Function at 0x424de0
Capabilities:
Accept command line arguments
Check os version
Contain obfuscated stackstrings
Get common file path
Get startup folder
Identify system language via api
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d11b9
mov eax, dword fs:[0]
push eax
mov eax, 0x1974
call fcn.0048cd90
mov eax, dword [0x517074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1254], ecx
mov eax, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x12a4], eax
mov dword [ebp - 0x1230], 0
mov dword [ebp - 4], edi
mov dword [ebp - 0xba0], edi
mov dword [ebp - 0xb9c], edi
mov byte [ebp - 4], 0
mov dword [ebp - 0xb9c], 7
mov byte [ebp - 4], 0
lea eax, [ebp - 0xbb0]
cmp dword [ebp - 0xb9c], 8
mov dword [ebp - 0xba0], edi
cmovae eax, dword [ebp - 0xbb0]
xor ecx, ecx
mov byte [ebp - 4], 0x1a
mov word [eax], cx
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xb60], ecx
mov dword [ebp - 0xb5c], ecx
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xb5c], 7
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xb70]
cmp dword [ebp - 0xb5c], 8
mov dword [ebp - 0xb60], ecx
cmovae eax, dword [ebp - 0xb70]
mov byte [ebp - 4], 0x36
mov word [eax], cx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0xaf0], ecx
mov dword [ebp - 0xaec], ecx
mov byte [ebp - 4], 0x38
mov dword [ebp - 0xaec], 7
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0xb00]
cmp dword [ebp - 0xaec], 8
mov dword [ebp - 0xaf0], ecx
cmovae eax, dword [ebp - 0xb00]
mov byte [ebp - 4], 0x52
mov word [eax], cx
mov byte [ebp - 4], 0x54
mov dword [ebp - 0xccc], ecx
mov dword [ebp - 0xcc8], ecx
mov byte [ebp - 4], 0x54
mov dword [ebp - 0xcc8], 7
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0xcdc]
cmp dword [ebp - 0xcc8], 8
mov dword [ebp - 0xccc], ecx
cmovae eax, dword [ebp - 0xcdc]
mov byte [ebp - 4], 0x6e
mov word [eax], cx
mov byte [ebp - 4], 0x70
mov dword [ebp - 0xc3c], ecx
mov dword [ebp - 0xc38], ecx
mov byte [ebp - 4], 0x70
mov dword [ebp - 0xc38], 7
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0xc4c]
cmp dword [ebp - 0xc38], 8
mov dword [ebp - 0xc3c], ecx
cmovae eax, dword [ebp - 0xc4c]
mov byte [ebp - 4], 0x8a
mov word [eax], cx
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0xc24], ecx
mov dword [ebp - 0xc20], ecx
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0xc20], 7
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0xc34]
cmp dword [ebp - 0xc20], 8
mov dword [ebp - 0xc24], ecx
cmovae eax, dword [ebp - 0xc34]
mov byte [ebp - 4], 0xa6
mov word [eax], cx
mov byte [ebp - 4], 0xa8
mov dword [ebp - 0xbd0], ecx
mov dword [ebp - 0xbcc], ecx
mov byte [ebp - 4], 0xa8
mov dword [ebp - 0xbcc], 7
mov byte [ebp - 4], 0xa8
lea eax, [ebp - 0xbe0]
cmp dword [ebp - 0xbcc], 8
mov dword [ebp - 0xbd0], ecx
cmovae eax, dword [ebp - 0xbe0]
mov byte [ebp - 4], 0xc2
mov word [eax], cx
push 0x34
push ecx
lea eax, [ebp - 0xb58]
mov byte [ebp - 4], 0xc4
push eax
call fcn.004a5940
add esp, 0xc
mov byte [ebp - 4], 0xc5
mov dword [ebp - 0x1314], edi
mov dword [ebp - 0x1310], edi
mov byte [ebp - 4], 0xc5
mov dword [ebp - 0x1310], 7
mov byte [ebp - 4], 0xc5
lea eax, [ebp - 0x1324]
cmp dword [ebp - 0x1310], 8
mov dword [ebp - 0x1314], edi
cmovae eax, dword [ebp - 0x1324]
xor ecx, ecx
mov byte [ebp - 4], 0xdf
mov word [eax], cx
lea eax, [ebp - 0x1324]
mov byte [ebp - 4], 0xe0
push eax
lea ecx, [ebp - 0xb58]
call fcn.00429220
mov byte [ebp - 4], 0xe3
cmp dword [ebp - 0x1310], 8
jb 0x4250a6
mov byte [ebp - 4], 0xe3
mov ecx, dword [ebp - 0x1324]
mov byte [ebp - 4], 0xe3
mov eax, dword [ebp - 0x1310]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1324]
call fcn.00414120
mov byte [ebp - 4], 0xe3
mov dword [ebp - 0x1310], 7
mov byte [ebp - 4], 0xe3
lea eax, [ebp - 0x1324]
cmp dword [ebp - 0x1310], 8
mov dword [ebp - 0x1314], 0
cmovae eax, dword [ebp - 0x1324]
xor ecx, ecx
mov byte [ebp - 4], 0xfd
mov word [eax], cx
push 0xc0
push ecx
lea eax, [ebp - 0xf70]
mov byte [ebp - 4], 0xfe
push eax
call fcn.004a5940
add esp, 0xc
mov byte [ebp - 4], 0xe2
lea ecx, [ebp - 0xf70]
call fcn.0041a500
mov dword [ebp - 4], 0x101
mov dword [ebp - method.std::error_category.virtual_4], 0x4ed6ac
mov byte [ebp - 4], 0
mov dword [ebp - method.Concurrency::details::SchedulerBase.virtual_68], 0x4ed704
push 0x3c
lea eax, [ebp - 0xe50]
mov dword [ebp - 4], 0x102
push 0
push eax
call fcn.004a5940
add esp, 8
mov dword [ebp - 4], 0xff
lea ecx, [ebp - 0xe50]
call fcn.004189e0
mov dword [ebp - 4], 0x103
mov dword [ebp - 0xae4], 0xffffffff
mov byte [ebp - 4], 4
mov dword [ebp - 0xbb8], 0
mov dword [ebp - 0xbb4], 0
mov byte [ebp - 4], 4
mov dword [ebp - 0xbb4], 7
mov byte [ebp - 4], 4
lea eax, [ebp - 0xbc8]
cmp dword [ebp - 0xbb4], 8
mov dword [ebp - 0xbb8], 0
cmovae eax, dword [ebp - 0xbc8]
xor ecx, ecx
mov byte [ebp - 4], 0x1e
mov word [eax], cx
mov byte [ebp - 4], 0x1f
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
mov dword [ebp - 0x1238], 0
seta byte [ebp - 0x123d]
mov byte [ebp - 4], 0x20
xorps xmm0, xmm0
movq qword [ebp - 0xb24], xmm0
mov dword [ebp - 0xb1c], 0
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xb24], 0
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0xb1c], 0
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x22
call fcn.004287f0
push 0x80
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x23
push 0
push eax
call fcn.004a5940
add esp, 0xc
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb84], 0
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xb84], 7
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0xb98]
cmp dword [ebp - 0xb84], 8
mov dword [ebp - 0xb88], 0
cmovae eax, dword [ebp - 0xb98]
xor ecx, ecx
mov byte [ebp - 4], 0x3e
mov word [eax], cx
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xb08], ecx
mov dword [ebp - 0xb04], ecx
mov byte [ebp - 4], 0x40
mov dword [ebp - 0xb04], 7
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0xb18]
cmp dword [ebp - 0xb04], 8
mov dword [ebp - 0xb08], ecx
cmovae eax, dword [ebp - 0xb18]
mov byte [ebp - 4], 0x5a
mov word [eax], cx
push 0x820
push ecx
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 0x5b
push eax
call fcn.004a5940
or ebx, 0xffffffff
mov dword [ebp - 0xbe8], 0
add esp, 0xc
mov dword [ebp - 0x1234], ebx
mov dword [ebp - 0xbe4], 0
mov byte [ebp - 4], 0x5b
mov dword [ebp - 0xbe4], 7
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0xbf8]
cmp dword [ebp - 0xbe4], 8
mov dword [ebp - 0xbe8], 0
cmovae eax, dword [ebp - 0xbf8]
mov byte [ebp - 4], 0x75
xor ecx, ecx
push ecx
mov word [eax], cx
lea ecx, [ebp - 0xbf8]
push 0x4ec100
mov byte [ebp - 4], 0x5b
call fcn.00413f90
lea ecx, [ebx + 2]
mov byte [ebp - 4], 0x76
call fcn.00462890
cmp dword [0x51cad8], 0
jne 0x42541d
lea ecx, [ebx + 2]
call fcn.00462890
test eax, eax
jne 0x425423
mov ecx, 0x51cb38
call fcn.00466570
test eax, eax
jne 0x425423
call fcn.0045b590
lea ecx, [ebx + 2]
call fcn.0044fa70
test eax, eax
jne 0x425423
mov ecx, dword [0x51dba0]
mov eax, ecx
shl eax, 4
sub eax, ecx
shl eax, 2
mov dword [0x517aa0], eax
lea eax, [ecx + ecx]
mov dword [0x517aa4], eax
call fcn.00465df0
mov esi, dword [0x51cadc]
mov byte [ebp - 4], 0x7e
mov byte [ebp - 4], 0x7d
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 0x76
test eax, eax
je 0x42541d
mov byte [ebp - 4], 0x82
mov byte [ebp - 4], 0x81
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 0x76
cmp eax, 1
jb 0x42540f
mov byte [ebp - 4], 0x86
mov ecx, esi
mov byte [ebp - 4], 0x85
mov eax, dword [esi + 0x10]
push 0x4ec0fc
push 1
dec eax
mov byte [ebp - 4], 0x76
push eax
call fcn.0045b510
test eax, eax
je 0x42541d
push 1
push 0x4ec0fc
mov ecx, esi
call fcn.004137d0
inc dword [0x51cad8]
call fcn.00450c20
xor ecx, ecx
call fcn.00462970
call fcn.00451980
push str.Entering_Avast_SFX_stub_guarded_code_section.
