Function at 0x90e940
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0xb138a8
push 0xa847a0
mov eax, dword fs:[0]
push eax
sub esp, 0xca4
mov eax, dword [0xb196ec]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x20], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc8c], eax
mov dword [ebp - 0xc84], ecx
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xcac], eax
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0xc98], ecx
mov ecx, dword [ebp + 0x20]
mov dword [ebp - 0xca4], ecx
mov edx, dword [ebp + 0x24]
mov dword [ebp - 0xc80], edx
mov esi, dword [ebp + 0x30]
mov dword [ebp - 0xcb0], esi
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0xc78], ebx
mov dword [ebp - 4], edi
mov dword [ebp - 0xc94], edi
mov dword [ebp - 0xca8], edi
mov dword [ebp - 0xc7c], edi
mov dword [ebp - 0xca0], edi
mov esi, dword [ebp + 0xc]
sub esi, dword [ebp + 0x10]
mov dword [ebp - 0xc90], esi
sub eax, dword [ebp - 0xc88]
mov dword [ebp - 0xc9c], eax
test ecx, ecx
je 0x90e9fe
mov dword [ecx], ebx
test edx, edx
je 0x90ea08
mov dword [edx], 0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
cmp ecx, eax
jae 0x90ea33
cmp dword [ebp + 0x2c], 0
je 0x90ea25
push str.Physical_Filesize_is_less_than_SizeOfImage__n
call fcn.00a7a8b1
add esp, 4
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x910114
jne 0x90eda3
cmp dword [ebp + 0x28], 0
je 0x90ea6c
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov dword [edx], 0xe
cmp dword [ebp + 0x2c], 0
je 0x90eb48
push str._WinZip_SFX_File__n
jmp 0x90eb40
cmp dword [ebp - 0xc84], 0
je 0x90eb48
mov ecx, 0xa
cmp dword [ebp + 0x14], ecx
jbe 0x90eb48
mov eax, 0xb48ee0
mov esi, dword [ebp - 0xc84]
cmp ecx, 4
jb 0x90eaa8
mov edx, dword [esi]
cmp edx, dword [eax]
jne 0x90eae2
sub ecx, 4
add eax, 4
add esi, 4
jmp 0x90ea92
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x90eae2
mov dl, byte [eax + 1]
cmp dl, byte [esi + 1]
jne 0x90eae2
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x17
cmp dword [ebp + 0x2c], 0
je 0x90eb48
push str._CAB_SFX_File__n
jmp 0x90eb40
mov ecx, 0xa
mov eax, 0xb48eec
mov esi, dword [ebp - 0xc84]
cmp ecx, 4
jb 0x90eb08
mov edx, dword [esi]
cmp edx, dword [eax]
jne 0x90eb48
sub ecx, 4
add eax, 4
add esi, 4
jmp 0x90eaf2
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x90eb48
mov dl, byte [eax + 1]
cmp dl, byte [esi + 1]
jne 0x90eb48
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x18
cmp dword [ebp + 0x2c], 0
je 0x90eb48
push str._Unknown_A_SFX_File__n
call fcn.00a7a8b1
add esp, 4
test edi, edi
jne 0x90ed6b
mov byte [ebp - 0x64c], 0
push 0x103
push edi
lea ecx, [ebp - 0x64b]
push ecx
call fcn.00a7ffb0
add esp, 0xc
mov byte [ebp - 0xa6c], 0
push 0x103
push edi
lea edx, [ebp - 0xa6b]
push edx
call fcn.00a7ffb0
add esp, 0xc
mov byte [ebp - 0xc74], 0
push 0x207
push edi
lea eax, [ebp - 0xc73]
push eax
call fcn.00a7ffb0
add esp, 0xc
mov eax, dword [ebp - 0xc8c]
test eax, eax
je 0x90ebd8
cmp byte [eax], 0
je 0x90ebd8
push edi
push edi
push edi
push edi
push edi
push edi
lea ecx, [ebp - 0x64c]
push ecx
lea edx, [ebp - 0xa6c]
push edx
push edi
push edi
push edi
push eax
xor edx, edx
lea ecx, [ebp - 0xc74]
call fcn.0096d300
cmp byte [ebp - 0xc74], 0
je 0x90ec2e
push 0
push str.Self_Extract
lea eax, [ebp - 0xc74]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90ec2e
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x21
