Function at 0x401f50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43b848
mov eax, dword fs:[0]
push eax
sub esp, 0xb78
mov eax, dword [0x45800c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00403730
call fcn.0040d66c
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0xb38], eax
test eax, eax
je 0x403679
mov cx, word [0x44a6b8]
lea eax, [ebp - 0x422]
push 0x206
push 0
push eax
mov word [ebp - 0x424], cx
call fcn.00419290
add esp, 0xc
lea eax, [ebp - 0x424]
mov ecx, 0x4589fc
push eax
mov eax, dword [vtable.NGWinApi::IShellApi.0]
push 0
push 0
push 0x19
push 0
call dword [eax + 8]
push 0x44b7a0
lea eax, [ebp - 0x424]
push 0x104
push eax
call fcn.0041a386
add esp, 0xc
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x428], 7
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x43c]
cmp dword [ebp - 0x428], 8
mov dword [ebp - 0x42c], 0
cmovae eax, dword [ebp - 0x43c]
mov dword [ebp - 4], 0x19
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0xffffffff
cmp word [ebp - 0x424], cx
je 0x402073
lea ecx, [ebp - 0x424]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402064
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x43c]
call fcn.00404700
lea ecx, [ebp - 0x43c]
mov dword [ebp - 4], 0x1a
call fcn.00406eba
mov bl, al
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x428], 8
jb 0x4020cc
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x43c]
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x428]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x43c]
call fcn.00404a90
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x428], 7
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x43c]
cmp dword [ebp - 0x428], 8
mov dword [ebp - 0x42c], 0
cmovae eax, dword [ebp - 0x43c]
xor ecx, ecx
mov byte [ebp - 4], 0x35
mov word [eax], cx
mov dword [ebp - 4], 0xffffffff
test bl, bl
je 0x4021aa
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x43c]
call fcn.00404380
lea ecx, [ebp - 0x43c]
mov dword [ebp - 4], 0x36
call fcn.00406fb6
mov dword [ebp - 4], 0x37
cmp dword [ebp - 0x428], 8
jb 0x40216a
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x43c]
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x428]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x43c]
call fcn.00404a90
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x428], 7
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x43c]
cmp dword [ebp - 0x428], 8
mov dword [ebp - 0x42c], 0
cmovae eax, dword [ebp - 0x43c]
mov byte [ebp - 4], 0x51
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x694]
call fcn.0040d740
mov dword [ebp - 4], 0x52
xorps xmm0, xmm0
mov dword [ebp - method.std::_Facet_base.virtual_4], 0x44c724
mov dword [ebp - method.NGUtils::CProgressAggregator.virtual_0], vtable.NGUtils::CProgress.0
mov dword [ebp - 0xb50], 0
movsd qword [ebp - 0xb4c], xmm0
mov byte [ebp - 0xb44], 1
mov dword [ebp - method.NGUtils::CProgressAggregator.virtual_0], 0x44bb28
push 1
lea eax, [ebp - 0xb54]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0xb84]
call fcn.004071bf
lea eax, [ebp - 0xb84]
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x694]
call fcn.00410520
push str.EventLogApp.evt
push str.Application
lea ecx, [ebp - 0x694]
call fcn.00410280
push str.EventLogSys.evt
push str.System
lea ecx, [ebp - 0x694]
call fcn.00410280
mov ax, word [0x44a6b8]
push 0x206
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push 0
push eax
call fcn.00419290
add esp, 0xc
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 0
mov byte [ebp - 4], 0x54
mov dword [ebp - 0x4e8], 7
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0x4fc]
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x4ec], 0
cmovae eax, dword [ebp - 0x4fc]
xor ecx, ecx
mov byte [ebp - 4], 0x6e
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x4fc]
push 0x44a6b8
mov byte [ebp - 4], 0x54
call fcn.00404700
