c
mov edx, esi
lea ecx, [ebp - 0x1710]
call fcn.004315c0
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.004155c0
push eax
mov edx, str.The_installer_cannot_extract_servers.def_with_error__s_
mov ecx, 0x526cdc
call fcn.00418650
add esp, 4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1710]
call fcn.00415720
cmp edi, 0xffffffff
je 0x429a42
call fcn.00426dd0
test al, al
je 0x4296d7
push 0x4f530c
lea ecx, [ebp - 0x1650]
call fcn.00415560
lea eax, [ebp - 0x1650]
mov byte [ebp - 4], 0xe
or ebx, 0x40
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.004221c0
test al, al
je 0x4296d7
push 0x4f530c
lea ecx, [ebp - 0x1638]
call fcn.00415560
lea eax, [ebp - 0x1638]
mov dword [ebp - 4], 0x60f
or ebx, 0x80
lea ecx, [ebp - 0xb7c]
push eax
mov dword [ebp - 0x124c], ebx
call fcn.0042b110
mov dword [ebp - 4], 0x611
mov byte [ebp - 4], 0x10
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0xf
mov byte [ebp - 0x1245], 1
test eax, eax
je 0x4296de
mov byte [ebp - 0x1245], 0
mov dword [ebp - 4], 0x60e
test bl, bl
jns 0x429700
and ebx, 0xffffff7f
lea ecx, [ebp - 0x1638]
mov dword [ebp - 0x124c], ebx
call fcn.00415720
mov dword [ebp - 4], 0x60b
test bl, 0x40
je 0x429717
lea ecx, [ebp - 0x1650]
call fcn.00415720
cmp byte [ebp - 0x1245], 0
je 0x429765
push 0x4f530c
lea ecx, [ebp - 0x1680]
call fcn.00415560
push 0x4f5bac
push ecx
lea eax, [ebp - 0x1680]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.00414f90
lea ecx, [ebp - 0x1680]
mov byte [ebp - 4], 0xb
call fcn.00415720
lea ecx, [ebp - 0xb18]
call fcn.004155c0
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041eea0
test eax, eax
je 0x429797
lea ecx, [ebp - 0xb18]
call fcn.004155c0
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041eda0
push str.cookie.bin
lea ecx, [ebp - 0xb18]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415ba0
add esp, 4
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xb90]
mov byte [ebp - 4], 0xb
test eax, eax
jne 0x4298c3
lea ecx, [ebp - 0xb30]
call fcn.00426b60
test al, al
je 0x4298c3
push ecx
lea ecx, [ebp - 0xc04]
call fcn.004165e0
lea edx, [ebp - 0xb30]
call fcn.00477cc0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0xc00]
sub ecx, dword [ebp - 0xc04]
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0xc04]
push ecx
push eax
lea ecx, [ebp - 0x1740]
mov byte [ebp - 4], 0x19
call fcn.00420610
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1728]
call fcn.0042c120
add esp, 4
push eax
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 0x26
call fcn.00419aa0
lea ecx, [ebp - 0x1728]
mov byte [ebp - 4], 0x25
call fcn.00415720
lea ecx, [ebp - 0x1740]
mov byte [ebp - 4], 0x19
call fcn.00419ff0
push str.cookie
lea ecx, [ebp - 0x1698]
call fcn.00415560
lea eax, [ebp - 0xba0]
mov byte [ebp - 4], 0x27
push eax
push ecx
lea eax, [ebp - 0x1698]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.004193e0
lea ecx, [ebp - 0x1698]
mov byte [ebp - 4], 0x19
call fcn.00415720
lea ecx, [ebp - 0xc04]
mov byte [ebp - 4], 0x28
call fcn.00416f60
mov byte [ebp - 4], 0xb
sub esp, 0x18
lea eax, [ebp - 0xba0]
mov ecx, esp
mov dword [ebp - 0x124c], esp
push eax
call fcn.00419b20
xor ecx, ecx
mov byte [ebp - 4], 0x29
call fcn.00420900
push eax
lea eax, [ebp - 0xb7c]
mov byte [ebp - 4], 0xb
push eax
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x1758]