cmp dword [ebp + 0x2c], 0
je 0x90ec2e
push str._UNKNOWN_C_5____Force_Self_Extractor__n
call fcn.00a7a8b1
add esp, 4
cmp byte [ebp - 0x64c], 0
je 0x90ec9f
push 0
push 0xad00ac
lea edx, [ebp - 0x64c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90ec9f
push 0
push 0xae027c
lea eax, [ebp - 0x64c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90ec9f
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x26
cmp dword [ebp + 0x2c], 0
je 0x90ec9f
push str._UNKNOWN_C_6____Force_Self_Extractor__n
call fcn.00a7a8b1
add esp, 4
test edi, edi
jne 0x90ed6b
cmp dword [ebp + 0x2c], 2
jne 0x90ed6b
cmp dword [ebp - 0xc84], edi
je 0x90ed6b
cmp dword [ebp + 0x14], edi
je 0x90ed6b
mov byte [ebp - 0x85c], 0
push 0x103
push edi
lea edx, [ebp - 0x85b]
push edx
call fcn.00a7ffb0
add esp, 0xc
mov byte [ebp - 0x754], 0
push 0x103
push edi
lea eax, [ebp - 0x753]
push eax
call fcn.00a7ffb0
add esp, 0xc
lea ecx, [ebp - 0x754]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
jne 0x90ed26
push 0xaaa51c
lea edx, [ebp - 0x754]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x85c]
push eax
push 0
push 0xae02a8
lea ecx, [ebp - 0x754]
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp - 0xc84]
push eax
lea ecx, [ebp - 0x85c]
call fcn.0095b5d0
lea ecx, [ebp - 0x85c]
push ecx
push str.____EPOffset_saved_in___s__n
call fcn.00a7a8b1
add esp, 0x10
mov eax, dword [ebp - 0xca4]
test eax, eax
je 0x90ed77
mov dword [eax], edi
test ebx, ebx
je 0x90ed97
mov ecx, dword [ebp - 0xc80]
mov eax, dword [ecx]
test eax, eax
jle 0x90ed97
cmp dword [ebp - 0xc98], 0
jne 0x90ed97
add eax, 0xc8
mov dword [ecx], eax
mov dword [ebp - 4], 0xfffffffe
jmp 0x910112
cmp dword [ebp + 0x28], 0
je 0x90edde
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov dword [edx], 0xe
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._WinZip_SFX_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp esi, 0xa
jbe 0x90ee4f
mov esi, str..file
mov eax, dword [ebp - 0xc88]
mov edi, edi
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x90ee10
test cl, cl
je 0x90ee0c
mov cl, byte [eax + 1]
cmp cl, byte [esi + 1]
jne 0x90ee10
add eax, 2
add esi, 2
test cl, cl
jne 0x90edf0
xor eax, eax
jmp 0x90ee15
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x90ee4f
mov eax, dword [ebp - 0xcb0]
test eax, eax
je 0x90ee29
mov dword [eax], 1
mov dword [ebp - 0xc94], 1
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str..File_Present___IGNORING_n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
mov edi, dword [ebp - 0xc90]
mov esi, dword [ebp - 0xc88]
cmp edi, 0x50
jbe 0x90ef03
push esi
call fcn.0095d2e0
add esp, 4
cmp eax, 0xffffffff
je 0x90eead
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 0x1f
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Norton_Download_Manager__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0x50
jbe 0x90ef03
mov eax, 0x50
mov ecx, str.QHDATA.ARJ
mov edx, esi
call fcn.0095ce20
cmp eax, 0xffffffff
je 0x90ef03
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x20
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._QH_Packed__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0xa0
jbe 0x90f002
lea ecx, [ebp - 0xca0]
push ecx
push 0xa0
push 0
push 0
push 0xae0344
push 0xae034c
push esi
call fcn.0095cb10
add esp, 0x1c
cmp eax, 0xffffffff
jne 0x90ef5f
lea edx, [ebp - 0xca0]
push edx
push 0xa0
push 0
push 0
push str.setup.