push 0x51dc78
call fcn.00414670
push 0xc0
lea eax, [ebp - 0x1030]
mov byte [ebp - 4], 0x89
push 0
push eax
call fcn.004a5940
add esp, 0x14
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x1030]
call fcn.0041a500
push 0x51e708
lea ecx, [ebp - 0x1030]
mov byte [ebp - 4], 0x8a
call fcn.0041a710
test eax, eax
jne 0x425963
push 0x34
push eax
lea eax, [ebp - 0xd88]
mov byte [ebp - 4], 0x8b
push eax
call fcn.004a5940
add esp, 0xc
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0x132c], 0
mov dword [ebp - 0x1328], 0
mov byte [ebp - 4], 0x8c
mov dword [ebp - 0x1328], 7
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0x133c]
cmp dword [ebp - 0x1328], 8
mov dword [ebp - 0x132c], 0
cmovae eax, dword [ebp - 0x133c]
xor ecx, ecx
mov byte [ebp - 4], 0xa6
mov word [eax], cx
lea eax, [ebp - 0x133c]
mov byte [ebp - 4], 0xa7
push eax
lea ecx, [ebp - 0xd88]
call fcn.00429220
mov byte [ebp - 4], 0xaa
cmp dword [ebp - 0x1328], 8
jb 0x425534
mov byte [ebp - 4], 0xaa
mov ecx, dword [ebp - 0x133c]
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0x1328]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x133c]
call fcn.00414120
mov byte [ebp - 4], 0xaa
mov dword [ebp - 0x1328], 7
mov byte [ebp - 4], 0xaa
lea eax, [ebp - 0x133c]
cmp dword [ebp - 0x1328], 8
mov dword [ebp - 0x132c], 0
cmovae eax, dword [ebp - 0x133c]
xor ecx, ecx
mov byte [ebp - 4], 0xc4
mov word [eax], cx
lea eax, [ebp - 0x1030]
push 1
push eax
lea ecx, [ebp - 0xd88]
mov byte [ebp - 4], 0xa9
call fcn.0042a160
push str.is_avg_product
lea ecx, [ebp - 0x141c]
call fcn.00414090
lea eax, [ebp - 0x141c]
mov byte [ebp - 4], 0xc5
push eax
lea ecx, [ebp - 0xd88]
call fcn.0041eaa0
mov byte [ebp - 0x122a], al
mov byte [ebp - 4], 0xc6
cmp dword [ebp - 0x1408], 8
jb 0x4255e0
mov byte [ebp - 4], 0xc6
mov ecx, dword [ebp - 0x141c]
mov byte [ebp - 4], 0xc6
mov eax, dword [ebp - 0x1408]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x141c]
call fcn.00414120
mov byte [ebp - 4], 0xc6
mov dword [ebp - 0x1408], 7
mov byte [ebp - 4], 0xc6
lea eax, [ebp - 0x141c]
cmp dword [ebp - 0x1408], 8
mov dword [ebp - 0x140c], 0
cmovae eax, dword [ebp - 0x141c]
xor ecx, ecx
mov byte [ebp - 4], 0xe0
cmp byte [ebp - 0x122a], cl
mov word [eax], cx
lea ecx, [ebp - 0x1244]
mov byte [ebp - 4], 0xa9
mov dword [ebp - 0x1244], 2
jne 0x42563f
mov dword [ebp - 0x1244], 1
call fcn.00440b90
push str.edition
lea ecx, [ebp - 0x1404]
call fcn.00414090
lea eax, [ebp - 0x1404]
mov byte [ebp - 4], 0xe1
push eax
lea ecx, [ebp - 0xd88]
call fcn.0041eaa0
mov byte [ebp - 0x122a], al
mov byte [ebp - 4], 0xe2
cmp dword [ebp - 0x13f0], 8
jb 0x42569f
mov byte [ebp - 4], 0xe2
mov ecx, dword [ebp - 0x1404]
mov byte [ebp - 4], 0xe2
mov eax, dword [ebp - 0x13f0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1404]
call fcn.00414120
mov byte [ebp - 4], 0xe2
mov dword [ebp - 0x13f0], 7
mov byte [ebp - 4], 0xe2
lea eax, [ebp - 0x1404]
cmp dword [ebp - 0x13f0], 8
mov dword [ebp - 0x13f4], 0
cmovae eax, dword [ebp - 0x1404]
xor ecx, ecx
mov byte [ebp - 4], 0xfc
mov word [eax], cx
mov byte [ebp - 4], 0xa9
cmp byte [ebp - 0x122a], cl
je 0x4257bb
push str.edition
lea ecx, [ebp - 0x13ec]
call fcn.00414090
lea eax, [ebp - 0x13ec]
mov byte [ebp - 4], 0xfd
push eax
lea eax, [ebp - 0x12c4]
push eax
lea ecx, [ebp - 0xd70]
call fcn.0042b280
mov eax, dword [ebp - 0x12c4]
add eax, 0x28
mov dword [ebp - 4], 0x201
mov dword [ebp - 4], 0x1ff
cmp dword [eax + 0x14], 8
jb 0x425734
mov eax, dword [eax]
push eax
mov byte [ebp - 4], 0xfd
call fcn.004b28a4
mov ebx, eax
add esp, 4
mov dword [ebp - 0x1234], ebx
mov dword [ebp - 4], 0x202
cmp dword [ebp - 0x13d8], 8
jb 0x42577b
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x13ec]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x13d8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13ec]
call fcn.00414120
mov byte [ebp - 4], 2
mov dword [ebp - 0x13d8], 7
mov byte [ebp - 4], 2
lea eax, [ebp - 0x13ec]
cmp dword [ebp - 0x13d8], 8
mov dword [ebp - 0x13dc], 0
cmovae eax, dword [ebp - 0x13ec]
mov byte [ebp - 4], 0x1c
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
push str.sub_edition
lea ecx, [ebp - 0x13d4]
call fcn.00414090
lea eax, [ebp - 0x13d4]
mov dword [ebp - 4], 0x21d
push eax
lea ecx, [ebp - 0xd88]
call fcn.0041eaa0
mov byte [ebp - 0x122a], al
mov dword [ebp - 4], 0x21e
cmp dword [ebp - 0x13c0], 8
jb 0x42581c
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x13d4]
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x13c0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13d4]
call fcn.00414120
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x13c0], 7
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x13d4]
cmp dword [ebp - 0x13c0], 8
mov dword [ebp - 0x13c4], 0
cmovae eax, dword [ebp - 0x13d4]
xor ecx, ecx
mov byte [ebp - 4], 0x38
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
cmp byte [ebp - 0x122a], cl
je 0x425952
push str.sub_edition
lea ecx, [ebp - 0x13bc]
call fcn.00414090
lea eax, [ebp - 0x13bc]
mov dword [ebp - 4], 0x239
push eax
lea eax, [ebp - 0x12c4]
push eax
lea ecx, [ebp - 0xd70]
call fcn.0042b280
mov edx, dword [ebp - 0x12c4]
add edx, 0x28
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0x3b
cmp dword [edx + 0x14], 8
jb 0x4258b1
mov edx, dword [edx]
mov byte [ebp - 4], 0x39
cmp word [edx], 0
jne 0x4258bf
xor ecx, ecx
jmp 0x4258d3
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4258c4
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbf8]
call fcn.00413f90
mov dword [ebp - 4], 0x23e
cmp dword [ebp - 0x13a8], 8
jb 0x425912
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x13bc]
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x13a8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13bc]
call fcn.00414120
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x13a8], 7
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x13bc]
cmp dword [ebp - 0x13a8], 8
mov dword [ebp - 0x13ac], 0
cmovae eax, dword [ebp - 0x13bc]
mov byte [ebp - 4], 0x58
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x1a9
lea ecx, [ebp - 0xd88]
mov byte [ebp - 4], 0x8a
call fcn.004290d0
jmp 0x425978
lea ecx, [ebp - 0x1244]
mov dword [ebp - 0x1244], 1
call fcn.00440b90
lea ecx, [ebp - 0x1030]
mov byte [ebp - 4], 0x76
call fcn.0041a600
push 0
lea eax, [ebp - 0x121c]
mov dword [ebp - 0x121c], 0
push eax
push 1
push str.O:BAG:BAD:P_A_CIOI_FA___SY__A_CIOI_FA___BA__A_CIOI_FRFX___BU_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
mov eax, dword [ebp - 0x121c]
push str.._
mov dword [ebp - 0x1224], eax
lea eax, [ebp - 0x8b0]
push 0x410
push eax
mov dword [ebp - 0x1228], 0xc
mov dword [ebp - 0x1220], 0
call fcn.004b7dc0
add esp, 0xc
lea eax, [ebp - 0x8a8]
push 0
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov dword [ebp - 0x12cc], 0
mov dword [ebp - 0x12c8], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12c8], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12dc]
cmp dword [ebp - 0x12c8], 8
mov dword [ebp - 0x12cc], 0
cmovae eax, dword [ebp - 0x12dc]
xor ecx, ecx
mov dword [ebp - 4], 0x272
mov word [eax], cx
lea ecx, [ebp - 0x12dc]
push 1
push 0x4ec0fc
mov dword [ebp - 4], 0x176
call fcn.00413f90
mov dword [ebp - 4], 0x273
call fcn.00440a10
mov byte [ebp - 4], 0x74
cmp dword [eax + 0x14], 8
jb 0x425a7a
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x12dc]
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x1494]
call fcn.00413750
add esp, 4
mov byte [ebp - 4], 0x78
cmp dword [eax + 0x14], 8
jb 0x425a9f
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 0x77
push 0x410
push eax
call fcn.004b2a0c
add esp, 0xc
mov byte [ebp - 4], 0x7b
cmp dword [ebp - 0x1480], 8
jb 0x425ae7
mov byte [ebp - 4], 0x7b
mov ecx, dword [ebp - 0x1494]
mov byte [ebp - 4], 0x7b
mov eax, dword [ebp - 0x1480]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1494]
call fcn.00414120
mov byte [ebp - 4], 0x7b
mov dword [ebp - 0x1480], 7
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x1494]
cmp dword [ebp - 0x1480], 8
mov dword [ebp - 0x1484], 0
cmovae eax, dword [ebp - 0x1494]
xor ecx, ecx
mov byte [ebp - 4], 0x95
mov word [eax], cx
mov dword [ebp - 4], 0x296
cmp dword [ebp - 0x12c8], 8
jb 0x425b52
mov byte [ebp - 4], 0x96
mov ecx, dword [ebp - 0x12dc]
mov byte [ebp - 4], 0x96
mov eax, dword [ebp - 0x12c8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12dc]
call fcn.00414120
mov byte [ebp - 4], 0x96
mov dword [ebp - 0x12c8], 7
mov byte [ebp - 4], 0x96
lea eax, [ebp - 0x12dc]
cmp dword [ebp - 0x12c8], 8
mov dword [ebp - 0x12cc], 0
cmovae eax, dword [ebp - 0x12dc]
xor ecx, ecx
mov byte [ebp - 4], 0xb0
mov word [eax], cx
lea edx, [ebp - 0x1228]
xor eax, eax
mov dword [ebp - 4], 0x176
cmp dword [ebp - 0x121c], eax
lea ecx, [ebp - 0x8b0]
cmove edx, eax