call fcn.00421430
add esp, 0x20
lea ecx, [ebp - 0x1758]
call fcn.00415720
xor esi, esi
push dword [esi + 0x520aac]
lea ecx, [ebp - 0xb18]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xb30]
call fcn.004155c0
mov ecx, eax
call fcn.00415b70
test al, al
je 0x429991
push dword [esi + 0x520ab0]
lea ecx, [ebp - 0x16b0]
call fcn.00415560
lea eax, [ebp - 0xb30]
mov byte [ebp - 4], 0x2a
push eax
push ecx
lea eax, [ebp - 0x16b0]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.004193e0
lea ecx, [ebp - 0x16b0]
mov byte [ebp - 4], 0xb
call fcn.00415720
add esi, 8
cmp esi, 0x18
jb 0x429912
push str.aswOfferTool.exe
lea ecx, [ebp - 0xb18]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415ba0
push 0x7d1
lea ecx, [ebp - 0xb30]
call fcn.004155c0
mov edx, eax
call fcn.004164f0
add esp, 8
lea ecx, [ebp - 0xb18]
push str.GuiCust.dll
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415ba0
push 0x7d0
lea ecx, [ebp - 0xb30]
call fcn.004155c0
mov edx, eax
call fcn.004164f0
add esp, 8
lea ecx, [ebp - 0xb18]
push str.CustomInstallation.ini
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415ba0
push 0x7d2
lea ecx, [ebp - 0xb30]
call fcn.004155c0
mov edx, eax
call fcn.004164f0
add esp, 8
push ecx
lea ecx, [ebp - 0xec0]
call fcn.0042ade0
sub esp, 0x18
lea edx, [ebp - 0xb18]
mov ecx, esp
mov dword [ebp - 0x124c], esp
push str._servers.def
call fcn.00414b10
add esp, 4
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0xb
call fcn.00426640
sub esp, 0x18
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0xba0]
mov dword [ebp - 0x124c], esp
mov ecx, esp
push eax
call fcn.00419b20
sub esp, 0x18
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0xb48]
mov dword [ebp - 0xae4], esp
mov ecx, esp
push eax
call fcn.00419b20
sub esp, 0x18
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x90]
mov dword [ebp - 0x1258], esp
mov ecx, esp
push eax
call fcn.00415560
lea eax, [ebp - 0xb7c]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0x2c
call fcn.0042f0d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1258], esp
push str.stub
call fcn.00415560
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0x2c
call fcn.0042f760
push ecx
lea eax, [ebp - 0xe60]
push eax
lea ecx, [ebp - 0xb18]
call fcn.004155c0
push eax
lea ecx, [ebp - 0xf80]
call fcn.0041f540
mov esi, eax
test esi, esi
je 0x429ba4
cmp byte [ebp - 0x1234], 0
jne 0x429b80
push esi
lea ecx, [ebp - 0xb18]
call fcn.004155c0
push eax
push str.The_installer_cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420550
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push str.Avast_Antivirus
push eax
push dword [ebp - 0xda8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
lea ecx, [ebp - 0xb18]
call fcn.004155c0
push eax
mov edx, str.Cannot_extract_VPX_files_to__s__code_0x_x_
mov ecx, 0x526cdc
call fcn.0041fd50
add esp, 8
jmp 0x42a60c
push str.instup.exe
lea ecx, [ebp - 0xb18]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xbc8]
call fcn.00415ba0
add esp, 4
cmp byte [ebp - 0x1251], 0
je 0x42a3d6
cmp edi, 0xffffffff
je 0x429bf2
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, edi
call fcn.00426bb0
movzx eax, al
push eax
call fcn.00426a40
add esp, 0xc
lea ecx, [ebp - 0xc70]
call fcn.00414fe0
push fcn.00415720
push fcn.00414fe0
push 2
push 0x18