push str.wextract
push esi
call fcn.0095cf80
add esp, 0x1c
cmp eax, 0xffffffff
je 0x90ef9a
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x22
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Windows_Extractor__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0xa0
jbe 0x90f002
lea ecx, [ebp - 0xca0]
push ecx
push 0xa0
push 0
push 0
push 0
push str.Wise_Install
push esi
call fcn.0095cb10
add esp, 0x1c
cmp eax, 0xffffffff
je 0x90f002
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 0x22
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Wise_Installer__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 4
jbe 0x90f057
push 4
mov eax, 0xae03a8
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f057
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 2
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Self_Extracting_RAR_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 8
jbe 0x90f0ab
push 7
mov eax, str.ARJ_SFX
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f0ab
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x29
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._Self_Extracting_ARJ_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 2
jbe 0x90f0ff
push 2
mov eax, 0xadfde8
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f0ff
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 4
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._Self_Extracting_ZIP_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0x10
jbe 0x90f154
push 0xa
mov eax, 0xae040c
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f154
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x13
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._RegNow_Download_Manager_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 8
jbe 0x90f200
push 8
mov eax, str.TCINSTRT
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f1ac
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x14
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._TrueCrypt_Self_Extractor_Module__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 8
jbe 0x90f200
push 6
mov eax, str.BPLIST
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f200
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 0x25
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._Apple_Binary_Embedded_PList__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0xd
jbe 0x90f21a
push 0xd
mov eax, str.ISSetupStream
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
je 0x90f26d
cmp edi, 0x30
jbe 0x90f235
push 4
lea ecx, [esi + 0x29]
mov eax, str.ISc_
call fcn.0094c380
add esp, 4
test eax, eax
je 0x90f26d
cmp edi, 0x90
jbe 0x90f253
mov eax, 0x90
mov ecx, str.InstallShield
mov edx, esi
call fcn.0095ce20
cmp eax, 0xffffffff
jne 0x90f26d
cmp edi, 0xd
jbe 0x90f2a8
push 0xd
mov eax, str.InstallShield
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f2a8
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x16
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._InstallShield_Extractor__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 2
jbe 0x90f2c2
push 2
mov eax, 0xad00ac
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
je 0x90f2dc
cmp edi, 0x10
jbe 0x90f317
push 0xc
mov eax, str.___Install__
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f317
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0xd
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Self_Extracting_7z_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 3
jbe 0x90f337
push 3
mov eax, 0xae0500
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f337
cmp byte [esi + 3], 0x1a
je 0x90f357
cmp edi, 8
jbe 0x90f392