call fcn.00414950
push dword [ebp - 0x121c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0x11c
lea eax, [ebp - 0x1980]
mov dword [ebp - 0x121c], 0
push 0
push eax
call fcn.004a5940
add esp, 0xc
mov dword [ebp - 0x1980], 0x11c
lea eax, [ebp - 0x1980]
push eax
call fcn.0046b4e0
mov esi, eax
mov ecx, eax
call dword [0x4db310]
call esi
cmp dword [ebp - 0x197c], 6
jb 0x425c16
call fcn.0042a6f0
mov esi, eax
mov ecx, esi
call dword [0x4db310]
call esi
cmp ebx, 0xffffffff
jne 0x425cbd
lea ecx, [ebp - 0x1434]
call fcn.0043b050
mov dword [ebp - 4], 0x2b2
cmp dword [eax + 0x14], 8
jb 0x425c39
mov eax, dword [eax]
push str.LogsClear.log
mov edx, eax
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0xbc8]
call fcn.00414700
add esp, 4
mov dword [ebp - 4], 0x2b5
cmp dword [ebp - 0x1420], 8
jb 0x425c84
mov byte [ebp - 4], 0xb5
mov ecx, dword [ebp - 0x1434]
mov byte [ebp - 4], 0xb5
mov eax, dword [ebp - 0x1420]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1434]
call fcn.00414120
mov byte [ebp - 4], 0xb5
mov dword [ebp - 0x1420], 7
mov byte [ebp - 4], 0xb5
lea eax, [ebp - 0x1434]
cmp dword [ebp - 0x1420], 8
mov dword [ebp - 0x1424], 0
cmovae eax, dword [ebp - 0x1434]
mov byte [ebp - 4], 0xcf
jmp 0x425d56
lea ecx, [ebp - 0x144c]
call fcn.0043b050
mov dword [ebp - 4], 0x2d1
cmp dword [eax + 0x14], 8
jb 0x425cd7
mov eax, dword [eax]
push str.LogsSetup.log
mov edx, eax
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0xbc8]
call fcn.00414700
add esp, 4
mov dword [ebp - 4], 0x2d4
cmp dword [ebp - 0x1438], 8
jb 0x425d22
mov byte [ebp - 4], 0xd4
mov ecx, dword [ebp - 0x144c]
mov byte [ebp - 4], 0xd4
mov eax, dword [ebp - 0x1438]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x144c]
call fcn.00414120
mov byte [ebp - 4], 0xd4
mov dword [ebp - 0x1438], 7
mov byte [ebp - 4], 0xd4
lea eax, [ebp - 0x144c]
cmp dword [ebp - 0x1438], 8
mov dword [ebp - 0x143c], 0
cmovae eax, dword [ebp - 0x144c]
mov byte [ebp - 4], 0xee
xor ecx, ecx
mov word [eax], cx
mov eax, 0x5c
push 1
mov dword [ebp - 4], 0x176
mov word [ebp - 0xae8], ax
lea eax, [ebp - 0xae8]
push ecx
push eax
lea ecx, [ebp - 0xbc8]
call fcn.00415750
push eax
push 0
lea eax, [ebp - 0x1464]
push eax
lea ecx, [ebp - 0xbc8]
call fcn.00415410
mov dword [ebp - 4], 0x2f0
cmp dword [eax + 0x14], 8
jb 0x425da7
mov eax, dword [eax]
xor edx, edx
mov byte [ebp - 4], 0xef
mov ecx, eax
call fcn.00414950
mov dword [ebp - 4], 0x2f3
cmp dword [ebp - 0x1450], 8
jb 0x425de9
mov byte [ebp - 4], 0xf3
mov ecx, dword [ebp - 0x1464]
mov dword [ebp - 4], 0x2f3
mov eax, dword [ebp - 0x1450]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1464]
call fcn.00414120
mov dword [ebp - 4], 0x2f3
mov dword [ebp - 0x1450], 7
mov dword [ebp - 4], 0x2f3
lea eax, [ebp - 0x1464]
cmp dword [ebp - 0x1450], 8
mov dword [ebp - 0x1454], 0
cmovae eax, dword [ebp - 0x1464]
xor ecx, ecx
mov dword [ebp - 4], 0x30d
mov word [eax], cx
mov dword [ebp - 4], 0x30e
lea ecx, [ebp - 0xbc8]
cmp dword [ebp - 0xbb4], 8
cmovae ecx, dword [ebp - 0xbc8]
sub esp, 8
mov dword [ebp - 4], 0x176
call fcn.00424440
add esp, 8
call fcn.004242d0
lea ecx, [ebp - 0x1218]
call fcn.004302a0
call fcn.00462f70
mov byte [ebp - 0xae7], al
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [ebp - 0x12e4], 0
mov dword [ebp - 0x12e0], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12e0], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12f4]
cmp dword [ebp - 0x12e0], 8
mov dword [ebp - 0x12e4], 0
cmovae eax, dword [ebp - 0x12f4]
mov dword [ebp - 4], 0x32a
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
cmp word [edx], cx
je 0x425ef1
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x425ee2
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x12f4]
call fcn.00413f90
push 1
lea eax, [ebp - 0x12f4]
mov dword [ebp - 4], 0x32b
push eax
lea ecx, [ebp - 0xb58]
call fcn.0042a160
mov dword [ebp - 4], 0x32c
cmp dword [ebp - 0x12e0], 8
jb 0x425f4b
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x12f4]
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x12e0]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12f4]
call fcn.00414120
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x12e0], 7
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x12f4]
cmp dword [ebp - 0x12e0], 8
mov dword [ebp - 0x12e4], 0
cmovae eax, dword [ebp - 0x12f4]
mov byte [ebp - 4], 0x46
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1260], ecx
mov dword [ebp - 0x125c], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x125c], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x1270]
cmp dword [ebp - 0x125c], 8
mov dword [ebp - 0x1260], ecx
cmovae eax, dword [ebp - 0x1270]
mov dword [ebp - 4], 0x360
mov word [eax], cx
mov eax, 6
mov dword [ebp - 4], 0x176
cmp word [str.silent], cx
cmove eax, ecx
lea ecx, [ebp - 0x1270]
push eax
push str.silent
call fcn.00413f90
mov ebx, 1
mov dword [ebp - 4], 0x361
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 4], 0x362
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x136c], eax
lea eax, [ebp - 0x1270]
mov dword [ebp - 4], 0x361
push eax
lea ecx, [ebp - 0xb40]
call fcn.0041f970
mov esi, eax
mov dword [ebp - 4], 0x36e
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1368], eax
mov byte [ebp - 4], 0x61
cmp esi, dword [ebp - 0x1368]
je 0x4260df
mov dword [ebp - 4], 0x361
lea edx, [esi + 0x10]
mov dword [ebp - 4], 0x379
mov byte [ebp - 4], 0x78
mov eax, dword [edx + 0x10]
mov dword [ebp - 4], 0x37c
mov ecx, dword [ebp - 0x1260]
mov dword [ebp - 0x1244], ecx
mov dword [ebp - 4], 0x380
cmp dword [edx + 0x14], 8
jb 0x426097
mov edx, dword [edx]
mov dword [ebp - 4], 0x383
lea edi, [ebp - 0xb40]
cmp dword [ebp - 0x125c], 8
lea ecx, [ebp - 0x1270]
push edi
cmovae ecx, dword [ebp - 0x1270]
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 0x61
push dword [ebp - 0x1244]
call fcn.0041fe90
add esp, 0x10
mov edi, 0
test eax, eax
js 0x4260df
mov dword [ebp - 0x14d8], esi
jmp 0x4260f6
mov dword [ebp - 4], 0x386
mov esi, dword [ebp - 0xb38]
mov dword [ebp - 0x14d4], esi
mov byte [ebp - 4], 0x61
cmp esi, dword [ebp - 0x136c]
jne 0x42613d
push str.AdminUpgrade
lea ecx, [ebp - 0x13a4]
call fcn.00414090
lea eax, [ebp - 0x13a4]
mov dword [ebp - 4], 0x38e
mov ebx, 3
lea ecx, [ebp - 0xb58]
push eax
mov dword [ebp - 0x1230], ebx
call fcn.0041eaa0
mov byte [ebp - 0x122b], 0
test al, al
je 0x426144
mov byte [ebp - 0x122b], 1
mov dword [ebp - 4], 0x361
test bl, 2
je 0x4261cc
and ebx, 0xfffffffd
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 4], 0x38f
cmp dword [ebp - 0x1390], 8
jb 0x42618f
mov byte [ebp - 4], 0x8f
mov ecx, dword [ebp - 0x13a4]
mov byte [ebp - 4], 0x8f
mov eax, dword [ebp - 0x1390]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x13a4]
call fcn.00414120
mov byte [ebp - 4], 0x8f
mov dword [ebp - 0x1390], 7
mov byte [ebp - 4], 0x8f
lea eax, [ebp - 0x13a4]
cmp dword [ebp - 0x1390], 8
mov dword [ebp - 0x1394], 0
cmovae eax, dword [ebp - 0x13a4]
mov byte [ebp - 4], 0xa9
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0x61
and ebx, 0xfffffffe
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 4], 0x3aa
cmp dword [ebp - 0x125c], 8
jb 0x42620e
mov byte [ebp - 4], 0xaa
mov ecx, dword [ebp - 0x1270]
mov byte [ebp - 4], 0xaa
mov eax, dword [ebp - 0x125c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1270]
call fcn.00414120
mov byte [ebp - 4], 0xaa
mov dword [ebp - 0x125c], 7
mov byte [ebp - 4], 0xaa
lea eax, [ebp - 0x1270]
cmp dword [ebp - 0x125c], 8
mov dword [ebp - 0x1260], 0
cmovae eax, dword [ebp - 0x1270]
mov byte [ebp - 4], 0xc4
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x123c], ebx
mov dword [ebp - 0x1278], ecx
mov dword [ebp - 0x1274], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1274], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x1288]
cmp dword [ebp - 0x1274], 8
mov dword [ebp - 0x1278], ecx
cmovae eax, dword [ebp - 0x1288]
mov dword [ebp - 4], 0x3de
mov word [eax], cx
mov eax, 5
mov dword [ebp - 4], 0x176
cmp word [0x4ed8b0], cx
cmove eax, ecx
lea ecx, [ebp - 0x1288]
push eax
push 0x4ed8b0
call fcn.00413f90
mov dword [ebp - 4], 0x3e0
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1364], eax
lea eax, [ebp - 0x1288]
mov byte [ebp - 4], 0xdf
push eax
lea ecx, [ebp - 0xb40]
call fcn.0041f970
mov esi, eax
mov byte [ebp - 4], 0xec
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1370], eax
mov byte [ebp - 4], 0xdf
cmp esi, dword [ebp - 0x1370]
je 0x42638a
mov byte [ebp - 4], 0xdf
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0xf7
mov byte [ebp - 4], 0xf6
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0xfa
mov ecx, dword [ebp - 0x1278]
mov dword [ebp - 0x1244], ecx
mov dword [ebp - 4], 0x3fe
cmp dword [edx + 0x14], 8
jb 0x42633f
mov edx, dword [edx]