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 0
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x4d0], 7
mov byte [ebp - 4], 0x6f
lea eax, [ebp - 0x4e4]
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x4d4], 0
cmovae eax, dword [ebp - 0x4e4]
mov byte [ebp - 4], 0x89
xor ecx, ecx
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x4e4]
push 0x44a6b8
mov byte [ebp - 4], 0x6f
call fcn.00404700
mov byte [ebp - 4], 0x8a
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 0
mov byte [ebp - 4], 0x8a
mov dword [ebp - 0x458], 7
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0x46c]
cmp dword [ebp - 0x458], 8
mov dword [ebp - 0x45c], 0
cmovae eax, dword [ebp - 0x46c]
xor ecx, ecx
mov byte [ebp - 4], 0xa4
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x46c]
push 0x44a6b8
mov byte [ebp - 4], 0x8a
call fcn.00404700
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x440], 0
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x440], 7
mov byte [ebp - 4], 0xa5
lea eax, [ebp - 0x454]
cmp dword [ebp - 0x440], 8
mov dword [ebp - 0x444], 0
cmovae eax, dword [ebp - 0x454]
xor ecx, ecx
mov byte [ebp - 4], 0xbf
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x454]
push 0x44a6b8
mov byte [ebp - 4], 0xa5
call fcn.00404700
mov byte [ebp - 4], 0xc0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 0
mov byte [ebp - 4], 0xc0
mov dword [ebp - 0x4b8], 7
mov byte [ebp - 4], 0xc0
lea eax, [ebp - 0x4cc]
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x4bc], 0
cmovae eax, dword [ebp - 0x4cc]
xor ecx, ecx
mov byte [ebp - 4], 0xda
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0xc0
push 0x44a6b8
call fcn.00404700
mov byte [ebp - 4], 0xdb
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 0
mov byte [ebp - 4], 0xdb
mov dword [ebp - 0x4a0], 7
mov byte [ebp - 4], 0xdb
lea eax, [ebp - 0x4b4]
cmp dword [ebp - 0x4a0], 8
mov dword [ebp - 0x4a4], 0
cmovae eax, dword [ebp - 0x4b4]
xor ecx, ecx
mov byte [ebp - 4], 0xf5
mov word [eax], cx
lea ecx, [ebp - 0x4b4]
push 0xc
push str.Current_User
mov byte [ebp - 4], 0xdb
call fcn.00404700
mov byte [ebp - 4], 0xf6
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x488], 7
mov dword [ebp - 4], 0xf6
lea eax, [ebp - 0x49c]
cmp dword [ebp - 0x488], 8
mov dword [ebp - 0x48c], 0
cmovae eax, dword [ebp - 0x49c]
xor ecx, ecx
mov dword [ebp - 4], pe_nt_image_headers32
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x49c]
push 0x44a6b8
mov dword [ebp - 4], 0xf6
call fcn.00404700
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], 0x111
push eax
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
mov ecx, 0x458a00
push 0x104
call dword [eax + 0x2c]
test eax, eax
je 0x4025a2
cmp word [ebp - 0x21c], 0
jne 0x402576
xor ecx, ecx
jmp 0x40258f
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402580
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.00404700
lea eax, [ebp - 0x21c]
mov ecx, 0x4589fc
push eax
mov eax, dword [vtable.NGWinApi::IShellApi.0]
push 0
push 0
push 0x24
push 0
call dword [eax + 8]
test eax, eax
jne 0x402602
cmp word [ebp - 0x21c], ax
jne 0x4025cf
xor ecx, ecx
jmp 0x4025ef
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4025e0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x4e4]
call fcn.00404700
lea eax, [ebp - 0x21c]
mov ecx, 0x4589fc
push eax
mov eax, dword [vtable.NGWinApi::IShellApi.0]
push 0
push 0
push 0x1c
push 0
call dword [eax + 8]
test eax, eax
jne 0x402662
cmp word [ebp - 0x21c], ax
jne 0x40262f
xor ecx, ecx
jmp 0x40264f
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402640
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00404700
lea eax, [ebp - 0x21c]
mov ecx, 0x4589fc
push eax
mov eax, dword [vtable.NGWinApi::IShellApi.0]
push 0
push 0
push 0x23
push 0
call dword [eax + 8]
test eax, eax
jne 0x4026c2
cmp word [ebp - 0x21c], ax
jne 0x40268f
xor ecx, ecx