push 7
mov eax, str.idska32
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f392
cmp byte [esi + 7], 0x1a
jne 0x90f392
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 5
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Self_Extracting_ZLB_Inno_Setup_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0xe
jbe 0x90f3b2
lea ecx, [esi + 7]
cmp byte [ecx], 0
je 0x90f3b2
push 7
mov eax, str.ACE
call fcn.0094c380
add esp, 4
test eax, eax
je 0x90f3cc
cmp edi, 5
jbe 0x90f407
push 5
mov eax, str._sfx_
mov ecx, esi
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f407
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x10
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Self_Extracting_ACE_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 6
jbe 0x90f466
cmp byte [esi], 0xfd
jne 0x90f466
push 4
lea ecx, [esi + 1]
mov eax, str.7zXZ
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f466
cmp byte [esi + 5], al
jne 0x90f466
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0xf
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._Self_Extracting_XZ_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0x25
jbe 0x90f4bd
push 5
push str.slf
lea edx, [esi + 0x20]
push edx
call fcn.00a891c8
add esp, 0xc
test eax, eax
jne 0x90f4bd
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 6
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Self_Extracting_SLF_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0x10
jbe 0x90f511
push 0xae05a0
lea ecx, [esi + 0xb]
push ecx
call fcn.00a88f66
add esp, 8
test eax, eax
jne 0x90f511
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 0x11
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._Self_Extracting_ISO_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0x25
jbe 0x90f567
push 9
lea ecx, [esi + 0x10]
mov eax, str.xmlConfig
call fcn.0094c380
add esp, 4
test eax, eax
jne 0x90f567
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x12
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Self_Extracting_Chilkat_Zip_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0x10
jbe 0x90f5bd
push 8
push str.Nullsoft
lea ecx, [esi + 8]
push ecx
call fcn.00a891c8
add esp, 0xc
test eax, eax
jne 0x90f5bd
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 7
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._NullSoft_Installer_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp dword [ebp + 0xc], 0xe004
jbe 0x90f5e9
mov eax, dword [ebp - 0xc98]
test eax, eax
je 0x90f5e9
push 4
push str.MSCF
add eax, 0xe000
push eax
call fcn.00a7aed7
add esp, 0xc
test eax, eax
je 0x90f61e
cmp edi, 0x29
jbe 0x90f605
push 4
push str.MSCF
lea eax, [esi + 0x26]
push eax
call fcn.00a7aed7
add esp, 0xc
test eax, eax
je 0x90f61e
cmp edi, 4
jbe 0x90f659
push 4
push str.MSCF
push esi
call fcn.00a7aed7
add esp, 0xc
test eax, eax
jne 0x90f659
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 8
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Microsoft_CAB_Installer_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp dword [ebp - 0xc9c], 0x400
jbe 0x90f6bd
push 7
push str.AU3_EA0
mov edx, dword [ebp - 0xcac]
add edx, 0xfffffff8
push edx
call fcn.00a891c8
add esp, 0xc
test eax, eax
jne 0x90f6bd
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 9
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._AutoIT_compiled__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0xe
jbe 0x90f710
push 0xd
push str.Smart_Install
push esi
call fcn.00a891c8
add esp, 0xc
test eax, eax
jne 0x90f710
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0xa
cmp dword [ebp + 0x2c], eax
je 0x90f911