mov dword [ebp - 4], 0x401
lea edi, [ebp - 0xb40]
cmp dword [ebp - 0x1274], 8
lea ecx, [ebp - 0x1288]
push edi
cmovae ecx, dword [ebp - 0x1288]
push 0xffffffffffffffff
push eax
mov dword [ebp - 4], 0x3df
push dword [ebp - 0x1244]
call fcn.0041fe90
add esp, 0x10
mov edi, 0
test eax, eax
js 0x42638a
mov dword [ebp - 0x14c0], esi
jmp 0x4263a4
mov dword [ebp - 4], 0x404
mov esi, dword [ebp - 0xb38]
mov dword [ebp - 0x14d0], esi
mov dword [ebp - 4], 0x3df
cmp esi, dword [ebp - 0x1364]
setne byte [ebp - 0x12c0]
mov dword [ebp - 4], 0x40c
cmp dword [ebp - 0x1274], 8
jb 0x4263e3
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1288]
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x1274]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x1288]
call fcn.00414120
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1274], 7
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x1288]
cmp dword [ebp - 0x1274], 8
mov dword [ebp - 0x1278], 0
cmovae eax, dword [ebp - 0x1288]
mov byte [ebp - 4], 0x26
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12ac], ecx
mov dword [ebp - 0x12a8], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x12a8], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12bc]
cmp dword [ebp - 0x12a8], 8
mov dword [ebp - 0x12ac], ecx
cmovae eax, dword [ebp - 0x12bc]
mov dword [ebp - 4], 0x440
mov word [eax], cx
mov eax, 6
mov dword [ebp - 4], 0x176
cmp word [str.cookie], cx
cmove eax, ecx
lea ecx, [ebp - 0x12bc]
push eax
push str.cookie
call fcn.00413f90
lea eax, [ebp - 0x12bc]
mov dword [ebp - 4], 0x441
push eax
lea eax, [ebp - 0x1248]
push eax
lea ecx, [ebp - 0xb40]
call fcn.0042b280
mov eax, dword [ebp - 0x1248]
add eax, 0x28
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xb98]
cmp ecx, eax
je 0x4264d7
push 0xffffffffffffffff
push 0
push eax
mov byte [ebp - 4], 0x41
call fcn.00413c40
mov dword [ebp - 4], 0x466
cmp dword [ebp - 0x12a8], 8
jb 0x426509
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0x12bc]
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0x12a8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12bc]
call fcn.00414120
mov byte [ebp - 4], 0x66
mov dword [ebp - 0x12a8], 7
mov byte [ebp - 4], 0x66
lea eax, [ebp - 0x12bc]
cmp dword [ebp - 0x12a8], 8
mov dword [ebp - 0x12ac], 0
cmovae eax, dword [ebp - 0x12bc]
mov byte [ebp - 4], 0x80
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1290], ecx
mov dword [ebp - 0x128c], ecx
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x128c], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x12a0]
cmp dword [ebp - 0x128c], 8
mov dword [ebp - 0x1290], ecx
cmovae eax, dword [ebp - 0x12a0]
mov dword [ebp - 4], 0x49a
mov word [eax], cx
mov eax, 0xb
mov dword [ebp - 4], 0x176
cmp word [str.ga_clientid], cx
cmove eax, ecx
lea ecx, [ebp - 0x12a0]
push eax
push str.ga_clientid
call fcn.00413f90
mov dword [ebp - 4], 0x49c
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1358], eax
lea eax, [ebp - 0x12a0]
mov byte [ebp - 4], 0x9b
push eax
lea ecx, [ebp - 0xb40]
call fcn.0041f970
mov esi, eax
mov byte [ebp - 4], 0xa8
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1374], eax
mov byte [ebp - 4], 0x9b
cmp esi, dword [ebp - 0x1374]
je 0x426672
mov byte [ebp - 4], 0x9b
lea edx, [esi + 0x10]
mov byte [ebp - 4], 0xb3
mov byte [ebp - 4], 0xb2
mov eax, dword [edx + 0x10]
mov byte [ebp - 4], 0xb6
mov ecx, dword [ebp - 0x1290]
mov dword [ebp - 0x1244], ecx
mov byte [ebp - 4], 0xba
cmp dword [edx + 0x14], 8
jb 0x42662d
mov edx, dword [edx]
mov byte [ebp - 4], 0xbd
lea edi, [ebp - 0xb40]
cmp dword [ebp - 0x128c], 8
lea ecx, [ebp - 0x12a0]
push edi
cmovae ecx, dword [ebp - 0x12a0]
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 0x9b
push dword [ebp - 0x1244]
call fcn.0041fe90
add esp, 0x10
mov edi, 0
test eax, eax
js 0x426672
mov dword [ebp - 0x14cc], esi
jmp 0x426686
mov byte [ebp - 4], 0xc0
mov esi, dword [ebp - 0xb38]
mov dword [ebp - 0x14c8], esi
mov byte [ebp - 4], 0x9b
cmp esi, dword [ebp - 0x1358]
je 0x426760
push str.ga_clientid
lea ecx, [ebp - 0x138c]
call fcn.00414090
lea eax, [ebp - 0x138c]
mov byte [ebp - 4], 0xc8
push eax
lea eax, [ebp - 0x1248]
or ebx, 4
push eax
lea ecx, [ebp - 0xb40]
mov dword [ebp - 0x1230], ebx
call fcn.0042b280
mov ecx, dword [ebp - 0x1248]
mov dword [ebp - 4], 0x4c8
add ecx, 0x28
mov dword [ebp - 4], 0x4c8
mov dword [ebp - 0x12fc], 0
mov dword [ebp - 0x12f8], 0
mov dword [ebp - 4], 0x4c8
mov dword [ebp - 0x12f8], 7
mov dword [ebp - 4], 0x4c8
lea eax, [ebp - 0x130c]
cmp dword [ebp - 0x12f8], 8
mov dword [ebp - 0x12fc], 0
cmovae eax, dword [ebp - 0x130c]
xor edx, edx
mov dword [ebp - 4], 0x4e8
push 0xffffffffffffffff
push edx
push ecx
mov word [eax], dx
lea ecx, [ebp - 0x130c]
mov byte [ebp - 4], 0xc8
call fcn.00413c40
mov dword [ebp - 4], 0x4e9
lea esi, [ebp - 0x130c]
mov ebx, dword [ebp - 0x123c]
or ebx, 0xc
jmp 0x426796
lea eax, [ebp - 0x1850]
push eax
call fcn.004750c0
add esp, 4
lea edx, [ebp - 0x1250]
lea ecx, [ebp - 0x147c]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1250], xmm0
call fcn.00424250
mov esi, eax
mov dword [ebp - 4], 0x4ea
or ebx, 0x10
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 0x1244], ebx
lea eax, [ebp - 0xb18]
mov dword [ebp - 4], 0x4eb
cmp eax, esi
je 0x42683b
mov byte [ebp - 4], 0xeb
cmp dword [ebp - 0xb04], 8
jb 0x4267e6
mov byte [ebp - 4], 0xeb
mov ecx, dword [ebp - 0xb18]
mov byte [ebp - 4], 0xeb
mov eax, dword [ebp - 0xb04]
inc eax
push eax
push ecx
lea ecx, [ebp - 0xb18]
call fcn.00414120
mov dword [ebp - 4], 0x4eb
mov dword [ebp - 0xb04], 7
mov dword [ebp - 4], 0x4eb
lea eax, [ebp - 0xb18]
cmp dword [ebp - 0xb04], 8
mov dword [ebp - 0xb08], 0
cmovae eax, dword [ebp - 0xb18]
xor ecx, ecx
mov dword [ebp - 4], 0x505
mov word [eax], cx
push esi
lea ecx, [ebp - 0xb18]
mov dword [ebp - 4], 0x4eb
call fcn.00413a50
mov dword [ebp - 4], 0x4e9
test bl, 0x10
je 0x4268cc
and ebx, 0xffffffef
mov dword [ebp - 0x1244], ebx
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 4], 0x52f
cmp dword [ebp - 0x1468], 8
jb 0x42688c
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x147c]
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x1468]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x147c]
call fcn.00414120
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x1468], 7
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x147c]
cmp dword [ebp - 0x1468], 8
mov dword [ebp - 0x146c], 0
cmovae eax, dword [ebp - 0x147c]
mov byte [ebp - 4], 0x49
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x4e9
mov dword [ebp - 4], 0x4c8
test bl, 8
je 0x42695d
and ebx, 0xfffffff7
mov dword [ebp - 0x1244], ebx
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 4], 0x54a
cmp dword [ebp - 0x12f8], 8
jb 0x42691d
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x130c]
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x12f8]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x130c]
call fcn.00414120
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x12f8], 7
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x130c]
cmp dword [ebp - 0x12f8], 8
mov dword [ebp - 0x12fc], 0
cmovae eax, dword [ebp - 0x130c]
mov byte [ebp - 4], 0x64
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x4c8
mov dword [ebp - 4], 0x49b
test bl, 4
je 0x4269ee
and ebx, 0xfffffffb
mov dword [ebp - 0x1244], ebx
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 4], 0x565
cmp dword [ebp - 0x1378], 8
jb 0x4269ae
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x138c]
mov byte [ebp - 4], 0x65
mov eax, dword [ebp - 0x1378]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x138c]
call fcn.00414120
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x1378], 7
mov byte [ebp - 4], 0x65
lea eax, [ebp - 0x138c]
cmp dword [ebp - 0x1378], 8
mov dword [ebp - 0x137c], 0
cmovae eax, dword [ebp - 0x138c]
mov byte [ebp - 4], 0x7f
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 4], 0x49b
mov dword [ebp - 4], 0x580
cmp dword [ebp - 0x128c], 8
jb 0x426a20
mov byte [ebp - 4], 0x80
mov ecx, dword [ebp - 0x12a0]
mov byte [ebp - 4], 0x80
mov eax, dword [ebp - 0x128c]
inc eax
push eax
push ecx
lea ecx, [ebp - 0x12a0]
call fcn.00414120
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x128c], 7
mov byte [ebp - 4], 0x80
lea eax, [ebp - 0x12a0]
cmp dword [ebp - 0x128c], 8
mov dword [ebp - 0x1290], 0
cmovae eax, dword [ebp - 0x12a0]
push 0x51e708
mov byte [ebp - 4], 0x9a
xor ecx, ecx
push str.Running_SFX__s
mov word [eax], cx
push 0x51dc78
mov dword [ebp - 4], 0x176
call fcn.00414670
add esp, 0xc
lea eax, [ebp - 0xae4]
lea edx, [ebp - 0xc34]
lea ecx, [ebp - 0xc4c]
push eax
sub esp, 8
lea eax, [ebp - 0xbe0]
push eax
call fcn.00430050
add esp, 0x10
mov byte [ebp - 0x122a], al
test al, al
je 0x426ada