jmp 0x4026af
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4026a0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x49c]
call fcn.00404700
lea eax, [ebp - 0x21c]
mov ecx, 0x4589fc
push eax
mov eax, dword [vtable.NGWinApi::IShellApi.0]
push 0
push 0
push 0x28
push 0
call dword [eax + 8]
test eax, eax
jne 0x402735
lea eax, [ebp - 0x21c]
push 0x5c
push eax
call fcn.00419014
add esp, 8
test eax, eax
je 0x4026fc
xor ecx, ecx
mov word [eax], cx
cmp word [ebp - 0x21c], 0
jne 0x40270a
xor ecx, ecx
jmp 0x402722
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402713
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x454]
call fcn.00404700
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x444]
mov byte [ebp - 4], 0x11
test eax, eax
je 0x402802
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x45c]
mov byte [ebp - 4], 0x11
test eax, eax
je 0x402802
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x444]
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x454]
cmp dword [ebp - 0x440], 8
push ecx
cmovae eax, dword [ebp - 0x454]
push ecx
push eax
lea ecx, [ebp - 0x46c]
call fcn.00404620
mov byte [ebp - 4], 0x11
test eax, eax
jne 0x402802
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x46c]
mov eax, dword [ebp - 0x444]
push 0xffffffffffffffff
inc eax
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x514]
push eax
call fcn.00404130
push eax
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0x25
call fcn.00404300
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x11
call fcn.00404090
push 1
push ecx
push 0x44b714
lea ecx, [ebp - 0x4cc]
call fcn.00404620
cmp eax, 0xffffffff
je 0x402802
push eax
push 0
lea ecx, [ebp - 0x4cc]
call fcn.004041b0
mov ebx, dword [ebp - 0xb38]
lea ecx, [ebp - 0x424]
push ecx
mov ecx, ebx
mov eax, dword [ebx]
call dword [eax + 4]
test eax, eax
jne 0x403349
cmp dword [0x45a278], eax
jne 0x402835
push eax
push eax
push 0x8001
push dword [0x45a27c]
call esi
cmp dword [0x4589f0], 0
je 0x402c66
push 0x44b85c
lea edx, [ebp - 0x454]
lea ecx, [ebp - 0x514]
call fcn.004051f0
add esp, 4
mov byte [ebp - 4], 0x27
cmp dword [eax + 0x14], 8
jb 0x402867
mov eax, dword [eax]
lea ecx, [ebp - 0x8e4]
mov byte [ebp - 4], 0x26
push ecx
push eax
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
mov ecx, 0x458a00
call dword [eax + 0x124]
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x11
mov edi, eax
call fcn.00404090
cmp edi, 0xffffffff
je 0x402b50
nop dword [eax]
test byte [ebp - 0x8e4], 0x10
je 0x402b1f
mov ecx, 0x44b864
lea eax, [ebp - 0x8b8]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4028de
test dx, dx
je 0x4028da
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4028de
add eax, 4
add ecx, 4
test dx, dx
jne 0x4028b8
xor eax, eax
jmp 0x4028e3
sbb eax, eax
or eax, 1
test eax, eax
je 0x402b1f
mov ecx, 0x44b868
lea eax, [ebp - 0x8b8]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40291c
test dx, dx
je 0x402918
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40291c
add eax, 4
add ecx, 4
test dx, dx
jne 0x4028f6
xor eax, eax
jmp 0x402921
sbb eax, eax
or eax, 1
test eax, eax
je 0x402b1f
push 0x44b714
lea edx, [ebp - 0x454]
lea ecx, [ebp - 0x5a4]
call fcn.004051f0
add esp, 4
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x2a
push ecx
mov edx, eax
lea ecx, [ebp - 0x43c]
call fcn.004052e0
add esp, 4
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0x2b
push ecx
mov edx, eax
lea ecx, [ebp - 0x484]
call fcn.00405340
add esp, 4
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x2d
call fcn.00404090
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x2e
call fcn.00404090
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x46c]
cmp dword [ebp - 0x458], 8
cmovae ecx, dword [ebp - 0x46c]
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x484]
cmp dword [ebp - 0x470], 8
push ecx
cmovae eax, dword [ebp - 0x484]