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x31
push eax
call fcn.00493d4f
lea ecx, [ebp - 0xca0]
mov byte [ebp - 4], 0x32
call fcn.00414fe0
push str.instup.exe
lea ecx, [ebp - 0xb18]
mov byte [ebp - 4], 0x33
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xae0]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xb18]
push str.Instup.dll
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xac8]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xbf8]
push str.instup.exe
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xc70]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xc70]
call fcn.004155c0
mov ecx, eax
call fcn.00415b70
test al, al
je 0x429e7a
cmp dword [ebp - 0xae8], 0x7cb
jbe 0x429e7a
xor edi, edi
lea ebx, [ebp - 0xae0]
test esi, esi
jne 0x42a397
cmp dword [ebp - 0x1250], esi
jne 0x42a397
push ecx
lea ecx, [ebp - 0xe24]
call fcn.0042a800
lea ecx, [ebp - 0x1770]
call fcn.00414fe0
push eax
lea ecx, [ebp - 0xe24]
mov byte [ebp - 4], 0x34
call fcn.0042b140
lea ecx, [ebp - 0x1770]
mov byte [ebp - 4], 0x36
call fcn.00415720
push str.copy_sfx
lea ecx, [ebp - 0x16c8]
call fcn.00415560
push ebx
push ecx
lea eax, [ebp - 0x16c8]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0xe24]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.004193e0
lea ecx, [ebp - 0x16c8]
mov byte [ebp - 4], 0x36
call fcn.00415720
push str.wait
lea ecx, [ebp - 0x16e0]
call fcn.00415560
push 0x4f409c
push ecx
lea eax, [ebp - 0x16e0]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0xe24]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.00414f90
lea ecx, [ebp - 0x16e0]
mov byte [ebp - 4], 0x36
call fcn.00415720
lea eax, [ebp - 0x18d8]
push eax
lea ecx, [ebp - 0xe24]
call fcn.0042bd10
push esi
push esi
lea ecx, [ebp - 0x1250]
mov byte [ebp - 4], 0x39
push ecx
mov ecx, eax
call fcn.004155c0
lea ecx, [ebp - 0xc70]
mov esi, eax
call fcn.004155c0
mov edx, esi
mov ecx, eax
call fcn.00420be0
add esp, 0xc
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x18d8]
mov esi, eax
call fcn.00415720
lea ecx, [ebp - 0xe24]
mov byte [ebp - 4], 0x33
call fcn.0042aff0
inc edi
add ebx, 0x18
cmp edi, 2
jb 0x429cc0
test esi, esi
jne 0x42a397
cmp dword [ebp - 0x1250], esi
jne 0x42a397
push 0x4f5b10
lea ecx, [ebp - 0xbf8]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xca0]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xca0]
push str.instup.exe
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xca0]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xca0]
call fcn.00426b60
test al, al
je 0x42a397
lea eax, [ebp - 0xca0]
push eax
lea ecx, [ebp - 0xbc8]
call fcn.004193e0
jmp 0x42a397
push str.setup.ovr
lea ecx, [ebp - 0xbf8]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xc70]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xc70]
call fcn.004155c0
mov ecx, eax
call fcn.00415b70
test al, al
je 0x42a397
lea ecx, [ebp - 0xce8]
call fcn.00414fe0
push str._copysfx
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415560
push 0x4f6578
mov edx, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x14f4]
call fcn.00414c20
add esp, 4
lea ecx, [ebp - 0xae0]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x14dc]
call fcn.00414ac0
add esp, 4
push 0x4f4078
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x14c4]
call fcn.00414c20
add esp, 4
push eax
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x3e
call fcn.00419aa0
lea ecx, [ebp - 0x14c4]
mov byte [ebp - 4], 0x3d
call fcn.00415720
lea ecx, [ebp - 0x14dc]
mov byte [ebp - 4], 0x3c
call fcn.00415720
lea ecx, [ebp - 0x14f4]
mov byte [ebp - 4], 0x3b
call fcn.00415720
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415720
push 0
push 0
lea eax, [ebp - 0x1250]
push eax
lea ecx, [ebp - 0xce8]
call fcn.004155c0
lea ecx, [ebp - 0xc70]
mov esi, eax
call fcn.004155c0
mov edx, esi
mov ecx, eax
call fcn.00420be0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x42a0fe
nop word [eax + eax]
mov ecx, dword [ebp - 0x1250]
cmp ecx, 0x2000000a
jne 0x42a0da
mov eax, dword [0x507654]
push 0xbb8
mov dword [ebp - 0x1250], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x33
call fcn.00415720
lea ecx, [ebp - 0xce8]
call fcn.00414fe0
push str._copysfx
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415560
push 0x4f6578
mov edx, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x14f4]
call fcn.00414c20
add esp, 4
lea ecx, [ebp - 0xae0]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x14dc]
call fcn.00414ac0
add esp, 4
push 0x4f4078
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x14c4]
call fcn.00414c20
add esp, 4
push eax
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x3e
call fcn.00419aa0
lea ecx, [ebp - 0x14c4]
mov byte [ebp - 4], 0x3d
call fcn.00415720
lea ecx, [ebp - 0x14dc]
mov byte [ebp - 4], 0x3c
call fcn.00415720
lea ecx, [ebp - 0x14f4]
mov byte [ebp - 4], 0x3b
call fcn.00415720
lea ecx, [ebp - 0x150c]
mov byte [ebp - 4], 0x3a
call fcn.00415720
push 0
push 0
lea eax, [ebp - 0x1250]
push eax
lea ecx, [ebp - 0xce8]
call fcn.004155c0
lea ecx, [ebp - 0xc70]
mov esi, eax
call fcn.004155c0
mov edx, esi
mov ecx, eax
call fcn.00420be0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x429fb0
jmp 0x42a0fe
cmp ecx, 0x20000000
je 0x42a0f4
mov dword [ebp - 0x1250], 5
cmp ecx, 0x20000001
jne 0x42a0fe
mov dword [ebp - 0x1250], 0
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x33
call fcn.00415720
test esi, esi
jne 0x42a397
cmp dword [ebp - 0x1250], esi
jne 0x42a397
push 0x4f5b10
lea ecx, [ebp - 0xbf8]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xca0]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xca0]
push str.avast.setup
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xbc8]
call fcn.00415ba0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov edx, eax
mov dword [ebp - 0x124c], edx
test edx, edx
je 0x42a397
push ecx
lea ecx, [ebp - 0xbb0]
call fcn.004165e0
call fcn.00416d20
mov eax, ecx
mov byte [ebp - 4], 0x3f
push eax
mov ecx, edx
call fcn.00425dc0
add esp, 4
test al, al
je 0x42a37c
mov byte [ebp - 4], 0x40
mov esi, dword [ebp - 0xbb0]
mov dword [ebp - 0xae8], esi
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0x126c], eax
mov byte [ebp - 4], 0x3f
cmp esi, dword [ebp - 0x126c]
je 0x42a37c
push esi
lea ecx, [ebp - 0xc58]
call fcn.00419b20
lea eax, [ebp - 0x1494]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0xc58]
call fcn.00419a80
mov ebx, eax
lea ecx, [ebp - 0xc58]
lea eax, [ebp - 0x1490]
push eax
call fcn.00419a50
mov edi, eax
lea ecx, [ebp - 0xc58]
lea eax, [ebp - 0x148c]
push eax
call fcn.00419a80
push dword [ebx]
lea ecx, [ebp - 0x1258]
push dword [edi]
push dword [eax]