mov dword [ebp - 4], 0x59b
lea eax, [ebp - 0x1158]
cmp dword [ebp - 0x1144], 8
cmovae eax, dword [ebp - 0x1158]
push eax
lea eax, [ebp - 0x90]
mov dword [ebp - 4], 0x176
push 0x40
push eax
call fcn.004b7dc0
add esp, 0xc
cmp word [ebp - 0x90], 0
jne 0x426cf9
mov dword [ebp - 0x1344], 0
mov dword [ebp - 0x1340], 0
mov dword [ebp - 4], 0x176
mov dword [ebp - 0x1340], 7
mov dword [ebp - 4], 0x176
lea eax, [ebp - 0x1354]
cmp dword [ebp - 0x1340], 8
mov dword [ebp - 0x1344], 0
cmovae eax, dword [ebp - 0x1354]
xor ecx, ecx
mov dword [ebp - 4], 0x5b7
mov word [eax], cx
mov eax, 4
mov dword [ebp - 4], 0x176
cmp word [str.guid], cx
cmove eax, ecx
lea ecx, [ebp - 0x1354]
push eax
push str.guid
call fcn.00413f90
or ebx, 0x20
mov dword [ebp - 4], 0x5b8
mov dword [ebp - 0x1244], ebx
mov dword [ebp - 0x1230], ebx
mov dword [ebp - 4], 0x5b9
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1360], eax
lea eax, [ebp - 0x1354]
mov dword [ebp - 4], 0x5b8
push eax
lea ecx, [ebp - 0xb40]
call fcn.0041f970
mov esi, eax
mov dword [ebp - 4], 0x5c5
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x135c], eax
mov byte [ebp - 4], 0xb8
cmp esi, dword [ebp - 0x135c]
je 0x426c4e
mov dword [ebp - 4], 0x5b8
lea edx, [esi + 0x10]
mov dword [ebp - 4], 0x5d0
mov byte [ebp - 4], 0xcf
mov eax, dword [edx + 0x10]
mov dword [ebp - 4], 0x5d3
mov ecx, dword [ebp - 0x1344]
mov dword [ebp - 0x123c], ecx
mov dword [ebp - 4], 0x5d7
cmp dword [edx + 0x14], 8
jb 0x426c06
mov edx, dword [edx]
mov dword [ebp - 4], 0x5da
lea edi, [ebp - 0xb40]
cmp dword [ebp - 0x1340], 8
lea ecx, [ebp - 0x1354]
push edi
cmovae ecx, dword [ebp - 0x1354]
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 0xb8
push dword [ebp - 0x123c]
call fcn.0041fe90
add esp, 0x10
mov edi, 0
test eax, eax
js 0x426c4e
mov dword [ebp - 0x14c4], esi
jmp 0x426c65
mov dword [ebp - 4], 0x5dd
mov esi, dword [ebp - 0xb38]
mov dword [ebp - 0x14b0], esi
mov byte [ebp - 4], 0xb8
cmp esi, dword [ebp - 0x1360]
je 0x426cf9
mov dword [ebp - 0x149c], 0
mov dword [ebp - 0x1498], 0
mov dword [ebp - 4], 0x5b8
lea ecx, [ebp - 0x14ac]
push 0
mov dword [ebp - 0x1498], 7
call fcn.004141b0
push str.guid
lea ecx, [ebp - 0x14ac]
call fcn.00413ac0
lea eax, [ebp - 0x14ac]
mov dword [ebp - 4], 0x5fc
or ebx, 0x40
lea ecx, [ebp - 0xb58]
push eax
mov dword [ebp - 0x1244], ebx
mov dword [ebp - 0x1230], ebx
call fcn.004291f0
mov dword [ebp - 4], 0x5fe
mov byte [ebp - 4], 0xfd
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0xfc
mov byte [ebp - 0x1229], 1
cmp eax, 0x24
je 0x426d00
mov byte [ebp - 0x1229], 0
mov dword [ebp - 4], 0x5b8
test bl, 0x40
je 0x426d26
and ebx, 0xffffffbf
lea ecx, [ebp - 0x14ac]
mov dword [ebp - 0x1244], ebx
mov dword [ebp - 0x1230], ebx
call fcn.00414250
mov dword [ebp - 4], 0x176
test bl, 0x20
je 0x426d4c
and ebx, 0xffffffdf
lea ecx, [ebp - 0x1354]
mov dword [ebp - 0x1244], ebx
mov dword [ebp - 0x1230], ebx
call fcn.00414250
cmp byte [ebp - 0x1229], 0
je 0x426da4
push str.guid
lea ecx, [ebp - 0x15fc]
call fcn.00414090
lea eax, [ebp - 0x15fc]
mov dword [ebp - 4], 0x601
push eax
lea ecx, [ebp - 0xb58]
call fcn.004291f0
mov ecx, eax
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042a760
lea ecx, [ebp - 0x15fc]
mov dword [ebp - 4], 0x176
call fcn.00414250
cmp word [ebp - 0x90], 0
jne 0x426e05
lea eax, [ebp - 0x1860]
push eax
call fcn.004750c0
add esp, 4
lea edx, [ebp - 0x15e4]
lea ecx, [ebp - 0x16ec]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x15e4], xmm0
call fcn.00424250
mov ecx, eax
mov dword [ebp - 4], 0x602
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0042a760
lea ecx, [ebp - 0x16ec]
mov dword [ebp - 4], 0x176
call fcn.00414250
call fcn.00440490
cmp eax, 2
jne 0x426f50
cmp dword [ebp - 0x1234], 0xffffffff
jne 0x426f5d
lea ecx, [ebp - 0xcac]
call fcn.00413b10
push 0x100
lea eax, [ebp - 0xcac]
mov dword [ebp - 4], 0x603
push eax
push 0x4ede2c
mov edx, str.SoftwareAVGAv
mov ecx, 0x80000002
call fcn.00472c60
add esp, 0xc
test al, al
jne 0x426ece
push 0x100
lea eax, [ebp - 0xcac]
mov edx, str.SoftwareAVGAVG2015
push eax
push str.AvgDir
mov ecx, 0x80000002
call fcn.00472c60
add esp, 0xc
test al, al
jne 0x426ece
push 0x100
lea eax, [ebp - 0xcac]
mov edx, str.SoftwareAVGAVG2014
push eax
push str.AvgDir
mov ecx, 0x80000002
call fcn.00472c60
add esp, 0xc
test al, al
jne 0x426ece
push 0x100
lea eax, [ebp - 0xcac]
mov edx, str.SoftwareAVGAVG2013
push eax
push str.AvgDir
mov ecx, 0x80000002
call fcn.00472c60
add esp, 0xc
test al, al
je 0x426f39
lea ecx, [ebp - 0xcac]
call fcn.004140f0
mov ecx, eax
call fcn.004146d0
test al, al
je 0x426f39
cmp byte [ebp - 0x122b], 0
jne 0x426f1c
push str.We_have_detected_that_you_have_installed_AVG_protection_2016_or_older._Its_not_possible_to_uninstall_such_product_by_this_remover._r_n_r_nIf_you_really_want_to_remove_it_you_must_download_appropriate_remover_from_following_link_r_n_r_nhttp:__www.avg.com_ww_en_utilities__r_n_r_nor_contact_our_support_team.
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.0041ce00
add esp, 0xc
lea eax, [ebp - 0x8b0]
push 0x10
push str.Compatibility
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.avgClear.exe_was_used_for_uninstalling_AVG_protection_2016_or_older._Exiting...
push 0x51dc78
call fcn.00414690
add esp, 8
lea ecx, [ebp - 0xcac]
jmp 0x428617
lea ecx, [ebp - 0xcac]
mov dword [ebp - 4], 0x176
call fcn.00414250
jmp 0x4271da
cmp dword [ebp - 0x1234], 0xffffffff
je 0x4271da
cmp byte [ebp - 0x122a], 0
jne 0x4271da
cmp byte [ebp - 0x1078], 0
jne 0x4271da
lea ecx, [ebp - 0xc94]
call fcn.00413b10
push 0x4ec06c
push ecx
mov dword [ebp - 4], 0x604
call fcn.004407d0
add esp, 4
lea ecx, [ebp - 0x1734]
mov edx, eax
call fcn.00413640
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004140f0
mov ecx, eax
call fcn.0041da90
lea ecx, [ebp - 0x1734]
mov byte [ebp - 4], 4
mov bl, al
call fcn.00414250
test bl, bl
je 0x427010
push 0x4ec06c
push ecx
call fcn.004407d0
add esp, 4
lea ecx, [ebp - 0x174c]
mov edx, eax
call fcn.00413640
add esp, 4
push eax
lea ecx, [ebp - 0xc94]
mov byte [ebp - 4], 6
call fcn.004154b0
lea ecx, [ebp - 0x174c]
mov byte [ebp - 4], 4
call fcn.00414250
jmp 0x4270bc
push str.FsBlk
push ecx
call fcn.004407d0
add esp, 4
lea ecx, [ebp - 0x1764]
mov edx, eax
call fcn.00413640
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.004140f0
mov ecx, eax
call fcn.0041da90
lea ecx, [ebp - 0x1764]
mov byte [ebp - 4], 4
mov bl, al
call fcn.00414250
test bl, bl
je 0x427094
push str.FsBlk
push ecx
call fcn.004407d0
add esp, 4
lea ecx, [ebp - 0x177c]
mov edx, eax
call fcn.00413640
add esp, 4
push eax
lea ecx, [ebp - 0xc94]
mov byte [ebp - 4], 8
call fcn.004154b0
lea ecx, [ebp - 0x177c]
mov byte [ebp - 4], 4
call fcn.00414250
jmp 0x4270bc
call fcn.00440ad0
mov ecx, eax
call fcn.004140f0
mov ecx, eax
call fcn.0041da90
test al, al
je 0x4270bc
call fcn.00440ad0
push eax
lea ecx, [ebp - 0xc94]
call fcn.00417c60
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0xc84]
mov byte [ebp - 4], 4
test eax, eax
je 0x4271c2
call fcn.00440950
push eax
lea ecx, [ebp - 0xd54]
call fcn.00417fd0
cmp byte [ebp - 0x122b], 0
mov byte [ebp - 4], 0xd
mov edi, dword [0x4ff520]
jne 0x42717e
call fcn.00440490
cmp eax, 2
mov edx, str.avastClear.exe
mov ecx, str.avgClear.exe
cmovne ecx, edx
push ecx
lea ecx, [ebp - 0xc94]
call fcn.004140f0
push eax
lea ecx, [ebp - 0xd54]
call fcn.004140f0
push eax
push str.The_installer_has_detected_corrupted__s_installation_on_this_computer__service__s_is_running___thus_this_installer_cannot_continue._Use_the__s_utility_to_fix_the_problem_or_contact_our_support_team.
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.0041ce00
add esp, 0x18
lea ecx, [ebp - 0xd54]
call fcn.004140f0
push eax
push str.Corrupted__s_detected.
lea eax, [ebp - 0xab0]
push 0x100
push eax
call fcn.0041ce00
add esp, 0x10
lea eax, [ebp - 0xab0]
push 0x10
push eax
lea eax, [ebp - 0x8b0]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xc94]
call fcn.004140f0
push eax
lea ecx, [ebp - 0xd54]
call fcn.004140f0
push eax
push str._s_was_not_detected_but_service__s_is_running._There_is_a_corrupted_installation__thus_this_installer_cannot_continue.
push 0x51dc78
call fcn.004242b0
add esp, 0x10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd54]
call fcn.00414250
lea ecx, [ebp - 0xc94]
jmp 0x428617
lea ecx, [ebp - 0xc94]
mov dword [ebp - 4], 0x176
call fcn.00414250
mov ebx, dword [ebp - 0x1244]
xor ecx, ecx
call fcn.0041d250
push eax
lea ecx, [ebp - 0xf70]
call fcn.0041a710
mov edi, eax
test edi, edi
je 0x427254
cmp byte [ebp - 0x122b], 0
jne 0x427234
push edi
xor ecx, ecx
call fcn.0041d250
push eax
push str.The_installer_cannot_open_the_SFX_archive__s.__code_0x_x__r_n_r_nIts_probably_caused_by_corrupted_installer_thus_please_try_to_download_it_again.