push eax
mov byte [ebp - 4], 0x2e
call fcn.0041a47e
add esp, 8
test eax, eax
je 0x402aee
push str.HPAtInstall
lea edx, [ebp - 0x484]
lea ecx, [ebp - 0x58c]
call fcn.004051f0
add esp, 4
mov esi, eax
push str.AtInstall_
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x35
call fcn.00404380
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x36
push ecx
mov edx, eax
lea ecx, [ebp - 0x5bc]
call fcn.004052e0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x37
mov ecx, ebx
call fcn.00403a60
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x5bc]
call fcn.00404090
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x35
call fcn.00404090
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x2e
call fcn.00404090
push str.HPAtInstallHPTimeLog.txt
lea edx, [ebp - 0x484]
lea ecx, [ebp - 0x52c]
call fcn.004051f0
add esp, 4
mov esi, eax
push str.TimeAndSizeLogs_
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x38
call fcn.00404380
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x39
push ecx
mov edx, eax
lea ecx, [ebp - 0x544]
call fcn.004052e0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x3a
mov ecx, ebx
call fcn.00403e50
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x544]
call fcn.00404090
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x38
call fcn.00404090
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 0x2e
call fcn.00404090
jmp 0x402b10
lea eax, [ebp - 0x8b8]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.004042b0
push str.__Current_User_
lea ecx, [ebp - 0x4b4]
call fcn.00404260
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0x11
call fcn.00404090
lea eax, [ebp - 0x8e4]
mov ecx, 0x458a00
push eax
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
push edi
call dword [eax + 0x128]
test eax, eax
jne 0x4028a0
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
mov ecx, 0x458a00
push edi
call dword [eax + 0x12c]
push str.HPAtInstall
lea edx, [ebp - 0x46c]
lea ecx, [ebp - 0x544]
call fcn.004051f0
add esp, 4
mov esi, eax
push str.AtInstall_
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x3b
call fcn.00404380
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x52c]
call fcn.00405340
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x3d
mov ecx, ebx
call fcn.00403a60
add esp, 4
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x52c]
call fcn.00404090
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x3b
call fcn.00404090
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x11
call fcn.00404090
push str.HPAtInstallHPTimeLog.txt
lea edx, [ebp - 0x46c]
lea ecx, [ebp - 0x544]
call fcn.004051f0
add esp, 4
mov esi, eax
push str.TimeAndSizeLogs_
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x3e
call fcn.00404380
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0x3f
push ecx
mov edx, eax
lea ecx, [ebp - 0x52c]
call fcn.00405340
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x40
mov ecx, ebx
call fcn.00403e50
add esp, 4
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x52c]
call fcn.00404090
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x3e
call fcn.00404090
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x11
call fcn.00404090
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x45a278], 0
jne 0x402c80
push 0
push 0
push 0x8001
push dword [0x45a27c]
call esi
cmp dword [0x4589ec], 0
je 0x402ce9
push str.Windows
lea ecx, [ebp - 0x484]
call fcn.00404380
push str.SetupApi.log
lea edx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x58c]
call fcn.004051f0
add esp, 4
push eax
lea edx, [ebp - 0x484]
mov byte [ebp - 4], 0x42
mov ecx, ebx
call fcn.00403e50
add esp, 4
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x58c]
call fcn.00404090
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0x11
call fcn.00404090
cmp dword [0x45a278], 0
jne 0x402d03
push 0
push 0
push 0x8001