call fcn.0042bff0
add esp, 0xc
lea ecx, [ebp - 0xc58]
push 0
push str.path
call fcn.00416d90
test eax, eax
je 0x42a292
lea ecx, [ebp - 0xc58]
mov byte [ebp - 4], 0x3f
call fcn.00415720
push ecx
lea eax, [ebp - 0xae4]
push eax
lea ecx, [ebp - 0xae8]
call fcn.00426080
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0x126c], eax
mov byte [ebp - 4], 0x3f
mov esi, dword [ebp - 0xae8]
cmp esi, dword [ebp - 0x126c]
jne 0x42a1d1
jmp 0x42a37c
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0xc58]
mov eax, dword [ebp - 0xc48]
dec eax
mov byte [ebp - 4], 0x4c
push eax
call fcn.00419b50
cmp word [eax], 0x3b
je 0x42a2e3
push 0x4f65b8
mov edx, esi
lea ecx, [ebp - 0x1788]
call fcn.00414b10
add esp, 4
push eax
mov ecx, esi
mov byte [ebp - 4], 0x51
call fcn.00419aa0
lea ecx, [ebp - 0x1788]
mov byte [ebp - 4], 0x4c
call fcn.00415720
lea eax, [ebp - 0xb18]
mov edx, esi
push eax
lea ecx, [ebp - 0x17a0]
call fcn.0042c160
add esp, 4
push 0x4f65b8
mov edx, eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1848]
call fcn.00414c20
add esp, 4
push eax
mov ecx, esi
mov byte [ebp - 4], 0x53
call fcn.00419aa0
lea ecx, [ebp - 0x1848]
mov byte [ebp - 4], 0x52
call fcn.00415720
lea ecx, [ebp - 0x17a0]
mov byte [ebp - 4], 0x4c
call fcn.00415720
lea edx, [ebp - 0xbb0]
lea ecx, [ebp - 0x1518]
call fcn.00425ee0
push eax
lea ecx, [ebp - 0xb88]
mov byte [ebp - 4], 0x54
call fcn.004260a0
lea ecx, [ebp - 0x1518]
mov byte [ebp - 4], 0x55
call fcn.00416f60
lea ecx, [ebp - 0xc58]
mov byte [ebp - 4], 0x3f
call fcn.00415720
push dword [ebp - 0x124c]
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x33
call fcn.00416cc0
lea ecx, [ebp - 0xca0]
mov byte [ebp - 4], 0x32
call fcn.00415720
push fcn.00415720
push 2
push 0x18
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x31
push eax
call fcn.00493db8
lea ecx, [ebp - 0xc70]
mov byte [ebp - 4], 0x2c
call fcn.00415720
mov edi, dword [ebp - 0x1268]
jmp 0x42a426
cmp edi, 0xffffffff
je 0x42a472
push str.guid
lea ecx, [ebp - 0x15d8]
call fcn.00415560
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x56
push eax
push ecx
lea eax, [ebp - 0x15d8]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.00414f90
lea ecx, [ebp - 0x15d8]
mov byte [ebp - 4], 0x2c
call fcn.00415720
cmp edi, 0xffffffff
je 0x42a472
push str.ga_clientid
lea ecx, [ebp - 0x1530]
call fcn.00415560
lea eax, [ebp - 0xb48]
mov byte [ebp - 4], 0x57
push eax
push ecx
lea eax, [ebp - 0x1530]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.0042b110
add esp, 4
mov ecx, eax
call fcn.004193e0
lea ecx, [ebp - 0x1530]
mov byte [ebp - 4], 0x2c
call fcn.00415720
lea ecx, [ebp - 0xbc8]
call fcn.004155c0
push eax
mov edx, str.Starting_installer_updater_executable__s
mov ecx, 0x526cdc
call fcn.00418400
add esp, 4
lea eax, [ebp - 0xd30]
lea ecx, [ebp - 0xb7c]
push eax
call fcn.0042bd10
mov ebx, dword [ebp - 0x136c]
mov byte [ebp - 4], 0x58
test ebx, ebx
je 0x42a4e2
mov ecx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a4b5
sub ecx, edx
sar ecx, 1
je 0x42a4e2
push 0x4f6618
lea ecx, [ebp - 0xd30]
call fcn.00414db0
push ebx
lea ecx, [ebp - 0xd30]
call fcn.00414db0
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0xb88]
mov eax, dword [ebp - 0xb84]
mov byte [ebp - 4], 0x58
cmp ecx, eax
jne 0x42a4fe
xor eax, eax
jmp 0x42a508
mov byte [ebp - 4], 0x58