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.0041ce00
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push str.Installation_failed
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push edi
xor ecx, ecx
call fcn.0041d250
push eax
push str.Cannot_open_the_SFX_archive__s__code_0x_x_
push 0x51dc78
call fcn.004146b0
add esp, 0x10
jmp 0x428623
cmp byte [ebp - 0xae7], 0
je 0x42726a
cmp byte [ebp - 0x123d], 0
je 0x42726a
mov al, 1
jmp 0x42726c
xor al, al
push eax
lea ecx, [ebp - 0xb00]
call fcn.0041d2c0
add esp, 4
lea ecx, [ebp - 0xb00]
call fcn.004140f0
push eax
mov edx, str._TMPPATH_
lea ecx, [ebp - 0xf70]
call fcn.0041d810
add esp, 4
lea eax, [ebp - 0xf70]
lea ecx, [ebp - 0xb58]
push 0
push eax
call fcn.0042a160
mov dword [ebp - 4], 0x60e
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 4], 0x176
test eax, eax
jne 0x427306
push str.cookie
lea ecx, [ebp - 0x1614]
call fcn.00414090
lea eax, [ebp - 0x1614]
mov dword [ebp - 4], 0x612
or ebx, 0x80
lea ecx, [ebp - 0xb58]
push eax
mov dword [ebp - 0x1230], ebx
call fcn.0041eaa0
mov byte [ebp - 0x1229], 1
test al, al
jne 0x42730d
mov byte [ebp - 0x1229], 0
mov dword [ebp - 4], 0x176
test bl, bl
jns 0x42732f
and ebx, 0xffffff7f
lea ecx, [ebp - 0x1614]
mov dword [ebp - 0x1230], ebx
call fcn.00414250
cmp byte [ebp - 0x1229], 0
je 0x42737f
push str.cookie
lea ecx, [ebp - 0x162c]
call fcn.00414090
lea eax, [ebp - 0x162c]
mov dword [ebp - 4], 0x613
push eax
lea ecx, [ebp - 0xb58]
call fcn.004291f0
push eax
lea ecx, [ebp - 0xb98]
call fcn.00417c60
lea ecx, [ebp - 0x162c]
mov dword [ebp - 4], 0x176
call fcn.00414250
push ecx
lea ecx, [ebp - 0xc04]
call fcn.00415030
push 0x4ec0fc
lea ecx, [ebp - 0x165c]
call fcn.00414090
xor ecx, ecx
mov dword [ebp - 4], 0x614
call fcn.0041d250
push eax
lea ecx, [ebp - 0x1644]
call fcn.00414090
sub esp, 0xc
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x165c]
lea edx, [ebp - 0x1644]
lea ecx, [ebp - 0xc04]
push eax
call fcn.00415f30
add esp, 0x10
lea ecx, [ebp - 0x1644]
mov byte [ebp - 4], 0x17
call fcn.00414250
lea ecx, [ebp - 0x165c]
mov byte [ebp - 4], 0x18
call fcn.00414250
lea ecx, [ebp - 0xc04]
call fcn.00415370
cmp eax, 2
jb 0x42758c
call fcn.004292c0
push eax
lea ecx, [ebp - 0xd24]
call fcn.00417fd0
sub esp, 8
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xd24]
call fcn.00415450
mov esi, eax
cmp esi, 0xffffffff
je 0x42757d
push esi
push 0x4ee6dc
lea ecx, [ebp - 0xd24]
call fcn.00415460
cmp eax, 0xffffffff
jne 0x427467
push esi
push 0x4ec384
lea ecx, [ebp - 0xd24]
call fcn.00415460
cmp eax, 0xffffffff
je 0x42757d
sub eax, esi
lea ecx, [ebp - 0xd24]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0xd3c]
push eax
call fcn.00415410
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0xd2c]
mov byte [ebp - 4], 0x1a
cmp eax, 3
jne 0x42756e
push 1
lea ecx, [ebp - 0xd3c]
call fcn.004182c0
cmp word [eax], 0x30
jb 0x42756e
push 1
lea ecx, [ebp - 0xd3c]
call fcn.004182c0
cmp word [eax], 0x39
ja 0x42756e
lea eax, [ebp - 0xd3c]
mov edx, str.mmm_ava_ppc_999_
push eax
lea ecx, [ebp - 0x17c4]
call fcn.0042a5e0
add esp, 4
push 0x4ee6e0
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x17ac]
call fcn.00413750
add esp, 4
push eax
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x20
call fcn.004154b0
lea ecx, [ebp - 0x17ac]
mov byte [ebp - 4], 0x1f
call fcn.00414250
lea ecx, [ebp - 0x17c4]
mov byte [ebp - 4], 0x1a
call fcn.00414250
push str.cookie
lea ecx, [ebp - 0x1674]
call fcn.00414090
lea eax, [ebp - 0xb98]
mov byte [ebp - 4], 0x21
push eax
push ecx
lea eax, [ebp - 0x1674]
push eax
lea ecx, [ebp - 0xb58]
call fcn.004291f0
add esp, 4
mov ecx, eax
call fcn.00417c60
lea ecx, [ebp - 0x1674]
mov byte [ebp - 4], 0x1a
call fcn.00414250
lea ecx, [ebp - 0xd3c]
mov byte [ebp - 4], 0x19
call fcn.00414250
lea ecx, [ebp - 0xd24]
mov byte [ebp - 4], 0x18
call fcn.00414250
lea ecx, [ebp - 0xc04]
mov dword [ebp - 4], 0x176
call fcn.00415390
lea ecx, [ebp - 0xcf4]
call fcn.00413b10
mov esi, dword [ebp - 0x1234]
mov dword [ebp - 4], 0x622
cmp esi, 0xffffffff
jne 0x4275f1
push str._Clear
push ecx
call fcn.00440950
add esp, 4
lea ecx, [ebp - 0x17dc]
mov edx, eax
call fcn.00413640
add esp, 4
push eax
lea ecx, [ebp - 0xcf4]
mov byte [ebp - 4], 0x23
call fcn.004154b0
lea ecx, [ebp - 0x17dc]
jmp 0x427623
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
lea ecx, [ebp - 0x17f4]
push eax
push 1
mov edx, esi
call fcn.00424b80
add esp, 8
push eax
lea ecx, [ebp - 0xcf4]
mov byte [ebp - 4], 0x24
call fcn.004154b0
lea ecx, [ebp - 0x17f4]
mov byte [ebp - 4], 0x22
call fcn.00414250
push ecx
lea ecx, [ebp - 0xde0]
call fcn.00428e80
lea eax, [ebp - 0xcf4]
push eax
push dword [ebp - 0x1254]
lea ecx, [ebp - 0xde0]
call fcn.00423260
lea eax, [ebp - 0xb74]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0xe50]
call fcn.00418bb0
lea eax, [ebp - 0xde0]
push eax
lea ecx, [ebp - 0xe50]
call fcn.00418bb0
cmp byte [ebp - 0x122b], 0
jne 0x42768c
lea ecx, [ebp - 0xde0]
call fcn.00423b20
lea ecx, [ebp - 0xb00]
call fcn.004140f0
push eax
lea ecx, [ebp - 0x168c]
call fcn.00414090
lea eax, [ebp - 0x168c]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0xf70]
call fcn.0041c090
lea ecx, [ebp - 0x168c]
mov byte [ebp - 4], 0x25
mov edi, eax
call fcn.00414250
test edi, edi
je 0x427708
mov edx, edi
lea ecx, [ebp - 0x180c]
call fcn.0042f710
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.004140f0
push eax
push str.The_installer_cannot_extract_servers.def_with_error__s_
push 0x51dc78
call fcn.004146b0
add esp, 0xc
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x180c]
call fcn.00414250
cmp esi, 0xffffffff
je 0x427ae0
call fcn.00424d50
test al, al
je 0x4277a6
push 0x4ecf34
lea ecx, [ebp - 0x16bc]
call fcn.00414090
lea eax, [ebp - 0x16bc]
mov byte [ebp - 4], 0x28
or ebx, 0x100
lea ecx, [ebp - 0xb58]
push eax
mov dword [ebp - 0x1230], ebx
call fcn.0041eaa0
test al, al
je 0x4277a6
push 0x4ecf34
lea ecx, [ebp - 0x16a4]
call fcn.00414090
lea eax, [ebp - 0x16a4]
mov dword [ebp - 4], 0x629
or ebx, 0x200
lea ecx, [ebp - 0xb58]
push eax
mov dword [ebp - 0x1230], ebx
call fcn.004291f0
mov dword [ebp - 4], 0x62b
mov byte [ebp - 4], 0x2a
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x29
mov byte [ebp - 0x1229], 1
test eax, eax
je 0x4277ad
mov byte [ebp - 0x1229], 0
mov dword [ebp - 4], 0x628
test ebx, 0x200
je 0x4277d3
and ebx, 0xfffffdff
lea ecx, [ebp - 0x16a4]
mov dword [ebp - 0x1230], ebx
call fcn.00414250
mov dword [ebp - 4], 0x625
test ebx, 0x100
je 0x4277ed
lea ecx, [ebp - 0x16bc]
call fcn.00414250
cmp byte [ebp - 0x1229], 0
je 0x42783b
push 0x4ecf34
lea ecx, [ebp - 0x155c]
call fcn.00414090
push 0x4ed89c
push ecx
lea eax, [ebp - 0x155c]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xb58]
call fcn.004291f0
add esp, 4
mov ecx, eax
call fcn.00413ac0
lea ecx, [ebp - 0x155c]
mov byte [ebp - 4], 0x25
call fcn.00414250
sub esp, 0x18
lea eax, [ebp - 0xb98]
mov ecx, esp
mov dword [ebp - 0x123c], esp
push eax
call fcn.00417fd0
xor ecx, ecx
mov byte [ebp - 4], 0x2f
call fcn.0041d250
push eax
lea eax, [ebp - 0xb58]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x1824]
call fcn.0041dd20
add esp, 0x20
lea ecx, [ebp - 0x1824]
call fcn.00414250
lea ecx, [ebp - 0xb00]
call fcn.004140f0
push eax
lea ecx, [ebp - 0xf70]
call fcn.0041bb90
test eax, eax
je 0x4278ba
lea ecx, [ebp - 0xb00]
call fcn.004140f0
push eax
lea ecx, [ebp - 0xf70]
call fcn.0041ba90
xor esi, esi
nop dword [eax]
push dword [esi + 0x517b00]
lea ecx, [ebp - 0xb00]
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xb70]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xb70]
call fcn.004140f0
mov ecx, eax
call fcn.004146d0
test al, al
je 0x42793f
push dword [esi + 0x517b04]
lea ecx, [ebp - 0x15d4]
call fcn.00414090
lea eax, [ebp - 0xb70]
mov byte [ebp - 4], 0x30
push eax
push ecx
lea eax, [ebp - 0x15d4]
push eax
lea ecx, [ebp - 0xb58]
call fcn.004291f0
add esp, 4
mov ecx, eax
call fcn.00417c60
lea ecx, [ebp - 0x15d4]
mov byte [ebp - 4], 0x25
call fcn.00414250
add esi, 8
cmp esi, 0x18
jb 0x4278c0
push str.aswOfferTool.exe
lea ecx, [ebp - 0xb00]
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xb70]
call fcn.00414700
push 0x7d1
lea ecx, [ebp - 0xb70]
call fcn.004140f0
mov ebx, dword [ebp - 0x1254]
mov edx, eax