push dword [0x45a27c]
call esi
cmp dword [0x4589e8], 0
je 0x402d6c
push str.Windows
lea ecx, [ebp - 0x43c]
call fcn.00404380
push str.infSetupApi.log
lea edx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x574]
call fcn.004051f0
add esp, 4
push eax
lea edx, [ebp - 0x43c]
mov byte [ebp - 4], 0x44
mov ecx, ebx
call fcn.00403e50
add esp, 4
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x574]
call fcn.00404090
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x11
call fcn.00404090
cmp dword [0x45a278], 0
jne 0x402d86
push 0
push 0
push 0x8001
push dword [0x45a27c]
call esi
push str.Windows
lea ecx, [ebp - 0x43c]
call fcn.00404380
push str._tempHPAtStatus.log
lea edx, [ebp - 0x4e4]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x484]
call fcn.004051f0
add esp, 4
push eax
lea edx, [ebp - 0x43c]
mov byte [ebp - 4], 0x46
mov ecx, ebx
call fcn.00403e50
add esp, 4
mov byte [ebp - 4], 0x47
cmp dword [ebp - 0x470], 8
jb 0x402df7
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x484]
mov byte [ebp - 4], 0x47
mov eax, dword [ebp - 0x470]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x484]
call fcn.00404a90
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x470], 7
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x484]
cmp dword [ebp - 0x470], 8
mov dword [ebp - 0x474], 0
cmovae eax, dword [ebp - 0x484]
xor ecx, ecx
mov byte [ebp - 4], 0x61
mov word [eax], cx
mov byte [ebp - 4], 0x62
cmp dword [ebp - 0x428], 8
jb 0x402e5f
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x43c]
mov byte [ebp - 4], 0x62
mov eax, dword [ebp - 0x428]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x43c]
call fcn.00404a90
mov byte [ebp - 4], 0x62
mov dword [ebp - 0x428], 7
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x43c]
cmp dword [ebp - 0x428], 8
mov dword [ebp - 0x42c], 0
cmovae eax, dword [ebp - 0x43c]
mov byte [ebp - 4], 0x7c
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0x11
cmp dword [0x45a278], ecx
jne 0x402eb3
push ecx
push ecx
push 0x8001
push dword [0x45a27c]
call esi
cmp dword [0x4589e4], 0
je 0x402f1c
push str.TimeAndSizeLogs
lea ecx, [ebp - 0x514]
call fcn.00404380
push str.HPTimeLog.txt
lea edx, [ebp - 0x4fc]
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x52c]
call fcn.004051f0
add esp, 4
push eax
lea edx, [ebp - 0x514]
mov byte [ebp - 4], 0x7e
mov ecx, ebx
call fcn.00403e50
add esp, 4
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x52c]
call fcn.00404090
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x11
call fcn.00404090
cmp dword [0x45a278], 0
jne 0x402f36
push 0
push 0
push 0x8001
push dword [0x45a27c]
call esi
cmp dword [0x4589e0], 0
je 0x40333c
push str.HP
lea edx, [ebp - 0x49c]
lea ecx, [ebp - 0x52c]
call fcn.004051f0
add esp, 4
mov byte [ebp - 4], 0x80
cmp dword [eax + 0x14], 8
jb 0x402f68
mov eax, dword [eax]
lea ecx, [ebp - 0x8e4]
mov byte [ebp - 4], 0x7f
push ecx
push eax
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
mov ecx, 0x458a00
call dword [eax + 0x124]
mov esi, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x52c]
mov dword [ebp - 0xb38], esi
call fcn.00404090
cmp esi, 0xffffffff
je 0x40333c
nop dword [eax]
nop dword [eax + eax]
test byte [ebp - 0x8e4], 0x10
je 0x40331c
mov ecx, 0x44b864
lea eax, [ebp - 0x8b8]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x402fee
test dx, dx
je 0x402fea
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x402fee
add eax, 4
add ecx, 4
test dx, dx
jne 0x402fc8
xor eax, eax
jmp 0x402ff3
sbb eax, eax
or eax, 1
test eax, eax
je 0x40331c
mov ecx, 0x44b868
lea eax, [ebp - 0x8b8]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40302c
test dx, dx
je 0x403028
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40302c
add eax, 4
add ecx, 4
test dx, dx
jne 0x403006
xor eax, eax
jmp 0x403031
sbb eax, eax
or eax, 1
test eax, eax
je 0x40331c
push str.HP_
lea edx, [ebp - 0x49c]