mov eax, dword [ebp - 0xb88]
push eax
xor ecx, ecx
lea eax, [ebp - 0xdf0]
cmp dword [ebp - 0xda8], ecx
cmove eax, ecx
lea ecx, [ebp - 0xd30]
push eax
lea eax, [ebp - 0x1250]
push eax
call fcn.004155c0
lea ecx, [ebp - 0xbc8]
mov esi, eax
call fcn.004155c0
mov edx, esi
mov ecx, eax
call fcn.00420be0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x42a5b3
cmp byte [ebp - 0x1234], 0
jne 0x42a595
push esi
lea ecx, [ebp - 0xbc8]
call fcn.004155c0
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.00420550
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push str.Avast_Antivirus
push eax
push dword [ebp - 0xda8]
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
lea ecx, [ebp - 0xbc8]
call fcn.004155c0
push eax
mov edx, str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
mov ecx, 0x526cdc
call fcn.0041fd50
jmp 0x42a5fa
mov esi, dword [ebp - 0x1250]
cmp edi, 0xffffffff
je 0x42a5e8
mov ecx, edi
call fcn.00426b80
test al, al
je 0x42a5e8
call fcn.00426be0
test al, al
jne 0x42a5e8
test esi, esi
je 0x42a5e8
cmp esi, dword [0x507650]
je 0x42a5e8
call fcn.0042c240
call fcn.00421220
push esi
lea ecx, [ebp - 0xbc8]
call fcn.004155c0
push eax
call fcn.0042c310
add esp, 8
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd30]
call fcn.00415720
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0xb
call fcn.00426740
lea ecx, [ebp - 0xdf0]
mov byte [ebp - 4], 8
call fcn.004253c0
lea ecx, [ebp - 0xd18]
mov dword [ebp - 4], 0x176
call fcn.00415720
push str.Reboot.txt
lea ecx, [ebp - 0xb18]
call fcn.004155c0
mov edx, eax
lea ecx, [ebp - 0xb30]
call fcn.00415ba0
add esp, 4
lea ecx, [ebp - 0xb30]
call fcn.004155c0
mov ecx, eax
call fcn.00415b70
push ecx
push dword [ebp - 0x1370]
lea ecx, [ebp - 0xb18]
mov bl, al
call fcn.004155c0
mov edx, 0x4f67cc
mov ecx, eax
call fcn.00416260
call fcn.00457950
call fcn.00445080
xor ecx, ecx
call fcn.00444d50
sub esp, 0xc
xor edx, edx
push 0
push 0
push 0
push ecx
push 0
push 0
push 0
push 0
xor ecx, ecx
call fcn.0045d4c0
add esp, 0x34
xor ecx, ecx
call fcn.004572c0
test bl, bl
je 0x42a6cd
call fcn.00421080
push esi
call fcn.0042c3e0
add esp, 4
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xc28]
call fcn.00415720
lea ecx, [ebp - 0xb48]
mov byte [ebp - 4], 0x3f
call fcn.00415720
lea ecx, [ebp - 0xba0]
mov byte [ebp - 4], 0x23
call fcn.00415720
lea ecx, [ebp - 0x1230]
mov byte [ebp - 4], 0x22
call fcn.0042a9c0
lea ecx, [ebp - 0xb88]
mov dword [ebp - 4], 0x663
call fcn.00416f60
lea ecx, [ebp - 0xbe0]
mov dword [ebp - 4], 0x103
call fcn.00415720
lea ecx, [ebp - 0xe60]
mov dword [ebp - 4], 0xff
call fcn.0041a390
lea ecx, [ebp - 0xf80]
mov byte [ebp - 4], 0xe2
call fcn.0041d910
lea ecx, [ebp - 0xb7c]
mov byte [ebp - 4], 0xc3
call fcn.0042aff0
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0xa7
call fcn.00415720
lea ecx, [ebp - 0xc88]
mov byte [ebp - 4], 0x8b
call fcn.00415720
lea ecx, [ebp - 0xcb8]
mov byte [ebp - 4], 0x6f
call fcn.00415720
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0x53
call fcn.00415720
lea ecx, [ebp - 0xb18]
mov byte [ebp - 4], 0x37
call fcn.00415720
lea ecx, [ebp - 0xb30]
mov byte [ebp - 4], 0x1b
call fcn.00415720
lea ecx, [ebp - 0xbc8]
mov dword [ebp - 4], 0xffffffff
call fcn.00415720
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049384c
mov esp, ebp
pop ebp
ret 8