push str._Smart_Install_Maker_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 0x40
jbe 0x90f78d
mov eax, 0x50
mov edx, esi
call fcn.00904f10
cmp eax, 1
je 0x90f752
cmp byte [esi], 0x4d
jne 0x90f78d
cmp byte [esi + 1], 0x5a
jne 0x90f78d
mov al, byte [esi + 2]
cmp al, 0x90
je 0x90f74c
cmp al, 0xa
je 0x90f74c
cmp al, 0x50
je 0x90f74c
cmp al, 0x40
je 0x90f74c
test al, al
je 0x90f74c
cmp al, 0x80
jne 0x90f78d
cmp byte [esi + 3], 0
jne 0x90f78d
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 0x1b
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Embedded_EXE_File__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 8
jbe 0x90f869
cmp byte [esi], 0xde
jne 0x90f7fa
cmp byte [esi + 1], 0x20
jne 0x90f7fa
cmp byte [esi + 2], 0x24
jne 0x90f7fa
cmp byte [esi + 3], 0xb
jne 0x90f7fa
mov al, 0xff
cmp byte [esi + 4], al
jne 0x90f7fa
cmp byte [esi + 5], al
jne 0x90f7fa
cmp byte [esi + 6], al
jne 0x90f7fa
cmp byte [esi + 7], al
jne 0x90f7fa
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], ebx
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._RegNow_Packed__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
cmp edi, 8
jbe 0x90f869
cmp byte [esi], 0
jne 0x90f869
cmp byte [esi + 1], 0xd4
jne 0x90f869
cmp byte [esi + 2], 0
jne 0x90f869
cmp byte [esi + 3], 0
jne 0x90f869
cmp byte [esi + 4], 0xab
jne 0x90f869
cmp byte [esi + 5], 0x67
jne 0x90f869
cmp byte [esi + 6], 0xa7
jne 0x90f869
cmp byte [esi + 7], 0x36
jne 0x90f869
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x24
cmp dword [ebp + 0x2c], 0
je 0x90f911
push str._Hotkey_Packed__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90f911
mov edx, dword [ebp + 0x2c]
push edx
lea eax, [ebp - 0xc7c]
push eax
mov ecx, edi
push ecx
mov ebx, dword [ebp - 0xc80]
lea edi, [ebp - 0xc78]
mov esi, dword [ebp - 0xc88]
call fcn.0090d8e0
add esp, 0xc
test eax, eax
jne 0x90f905
cmp dword [ebp - 0xc90], 0x11
jbe 0x90f905
mov cl, 6
mov eax, esi
cmp byte [eax + 0xc], cl
jne 0x90f8c5
cmp byte [eax + 0xd], 9
jne 0x90f8c5
cmp byte [eax + 0xe], 0x2a
jne 0x90f8c5
cmp byte [eax + 0xf], 0x86
jne 0x90f8c5
cmp byte [eax + 9], 0x82
jne 0x90f8c5
cmp byte [eax + 8], 0x30
je 0x90f8e8
cmp byte [eax + 0xd], cl
jne 0x90f905
cmp byte [eax + 0xe], 9
jne 0x90f905
cmp byte [eax + 0xf], 0x2a
jne 0x90f905
cmp byte [eax + 0x10], 0x86
jne 0x90f905
cmp byte [eax + 9], 0x83
jne 0x90f905
cmp byte [eax + 8], 0x30
jne 0x90f905
cmp dword [ebp + 0x2c], 0
je 0x90f8fb
push str._VERISIGN_SIGNED_FILE__n
call fcn.00a7a8b1
add esp, 4
mov dword [ebp - 0xca8], 1
mov edi, dword [ebp - 0xc7c]
mov ebx, dword [ebp - 0xc78]
cmp dword [ebp - 0xc94], 0
jne 0x90fa52
test edi, edi
jne 0x90fc23
mov esi, dword [ebp - 0xc84]
test esi, esi
je 0x90fa52
mov ecx, 0xa
cmp dword [ebp + 0x14], ecx
jbe 0x90fa52
mov eax, 0xb48ee0
cmp ecx, 4
jb 0x90f95d
mov edx, dword [esi]
cmp edx, dword [eax]
jne 0x90f99e
sub ecx, 4
add eax, 4
add esi, 4
jmp 0x90f947
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x90f99e
mov dl, byte [eax + 1]
cmp dl, byte [esi + 1]
jne 0x90f99e
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x17
cmp dword [ebp + 0x2c], 0
je 0x90fa52
push str._CAB_SFX_File__n
jmp 0x90fa4a
mov ecx, 0xa
mov eax, 0xb48eec
mov esi, dword [ebp - 0xc84]
mov edi, edi
cmp ecx, 4
jb 0x90f9c6
mov edx, dword [esi]
cmp edx, dword [eax]
jne 0x90fa00
sub ecx, 4
add eax, 4
add esi, 4
jmp 0x90f9b0
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x90fa00
mov dl, byte [eax + 1]
cmp dl, byte [esi + 1]
jne 0x90fa00
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x18
cmp dword [ebp + 0x2c], 0
je 0x90fa52
push str._Unknown_A_SFX_File__n
jmp 0x90fa4a
cmp dword [ebp + 0x14], 0x40
jbe 0x90fa52