lea ecx, [ebp - 0x544]
call fcn.004051f0
add esp, 4
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x83
push ecx
mov edx, eax
lea ecx, [ebp - 0x55c]
call fcn.004052e0
add esp, 4
push str.HPUDC
mov edx, eax
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x484]
call fcn.004052e0
add esp, 4
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 0x86
call fcn.00404090
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x87
call fcn.00404090
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xb34]
cmp dword [ebp - 0x470], 8
lea eax, [ebp - 0x484]
push ecx
cmovae eax, dword [ebp - 0x484]
mov ecx, 0x458a00
mov byte [ebp - 4], 0x87
push eax
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
call dword [eax + 0x124]
mov edi, eax
nop word [eax + eax]
test byte [ebp - 0xb34], 0x10
je 0x4032e7
mov edx, 0x44b864
lea ecx, [ebp - 0xb08]
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x40311e
test ax, ax
je 0x40311a
mov ax, word [ecx + 2]
cmp ax, word [edx + 2]
jne 0x40311e
add ecx, 4
add edx, 4
test ax, ax
jne 0x4030f8
xor eax, eax
jmp 0x403123
sbb eax, eax
or eax, 1
test eax, eax
je 0x4032e7
mov ecx, 0x44b868
lea eax, [ebp - 0xb08]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40315c
test dx, dx
je 0x403158
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40315c
add eax, 4
add ecx, 4
test dx, dx
jne 0x403136
xor eax, eax
jmp 0x403161
sbb eax, eax
or eax, 1
test eax, eax
je 0x4032e7
push str.HP_
lea edx, [ebp - 0x49c]
lea ecx, [ebp - 0x5bc]
call fcn.004051f0
add esp, 4
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x8b
push ecx
mov edx, eax
lea ecx, [ebp - 0x574]
call fcn.004052e0
add esp, 4
push str.HPUDC_
mov edx, eax
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x58c]
call fcn.004052e0
add esp, 4
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x8d
push ecx
mov edx, eax
lea ecx, [ebp - 0x514]
call fcn.004052e0
add esp, 4
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x8f
call fcn.00404090
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x90
call fcn.00404090
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x91
call fcn.00404090
push str..
lea edx, [ebp - 0x514]
lea ecx, [ebp - 0x604]
call fcn.004051f0
add esp, 4
mov esi, eax
push str.UDC_Logs_
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0x92
call fcn.00404380
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0x93
push ecx
mov edx, eax
lea ecx, [ebp - 0x5d4]
call fcn.004052e0
add esp, 4
push 0x44b714
mov edx, eax
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x43c]
call fcn.004052e0
add esp, 4
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x95
push ecx
mov edx, eax
lea ecx, [ebp - 0x5a4]
call fcn.004052e0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x96
mov ecx, ebx
call fcn.00403e50
add esp, 4
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x5a4]
call fcn.00404090
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x94
call fcn.00404090
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 0x93
call fcn.00404090
lea ecx, [ebp - 0x5ec]
mov byte [ebp - 4], 0x92
call fcn.00404090
lea ecx, [ebp - 0x604]
mov byte [ebp - 4], 0x91
call fcn.00404090
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0x87
call fcn.00404090
lea eax, [ebp - 0xb34]
mov ecx, 0x458a00
push eax
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
push edi
call dword [eax + 0x128]
test eax, eax
jne 0x4030e0
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0x11
call fcn.00404090
mov esi, dword [ebp - 0xb38]
lea eax, [ebp - 0x8e4]
mov ecx, 0x458a00
push eax
mov eax, dword [vtable.NGWinApi::IKernelApi.0]
push esi
call dword [eax + 0x128]
test eax, eax
jne 0x402fb0
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebx]
mov ecx, ebx
push 1
call dword [eax]
mov dword [ebp - 4], 0x197
cmp dword [ebp - 0x488], 8
jb 0x403383
mov byte [ebp - 4], 0x97
mov ecx, dword [ebp - 0x49c]
mov byte [ebp - 4], 0x97
mov eax, dword [ebp - 0x488]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x49c]
call fcn.00404a90
mov byte [ebp - 4], 0x97
mov dword [ebp - 0x488], 7
mov byte [ebp - 4], 0x97
lea eax, [ebp - 0x49c]
cmp dword [ebp - 0x488], 8
mov dword [ebp - 0x48c], 0
cmovae eax, dword [ebp - 0x49c]
xor ecx, ecx
mov byte [ebp - 4], 0xb1
mov word [eax], cx
mov dword [ebp - 4], 0x1b2
cmp dword [ebp - 0x4a0], 8
jb 0x4033ee
mov byte [ebp - 4], 0xb2
mov ecx, dword [ebp - 0x4b4]
mov byte [ebp - 4], 0xb2
mov eax, dword [ebp - 0x4a0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x4b4]
call fcn.00404a90
mov byte [ebp - 4], 0xb2
mov dword [ebp - 0x4a0], 7
mov byte [ebp - 4], 0xb2
lea eax, [ebp - 0x4b4]
cmp dword [ebp - 0x4a0], 8
mov dword [ebp - 0x4a4], 0
cmovae eax, dword [ebp - 0x4b4]
xor ecx, ecx
mov byte [ebp - 4], 0xcc
mov word [eax], cx
mov dword [ebp - 4], 0x1cd
cmp dword [ebp - 0x4b8], 8
jb 0x403459
mov byte [ebp - 4], 0xcd
mov ecx, dword [ebp - 0x4cc]
mov byte [ebp - 4], 0xcd
mov eax, dword [ebp - 0x4b8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x4cc]
call fcn.00404a90
mov byte [ebp - 4], 0xcd
mov dword [ebp - 0x4b8], 7
mov byte [ebp - 4], 0xcd
lea eax, [ebp - 0x4cc]
cmp dword [ebp - 0x4b8], 8
mov dword [ebp - 0x4bc], 0
cmovae eax, dword [ebp - 0x4cc]
xor ecx, ecx
mov byte [ebp - 4], 0xe7
mov word [eax], cx
mov dword [ebp - 4], 0x1e8
cmp dword [ebp - 0x440], 8
jb 0x4034c4
mov byte [ebp - 4], 0xe8
mov ecx, dword [ebp - 0x454]
mov byte [ebp - 4], 0xe8
mov eax, dword [ebp - 0x440]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x454]
call fcn.00404a90
mov byte [ebp - 4], 0xe8
mov dword [ebp - 0x440], 7
mov dword [ebp - 4], 0x1e8
lea eax, [ebp - 0x454]
cmp dword [ebp - 0x440], 8
mov dword [ebp - 0x444], 0
cmovae eax, dword [ebp - 0x454]
xor ecx, ecx
mov dword [ebp - 4], 0x202
mov word [eax], cx
mov dword [ebp - 4], 0x203
cmp dword [ebp - 0x458], 8
jb 0x403535
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x46c]
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x458]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x46c]
call fcn.00404a90
mov byte [ebp - 4], 3
mov dword [ebp - 0x458], 7
mov byte [ebp - 4], 3
lea eax, [ebp - 0x46c]
cmp dword [ebp - 0x458], 8
mov dword [ebp - 0x45c], 0
cmovae eax, dword [ebp - 0x46c]
xor ecx, ecx
mov byte [ebp - 4], 0x1d
mov word [eax], cx
mov dword [ebp - 4], 0x21e
cmp dword [ebp - 0x4d0], 8
jb 0x4035a0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x4e4]
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x4d0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x4e4]
call fcn.00404a90
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x4d0], 7
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x4e4]
cmp dword [ebp - 0x4d0], 8
mov dword [ebp - 0x4d4], 0
cmovae eax, dword [ebp - 0x4e4]
xor ecx, ecx
mov byte [ebp - 4], 0x38
mov word [eax], cx
mov dword [ebp - 4], 0x239
cmp dword [ebp - 0x4e8], 8
jb 0x40360b
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x4fc]
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x4e8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x4fc]
call fcn.00404a90
mov byte [ebp - 4], 0x39
mov dword [ebp - 0x4e8], 7
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x4fc]
cmp dword [ebp - 0x4e8], 8
mov dword [ebp - 0x4ec], 0
cmovae eax, dword [ebp - 0x4fc]
xor ecx, ecx
mov byte [ebp - 4], 0x53
mov word [eax], cx
lea ecx, [ebp - 0xb84]
mov dword [ebp - 4], 0x53
call fcn.004073f4
mov dword [ebp - 4], 0x254
lea ecx, [ebp - 0x694]
mov dword [ebp - method.NGUtils::CProgressAggregator.virtual_0], vtable.NGUtils::CProgress.0
mov dword [ebp - 4], 0xffffffff
call fcn.0040daa0
cmp dword [0x45a278], 0
jne 0x403693
push 0
push 0
push 0x8002
push dword [0x45a27c]
call esi
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00416f78
mov esp, ebp
pop ebp
ret 4