mov ecx, ebx
call fcn.00414f50
add esp, 8
lea ecx, [ebp - 0xb00]
push str.GuiCust.dll
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xb70]
call fcn.00414700
push 0x7d0
lea ecx, [ebp - 0xb70]
call fcn.004140f0
mov edx, eax
mov ecx, ebx
call fcn.00414f50
add esp, 8
lea ecx, [ebp - 0xb00]
push str.CustomInstallation.ini
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xb70]
call fcn.00414700
push 0x7d2
lea ecx, [ebp - 0xb70]
call fcn.004140f0
mov edx, eax
mov ecx, ebx
call fcn.00414f50
add esp, 4
lea ecx, [ebp - 0xeb0]
call fcn.00428e90
sub esp, 0x18
lea edx, [ebp - 0xb00]
mov ecx, esp
mov dword [ebp - 0x123c], esp
push str._servers.def
call fcn.00413640
add esp, 4
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xeb0]
mov byte [ebp - 4], 0x25
call fcn.004245c0
sub esp, 0x18
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0xb98]
mov dword [ebp - 0x123c], esp
mov ecx, esp
push eax
call fcn.00417fd0
sub esp, 0x18
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0xb18]
mov dword [ebp - 0x1254], esp
mov ecx, esp
push eax
call fcn.00417fd0
sub esp, 0x18
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x90]
mov dword [ebp - 0x1244], esp
mov ecx, esp
push eax
call fcn.00414090
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0xb58]
push eax
lea ecx, [ebp - 0xeb0]
mov byte [ebp - 4], 0x32
call fcn.0042d490
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x123c], esp
push str.stub
call fcn.00414090
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xeb0]
mov byte [ebp - 4], 0x32
call fcn.0042db20
lea ecx, [ebp - 0xeb0]
mov byte [ebp - 4], 0x25
call fcn.004246c0
mov esi, dword [ebp - 0x1234]
lea eax, [ebp - 0xe50]
push eax
lea ecx, [ebp - 0xb00]
call fcn.004140f0
push eax
lea ecx, [ebp - 0xf70]
call fcn.0041c1a0
mov edi, eax
test edi, edi
je 0x427b71
cmp byte [ebp - 0x122b], 0
jne 0x427b4d
push edi
lea ecx, [ebp - 0xb00]
call fcn.004140f0
push eax
push str.The_installer_cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.0041ce00
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push 0x4edc74
push eax
push dword [ebp - 0xd98]
call dword [sym.imp.USER32.dll_MessageBoxW]
push edi
lea ecx, [ebp - 0xb00]
call fcn.004140f0
push eax
push str.Cannot_extract_VPX_files_to__s__code_0x_x_
push 0x51dc78
call fcn.004146b0
add esp, 0x10
jmp 0x428602
push str.instup.exe
lea ecx, [ebp - 0xb00]
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xbb0]
call fcn.00414700
add esp, 4
cmp byte [ebp - 0x122a], 0
je 0x4283ac
cmp esi, 0xffffffff
je 0x427bbf
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, esi
call fcn.00424b30
movzx eax, al
push eax
call fcn.004249c0
add esp, 0xc
lea ecx, [ebp - 0xc1c]
call fcn.00413b10
push fcn.00414250
push fcn.00413b10
push 2
push 0x18
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x37
push eax
call fcn.0048c19f
lea ecx, [ebp - 0xc64]
mov byte [ebp - 4], 0x38
call fcn.00413b10
push str.instup.exe
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x39
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xae0]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xb00]
push str.Instup.dll
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xac8]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xbe0]
push str.instup.exe
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xc1c]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xc1c]
call fcn.004140f0
mov ecx, eax
call fcn.004146d0
test al, al
je 0x427e59
cmp dword [ebp - 0xae4], 0x7cb
jbe 0x427e59
lea esi, [ebp - 0xae0]
xor ebx, ebx
mov dword [ebp - 0xae4], esi
test edi, edi
jne 0x428376
cmp dword [ebp - 0x1238], edi
jne 0x428376
push ecx
lea ecx, [ebp - 0xe14]
call fcn.004287e0
lea ecx, [ebp - 0x16d4]
call fcn.00413b10
push eax
lea ecx, [ebp - 0xe14]
mov byte [ebp - 4], 0x3a
call fcn.00429220
lea ecx, [ebp - 0x16d4]
mov byte [ebp - 4], 0x3c
call fcn.00414250
push str.copy_sfx
lea ecx, [ebp - 0x1574]
call fcn.00414090
push esi
push ecx
lea eax, [ebp - 0x1574]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0xe14]
call fcn.004291f0
add esp, 4
mov ecx, eax
call fcn.00417c60
lea ecx, [ebp - 0x1574]
mov byte [ebp - 4], 0x3c
call fcn.00414250
push str.wait
lea ecx, [ebp - 0x158c]
call fcn.00414090
push 0x4ec100
push ecx
lea eax, [ebp - 0x158c]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0xe14]
call fcn.004291f0
add esp, 4
mov ecx, eax
call fcn.00413ac0
lea ecx, [ebp - 0x158c]
mov byte [ebp - 4], 0x3c
call fcn.00414250
lea eax, [ebp - 0x183c]
push eax
lea ecx, [ebp - 0xe14]
call fcn.0042a480
push edi
push edi
lea ecx, [ebp - 0x1238]
mov byte [ebp - 4], 0x3f
push ecx
mov ecx, eax
call fcn.004140f0
lea ecx, [ebp - 0xc1c]
mov esi, eax
call fcn.004140f0
mov edx, esi
mov ecx, eax
call fcn.0041d4e0
add esp, 0xc
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x183c]
mov edi, eax
call fcn.00414250
lea ecx, [ebp - 0xe14]
mov byte [ebp - 4], 0x39
call fcn.004290d0
mov esi, dword [ebp - 0xae4]
inc ebx
add esi, 0x18
mov dword [ebp - 0xae4], esi
cmp ebx, 2
jb 0x427c93
test edi, edi
jne 0x428376
cmp dword [ebp - 0x1238], edi
jne 0x428376
push 0x4ed800
lea ecx, [ebp - 0xbe0]
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xc64]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xc64]
push str.instup.exe
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xc64]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xc64]
call fcn.00424ae0
test al, al
je 0x428376
lea eax, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0xbb0]
call fcn.00417c60
jmp 0x428376
push str.setup.ovr
lea ecx, [ebp - 0xbe0]
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xc1c]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xc1c]
call fcn.004140f0
mov ecx, eax
call fcn.004146d0
test al, al
je 0x42837c
lea ecx, [ebp - 0xcc4]
call fcn.00413b10
push str._copysfx
lea ecx, [ebp - 0x1544]
mov byte [ebp - 4], 0x40
call fcn.00414090
push 0x4ee8d0
mov edx, eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x152c]
call fcn.00413750
add esp, 4
lea ecx, [ebp - 0xae0]
mov byte [ebp - 4], 0x42
push ecx
mov edx, eax
lea ecx, [ebp - 0x14f0]
call fcn.004135f0
add esp, 4
push 0x4ec0f8
mov edx, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1514]
call fcn.00413750
add esp, 4
push eax
lea ecx, [ebp - 0xcc4]
mov byte [ebp - 4], 0x44
call fcn.004154b0
lea ecx, [ebp - 0x1514]
mov byte [ebp - 4], 0x43
call fcn.00414250
lea ecx, [ebp - 0x14f0]
mov byte [ebp - 4], 0x42
call fcn.00414250
lea ecx, [ebp - 0x152c]
mov byte [ebp - 4], 0x41
call fcn.00414250
lea ecx, [ebp - 0x1544]
mov byte [ebp - 4], 0x40
call fcn.00414250
push 0
push 0
lea eax, [ebp - 0x1238]
push eax
lea ecx, [ebp - 0xcc4]
call fcn.004140f0
lea ecx, [ebp - 0xc1c]
mov esi, eax
call fcn.004140f0
mov edx, esi
mov ecx, eax
call fcn.0041d4e0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4280d2
mov ecx, dword [ebp - 0x1238]
cmp ecx, 0x2000000a
jne 0x4280ae
mov eax, dword [0x4ff524]
push 0xbb8
mov dword [ebp - 0x1238], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xcc4]
mov byte [ebp - 4], 0x39
call fcn.00414250
lea ecx, [ebp - 0xcc4]
call fcn.00413b10
push str._copysfx
lea ecx, [ebp - 0x1544]
mov byte [ebp - 4], 0x40
call fcn.00414090
push 0x4ee8d0
mov edx, eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x152c]
call fcn.00413750
add esp, 4
lea ecx, [ebp - 0xae0]
mov byte [ebp - 4], 0x42
push ecx
mov edx, eax
lea ecx, [ebp - 0x14f0]
call fcn.004135f0
add esp, 4
push 0x4ec0f8
mov edx, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1514]
call fcn.00413750
add esp, 4
push eax
lea ecx, [ebp - 0xcc4]
mov byte [ebp - 4], 0x44
call fcn.004154b0
lea ecx, [ebp - 0x1514]
mov byte [ebp - 4], 0x43
call fcn.00414250
lea ecx, [ebp - 0x14f0]
mov byte [ebp - 4], 0x42
call fcn.00414250
lea ecx, [ebp - 0x152c]
mov byte [ebp - 4], 0x41
call fcn.00414250
lea ecx, [ebp - 0x1544]
mov byte [ebp - 4], 0x40
call fcn.00414250
push 0
push 0
lea eax, [ebp - 0x1238]
push eax
lea ecx, [ebp - 0xcc4]
call fcn.004140f0
lea ecx, [ebp - 0xc1c]
mov esi, eax
call fcn.004140f0
mov edx, esi
mov ecx, eax
call fcn.0041d4e0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x427f84
jmp 0x4280d2
cmp ecx, 0x20000000
je 0x4280c8
mov dword [ebp - 0x1238], 5
cmp ecx, 0x20000001
jne 0x4280d2
mov dword [ebp - 0x1238], 0
lea ecx, [ebp - 0xcc4]
mov byte [ebp - 4], 0x39
call fcn.00414250
test esi, esi
jne 0x428376
cmp dword [ebp - 0x1238], esi
jne 0x428376
push 0x4ed800
lea ecx, [ebp - 0xbe0]
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xc64]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xc64]
push str.avast.setup
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xbb0]
call fcn.00414700
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov edx, eax
mov dword [ebp - 0x123c], edx
test edx, edx
je 0x428376
push ecx
lea ecx, [ebp - 0xb80]
call fcn.00415030
call fcn.004153f0
mov eax, ecx
mov byte [ebp - 4], 0x45
push eax
mov ecx, edx
call fcn.00423db0
add esp, 4
test al, al
je 0x42835b
mov byte [ebp - 4], 0x46
mov esi, dword [ebp - 0xb80]
mov dword [ebp - 0xae4], esi
mov byte [ebp - 4], 0x4c
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x1258], eax
mov byte [ebp - 4], 0x45
cmp esi, dword [ebp - 0x1258]
je 0x42835b
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xc7c]
call fcn.00417fd0
lea eax, [ebp - 0x14b4]
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0xc7c]
call fcn.00417bf0
mov ebx, eax
lea ecx, [ebp - 0xc7c]
lea eax, [ebp - 0x14bc]
push eax
call fcn.00417c10
mov edi, eax
lea ecx, [ebp - 0xc7c]
lea eax, [ebp - 0x14b8]
push eax
call fcn.00417bf0
push dword [ebx]
lea ecx, [ebp - 0x1254]
push dword [edi]
push dword [eax]
call fcn.0042a850
add esp, 0xc
lea ecx, [ebp - 0xc7c]
push 0
push str.path
call fcn.00415460
test eax, eax
je 0x428271
lea ecx, [ebp - 0xc7c]
mov byte [ebp - 4], 0x45
call fcn.00414250
push ecx
lea eax, [ebp - 0x1244]
push eax
lea ecx, [ebp - 0xae4]
call fcn.00424070
mov byte [ebp - 4], 0x4c
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x1258], eax
mov byte [ebp - 4], 0x45
mov esi, dword [ebp - 0xae4]
cmp esi, dword [ebp - 0x1258]
jne 0x4281b0
jmp 0x42835b
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xc7c]
mov eax, dword [ebp - 0xc6c]
dec eax
mov byte [ebp - 4], 0x52
push eax
call fcn.004182c0
cmp word [eax], 0x3b
je 0x4282c2
push 0x4ee910
mov edx, esi
lea ecx, [ebp - 0x1794]
call fcn.00413640
add esp, 4
push eax
mov ecx, esi
mov byte [ebp - 4], 0x57
call fcn.004154b0
lea ecx, [ebp - 0x1794]
mov byte [ebp - 4], 0x52
call fcn.00414250
lea eax, [ebp - 0xb00]
mov edx, esi
push eax
lea ecx, [ebp - 0x171c]
call fcn.0042a770
add esp, 4
push 0x4ee910
mov edx, eax
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x1704]
call fcn.00413750
add esp, 4
push eax
mov ecx, esi
mov byte [ebp - 4], 0x59
call fcn.004154b0
lea ecx, [ebp - 0x1704]
mov byte [ebp - 4], 0x58
call fcn.00414250
lea ecx, [ebp - 0x171c]
mov byte [ebp - 4], 0x52
call fcn.00414250
lea edx, [ebp - 0xb80]
lea ecx, [ebp - 0x14fc]
call fcn.00423ed0
push eax
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 0x5a
call fcn.00424090
lea ecx, [ebp - 0x14fc]
mov byte [ebp - 4], 0x5b
call fcn.0041c720
lea ecx, [ebp - 0xc7c]
mov byte [ebp - 4], 0x45
call fcn.00414250
push dword [ebp - 0x123c]
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x39
call fcn.00415390
mov esi, dword [ebp - 0x1234]
lea ecx, [ebp - 0xc64]
mov byte [ebp - 4], 0x38
call fcn.00414250
push fcn.00414250
push 2
push 0x18
lea eax, [ebp - 0xae0]
mov byte [ebp - 4], 0x37
push eax
call fcn.0048c208
lea ecx, [ebp - 0xc1c]
jmp 0x4283f3
cmp esi, 0xffffffff
je 0x428448
push str.guid
lea ecx, [ebp - 0x15a4]
call fcn.00414090
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x5c
push eax
push ecx
lea eax, [ebp - 0x15a4]
push eax
lea ecx, [ebp - 0xb58]
call fcn.004291f0
add esp, 4
mov ecx, eax
call fcn.00413ac0
lea ecx, [ebp - 0x15a4]
mov byte [ebp - 4], 0x25
call fcn.00414250
cmp esi, 0xffffffff
je 0x428448
push str.ga_clientid
lea ecx, [ebp - 0x15bc]
call fcn.00414090
lea eax, [ebp - 0xb18]
mov byte [ebp - 4], 0x5d
push eax
push ecx
lea eax, [ebp - 0x15bc]
push eax
lea ecx, [ebp - 0xb58]
call fcn.004291f0
add esp, 4
mov ecx, eax
call fcn.00417c60
lea ecx, [ebp - 0x15bc]
mov byte [ebp - 4], 0x25
call fcn.00414250
lea ecx, [ebp - 0xbb0]
call fcn.004140f0
push eax
push str.Starting_installer_updater_executable__s
push 0x51dc78
call fcn.00414670
add esp, 0xc
lea eax, [ebp - 0xd0c]
lea ecx, [ebp - 0xb58]
push eax
call fcn.0042a480
mov ebx, dword [ebp - 0x12a4]
mov byte [ebp - 4], 0x5e
test ebx, ebx
je 0x4284bd
mov ecx, ebx
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428490
sub ecx, edx
sar ecx, 1
je 0x4284bd
push 0x4ee970
lea ecx, [ebp - 0xd0c]
call fcn.004138f0
push ebx
lea ecx, [ebp - 0xd0c]
call fcn.004138f0
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0xb24]
mov eax, dword [ebp - 0xb20]
mov byte [ebp - 4], 0x5e
cmp ecx, eax
jne 0x4284d9
xor eax, eax
jmp 0x4284e3
mov byte [ebp - 4], 0x5e
mov eax, dword [ebp - 0xb24]
push eax
xor ecx, ecx
lea eax, [ebp - 0xde0]
cmp dword [ebp - 0xd98], ecx
cmove eax, ecx
lea ecx, [ebp - 0xd0c]
push eax
lea eax, [ebp - 0x1238]
push eax
call fcn.004140f0
lea ecx, [ebp - 0xbb0]
mov esi, eax
call fcn.004140f0
mov edx, esi
mov ecx, eax
call fcn.0041d4e0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x42858e
cmp byte [ebp - 0x122b], 0
jne 0x428570
push edi
lea ecx, [ebp - 0xbb0]
call fcn.004140f0
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
lea eax, [ebp - 0x8b0]
push 0x410
push eax
call fcn.0041ce00
add esp, 0x14
lea eax, [ebp - 0x8b0]
push 0x10
push 0x4edc74
push eax
push dword [ebp - 0xd98]
call dword [sym.imp.USER32.dll_MessageBoxW]
push edi
lea ecx, [ebp - 0xbb0]
call fcn.004140f0
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
push 0x51dc78
call fcn.004146b0
jmp 0x4285f0
mov ecx, dword [ebp - 0x1234]
mov edi, dword [ebp - 0x1238]
cmp ecx, 0xffffffff
je 0x4285d4
call fcn.00424b00
test al, al
je 0x4285d4
call fcn.00424b60
test al, al
jne 0x4285d4
test edi, edi
je 0x4285d4
cmp edi, dword [0x4ff520]
je 0x4285d4
push str.Installation_failed__creating_a_hardlink_of_the_SFX_on_the_users_desktop.
push 0x51dc78
call fcn.0041a480
add esp, 8
call fcn.0041db10
push edi
lea ecx, [ebp - 0xbb0]
call fcn.004140f0
push eax
push str.Installer_updater_executable__s_finished__process_return_code_0x_x_
push 0x51dc78
call fcn.00414670
add esp, 0x10
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xd0c]
call fcn.00414250
lea ecx, [ebp - 0xde0]
mov byte [ebp - 4], 0x22
call fcn.004233d0
lea ecx, [ebp - 0xcf4]
mov dword [ebp - 4], 0x176
call fcn.00414250
push str.Reboot.txt
lea ecx, [ebp - 0xb00]
call fcn.004140f0
mov edx, eax
lea ecx, [ebp - 0xb70]
call fcn.00414700
add esp, 4
lea ecx, [ebp - 0xb70]
call fcn.004140f0
mov ecx, eax
call fcn.004146d0
push ecx
push dword [ebp - 0x12c0]
lea ecx, [ebp - 0xb00]
mov bl, al
call fcn.004140f0
mov edx, 0x4eeb24
mov ecx, eax
call fcn.00414cc0
call fcn.00462dd0
call fcn.00450de0
xor ecx, ecx
call fcn.00450ad0
push 0
push 0
push 0
push ecx
push 0
push 0
push 0
push 0
xor edx, edx
xor ecx, ecx
call fcn.00467fe0
add esp, 0x28
xor ecx, ecx
call fcn.00462890
test bl, bl
je 0x4286b1
call fcn.0041d960
push edi
push str.Leaving_Avast_SFX_stub_guarded_code_section__return_code_0x_x_
push 0x51dc78
call fcn.00414670
add esp, 0xc
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xbf8]
call fcn.00414250
lea ecx, [ebp - 0xb18]
mov byte [ebp - 4], 0x3f
call fcn.00414250
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x23
call fcn.00414250
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x22
call fcn.00428a70
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x669
call fcn.0041c720
lea ecx, [ebp - 0xbc8]
mov dword [ebp - 4], 0x103
call fcn.00414250
lea ecx, [ebp - 0xe50]
mov dword [ebp - 4], 0xff
call fcn.00418b40
lea ecx, [ebp - 0xf70]
mov byte [ebp - 4], 0xe2
call fcn.0041a600
lea ecx, [ebp - 0xb58]
mov byte [ebp - 4], 0xc3
call fcn.004290d0
lea ecx, [ebp - 0xbe0]
mov byte [ebp - 4], 0xa7
call fcn.00414250
lea ecx, [ebp - 0xc34]
mov byte [ebp - 4], 0x8b
call fcn.00414250
lea ecx, [ebp - 0xc4c]
mov byte [ebp - 4], 0x6f
call fcn.00414250
lea ecx, [ebp - 0xcdc]
mov byte [ebp - 4], 0x53
call fcn.00414250
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x37
call fcn.00414250
lea ecx, [ebp - 0xb70]
mov byte [ebp - 4], 0x1b
call fcn.00414250
lea ecx, [ebp - 0xbb0]
mov dword [ebp - 4], 0xffffffff
call fcn.00414250
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048bc9e
mov esp, ebp
pop ebp
ret 8