mov eax, 0x40
mov ecx, str.RSDSC
mov edx, dword [ebp - 0xc84]
call fcn.0095ce20
cmp eax, 0xffffffff
je 0x90fa52
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x28
cmp dword [ebp + 0x2c], 0
je 0x90fa52
push str._Crypt_Packed__n
call fcn.00a7a8b1
add esp, 4
test edi, edi
jne 0x90fc23
cmp dword [ebp - 0xca8], edi
jne 0x90fa8c
cmp dword [ebp + 0x2c], edi
je 0x90fa8c
push 0xaa17f8
call fcn.00a7a8b1
add esp, 4
push 1
push 0x90
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0xc88]
call fcn.0098d8e0
add esp, 8
cmp dword [ebp + 0x2c], 2
jne 0x90fbd9
mov byte [ebp - 0x234], 0
push 0x103
push 0
lea edx, [ebp - 0x233]
push edx
call fcn.00a7ffb0
add esp, 0xc
mov byte [ebp - 0x544], 0
push 0x103
push 0
lea eax, [ebp - 0x543]
push eax
call fcn.00a7ffb0
add esp, 0xc
lea ecx, [ebp - 0x544]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
jne 0x90faf8
push 0xaaa51c
lea edx, [ebp - 0x544]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
cmp dword [ebp - 0xc84], 0
jne 0x90fb45
lea eax, [ebp - 0x234]
push eax
push 0
push 0xadf904
lea ecx, [ebp - 0x544]
push ecx
call esi
mov edx, dword [ebp - 0xc9c]
push edx
mov eax, dword [ebp - 0xc88]
push eax
lea ecx, [ebp - 0x234]
call fcn.0095b5d0
lea ecx, [ebp - 0x234]
push ecx
push str.____Resource_saved_in___s__n
jmp 0x90fb81
lea edx, [ebp - 0x234]
push edx
push 0
push 0xae06f8
lea eax, [ebp - 0x544]
push eax
call esi
mov ecx, dword [ebp - 0xc9c]
push ecx
mov edx, dword [ebp - 0xc88]
push edx
lea ecx, [ebp - 0x234]
call fcn.0095b5d0
lea eax, [ebp - 0x234]
push eax
push str.____Overlay_saved_in___s__n
call fcn.00a7a8b1
add esp, 0x10
cmp dword [ebp - 0xc84], 0
je 0x90fbd9
cmp dword [ebp + 0x14], 0
je 0x90fbd9
lea ecx, [ebp - 0x234]
push ecx
push 0
push 0xae02a8
lea edx, [ebp - 0x544]
push edx
call esi
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp - 0xc84]
push ecx
lea ecx, [ebp - 0x234]
call fcn.0095b5d0
lea edx, [ebp - 0x234]
push edx
push str.____EPOffset_saved_in___s__n
call fcn.00a7a8b1
add esp, 0x10
cmp dword [ebp - 0xc94], 0
jne 0x90fc23
cmp dword [ebp - 0xc90], 0x80000
jbe 0x90fc23
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x1b
mov esi, dword [ebp + 0x2c]
test esi, esi
je 0x90fc26
push str._UNKNOWN_B_2____Force_Self_Extractor__n
call fcn.00a7a8b1
add esp, 4
jmp 0x90fc26
mov esi, dword [ebp + 0x2c]
cmp dword [ebp - 0xc94], 0
jne 0x9100b8
test edi, edi
jne 0x9100b8
mov byte [ebp - 0x12c], 0
push 0x103
push edi
lea ecx, [ebp - 0x12b]
push ecx
call fcn.00a7ffb0
add esp, 0xc
mov byte [ebp - 0x964], 0
push 0x103
push edi
lea edx, [ebp - 0x963]
push edx
call fcn.00a7ffb0
add esp, 0xc
mov byte [ebp - 0x43c], 0
push 0x207
push edi
lea eax, [ebp - 0x43b]
push eax
call fcn.00a7ffb0
add esp, 0xc
cmp dword [ebp - 0xc8c], edi
je 0x90fcc7
mov ecx, dword [ebp - 0xc8c]
cmp byte [ecx], 0
je 0x90fcc7
push edi
push edi
push edi
push edi
push edi
push edi
lea edx, [ebp - 0x12c]
push edx
lea eax, [ebp - 0x964]
push eax
push edi
push edi
push edi
push ecx
xor edx, edx
lea ecx, [ebp - 0x43c]
call fcn.0096d300
cmp byte [ebp - 0x12c], 0
je 0x90fd1c
push 0
push str.Update_Setup
lea edx, [ebp - 0x12c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90fd1c
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov eax, dword [ebp - 0xc80]
mov dword [eax], 0x1c
test esi, esi
je 0x9100b8
push str._UNKNOWN_B_4____Force_Self_Extractor__n
jmp 0x9100b0
cmp byte [ebp - 0x43c], 0
je 0x90fe00
push 0
push str.Update_Setup
lea ecx, [ebp - 0x43c]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fdcf
push 0
push str.Download_Manager
lea edx, [ebp - 0x43c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fdcf
push 0
push str.Setup_Launch
lea eax, [ebp - 0x43c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fdcf
push 0
push str.Softonic_Downloader
lea ecx, [ebp - 0x43c]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fdcf
push 0
push str.Windows_Installer
lea edx, [ebp - 0x43c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fdcf
push 0
push str.Self_Extract
lea eax, [ebp - 0x43c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90fe00
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x1d
test esi, esi
je 0x9100b8
push str._UNKNOWN_B_5____Force_Self_Extractor__n
jmp 0x9100b0
cmp byte [ebp - 0x12c], 0
je 0x90ff22
push 0
push str.uninstall
lea edx, [ebp - 0x12c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90ff22
push 0
push 0xace578
lea eax, [ebp - 0x12c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90ff22
push 0
push str.setup
lea ecx, [ebp - 0x12c]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fef1
push 0
push str.launcher
lea edx, [ebp - 0x12c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fef1
push 0
push str.InstMSI.EXE
lea eax, [ebp - 0x12c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fef1
push 0
push 0xad00ac
lea ecx, [ebp - 0x12c]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90fed6
push 0
push 0xae027c
lea edx, [ebp - 0x12c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90fef1
push 0
push str.Installer
lea eax, [ebp - 0x12c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90ff22
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x19
test esi, esi
je 0x9100b8
push str._UNKNOWN_B_1X____Force_Self_Extractor__n
jmp 0x9100b0
cmp byte [ebp - 0x43c], 0
je 0x910065
push 0
push str._setup_
lea edx, [ebp - 0x43c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x90ff65
push 0
push str.Live_Install
lea eax, [ebp - 0x43c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x90ff96
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x1a
test esi, esi
je 0x9100b8
push str._UNKNOWN_B_1Z____Force_Self_Extractor__n
jmp 0x9100b0
cmp byte [ebp - 0x43c], 0
je 0x910065
cmp dword [ebp + 0x10], 0x500000
jbe 0x910065
push 0
push str.uninstall
lea edx, [ebp - 0x43c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x910065
push 0
push str.setup_API
lea eax, [ebp - 0x43c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x910065
push 0
push str.setup
lea ecx, [ebp - 0x43c]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91003b
push 0
push str.launcher
lea edx, [ebp - 0x43c]
push edx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x91003b
push 0
push str.Installer
lea eax, [ebp - 0x43c]
push eax
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x910065
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov ecx, dword [ebp - 0xc80]
mov dword [ecx], 0x1a
test esi, esi
je 0x9100b8
push str._UNKNOWN_B_1Y____Force_Self_Extractor__n
jmp 0x9100b0
mov eax, dword [ebp - 0xc8c]
test eax, eax
je 0x9100a7
cmp byte [eax], 0
je 0x9100a7
cmp dword [ebp + 0x10], 0x3200000
jbe 0x9100a7
mov ebx, 1
mov dword [ebp - 0xc78], ebx
mov edi, ebx
mov dword [ebp - 0xc7c], edi
mov edx, dword [ebp - 0xc80]
mov dword [edx], 0x23
test esi, esi
je 0x9100b8
push str._UNKNOWN_B_1H____Force_Self_Extractor__n
jmp 0x9100b0
test esi, esi
je 0x9100b8
push str._UNKNOWN_B____NotSure__n
call fcn.00a7a8b1
add esp, 4
mov eax, dword [ebp - 0xca4]
test eax, eax
je 0x9100c4
mov dword [eax], edi
mov dword [ebp - 4], 0xfffffffe
jmp 0x9100f2
test ebx, ebx
je 0x910112
mov ecx, dword [ebp - 0xc80]
mov eax, dword [ecx]
test eax, eax
jle 0x910112
cmp dword [ebp - 0xc98], 0
jne 0x910112
add eax, 0xc8
mov dword [ecx], eax
mov eax, ebx
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret