Function at 0x41b230
Capabilities:
Accept command line arguments
Check if file exists
Encode data using base64
Get common file path
Get file attributes
Identify system language via api
Parse pe header
Query environment variable

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e2713
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x1304
call fcn.004a4490
mov eax, dword [0x521104]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebx + 8]
xor edi, edi
mov dword [ebp - 0x1230], edi
xorps xmm0, xmm0
mov dword [ebp - 0x1244], eax
xor eax, eax
movups xmmword [ebp - 0xbb0], xmm0
mov dword [ebp - 0x1224], edi
mov dword [ebp - 0x1238], eax
mov dword [ebp - 0xba0], eax
mov dword [ebp - 0xb9c], 7
mov word [ebp - 0xbb0], ax
mov dword [ebp - 4], eax
movups xmmword [ebp - 0xb50], xmm0
mov dword [ebp - 0xb40], eax
mov dword [ebp - 0xb3c], 7
mov word [ebp - 0xb50], ax
movups xmmword [ebp - 0xaf0], xmm0
mov dword [ebp - 0xae0], eax
mov dword [ebp - 0xadc], 7
mov word [ebp - 0xaf0], ax
movups xmmword [ebp - 0xea0], xmm0
mov dword [ebp - 0xe90], eax
mov dword [ebp - 0xe8c], 7
mov word [ebp - 0xea0], ax
movups xmmword [ebp - 0xe58], xmm0
mov dword [ebp - 0xe48], eax
mov dword [ebp - 0xe44], 7
mov word [ebp - 0xe58], ax
movups xmmword [ebp - 0xe70], xmm0
mov dword [ebp - 0xe60], eax
mov dword [ebp - 0xe5c], 7
mov word [ebp - 0xe70], ax
movups xmmword [ebp - 0xc24], xmm0
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc10], 7
mov word [ebp - 0xc24], ax
push 0x34
push eax
lea eax, [ebp - 0xc0c]
push eax
call fcn.004a6890
xorps xmm0, xmm0
mov byte [ebp - 0xbf4], 0
add esp, 0xc
mov dword [ebp - 0xbe0], edi
movups xmmword [ebp - 0xbf0], xmm0
mov dword [ebp - 0xbdc], edi
push 0xc0
lea eax, [ebp - 0xf60]
push edi
push eax
call fcn.004a6890
add esp, 0xc
lea ecx, [ebp - 0xf60]
call fcn.0040fd10
push 0x74
lea eax, [ebp - 0xdac]
mov dword [ebp - method.ProgressAnimator.virtual_0], 0x503140
push edi
push eax
call fcn.004a6890
add esp, 0xc
mov dword [ebp - fcn.0040e860], vtable.ProgressCallback.0
mov dword [ebp - 0xd8c], edi
mov dword [ebp - 0xd88], edi
mov dword [ebp - 0xd84], edi
xorps xmm0, xmm0
mov dword [ebp - 0xd68], edi
movups xmmword [ebp - 0xd78], xmm0
mov dword [ebp - 0xd64], 7
xor eax, eax
mov word [ebp - 0xd78], ax
movups xmmword [ebp - 0xd60], xmm0
mov dword [ebp - 0xd50], eax
mov dword [ebp - 0xd4c], 7
mov word [ebp - 0xd60], ax
mov byte [ebp - 4], 0xb
push 0x38
mov dword [ebp - 0xd48], eax
mov dword [ebp - 0xd40], eax
mov dword [ebp - 0xd3c], eax
call fcn.004a38e1
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0xd40], eax
lea eax, [ebp - 0xda8]
mov byte [ebp - 4], 0xc
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push ecx
push 1
sub esp, 8
call fcn.00472d10
mov ecx, dword [ebp - 0xd88]
add esp, 0x10
cmp dword [ebp - 0xd8c], ecx
mov dword [ebp - 0xd90], eax
cmovne ecx, dword [ebp - 0xd8c]
xor eax, eax
mov dword [ebp - 0xd88], ecx
lea ecx, [ebp - 0xd48]
mov byte [ebp - 0xd44], 0
xchg dword [ecx], eax
lea eax, [ebp - 0x1274]
mov byte [ebp - 0xd7c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1268], 0x64
push eax
lea ecx, [ebp - 0xd40]
movlpd qword [ebp - 0x1260], xmm0
mov dword [ebp - 0x1264], edi
mov byte [ebp - 0x1270], 1
mov dword [ebp - 0x1258], edi
mov dword [ebp - 0x1274], edi
call fcn.0040f2e0
movups xmm0, xmmword [ebp - 0x1270]
lea ecx, [ebp - 0xd40]
mov dword [ebp - 0x1228], 1
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x1260]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0x1228]
push eax
call fcn.0040f2e0
movups xmm0, xmmword [ebp - 0x1270]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x1260]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0xda8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0xda8]
mov dword [ebp - 0xd80], edi
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xorps xmm0, xmm0
mov dword [ebp - 0x1274], 0xffffffff
xor eax, eax
mov dword [ebp - 0xcac], edi
movups xmmword [ebp - 0xcbc], xmm0
mov dword [ebp - 0xca8], 7
mov word [ebp - 0xcbc], ax
mov byte [ebp - 0x1204], al
movq qword [ebp - 0xbbc], xmm0
mov dword [ebp - 0xbb4], eax
mov dword [ebp - 0x1248], eax
mov dword [ebp - 0x1280], eax
mov dword [ebp - 0xbbc], eax
mov dword [ebp - 0xbb8], eax
mov dword [ebp - 0xbb4], eax
lea ecx, [ebp - 0x1200]
call fcn.0041fc00
push 0x80
lea eax, [ebp - 0xa0]
push edi
push eax
call fcn.004a6890
xorps xmm0, xmm0
mov dword [ebp - 0xc2c], edi
xor eax, eax
mov dword [ebp - 0xc28], 7
movups xmmword [ebp - 0xc3c], xmm0
add esp, 0xc
mov word [ebp - 0xc3c], ax
movups xmmword [ebp - 0xc88], xmm0
mov dword [ebp - 0xc78], eax
mov dword [ebp - 0xc74], 7
mov word [ebp - 0xc88], ax
movups xmmword [ebp - 0xca4], xmm0
mov dword [ebp - 0xc94], eax
mov dword [ebp - 0xc90], 7
mov word [ebp - 0xca4], ax
push 0x81e
push eax
mov word [ebp - 0xac8], ax
lea eax, [ebp - 0xac6]
push eax
call fcn.004a6890
or eax, 0xffffffff
mov dword [ebp - 0xcc4], edi
mov dword [ebp - 0x1278], eax
xorps xmm0, xmm0
xor al, al
mov dword [ebp - 0xcc0], 7
mov dword [ebp - 0x124c], eax
add esp, 0xc
mov byte [ebp - 0x1231], al
xor eax, eax
movups xmmword [ebp - 0xcd4], xmm0
mov word [ebp - 0xcd4], ax
mov edi, 1
mov byte [ebp - 4], 0x14
mov ecx, edi
call fcn.0046aaf0
sub esp, 8
mov ecx, edi
call fcn.0047b470
add esp, 8
call fcn.0047b6c0
xor ecx, ecx
call fcn.0046aca0
call fcn.0047c0e0
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x521bbc]
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b1c0
xorps xmm0, xmm0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xb10], edx
mov dword [ebp - 0xb0c], 0xfd
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040b690
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41b73d
push str.Entering_SFX_stub_guarded_code_section.
lea eax, [ebp - 0xb20]
push eax
push 2
call fcn.0040fc70
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1228], ecx
test ecx, ecx
je 0x41b796
or edi, 0xffffffff
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41b791
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1228]
call esi
mov eax, edi
mov edi, dword [ebp - 0x1228]
lock xadd dword [edi + 8], eax
jne 0x41b791
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, edi
call esi
mov edi, 1
push 1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0xc0c]
call fcn.004203f0
push 6
push str.silent
lea ecx, [ebp - 0xc0c]
call fcn.00416160
test eax, eax
je 0x41b806
call fcn.004141d0
sub esp, 8
mov esi, eax
mov ecx, esp
push str.silent
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
push esi
push ecx
mov edx, str.stub_loading
mov ecx, eax
call fcn.00421520
mov ecx, dword [ebp - 0x1204]
add esp, 8
test al, al
movzx ecx, cl
cmove ecx, edi
mov dword [ebp - 0x1204], ecx
push 0xc
push str.AdminUpgrade
lea ecx, [ebp - 0xc0c]
call fcn.00416160
mov ecx, dword [ebp - 0x1204]
test eax, eax
movzx ecx, cl
cmovne ecx, edi
push 5
mov dword [ebp - 0x1250], ecx
mov byte [ebp - 0x1279], cl
lea ecx, [ebp - 0xc0c]
push 0x5015e4
call fcn.00416160
test eax, eax
mov dword [ebp - 0x1228], 0
setne al
xor ecx, ecx
mov byte [ebp - 0x123d], al
call fcn.0048ebc0
test al, al
je 0x41b9bf
lea ecx, [ebp - 0x1228]
call fcn.0041b150
test al, al
je 0x41b9bf
cmp dword [ebp - 0x1228], 0x3000
jae 0x41b9bf
cmp byte [ebp - 0x1250], 0
jne 0x41b8a8
push 0x10
push str.Installation_failed
push str.We_are_sorry_but_the_installer_must_be_run_at_high_integrity_level__n_nTip:_Run_it_under_an_Administrator_account_or_use_a_different_browser_to_download_the_installer.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 0x10
mov dword [ebp - 0xb30], 0x116
mov eax, esp
mov dword [ebp - 0xb2c], 0x19
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea ecx, [ebp - 0x1268]
call fcn.00421540
lea ecx, [ebp - 0xcd4]
call fcn.0040a450
lea ecx, [ebp - 0xca4]
call fcn.0040a450
lea ecx, [ebp - 0xc88]
call fcn.0040a450
lea ecx, [ebp - 0xc3c]
call fcn.0040a450
lea ecx, [ebp - 0x1200]
call fcn.0041fe50
lea ecx, [ebp - 0xbbc]
call fcn.0040bcf0
lea ecx, [ebp - 0xcbc]
call fcn.0040a450
lea ecx, [ebp - 0xdac]
call fcn.0040e810
lea ecx, [ebp - 0xf60]
call fcn.0040fdd0
lea ecx, [ebp - 0xc0c]
call fcn.0041fe20
lea ecx, [ebp - 0xc24]
call fcn.0040a450
lea ecx, [ebp - 0xe70]
call fcn.0040a450
lea ecx, [ebp - 0xe58]
call fcn.0040a450
lea ecx, [ebp - 0xea0]
call fcn.0040a450
lea ecx, [ebp - 0xaf0]
call fcn.0040a450
lea ecx, [ebp - 0xb50]
call fcn.0040a450
lea ecx, [ebp - 0xbb0]
call fcn.0040a450
mov eax, 0x7c
jmp 0x41fb46
call fcn.0048ea50
cmp eax, 5
jne 0x41ba17
call fcn.004141d0
mov esi, eax
lea ecx, [ebp - 0xb08]
mov eax, dword [ebp - 0x1244]
push eax
call fcn.0040a400
push esi
mov byte [ebp - 4], 0x16
mov edi, 1
push ecx
mov edx, str._arm64
mov dword [ebp - 0x1224], edi
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1230], edi
call fcn.00421520
add esp, 8
mov byte [ebp - 0x121d], 1
test al, al
je 0x41ba1e
mov byte [ebp - 0x121d], 0
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x1224]
test al, 1
je 0x41ba49
and eax, 0xfffffffe
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1230], eax
call fcn.0040a450
cmp byte [ebp - 0x121d], 0
je 0x41bb8a
cmp byte [ebp - 0x1250], 0
jne 0x41ba73
push 0x10
push str.Installation_failed
push str.We_are_sorry_but_the_Avast_Antivirus_installer_cannot_run_on_arm64_devices._n_nTip:_Check_our_website_if_there_is_a_supported_version.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 0x10
mov dword [ebp - 0xb30], 0x11f
mov eax, esp
mov dword [ebp - 0xb2c], 0x19
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea ecx, [ebp - 0x1268]
call fcn.004215f0
lea ecx, [ebp - 0xcd4]
call fcn.0040a450
lea ecx, [ebp - 0xca4]
call fcn.0040a450
lea ecx, [ebp - 0xc88]
call fcn.0040a450
lea ecx, [ebp - 0xc3c]
call fcn.0040a450
lea ecx, [ebp - 0x1200]
call fcn.0041fe50
lea ecx, [ebp - 0xbbc]
call fcn.0040bcf0
lea ecx, [ebp - 0xcbc]
call fcn.0040a450
lea ecx, [ebp - 0xdac]
call fcn.0040e810
lea ecx, [ebp - 0xf60]
call fcn.0040fdd0
lea ecx, [ebp - 0xc0c]
call fcn.0041fe20
lea ecx, [ebp - 0xc24]
call fcn.0040a450
lea ecx, [ebp - 0xe70]
call fcn.0040a450
lea ecx, [ebp - 0xe58]
call fcn.0040a450
lea ecx, [ebp - 0xea0]
call fcn.0040a450
lea ecx, [ebp - 0xaf0]
call fcn.0040a450
lea ecx, [ebp - 0xb50]
call fcn.0040a450
lea ecx, [ebp - 0xbb0]
call fcn.0040a450
mov eax, 0xc1
jmp 0x41fb46
call fcn.0048eb40
test al, al
je 0x41bb9c
push ecx
call fcn.00455d50
add esp, 4
push 0xc0
lea eax, [ebp - 0x160]
push 0
push eax
call fcn.004a6890
add esp, 0xc
lea ecx, [ebp - 0x160]
call fcn.0040fd10
xor ecx, ecx
mov byte [ebp - 4], 0x17
call fcn.00414270
push eax
lea ecx, [ebp - 0x160]
call fcn.0040fe70
test eax, eax
jne 0x41bd1d
push 0x34
push eax
lea eax, [ebp - 0xde0]
push eax
call fcn.004a6890
add esp, 0xc
lea ecx, [ebp - 0xde0]
call fcn.0041fbc0
push 0
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x18
call fcn.0040a4f0
push eax
lea ecx, [ebp - 0xde0]
call fcn.004203f0
sub esp, 8
mov ecx, esp
push 0x500c0c
call fcn.00413180
lea ecx, [ebp - 0xde0]
call fcn.00416020
test al, al
je 0x41bc64
sub esp, 8
mov ecx, esp
push 0x500c0c
call fcn.00413180
lea ecx, [ebp - 0xde0]
call fcn.00420910
mov ecx, eax
call fcn.0040a4f0
push eax
call fcn.004b5f17
add esp, 4
mov dword [ebp - 0x1278], eax
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413180
lea ecx, [ebp - 0xde0]
call fcn.00416020
test al, al
je 0x41bcaf
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413180
lea ecx, [ebp - 0xde0]
call fcn.00420910
mov ecx, eax
call fcn.0040a4f0
push eax
lea ecx, [ebp - 0xcd4]
call fcn.0040a1a0
sub esp, 8
mov ecx, esp
push 0x500c04
call fcn.00413180
lea ecx, [ebp - 0xde0]
call fcn.00416020
test al, al
je 0x41bd12
sub esp, 8
mov ecx, esp
push 0x500c04
call fcn.00413180
lea ecx, [ebp - 0xde0]
call fcn.00420910
mov edx, str.clear
mov ecx, eax
call fcn.004166e0
mov ecx, dword [ebp - 0x124c]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x124c], ecx
mov byte [ebp - 0x1231], cl
lea ecx, [ebp - 0xde0]
call fcn.0041fe20
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x14
call fcn.0040fdd0
push 0
lea eax, [ebp - 0x1204]
mov dword [ebp - 0x1204], 0
push eax
push 1
push str.O:BAG:BAD:P_A_CIOI_FA___SY__A_CIOI_FA___BA__A_CIOI_FRFX___BU_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
mov eax, dword [ebp - 0x1204]
lea ecx, [ebp - 0xac8]
mov edx, str.._
mov dword [ebp - 0x1218], 0xc
mov dword [ebp - 0x1214], eax
mov dword [ebp - 0x1210], 0
call fcn.004216a0
push 0
push 0x23
lea eax, [ebp - 0xac0]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.00451870
mov ecx, eax
call fcn.0040a4f0
push 0x4ffc78
lea ecx, [ebp - 0xb08]
mov esi, eax
call fcn.0040a400
push esi
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1268]
call fcn.00409d70
add esp, 4
mov ecx, eax
call fcn.0040a4f0
mov edx, eax
lea ecx, [ebp - 0xac8]
call fcn.004216b0
lea ecx, [ebp - 0x1268]
call fcn.0040a450
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x14
call fcn.0040a450
xor eax, eax
lea esi, [ebp - 0x1218]
cmp dword [ebp - 0x1204], eax
lea ecx, [ebp - 0xb08]
cmove esi, eax
lea eax, [ebp - 0xac8]
push eax
call fcn.0040a400
mov edx, esi
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb08]
call fcn.00486a90
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x14
call fcn.0040a450
push dword [ebp - 0x1204]
call dword [sym.imp.KERNEL32.dll_LocalFree]
call fcn.0048ed50
test al, al
jne 0x41be55
call fcn.0048edc0
test al, al
je 0x41bf7c
mov edx, str.SOFTWARE_
lea ecx, [ebp - 0xac8]
call fcn.004216a0
lea ecx, [ebp - 0x2a8]
call fcn.004216c0
call fcn.00451870
mov ecx, eax
call fcn.0040a4f0
mov edx, eax
lea ecx, [ebp - 0xac8]
call fcn.004216b0
mov edx, 0x5021d8
lea ecx, [ebp - 0x2a8]
call fcn.004216e0
call fcn.00451870
mov ecx, eax
call fcn.0040a4f0
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.004216e0
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0xac8]
call fcn.0048b340
test al, al
je 0x41bef9
cmp byte [ebp - 0x121d], 0
je 0x41bef9
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0x2a8]
call fcn.0048b340
test al, al
je 0x41bef9
cmp byte [ebp - 0x121d], 0
je 0x41bef9
lea ecx, [ebp - 0xac8]
call fcn.0048b1a0
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0x2a8]
call fcn.0048b340
test al, al
je 0x41bf25
cmp byte [ebp - 0x121d], 0
je 0x41bf25
push ecx
lea edx, [ebp - 0xac8]
call fcn.0048a470
jmp 0x41bf79
sub esp, 8
lea edx, [ebp - 0xac8]
call fcn.0048a660
add esp, 8
test al, al
je 0x41bf67
lea edx, [ebp - 0x121d]
lea ecx, [ebp - 0xac8]
call fcn.0048b340
test al, al
je 0x41bf58
cmp byte [ebp - 0x121d], 0
jne 0x41bf7c
push ecx
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0xac8]
jmp 0x41bf74
push ecx
lea edx, [ebp - 0xac8]
lea ecx, [ebp - 0x2a8]
call fcn.0048ae50
add esp, 4
call fcn.0048eb40
test al, al
je 0x41bf96
call fcn.004216f0
mov esi, eax
mov ecx, esi
call dword [0x4ed33c]
call esi
call fcn.0042c2a0
lea ecx, [ebp - 0xad0]
push ecx
mov ecx, eax
call fcn.0040be90
sub esp, 8
cmp byte [ebp - 0x124c], 0
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
je 0x41bfc3
push str.LogsClear.log
jmp 0x41bfc8
push str.LogsSetup.log
call fcn.00413180
push esi
push edi
lea ecx, [ebp - 0xcbc]
call fcn.00486f00
add esp, 0x10
push ecx
push 0x5c
lea ecx, [ebp - 0xcbc]
call fcn.00420b20
push eax
push 0
lea eax, [ebp - 0x1268]
push eax
lea ecx, [ebp - 0xcbc]
call fcn.0040d9e0
xor edx, edx
mov byte [ebp - 4], 0x1b
mov ecx, eax
call fcn.00486a90
lea ecx, [ebp - 0x1268]
mov byte [ebp - 4], 0x14
call fcn.0040a450
movzx esi, byte [ebp - 0x123d]
lea ecx, [ebp - 0xcbc]
sub esp, 8
xor esi, 1
add esi, esi
call fcn.0040a4f0
mov edx, esi
mov ecx, eax
call fcn.00419ac0
call fcn.00419a00
lea ecx, [ebp - 0x1200]
call fcn.0043af60
call fcn.0046b870
mov ecx, esp
push str.language
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
sub esp, 8
mov ecx, esp
test al, al
je 0x41c0a4
push str.language
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
mov ecx, eax
call fcn.0040a4f0
push eax
call fcn.004b5f17
movzx esi, ax
add esp, 4
mov dword [ebp - 0x1228], esi
jmp 0x41c101
push str.langid
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
test al, al
je 0x41c0f2
sub esp, 8
mov ecx, esp
push str.langid
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
mov ecx, eax
call fcn.0040a4f0
push eax
call fcn.004b5f17
movzx esi, ax
add esp, 4
mov dword [ebp - 0x1228], esi
jmp 0x41c101
call fcn.0041b000
movzx eax, word [eax + 0x40]
mov dword [ebp - 0x1228], eax
sub esp, 8
mov ecx, esp
push str.cookie
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
push eax
lea ecx, [ebp - 0xc3c]
call fcn.0040e200
sub esp, 8
mov ecx, esp
push str.ga_clientid
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
test al, al
je 0x41c176
sub esp, 8
mov ecx, esp
push str.ga_clientid
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040e330
mov edi, dword [ebp - 0x1224]
or edi, 2
jmp 0x41c1a9
lea eax, [ebp - 0xbd0]
push eax
call fcn.0048e3e0
add esp, 4
lea edx, [ebp - 0xb78]
lea ecx, [ebp - 0x1268]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb78], xmm0
call fcn.0041a260
mov edi, dword [ebp - 0x1224]
or edi, 4
push eax
lea ecx, [ebp - 0xc88]
mov dword [ebp - 0x1230], edi
mov dword [ebp - 0x1224], edi
call fcn.0040e250
mov eax, edi
test al, 4
je 0x41c1e7
and eax, 0xfffffffb
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1230], eax
call fcn.0040a450
mov eax, dword [ebp - 0x1224]
mov dword [ebp - 4], 0x14
test al, 2
je 0x41c20c
and eax, 0xfffffffd
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1230], eax
call fcn.0040a450
sub esp, 8
mov ecx, esp
push str.edat_dir
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
test al, al
je 0x41c259
sub esp, 8
mov ecx, esp
push str.edat_dir
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040e330
or dword [ebp - 0x1224], 8
jmp 0x41c270
push 0x4ffc84
lea ecx, [ebp - 0x1268]
call fcn.0040a400
or dword [ebp - 0x1224], 0x10
push eax
lea ecx, [ebp - 0xca4]
call fcn.0040e250
mov eax, dword [ebp - 0x1224]
test al, 0x10
je 0x41c2a0
and eax, 0xffffffef
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0x1224], eax
call fcn.0040a450
mov eax, dword [ebp - 0x1224]
mov dword [ebp - 4], 0x14
test al, 8
je 0x41c2bf
and eax, 0xfffffff7
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1224], eax
call fcn.0040a450
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
test al, al
je 0x41c2f9
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
jmp 0x41c2ff
lea eax, [ebp - 0xcd4]
push eax
lea ecx, [ebp - 0xcd4]
call fcn.0040e200
sub esp, 8
mov ecx, esp
push str.ifeo
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
test al, al
sete byte [ebp - 0x127a]
xor ecx, ecx
call fcn.00414270
sub esp, 0x10
mov dword [ebp - 0x1204], eax
mov eax, esp
mov dword [ebp - 0xb30], 0x19a
mov dword [ebp - 0xb2c], 0x14
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea eax, [ebp - 0x1204]
push eax
lea ecx, [ebp - 0x1268]
call fcn.00421770
add esp, 4
mov ecx, 1
call fcn.0048ebc0
test al, al
jne 0x41c558
mov ecx, dword [ebp - 0x1278]
call fcn.0041a340
test al, al
je 0x41c558
cmp byte [ebp - 0x1250], 0
jne 0x41c3d9
push 0x10
push str.Unsupported_system
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Please_upgrade_your_OS_at_least_to_Windows_7_SP1.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x521bbc]
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b1c0
xorps xmm0, xmm0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xb10], edx
mov dword [ebp - 0xb0c], 0x1a4
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040b690
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41c44b
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Please_upgrade_your_OS_at_least_to_Windows_7_SP1.
lea eax, [ebp - 0xb20]
push eax
push 7
call fcn.0040fc70
mov byte [ebp - 4], 0x14
or edi, 0xffffffff
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1204], ecx
test ecx, ecx
je 0x41c4a3
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41c4a3
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1204]
call esi
mov ecx, dword [ebp - 0x1204]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41c4a3
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1204]
call esi
xor esi, esi
call fcn.0046b640
call fcn.0047b7f0
sub esp, 8
xor ecx, ecx
call fcn.0047b470
add esp, 8
xor ecx, ecx
call fcn.0046aaf0
mov edx, dword [ebp - 0xae0]
test edx, edx
je 0x41f8bc
cmp dword [ebp - 0xadc], 8
lea ecx, [ebp - 0xaf0]
cmovae ecx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
push edx
push ecx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.Reboot.txt
mov dword [eax + 4], 0xa
call fcn.00486f00
add esp, 0x10
lea eax, [ebp - 0xb50]
cmp dword [ebp - 0xb3c], 8
cmovae eax, dword [ebp - 0xb50]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41c532
mov byte [ebp - 0x1231], 1
test al, 0x10
je 0x41c539
mov byte [ebp - 0x1231], 0
cmp byte [ebp - 0x123d], 0
lea ecx, [ebp - 0xaf0]
je 0x41f8a3
mov dl, 1
call fcn.00487c70
jmp 0x41f8ae
push str.wintrust.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x41c58b
push str.CryptCATAdminAcquireContext2
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
setne al
test al, al
jne 0x41c611
mov ecx, dword [ebp - 0x1278]
call fcn.0041a340
test al, al
je 0x41c611
cmp byte [ebp - 0x1250], 0
jne 0x41c5b7
push 0x10
push str.Unsupported_system
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Windows_7_KB3033929_is_required.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 0x10
mov dword [ebp - 0xb30], 0x1ad
mov eax, esp
mov dword [ebp - 0xb2c], 0x1d
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea ecx, [ebp - 0x1268]
call fcn.00421830
or edi, 0xffffffff
jmp 0x41c4a3
lea eax, [ebp - 0x1274]
push eax
sub esp, 8
lea eax, [ebp - 0xc24]
lea edx, [ebp - 0xe70]
lea ecx, [ebp - 0xe58]
push eax
call fcn.0043ad10
add esp, 0x10
mov byte [ebp - 0x121d], al
test al, al
je 0x41c666
cmp dword [ebp - 0x112c], 8
lea ecx, [ebp - 0x1140]
lea eax, [ebp - 0xa0]
cmovae ecx, dword [ebp - 0x1140]
push ecx
push 0x40
push eax
call fcn.004bb2d8
add esp, 0xc
cmp word [ebp - 0xa0], 0
jne 0x41c773
push 4
push 0x501638
lea ecx, [ebp - 0xc0c]
call fcn.00416160
test eax, eax
je 0x41c6d8
sub esp, 8
mov ecx, esp
push 0x501638
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
cmp dword [eax + 0x10], 0x24
jne 0x41c6d8
sub esp, 8
mov ecx, esp
push 0x501638
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
mov ecx, eax
call fcn.0040a4f0
mov edx, eax
lea ecx, [ebp - 0xa0]
call fcn.004218e0
cmp word [ebp - 0xa0], 0
jne 0x41c773
call fcn.0048e2e0
mov dword [ebp - 0xb30], eax
mov dword [ebp - 0xb2c], edx
call fcn.0048e2e0
mov dword [ebp - 0xb28], eax
lea ecx, [ebp - 0x1268]
mov eax, dword [ebp - 0xb2a]
and eax, 0xfff
mov dword [ebp - 0xb24], edx
or eax, 0x4000
lea edx, [ebp - 0xb78]
mov word [ebp - 0xb2a], ax
mov al, byte [ebp - 0xb28]
and al, 0x3f
or al, 0x80
mov byte [ebp - 0xb28], al
movups xmm0, xmmword [ebp - 0xb30]
movups xmmword [ebp - 0xb78], xmm0
call fcn.0041a260
cmp dword [eax + 0x14], 8
jb 0x41c756
mov eax, dword [eax]
push eax
lea eax, [ebp - 0xa0]
push 0x40
push eax
call fcn.004bb2d8
add esp, 0xc
lea ecx, [ebp - 0x1268]
call fcn.0040a450
cmp byte [ebp - 0x124c], 0
jne 0x41ca2d
cmp byte [ebp - 0x121d], 0
jne 0x41ca2d
cmp byte [ebp - 0x1050], 0
jne 0x41ca2d
lea ecx, [ebp - 0xb68]
call fcn.0040a1d0
mov byte [ebp - 4], 0x1f
call fcn.00451750
push 0x4ffbd0
mov edx, eax
lea ecx, [ebp - 0x1268]
call fcn.00409d00
add esp, 4
mov ecx, eax
call fcn.0040a4f0
mov ecx, eax
call fcn.00415000
lea ecx, [ebp - 0x1268]
mov byte [ebp - 0x1229], al
call fcn.0040a450
call fcn.00451750
cmp byte [ebp - 0x1229], 0
lea ecx, [ebp - 0x1268]
mov edx, eax
je 0x41c821
push 0x4ffbd0
call fcn.00409d00
add esp, 4
lea ecx, [ebp - 0xb68]
push eax
call fcn.0040e250
lea ecx, [ebp - 0x1268]
call fcn.0040a450
jmp 0x41c8b1
push str.FsBlk
call fcn.00409d00
add esp, 4
mov ecx, eax
call fcn.0040a4f0
mov ecx, eax
call fcn.00415000
lea ecx, [ebp - 0x1268]
mov byte [ebp - 0x1229], al
call fcn.0040a450
cmp byte [ebp - 0x1229], 0
je 0x41c889
call fcn.00451750
push str.FsBlk
mov edx, eax
lea ecx, [ebp - 0x1268]
call fcn.00409d00
add esp, 4
lea ecx, [ebp - 0xb68]
push eax
call fcn.0040e250
lea ecx, [ebp - 0x1268]
call fcn.0040a450
jmp 0x41c8b1
call fcn.004522d0
mov ecx, eax
call fcn.0040a4f0
mov ecx, eax
call fcn.00415000
test al, al
je 0x41c8b1
call fcn.004522d0
push eax
lea ecx, [ebp - 0xb68]
call fcn.0040e200
cmp dword [ebp - 0xb58], 0
je 0x41ca1e
call fcn.004521f0
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040e330
cmp byte [ebp - 0x1250], 0
mov eax, 0xa003
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x1238], eax
jne 0x41c971
call fcn.004515a0
cmp eax, 2
mov ecx, str.avastClear.exe
mov edi, str.avgClear.exe
cmovne edi, ecx
lea ecx, [ebp - 0xb68]
call fcn.0040a4f0
lea ecx, [ebp - 0xb08]
mov esi, eax
call fcn.0040a4f0
push edi
push esi
push eax
push str.The_installer_has_detected_corrupted__s_installation_on_this_computer__service__s_is_running___thus_this_installer_cannot_continue._Use_the__s_utility_to_fix_the_problem_or_contact_our_support_team.
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004140d0
add esp, 0x18
lea ecx, [ebp - 0xb08]
call fcn.0040a4f0
push eax
push str.Corrupted__s_detected.
lea eax, [ebp - 0x2a0]
push 0x100
push eax
call fcn.004140d0
add esp, 0x10
lea eax, [ebp - 0x2a0]
push 0x10
push eax
lea eax, [ebp - 0xac8]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xb68]
call fcn.0040a4f0
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x1274], eax
call fcn.0040a4f0
sub esp, 0x10
mov dword [ebp - 0x1244], eax
mov eax, esp
mov dword [ebp - 0xb30], 0x1d6
mov dword [ebp - 0xb2c], 0x21
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea eax, [ebp - 0x1274]
push eax
lea eax, [ebp - 0x1244]
push eax
lea ecx, [ebp - 0x1268]
call fcn.004218f0
add esp, 8
lea ecx, [ebp - 0xb08]
call fcn.0040a450
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x14
call fcn.0040a450
mov esi, dword [ebp - 0x1238]
or edi, 0xffffffff
jmp 0x41c4a5
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x14
call fcn.0040a450
push 0x528d50
lea ecx, [ebp - 0xf60]
call fcn.0040fe70
mov esi, eax
mov dword [ebp - 0x1238], esi
mov dword [ebp - 0x1204], esi
test esi, esi
je 0x41cb02
cmp byte [ebp - 0x1250], 0
jne 0x41ca94
xor ecx, ecx
call fcn.00414270
push esi
push eax
push str.The_installer_cannot_open_the_SFX_archive__s.__code_0x_x__r_n_r_nIts_probably_caused_by_corrupted_installer_thus_please_try_to_download_it_again.
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004140d0
add esp, 0x14
lea eax, [ebp - 0xac8]
push 0x10
push str.Installation_failed
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x521bbc]
mov dword [ebp - 0x1274], 0x528d50
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b1c0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xb20]
lea eax, [ebp - 0x1204]
mov dword [ebp - 0xb10], edx
push eax
lea eax, [ebp - 0x1274]
mov dword [ebp - 0xb0c], 0x1e4
push eax
mov edx, str.Cannot_open_the_SFX_archive__s__code_0x_x_
call fcn.00421910
add esp, 8
or edi, 0xffffffff
jmp 0x41c4a5
lea ecx, [ebp - 0x1268]
call fcn.00414330
mov esi, eax
lea eax, [ebp - 0xaf0]
cmp eax, esi
je 0x41cb4a
mov ecx, eax
call fcn.0040a450
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xaf0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xae0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x1268]
call fcn.0040a450
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
mov edx, str._TMPPATH_
lea ecx, [ebp - 0xf60]
cmovae eax, dword [ebp - 0xaf0]
push eax
call fcn.00414c50
add esp, 4
lea eax, [ebp - 0xf60]
cmp dword [ebp - 0xf4c], 8
lea ecx, [ebp - 0xc0c]
cmovae eax, dword [ebp - 0xf60]
push 0
push eax
call fcn.004203f0
mov esi, dword [ebp - 0xc2c]
test esi, esi
jne 0x41cbf3
sub esp, 8
mov ecx, esp
push str.cookie
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
test al, al
je 0x41cbf3
sub esp, 8
mov ecx, esp
push str.cookie
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
push eax
lea ecx, [ebp - 0xc3c]
call fcn.0040e200
mov esi, dword [ebp - 0xc2c]
cmp dword [ebp - 0xcc4], 0
je 0x41cc27
lea eax, [ebp - 0xcd4]
push eax
sub esp, 0xc
mov ecx, esp
push str.sub_edition
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
add esp, 4
mov ecx, eax
call fcn.0040e200
test esi, esi
jne 0x41cc7a
call fcn.004141d0
xor ecx, ecx
mov esi, eax
call fcn.00414270
push eax
lea ecx, [ebp - 0x1268]
call fcn.0040a400
mov byte [ebp - 4], 0x21
mov edx, str._x64.exe
mov edi, dword [ebp - 0x1224]
push ecx
or edi, 0x20
mov ecx, eax
push esi
mov dword [ebp - 0x1224], edi
mov dword [ebp - 0x1230], edi
call fcn.004219d0
add esp, 8
mov byte [ebp - 0x1229], 1
test al, al
je 0x41cc81
mov byte [ebp - 0x1229], 0
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x1224]
test al, 0x20
je 0x41cca6
and eax, 0xffffffdf
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0x1224], eax
call fcn.0040a450
cmp byte [ebp - 0x1229], 0
je 0x41cec2
xorps xmm0, xmm0
mov dword [ebp - 0x1210], 0
push 0x4ffc78
lea ecx, [ebp - 0x1298]
movq qword [ebp - 0x1218], xmm0
call fcn.0040a400
xor ecx, ecx
mov byte [ebp - 4], 0x22
call fcn.00414270
push eax
lea ecx, [ebp - 0xb08]
call fcn.0040a400
sub esp, 8
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x1298]
lea edx, [ebp - 0xb08]
lea ecx, [ebp - 0x1218]
push 1
push eax
call fcn.0040cb60
add esp, 0x10
lea ecx, [ebp - 0xb08]
call fcn.0040a450
lea ecx, [ebp - 0x1298]
mov byte [ebp - 4], 0x26
call fcn.0040a450
lea ecx, [ebp - 0x1218]
call fcn.0040b8a0
cmp eax, 2
jb 0x41ceb3
mov eax, dword [ebp - 0x1214]
lea ecx, [ebp - 0xb20]
add eax, 0xffffffe8
push eax
call fcn.0040e330
sub esp, 8
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb20]
call fcn.00420b70
mov esi, eax
cmp esi, 0xffffffff
je 0x41cea8
push esi
push 0x502918
lea ecx, [ebp - 0xb20]
call fcn.0040be10
cmp eax, 0xffffffff
jne 0x41cda3
push esi
push 0x501bac
lea ecx, [ebp - 0xb20]
call fcn.0040be10
cmp eax, 0xffffffff
je 0x41cea8
sub eax, esi
lea ecx, [ebp - 0xb20]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0xb98]
push eax
call fcn.0040d9e0
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0xb88], 3
jne 0x41ce9d
push 1
lea ecx, [ebp - 0xb98]
call fcn.0040e230
cmp word [eax], 0x30
jb 0x41ce9d
push 1
lea ecx, [ebp - 0xb98]
call fcn.0040e230
cmp word [eax], 0x39
ja 0x41ce9d
call fcn.004515a0
cmp eax, 2
lea ecx, [ebp - 0xb08]
lea eax, [ebp - 0xb98]
push eax
jne 0x41ce26
mov edx, str.mmm_bav_ppc_999_
call fcn.00421a20
add esp, 4
mov byte [ebp - 4], 0x29
jmp 0x41ce37
mov edx, str.mmm_ava_ppc_999_
call fcn.00421a20
add esp, 4
mov byte [ebp - 4], 0x2a
push 0x50291c
mov edx, eax
lea ecx, [ebp - 0x1268]
call fcn.00409d70
add esp, 4
lea ecx, [ebp - 0xc3c]
push eax
call fcn.0040e250
lea ecx, [ebp - 0x1268]
call fcn.0040a450
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x28
call fcn.0040a450
lea eax, [ebp - 0xc3c]
push eax
sub esp, 0xc
mov ecx, esp
push str.cookie
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
add esp, 4
mov ecx, eax
call fcn.0040e200
lea ecx, [ebp - 0xb98]
call fcn.0040a450
lea ecx, [ebp - 0xb20]
call fcn.0040a450
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x14
call fcn.0040c0d0
lea ecx, [ebp - 0x1204]
mov dword [ebp - 0x1204], 0
call fcn.0047d7f0
xorps xmm0, xmm0
mov dword [ebp - 0xcdc], 0
xor eax, eax
mov dword [ebp - 0xcd8], 7
movups xmmword [ebp - 0xcec], xmm0
mov word [ebp - 0xcec], ax
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x1204], 2
jl 0x41cf20
push str.Loading
lea ecx, [ebp - 0xcec]
call fcn.0040a1a0
jmp 0x41cfae
cmp byte [ebp - 0x124c], 0
je 0x41cf49
push str._Clear
push ecx
call fcn.004521f0
add esp, 4
lea ecx, [ebp - 0x1268]
mov edx, eax
call fcn.00409d00
add esp, 4
jmp 0x41cf97
mov esi, dword [ebp - 0x1278]
mov ecx, esi
call fcn.0041a340
test al, al
je 0x41cf7c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x409
cmp ax, cx
jne 0x41cf7c
push str.Setting_up_Avast_One_installation...
lea ecx, [ebp - 0xcec]
call fcn.0040a1a0
jmp 0x41cfae
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov edx, esi
push eax
push ecx
lea ecx, [ebp - 0x1268]
call fcn.0041a3b0
add esp, 8
push eax
lea ecx, [ebp - 0xcec]
call fcn.0040e250
lea ecx, [ebp - 0x1268]
call fcn.0040a450
mov ecx, dword [ebp - 0x1278]
cmp ecx, 0xffffffff
jne 0x41cfdd
mov ecx, dword [ebp - 0x107c]
cmp ecx, 0xffffffff
jne 0x41cfdd
call fcn.004515a0
sub eax, 2
neg eax
sbb eax, eax
add eax, 0x3ea
mov dword [ebp - 0x1204], eax
jmp 0x41d011
cmp ecx, 0x13
jne 0x41cfe9
mov esi, 0x3eb
jmp 0x41d017
call fcn.0041a340
test al, al
je 0x41cff9
mov esi, 0x3ec
jmp 0x41d017
call fcn.0041a390
xor ecx, ecx
test al, al
setne cl
add ecx, 0x3e9
mov dword [ebp - 0x1204], ecx
mov esi, dword [ebp - 0x1204]
push 0x58
lea eax, [ebp - 0x1018]
push 0
push eax
call fcn.004a6890
add esp, 0xc
lea eax, [ebp - 0xcec]
push eax
push esi
push ecx
lea ecx, [ebp - 0x1018]
call fcn.00418210
lea eax, [ebp - 0xc8c]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0xdac]
call fcn.0040e860
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0xdac]
call fcn.0040e860
cmp byte [ebp - 0x1250], 0
jne 0x41d07a
lea ecx, [ebp - 0x1018]
call fcn.00418b40
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
xorps xmm0, xmm0
mov dword [ebp - 0xb88], 0
cmovae edx, dword [ebp - 0xaf0]
mov ecx, edx
mov dword [ebp - 0xb84], 0
movups xmmword [ebp - 0xb98], xmm0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d0b1
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xb98]
call fcn.0040a370
mov byte [ebp - 4], 0x2d
mov eax, 0x490
mov esi, dword [ebp - 0xed0]
mov edi, dword [ebp - 0xecc]
mov dword [ebp - 0x1204], eax
cmp esi, edi
je 0x41d19a
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x41d0fa
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
push 0xb
push str.servers.def
push 0
call fcn.0040cc90
add esp, 0xc
test eax, eax
je 0x41d11e
add esi, 0x40
cmp esi, edi
jne 0x41d0f0
jmp 0x41d19a
cmp dword [ebp - 0xb84], 8
lea edx, [ebp - 0xb98]
xorps xmm0, xmm0
mov dword [ebp - 0xb10], 0
cmovae edx, dword [ebp - 0xb98]
mov ecx, edx
mov dword [ebp - 0xb0c], 0
movups xmmword [ebp - 0xb20], xmm0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d155
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xb20]
call fcn.0040a370
push ecx
push esi
lea eax, [ebp - 0xb20]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xf60]
call fcn.00411180
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0x1204], eax
call fcn.0040a450
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x2c
call fcn.0040a450
mov eax, dword [ebp - 0x1204]
test eax, eax
je 0x41d240
mov edx, eax
lea ecx, [ebp - 0xb08]
call fcn.0042b410
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.0040a4f0
sub esp, 0x10
mov dword [ebp - 0x1204], eax
mov eax, esp
mov dword [ebp - 0xb30], 0x259
mov dword [ebp - 0xb2c], 0x1d
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb28], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb24], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb30]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea eax, [ebp - 0x1204]
push eax
lea ecx, [ebp - 0x1268]
call fcn.00421a80
add esp, 4
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xb08]
call fcn.0040a450
cmp byte [ebp - 0x124c], 0
jne 0x41dc52
call fcn.0041ae90
test al, al
je 0x41d2bd
sub esp, 8
mov ecx, esp
push 0x500c04
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00416020
test al, al
je 0x41d2bd
sub esp, 8
mov ecx, esp
push 0x500c04
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
cmp dword [eax + 0x10], 0
jne 0x41d2bd
push 0x5015a0
sub esp, 0xc
mov ecx, esp
push 0x500c04
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
add esp, 4
mov ecx, eax
call fcn.0040a1a0
cmp dword [ebp - 0xc94], 0
je 0x41d7e1
lea ecx, [ebp - 0xca4]
call fcn.004866b0
test al, al
je 0x41d774
push str..edat
lea ecx, [ebp - 0xb08]
call fcn.0040a400
push 1
lea eax, [ebp - 0xb08]
mov byte [ebp - 4], 0x30
push 0
push eax
lea edx, [ebp - 0xca4]
lea ecx, [ebp - 0xb2c]
call fcn.00488270
add esp, 0xc
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x32
call fcn.0040a450
mov esi, dword [ebp - 0xb2c]
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0x1204], esi
mov dword [ebp - 0x123c], eax
cmp esi, eax
je 0x41d763
nop
lea eax, [ebp - 0xad0]
mov ecx, esi
push eax
call fcn.0040be90
lea ecx, [ebp - 0xb68]
push dword [eax + 4]
push dword [eax]
call fcn.00486750
add esp, 8
lea eax, [ebp - 0xad8]
mov byte [ebp - 4], 0x33
push eax
mov ecx, esi
call fcn.0040be90
lea ecx, [ebp - 0xc54]
push dword [eax + 4]
push dword [eax]
call fcn.004866d0
add esp, 8
mov byte [ebp - 4], 0x34
call fcn.004141d0
mov dword [ebp - 0x1230], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12dc]
push eax
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.elic
call fcn.00413180
mov edx, dword [ebp - 0x1230]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414250
add esp, 0x10
test eax, eax
jne 0x41d3dc
push str.license.avastlic
jmp 0x41d56e
call fcn.004141d0
mov dword [ebp - 0x1230], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12e4]
push eax
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ebcf
call fcn.00413180
mov edx, dword [ebp - 0x1230]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414250
add esp, 0x10
test eax, eax
jne 0x41d42e
push str.bcc.cfg.tmp
jmp 0x41d56e
call fcn.004141d0
mov dword [ebp - 0x1230], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12ec]
push eax
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ebpk
call fcn.00413180
mov edx, dword [ebp - 0x1230]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414250
add esp, 0x10
test eax, eax
jne 0x41d480
push str.bcpub.key.tmp
jmp 0x41d56e
call fcn.004141d0
mov dword [ebp - 0x1230], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12f4]
push eax
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.erid
call fcn.00413180
mov edx, dword [ebp - 0x1230]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414250
add esp, 0x10
test eax, eax
jne 0x41d4d2
push str.rid.bin
jmp 0x41d56e
call fcn.004141d0
mov dword [ebp - 0x1230], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12d4]
push eax
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ecoo
call fcn.00413180
mov edx, dword [ebp - 0x1230]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414250
add esp, 0x10
test eax, eax
jne 0x41d521
push str.cookie.bin
jmp 0x41d56e
call fcn.004141d0
mov dword [ebp - 0x1230], eax
lea ecx, [ebp - 0xb68]
lea eax, [ebp - 0x12fc]
push eax
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.eapt
call fcn.00413180
mov edx, dword [ebp - 0x1230]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414250
add esp, 0x10
test eax, eax
jne 0x41d579
push str.pairing.bin
lea ecx, [ebp - 0xc54]
call fcn.0040a1a0
lea ecx, [ebp - 0xb20]
call fcn.0040a1d0
lea eax, [ebp - 0x1304]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0xc54]
call fcn.0040be90
lea ecx, [ebp - 0xaf0]
mov edi, dword [eax]
mov esi, dword [eax + 4]
lea eax, [ebp - 0x1214]
push eax
call fcn.0040be90
push esi
push edi
lea ecx, [ebp - 0xb20]
push dword [eax + 4]
push dword [eax]
call fcn.00486f00
mov esi, dword [ebp - 0x1204]
lea edx, [ebp - 0xb20]
add esp, 8
mov ecx, esi
call fcn.00487b20
add esp, 8
test al, al
je 0x41d66e
lea ecx, [ebp - 0xb20]
call fcn.0040a4f0
lea ecx, [ebp - 0xb68]
mov dword [ebp - 0x1204], eax
call fcn.0040a4f0
sub esp, 0x10
mov dword [ebp - 0x1230], eax
mov eax, esp
mov dword [ebp - 0xbd0], 0x27e
mov dword [ebp - 0xbcc], 0x2c
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xbc8], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xbc4], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xbd0]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea eax, [ebp - 0x1204]
push eax
lea eax, [ebp - 0x1230]
push eax
lea ecx, [ebp - 0x1268]
call fcn.00421b40
add esp, 8
jmp 0x41d729
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x1298]
call fcn.0042b410
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.0040a4f0
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0x1204], eax
call fcn.0040a4f0
lea ecx, [ebp - 0xb68]
mov dword [ebp - 0x1230], eax
call fcn.0040a4f0
sub esp, 0x10
mov dword [ebp - 0x1238], eax
mov eax, esp
mov dword [ebp - 0xb78], 0x280
mov dword [ebp - 0xb74], 0x2d
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb70], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb6c], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb78]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea eax, [ebp - 0x1204]
push eax
lea eax, [ebp - 0x1230]
push eax
lea eax, [ebp - 0x1238]
push eax
lea ecx, [ebp - 0x1268]
call fcn.00421b60
add esp, 0xc
lea ecx, [ebp - 0x1298]
call fcn.0040a450
lea ecx, [ebp - 0xb20]
call fcn.0040a450
lea ecx, [ebp - 0xc54]
call fcn.0040a450
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x32
call fcn.0040a450
add esi, 0x18
mov dword [ebp - 0x1204], esi
cmp esi, dword [ebp - 0x123c]
jne 0x41d340
lea ecx, [ebp - 0xb2c]
mov byte [ebp - 4], 0x2c
call fcn.0040c0d0
jmp 0x41d7e1
lea ecx, [ebp - 0xca4]
call fcn.0040a4f0
sub esp, 0x10
mov dword [ebp - 0x123c], eax
mov eax, esp
mov dword [ebp - 0xb78], 0x285
mov dword [ebp - 0xb74], 0x27
lea ecx, [ebp - 0x1268]
mov dword [ebp - 0xb70], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb6c], str.int___stdcall_GuardedWinMain_struct_HINSTANCE____struct_HINSTANCE____wchar_t__int_
movups xmm0, xmmword [ebp - 0xb78]
push str.sfxinst
movups xmmword [eax], xmm0
call fcn.0040b480
lea eax, [ebp - 0x123c]
push eax
lea ecx, [ebp - 0x1268]
call fcn.00421b80
add esp, 4
cmp dword [ebp - 0xadc], 8
lea edi, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xec4]
cmovae edi, dword [ebp - 0xaf0]
test ecx, ecx
je 0x41d88e
mov edx, dword [ebp - 0xec0]
test edx, edx
je 0x41d88e
mov eax, dword [ebp - 0xf48]
sub ecx, edx
push 0
push ecx
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x4ed33c]
lea ecx, [ebp - 0xf48]
call esi
test eax, eax
js 0x41d88e
mov eax, dword [ebp - 0xf48]
push dword [ebp - 0xec0]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x4ed33c]
lea ecx, [ebp - 0xf48]
call esi
mov dword [ebp - 0x123c], eax
test eax, eax
je 0x41d88e
push edi
push dword [ebp - 0xec0]
push eax
call fcn.00411e20
mov ecx, dword [ebp - 0xf48]
mov edi, eax
push dword [ebp - 0x123c]
mov esi, dword [ecx + 0x10]
mov ecx, esi
call dword [0x4ed33c]
lea ecx, [ebp - 0xf48]
call esi
test edi, edi
je 0x41d8a5
lea ecx, [ebp - 0xaf0]
call fcn.0040a4f0
push eax
lea ecx, [ebp - 0xf60]
call fcn.00411810
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.cookie.bin
mov dword [eax + 4], 0xa
call fcn.00486f00
add esp, 0x10
cmp dword [ebp - 0xc2c], 0
jne 0x41d9bf
lea ecx, [ebp - 0xb50]
call fcn.00486690
test al, al
je 0x41d9bf
xorps xmm0, xmm0
mov dword [ebp - 0x1210], 0
lea edx, [ebp - 0xb50]
movq qword [ebp - 0x1218], xmm0
lea ecx, [ebp - 0x1218]
call fcn.00421ba0
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x1214]
mov eax, dword [ebp - 0x1218]
sub ecx, eax
push ecx
push eax
lea ecx, [ebp - 0xb08]
call fcn.004140f0
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x1268]
call fcn.00421c70
add esp, 4
lea ecx, [ebp - 0xc3c]
push eax
call fcn.0040e250
lea ecx, [ebp - 0x1268]
call fcn.0040a450
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x37
call fcn.0040e5e0
lea eax, [ebp - 0xc3c]
push eax
sub esp, 0xc
mov ecx, esp
push str.cookie
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
add esp, 4
mov ecx, eax
call fcn.0040e200
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x2c
call fcn.0040bcf0
sub esp, 0x18
lea eax, [ebp - 0xc3c]
mov ecx, esp
push eax
call fcn.0040e330
lea eax, [ebp - 0xc0c]
push 0x528d50
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x1268]
call fcn.00415080
add esp, 0x20
lea ecx, [ebp - 0x1268]
call fcn.0040a450
xor edi, edi
nop dword [eax]
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [edi + 0x521c3c]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, dword [ebp - 0xae0]
mov esi, esp
mov dword [ebp - 0x1204], eax
lea eax, [ecx + 2]
mov dword [ebp - 0x123c], eax
mov dword [esi], ecx
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41da36
sub ecx, dword [ebp - 0x123c]
push dword [ebp - 0x1204]
sar ecx, 1
mov dword [esi + 4], ecx
lea ecx, [ebp - 0xb50]
push edx
call fcn.00486f00
add esp, 0x10
lea eax, [ebp - 0xb50]
cmp dword [ebp - 0xb3c], 8
cmovae eax, dword [ebp - 0xb50]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41db3b
test al, 0x10
jne 0x41db3b
mov ecx, dword [edi + 0x521c40]
mov esi, ecx
mov dword [ebp - 0x123c], ecx
lea edx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x41daa0
sub esi, edx
sar esi, 1
push esi
push ecx
lea ecx, [ebp - 0xc0c]
call fcn.00416160
mov ecx, eax
test ecx, ecx
jne 0x41db17
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov dword [ebp - 0x121c], esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x39
mov ecx, esp
push esi
push dword [ebp - 0x123c]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040a370
lea ecx, [ebp - 0xc0c]
mov byte [ebp - 4], 0x2c
call fcn.00420b90
mov ecx, eax
lea eax, [ebp - 0xb50]
cmp ecx, eax
je 0x41db3b
cmp dword [ebp - 0xb3c], 8
push dword [ebp - 0xb40]
cmovae eax, dword [ebp - 0xb50]
push eax
call fcn.0040a090
add edi, 8
cmp edi, 0x18
jb 0x41da00
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.aswOfferTool.exe
mov dword [eax + 4], 0x11
call fcn.00486f00
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
cmovae edx, dword [ebp - 0xb50]
add esp, 0xc
push 0x7d1
call fcn.0040b770
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
mov eax, esp
cmovae edx, dword [ebp - 0xaf0]
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.GuiCust.dll
mov dword [eax + 4], 0xb
call fcn.00486f00
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
cmovae edx, dword [ebp - 0xb50]
add esp, 0xc
push 0x7d0
call fcn.0040b770
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
mov eax, esp
cmovae edx, dword [ebp - 0xaf0]
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], str.CustomInstallation.ini
mov dword [eax + 4], 0x16
call fcn.00486f00
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
cmovae edx, dword [ebp - 0xb50]
add esp, 0xc
push 0x7d2
call fcn.0040b770
add esp, 8
push 0x5c
lea eax, [ebp - 0xe40]
push 0
push eax
call fcn.004a6890
sub esp, 0xc
mov eax, 0x7ffffffe
mov ecx, esp
mov dword [ebp - 0x121c], ecx
mov edx, dword [ebp - 0xae0]
sub eax, edx
cmp eax, 0xc
jb 0x41fb66
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
push 0xc
cmovae eax, dword [ebp - 0xaf0]
push str._servers.def
push edx
push eax
push ecx
push dword [ebp - 0x121c]
call fcn.00409de0
mov eax, dword [ebp - 0x1224]
lea ecx, [ebp - 0xe40]
or eax, 0x200
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1230], eax
call fcn.00419b80
sub esp, 0x18
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0xc3c]
mov dword [ebp - 0x121c], esp
mov ecx, esp
push eax
call fcn.0040e330
sub esp, 0x18
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0xc88]
mov dword [ebp - 0x123c], esp
mov ecx, esp
push eax
call fcn.0040e330
sub esp, 0x18
mov byte [ebp - 4], 0x3c
mov edx, esp
lea ecx, [ebp - 0xa0]
xorps xmm0, xmm0
lea esi, [ecx + 2]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41dd30
sub ecx, esi
lea eax, [ebp - 0xa0]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0040a370
lea eax, [ebp - 0xc0c]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0xe40]
call fcn.00425020
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 4
movups xmmword [ecx], xmm0
push str.stub
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040a370
lea ecx, [ebp - 0xe40]
call fcn.004253d0
mov ecx, 0x528d50
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
mov dword [ebp - 0xb70], 0
movups xmmword [ebp - 0xb80], xmm0
mov dword [ebp - 0xb6c], 0
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ddc0
sub ecx, edx
sar ecx, 1
push ecx
push 0x528d50
lea ecx, [ebp - 0xb80]
call fcn.0040a370
lea edx, [ebp - 0xb80]
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xad8]
call fcn.00487d80
xorps xmm0, xmm0
mov dword [ebp - 0xd24], 0
movq qword [ebp - 0xd2c], xmm0
mov byte [ebp - 0xd08], 0
mov al, byte [ebp - 0x123d]
lea esi, [ebp - 0xa0]
mov ecx, esi
mov byte [ebp - 4], 0x3f
mov byte [ebp - 0xd38], al
mov eax, dword [ebp - 0x1278]
mov dword [ebp - 0xd2c], eax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41de40
mov eax, dword [ebp - 0x1228]
sub ecx, edx
mov dx, word [ebp - 0xad6]
mov di, word [ebp - 0xad4]
movzx eax, ax
mov dword [ebp - 0xd24], eax
mov ax, word [ebp - 0xad8]
sar ecx, 1
mov dword [ebp - 0xd34], esi
mov dword [ebp - 0xd30], ecx
test ax, ax
jne 0x41de97
test dx, dx
jne 0x41de97
test di, di
jne 0x41de97
cmp word [ebp - 0xad2], di
je 0x41deb4
movzx eax, al
shl ax, 8
movzx ecx, ax
movzx eax, dl
or ecx, eax
movzx eax, di
shl ecx, 0x10
or ecx, eax
mov dword [ebp - 0xd28], ecx
lea eax, [ebp - 0xc3c]
push eax
lea ecx, [ebp - 0xd20]
call fcn.0040e330
xorps xmm0, xmm0
mov byte [ebp - 0xd08], 1
push 0
lea ecx, [ebp - 0xb68]
movq qword [ebp - 0xb58], xmm0
movups xmmword [ebp - 0xb68], xmm0
call fcn.00496120
push 7
lea ecx, [ebp - 0x1268]
mov byte [ebp - 4], 0x40
call fcn.00496120
push eax
lea ecx, [ebp - 0xb68]
call fcn.004965a0
lea ecx, [ebp - 0x1268]
call fcn.00496520
lea eax, [ebp - 0xc88]
mov byte [ebp - 4], 0x41
push eax
push str.session_id
lea ecx, [ebp - 0xb68]
call fcn.0041a840
cmp dword [ebp - 0xb6c], 8
lea eax, [ebp - 0xb80]
mov esi, dword [ebp - 0xb70]
mov edx, esi
cmovae eax, dword [ebp - 0xb80]
push 2
push 0x506cc8
push ecx
mov ecx, eax
mov dword [ebp - 0x1228], eax
call fcn.0044ff50
add esp, 0xc
cmp eax, 0xffffffff
je 0x41df89
lea edx, [eax + 1]
cmp esi, edx
jb 0x41fb6b
mov eax, dword [ebp - 0x1228]
sub esi, edx
or ecx, 0xffffffff
cmp esi, 0xffffffff
cmovb ecx, esi
lea eax, [eax + edx*2]
jmp 0x41df91
mov eax, dword [ebp - 0x1228]
mov ecx, esi
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0xb10], 0
push eax
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0xb0c], 0
movups xmmword [ebp - 0xb20], xmm0
call fcn.0040a370
mov eax, dword [ebp - 0x1224]
or eax, 0x400
mov dword [ebp - 0x1224], eax
mov dword [ebp - 0x1230], eax
lea eax, [ebp - 0xb20]
mov byte [ebp - 4], 0x42
push eax
push str.sfx_name
lea ecx, [ebp - 0xb68]
call fcn.0041a840
lea ecx, [ebp - 0xb20]
call fcn.0040a450
cmp word [ebp - 0xad8], 0
mov ax, word [ebp - 0xad6]
jne 0x41e021
test ax, ax
jne 0x41e021
test di, di
jne 0x41e021
cmp word [ebp - 0xad2], di
jne 0x41e021
xor cl, cl
jmp 0x41e023
mov cl, 1
test cl, cl
je 0x41e0b0
xorps xmm0, xmm0
mov dword [ebp - 0xb88], 0
xor ecx, ecx
mov dword [ebp - 0xb84], 7
movups xmmword [ebp - 0xb98], xmm0
mov word [ebp - 0xb98], cx
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xb98]
movzx esi, word [ebp - 0xad2]
push esi
movzx edx, di
push edx
mov dword [ebp - 0x123c], ecx
movzx ecx, ax
movzx eax, word [ebp - 0xad8]
push ecx
push eax
lea eax, [ebp - 0x123c]
push 0x501734
push eax
call fcn.0040dfb0
add esp, 0x18
lea eax, [ebp - 0xb98]
lea ecx, [ebp - 0xb68]
push eax
push str.sfx_version
call fcn.0041a840
lea ecx, [ebp - 0xb98]
call fcn.0040a450
cmp dword [ebp - 0xb6c], 8
lea eax, [ebp - 0xb80]
push 0
cmovae eax, dword [ebp - 0xb80]
push 0
push 3
push 0
push 7
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0xad4], esi
mov byte [ebp - 4], 0x44
cmp esi, 0xffffffff
je 0x41e1f5
push 0
push 0
lea eax, [ebp - 0xad0]
mov dword [ebp - 0xad0], 0
push eax
push esi
mov dword [ebp - 0xacc], 0
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x41e1f5
mov eax, dword [ebp - 0xad0]
mov edx, 0xe57a42bd
mul edx
mov ecx, 0xd6bf94d5
mov dword [ebp - 0x1218], eax
mov edi, edx
mov eax, dword [ebp - 0xad0]
mul ecx
mov ecx, 0xe57a42bd
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0x1204], edx
mul ecx
mov ecx, eax
mov dword [ebp - 0x123c], edx
mov eax, dword [ebp - 0xacc]
mov edx, 0xd6bf94d5
mul edx
add ecx, edi
mov dword [ebp - 0x1238], eax
mov eax, dword [ebp - 0x1228]
mov edi, dword [ebp - 0x1238]
mov dword [ebp - 0x121c], edx
mov edx, dword [ebp - 0x123c]
adc edx, 0
add eax, ecx
mov ecx, dword [ebp - 0x1204]
adc ecx, 0
mov dword [ebp - 0x1218], eax
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x121c]
adc eax, eax
add edi, edx
adc ecx, eax
shrd edi, ecx, 0x17
shr ecx, 0x17
sub edi, 0xb6109100
sbb ecx, 2
push ecx
push edi
lea ecx, [ebp - 0x1268]
call fcn.00423700
add esp, 8
push eax
push str.sfx_created
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x45
call fcn.0041a840
lea ecx, [ebp - 0x1268]
mov byte [ebp - 4], 0x44
call fcn.0040a450
xorps xmm0, xmm0
lea ecx, [ebp - 0xc70]
push 0
movups xmmword [ebp - 0xc70], xmm0
movq qword [ebp - 0xc60], xmm0
call fcn.00496120
push 7
lea ecx, [ebp - 0x1268]
mov byte [ebp - 4], 0x46
call fcn.00496120
push eax
lea ecx, [ebp - 0xc70]
call fcn.004965a0
lea ecx, [ebp - 0x1268]
call fcn.00496520
push str.instup
lea ecx, [ebp - 0xc70]
mov byte [ebp - 4], 0x47
call fcn.00496840
lea ecx, [ebp - 0xb68]
push ecx
mov ecx, eax
call fcn.00496600
push 0x5c
lea eax, [ebp - 0xfc0]
push 0
push eax
call fcn.004a6890
add esp, 0xc
call fcn.004515a0
dec eax
cmp eax, 5
ja case.0x41e280.3
jmp dword [eax*4 + 0x41fb9c]
mov edi, 1
jmp 0x41e2a1
mov edi, 0x40
jmp 0x41e2a1
mov edi, 0x258
jmp 0x41e2a1
mov edi, 0x1f4
sub esp, 0x34
mov edx, esp
mov dword [ebp - 0x121c], edx
mov al, byte [ebp - 0xd38]
mov byte [edx], al
mov eax, dword [ebp - 0xd34]
mov ecx, dword [ebp - 0xd30]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov eax, dword [ebp - 0xd2c]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0xd28]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0xd24]
mov dword [edx + 0x14], eax
lea eax, [edx + 0x18]
mov dword [ebp - 0x121c], eax
mov byte [eax + 0x18], 0
mov byte [ebp - 4], 0x48
cmp byte [ebp - 0xd08], 0
je 0x41e313
lea ecx, [ebp - 0xd20]
push ecx
mov ecx, eax
call fcn.0040e330
mov eax, dword [ebp - 0x121c]
mov byte [eax + 0x18], 1
push edi
lea ecx, [ebp - 0xfc0]
mov byte [ebp - 4], 0x47
call fcn.0041aa00
lea eax, [ebp - 0xc70]
mov byte [ebp - 4], 0x49
push eax
push ecx
lea ecx, [ebp - 0xfc0]
call fcn.00426f40
lea ecx, [ebp - 0xf7c]
call fcn.0040a450
cmp byte [ebp - 0xf80], 0
je 0x41e359
lea ecx, [ebp - 0xf98]
call fcn.0040a450
mov eax, dword [ebp - 0xfb8]
test eax, eax
je 0x41e379
mov eax, dword [eax]
push 1
mov edi, dword [eax]
mov ecx, edi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0xfb8]
call edi
lea ecx, [ebp - 0xc70]
call fcn.00496520
cmp esi, 0xffffffff
je 0x41e390
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb68]
call fcn.00496520
cmp byte [ebp - 0xd08], 0
je 0x41e3af
lea ecx, [ebp - 0xd20]
call fcn.0040a450
lea ecx, [ebp - 0xb80]
call fcn.0040a450
mov dword [ebp - 4], 0x3a
mov edi, dword [ebp - 0x1224]
jmp 0x41e498
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
lea ecx, [ebp - 0xdac]
cmovae eax, dword [ebp - 0xaf0]
sub esp, 8
push ecx
push eax
lea ecx, [ebp - 0xf60]
call fcn.004126a0
mov esi, eax
mov dword [ebp - 0x1238], esi
test esi, esi
je 0x41e6a6
cmp byte [ebp - 0x1250], 0
jne 0x41e525
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
push esi
cmovae eax, dword [ebp - 0xaf0]
push eax
push str.The_installer_cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004140d0
add esp, 0x14
call fcn.0041add0
push 0x10
push eax
lea eax, [ebp - 0xac8]
push eax
push dword [ebp - 0xfd0]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0xadc], 8
lea edi, [ebp - 0xaf0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x521bbc]
cmovae edi, dword [ebp - 0xaf0]
movq qword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb18], eax
call fcn.0040b1c0
xorps xmm0, xmm0
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xb10], edx
mov dword [ebp - 0xb0c], 0x2ef
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040b690
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41e5ad
push esi
push edi
push str.Cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0xb20]
push eax
push 7
call fcn.00413f40
mov ecx, dword [ebp - 0xacc]
or edi, 0xffffffff
mov dword [ebp - 0x1228], ecx
test ecx, ecx
je 0x41e607
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41e607
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1228]
call esi
mov ecx, dword [ebp - 0x1228]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41e601
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1228]
call esi
mov esi, dword [ebp - 0x1238]
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0xdec]
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0x123c], ecx
cmp eax, ecx
je 0x41e63b
mov esi, eax
mov ecx, esi
call fcn.00423820
add esi, 8
cmp esi, dword [ebp - 0x123c]
jne 0x41e623
mov esi, dword [ebp - 0x1238]
lea ecx, [ebp - 0xdf0]
call fcn.004209e0
lea eax, [ebp - 0xe20]
push eax
call fcn.004a1dfa
mov eax, dword [ebp - 0xe28]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xe28]
push eax
mov ecx, eax
call fcn.00416c60
push 0x40
push dword [ebp - 0xe28]
call fcn.004a38d3
add esp, 8
lea ecx, [ebp - 0xe40]
call fcn.0040a450
lea ecx, [ebp - 0x1018]
call fcn.00418480
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], 0x14
call fcn.0040a450
jmp 0x41c4a5
cmp byte [ebp - 0x127a], 0
je 0x41e869
push 0x4a
xorps xmm0, xmm0
mov dword [ebp - 0x12bc], 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0x12cc]
mov dword [ebp - 0x12b8], 0
movups xmmword [ebp - 0x12cc], xmm0
call fcn.0040a370
push 0xa
push str.instup.exe
lea ecx, [ebp - 0x12cc]
mov byte [ebp - 4], 0x4d
call fcn.00409fd0
mov dword [ebp - 0xc44], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc54], xmm0
mov dword [ebp - 0xc40], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x1000
movups xmmword [ebp - 0xc54], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc44], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x4e
lea edx, [ebp - 0xc54]
cmp dword [ebp - 0xc40], 8
mov ecx, 0x80000002
push 0x200
cmovae edx, dword [ebp - 0xc54]
call fcn.0048a510
add esp, 4
lea ecx, [ebp - 0xc54]
call fcn.0040a450
lea ecx, [ebp - 0x12cc]
mov byte [ebp - 4], 0x3a
call fcn.0040a450
push 0x4a
xorps xmm0, xmm0
mov dword [ebp - 0x1288], 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0x1298]
mov dword [ebp - 0x1284], 0
movups xmmword [ebp - 0x1298], xmm0
call fcn.0040a370
push 0xa
push str.instup.exe
lea ecx, [ebp - 0x1298]
mov byte [ebp - 4], 0x4f
call fcn.00409fd0
mov dword [ebp - 0xc60], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc70], xmm0
mov dword [ebp - 0xc5c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x800
movups xmmword [ebp - 0xc70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x1224], edi
mov byte [ebp - 4], 0x50
lea edx, [ebp - 0xc70]
cmp dword [ebp - 0xc5c], 8
mov ecx, 0x80000002
push 0x100
cmovae edx, dword [ebp - 0xc70]
call fcn.0048a510
add esp, 4
lea ecx, [ebp - 0xc70]
call fcn.0040a450
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x1298]
call fcn.0040a450
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbb0]
mov dword [eax], str.instup.exe
mov dword [eax + 4], 0xa
call fcn.00486f00
add esp, 0x10
cmp byte [ebp - 0x121d], 0
je 0x41f234
cmp byte [ebp - 0x124c], 0
jne 0x41e8dd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0x1278]
mov edx, eax
call fcn.0041a350
push 1
movzx ecx, al
push edx
push ecx
call fcn.0041a0c0
add esp, 0xc
xorps xmm0, xmm0
mov dword [ebp - 0xbc8], 0
xor eax, eax
mov dword [ebp - 0xbc4], 7
movups xmmword [ebp - 0xbd8], xmm0
mov word [ebp - 0xbd8], ax
push 0x40a4b0
push fcn.0040a1d0
push 2
push 0x18
lea eax, [ebp - 0xddc]
mov byte [ebp - 4], 0x51
push eax
call fcn.004a3f91
xorps xmm0, xmm0
mov dword [ebp - 0xb58], 0
xor eax, eax
mov dword [ebp - 0xb54], 7
movups xmmword [ebp - 0xb68], xmm0
mov word [ebp - 0xb68], ax
mov byte [ebp - 4], 0x53
lea edx, [ebp - 0xaf0]
cmp dword [ebp - 0xadc], 8
mov ecx, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xddc]
mov dword [eax], str.instup.exe
mov dword [eax + 4], 0xa
call fcn.00486f00
cmp dword [ebp - 0xadc], 8
lea edx, [ebp - 0xaf0]
mov ecx, dword [ebp - 0xae0]
cmovae edx, dword [ebp - 0xaf0]
add esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xdc4]
mov dword [eax], str.Instup.dll
mov dword [eax + 4], 0xa
call fcn.00486f00
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
add esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbd8]
mov dword [eax], str.instup.exe
mov dword [eax + 4], 0xa
call fcn.00486f00
add esp, 0x10
lea eax, [ebp - 0xbd8]
cmp dword [ebp - 0xbc4], 8
cmovae eax, dword [ebp - 0xbd8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41ebe8
test al, 0x10
jne 0x41ebe8
cmp dword [ebp - 0x1274], 0x7cb
jbe 0x41ebe8
lea eax, [ebp - 0xddc]
xor edi, edi
mov dword [ebp - 0x1228], eax
test esi, esi
jne 0x41f1f2
cmp dword [ebp - 0x1248], esi
jne 0x41f1f2
push 0x34
lea eax, [ebp - 0xf98]
push esi
push eax
call fcn.004a6890
add esp, 0xc
lea ecx, [ebp - 0xf98]
call fcn.0041fbc0
mov byte [ebp - 4], 0x54
push dword [ebp - 0x1228]
sub esp, 0xc
mov ecx, esp
push str.copy_sfx
call fcn.00413180
lea ecx, [ebp - 0xf98]
call fcn.00420910
add esp, 4
mov ecx, eax
call fcn.0040e200
push 0x4ffc84
sub esp, 0xc
mov ecx, esp
push str.wait
call fcn.00413180
lea ecx, [ebp - 0xf98]
call fcn.00420910
add esp, 4
mov ecx, eax
call fcn.0040a1a0
sub esp, 8
lea eax, [ebp - 0x1268]
lea ecx, [ebp - 0xf98]
push eax
call fcn.004201c0
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.0040a4f0
lea ecx, [ebp - 0xbd8]
mov esi, eax
call fcn.0040a4f0
push 0
lea ecx, [ebp - 0x1248]
mov edx, esi
push 0
push ecx
mov ecx, eax
call fcn.00414770
add esp, 0xc
lea ecx, [ebp - 0x1268]
mov esi, eax
call fcn.0040a450
lea ecx, [ebp - 0xf98]
mov byte [ebp - 4], 0x53
call fcn.0041fe20
add dword [ebp - 0x1228], 0x18
inc edi
cmp edi, 2
jb 0x41ea45
test esi, esi
jne 0x41f1f2
cmp dword [ebp - 0x1248], esi
jne 0x41f1f2
lea eax, [ebp - 0x1214]
push eax
lea ecx, [ebp - 0xc24]
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push 0x50151c
call fcn.00413180
push esi
push edi
lea ecx, [ebp - 0xb68]
call fcn.00486f00
add esp, 0x10
lea eax, [ebp - 0x1214]
lea ecx, [ebp - 0xb68]
push eax
call fcn.0040be90
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.instup.exe
call fcn.00413180
push esi
push edi
lea ecx, [ebp - 0xb68]
call fcn.00486f00
add esp, 0x10
lea ecx, [ebp - 0xb68]
call fcn.00486690
test al, al
je 0x41f1f2
lea eax, [ebp - 0xb68]
push eax
lea ecx, [ebp - 0xbb0]
call fcn.0040e200
jmp 0x41f1f2
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbd8]
mov dword [eax], str.setup.ovr
mov dword [eax + 4], 9
call fcn.00486f00
add esp, 0x10
lea eax, [ebp - 0xbd8]
cmp dword [ebp - 0xbc4], 8
cmovae eax, dword [ebp - 0xbd8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41f1f2
test al, 0x10
jne 0x41f1f2
xorps xmm0, xmm0
mov dword [ebp - 0xcf4], 0
xor eax, eax
mov dword [ebp - 0xcf0], 7
movups xmmword [ebp - 0xd04], xmm0
mov word [ebp - 0xd04], ax
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0xb08]
push 8
push str._copysfx
movups xmmword [ebp - 0xb08], xmm0
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 0xaf4], eax
call fcn.0040a370
push 2
push 0x502d5c
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x57
call fcn.00409fd0
mov dword [ebp - 0xb10], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xb20], xmm0
mov dword [ebp - 0xb0c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb20], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x1224], 0x40
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0xddc]
cmp dword [ebp - 0xdc8], 8
lea ecx, [ebp - 0xb20]
push dword [ebp - 0xdcc]
cmovae eax, dword [ebp - 0xddc]
push eax
call fcn.00409fd0
mov dword [ebp - 0x12a0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x12b0], xmm0
mov dword [ebp - 0x129c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12b0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x12a0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x1224], 0x80
push 1
push 0x501730
lea ecx, [ebp - 0x12b0]
mov byte [ebp - 4], 0x59
call fcn.00409fd0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb78], xmm0
movups xmmword [ebp - 0xb38], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xad0], xmm0
movq qword [ebp - 0xb28], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0xd04]
or dword [ebp - 0x1224], 0x100
call fcn.0040a450
movups xmm0, xmmword [ebp - 0xb78]
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb24], 7
movups xmmword [ebp - 0xd04], xmm0
movq xmm0, qword [ebp - 0xad0]
movq qword [ebp - 0xcf4], xmm0
xor eax, eax
lea ecx, [ebp - 0xb38]
mov word [ebp - 0xb38], ax
call fcn.0040a450
lea ecx, [ebp - 0x12b0]
call fcn.0040a450
lea ecx, [ebp - 0xb20]
call fcn.0040a450
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x56
call fcn.0040a450
cmp dword [ebp - 0xcf0], 8
lea edx, [ebp - 0xd04]
push 0
cmovae edx, dword [ebp - 0xd04]
lea eax, [ebp - 0x1248]
cmp dword [ebp - 0xbc4], 8
lea ecx, [ebp - 0xbd8]
push 0
cmovae ecx, dword [ebp - 0xbd8]
push eax
call fcn.00414770
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x41eeeb
mov ecx, dword [ebp - 0x1248]
cmp ecx, 0x2000000a
jne 0x41eec4
push 0xbb8
mov dword [ebp - 0x1248], 0xa004
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xd04]
call fcn.0040a450
jmp 0x41ec50
cmp ecx, 0x20000000
je 0x41eee1
cmp ecx, 0x20000001
je 0x41eee1
mov esi, 5
mov dword [ebp - 0x1248], esi
jmp 0x41eef1
xor esi, esi
mov dword [ebp - 0x1248], esi
jmp 0x41eef1
mov esi, dword [ebp - 0x1248]
lea ecx, [ebp - 0xd04]
mov byte [ebp - 4], 0x53
call fcn.0040a450
test edi, edi
jne 0x41f1f2
test esi, esi
jne 0x41f1f2
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb50]
mov dword [eax], 0x50151c
mov dword [eax + 4], 3
call fcn.00486f00
cmp dword [ebp - 0xb3c], 8
lea edx, [ebp - 0xb50]
mov ecx, dword [ebp - 0xb40]
cmovae edx, dword [ebp - 0xb50]
add esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbb0]
mov dword [eax], str.avast.setup
mov dword [eax + 4], 0xb
call fcn.00486f00
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x121c], eax
test eax, eax
je 0x41f1f2
xorps xmm0, xmm0
mov dword [ebp - 0x1210], esi
movq qword [ebp - 0x1218], xmm0
mov dword [ebp - 0x1218], esi
mov dword [ebp - 0x1214], esi
mov dword [ebp - 0x1210], esi
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, eax
call fcn.00418bb0
add esp, 4
test al, al
je 0x41f1db
mov esi, dword [ebp - 0x1218]
cmp esi, dword [ebp - 0x1214]
je 0x41f1db
mov eax, dword fs:[0x2c]
mov edi, dword [eax]
push esi
lea ecx, [ebp - 0xb98]
call fcn.0040e330
mov byte [ebp - 4], 0x5b
mov eax, dword [0x526ca0]
cmp eax, dword [edi + 4]
jle 0x41f045
push 0x526ca0
call fcn.004a3c6a
add esp, 4
cmp dword [0x526ca0], 0xffffffff
jne 0x41f045
mov byte [ebp - 4], 0x5c
call fcn.004a1321
push 0x526ca0
mov dword [0x526c9c], eax
mov byte [ebp - 4], 0x5b
call fcn.004a3c20
add esp, 4
cmp dword [ebp - 0xb84], 8
lea edx, [ebp - 0xb98]
mov ecx, dword [ebp - 0xb88]
cmovae edx, dword [ebp - 0xb98]
sub esp, 8
mov eax, esp
push ecx
push edx
mov edx, dword [0x526c9c]
mov ecx, 5
mov dword [eax], str.path
mov dword [eax + 4], 5
call fcn.00416440
add esp, 0x10
lea ecx, [ebp - 0xb98]
test eax, eax
je 0x41f0ad
mov byte [ebp - 4], 0x5a
call fcn.0040a450
add esi, 0x18
cmp esi, dword [ebp - 0x1214]
jne 0x41eff3
jmp 0x41f1db
mov eax, dword [ebp - 0xb88]
dec eax
push eax
call fcn.0040e230
cmp word [eax], 0x3b
je 0x41f0e8
push 0x502d9c
mov edx, esi
lea ecx, [ebp - 0x1268]
call fcn.00409d00
add esp, 4
mov ecx, esi
push eax
call fcn.0040e250
lea ecx, [ebp - 0x1268]
call fcn.0040a450
mov edx, dword [esi + 0x10]
mov eax, 0x7ffffffe
mov edi, dword [ebp - 0xae0]
sub eax, edx
cmp eax, edi
jb 0x41fb91
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x41f10a
mov ecx, dword [esi]
cmp dword [ebp - 0xadc], 8
lea eax, [ebp - 0xaf0]
push edi
cmovae eax, dword [ebp - 0xaf0]
push eax
push edx
push ecx
push ecx
push dword [ebp - 0xad4]
lea ecx, [ebp - 0x1268]
call fcn.00409de0
push 1
push 0x502d9c
lea ecx, [ebp - 0x1268]
mov byte [ebp - 4], 0x5d
call fcn.00409fd0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb80], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb70], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0xb80]
push eax
mov ecx, esi
call fcn.0040e250
lea ecx, [ebp - 0xb80]
call fcn.0040a450
lea ecx, [ebp - 0x1268]
mov byte [ebp - 4], 0x5b
call fcn.0040a450
lea edx, [ebp - 0x1218]
lea ecx, [ebp - 0xb2c]
call fcn.00418d50
push eax
lea ecx, [ebp - 0xbbc]
call fcn.00418f20
lea ecx, [ebp - 0xb2c]
call fcn.0040bcf0
lea ecx, [ebp - 0xb98]
call fcn.0040a450
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0x1280], eax
push dword [ebp - 0x121c]
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0x1218]
call fcn.0040c0d0
lea ecx, [ebp - 0xb68]
call fcn.0040a450
push 0x40a4b0
push 2
push 0x18
lea eax, [ebp - 0xddc]
mov byte [ebp - 4], 0x51
push eax
call fcn.004a4005
lea ecx, [ebp - 0xbd8]
mov byte [ebp - 4], 0x3a
call fcn.0040a450
cmp byte [ebp - 0x124c], 0
jne 0x41f2fd
jmp 0x41f26c
cmp byte [ebp - 0x124c], 0
jne 0x41f2fd
lea eax, [ebp - 0xa0]
push eax
sub esp, 0xc
mov ecx, esp
push 0x501638
call fcn.00413180
lea ecx, [ebp - 0xc0c]
call fcn.00420910
add esp, 4
mov ecx, eax
call fcn.0040a1a0
push 0xb
push str.ga_clientid
lea ecx, [ebp - 0xc0c]
call fcn.00416160
mov ecx, eax
test ecx, ecx
jne 0x41f2d9
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov dword [ebp - 0xad4], esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, esp
push 0xb
movups xmmword [ecx], xmm0
push str.ga_clientid
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040a370
lea ecx, [ebp - 0xc0c]
mov byte [ebp - 4], 0x3a
call fcn.00420b90
mov ecx, eax
lea eax, [ebp - 0xc88]
cmp ecx, eax
je 0x41f2fd
cmp dword [ebp - 0xc74], 8
push dword [ebp - 0xc78]
cmovae eax, dword [ebp - 0xc88]
push eax
call fcn.0040a090
cmp dword [ebp - 0xb9c], 8
lea esi, [ebp - 0xbb0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x521bbc]
cmovae esi, dword [ebp - 0xbb0]
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b1c0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x38f
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040b690
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41f384
push esi
push 0x502da0
lea eax, [ebp - 0xb08]
push eax
push 2
call fcn.0040daf0
mov byte [ebp - 4], 0x3a
or edi, 0xffffffff
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1228], ecx
test ecx, ecx
je 0x41f3dc
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f3dc
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1228]
call esi
mov ecx, dword [ebp - 0x1228]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41f3dc
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1228]
call esi
sub esp, 8
lea eax, [ebp - 0xe88]
lea ecx, [ebp - 0xc0c]
push eax
call fcn.004201c0
mov byte [ebp - 4], 0x60
mov esi, dword [ebp - 0x1244]
test esi, esi
je 0x41f44c
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f404
sub ecx, edx
sar ecx, 1
je 0x41f44c
push 1
push 0x502df8
lea ecx, [ebp - 0xe88]
call fcn.00409fd0
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f430
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xe88]
call fcn.00409fd0
mov eax, dword [ebp - 0x1280]
lea edx, [ebp - 0xe88]
xor ecx, ecx
mov esi, eax
cmp eax, dword [ebp - 0xbb8]
lea eax, [ebp - 0x1018]
cmove esi, ecx
cmp dword [ebp - 0xfd0], ecx
push esi
cmove eax, ecx
cmp dword [ebp - 0xe74], 8
push eax
cmovae edx, dword [ebp - 0xe88]
lea eax, [ebp - 0x1248]
cmp dword [ebp - 0xb9c], 8
lea ecx, [ebp - 0xbb0]
push eax
cmovae ecx, dword [ebp - 0xbb0]
call fcn.00414770
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x1238], esi
test esi, esi
je 0x41f703
cmp byte [ebp - 0x1250], 0
jne 0x41f569
cmp dword [ebp - 0xb9c], 8
lea eax, [ebp - 0xbb0]
push esi
cmovae eax, dword [ebp - 0xbb0]
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
lea eax, [ebp - 0xac8]
push 0x410
push eax
call fcn.004140d0
mov eax, dword fs:[0x2c]
add esp, 0x14
mov ecx, dword [eax]
mov eax, dword [0x528f58]
cmp eax, dword [ecx + 4]
jle 0x41f54e
push 0x528f58
call fcn.004a3c6a
add esp, 4
cmp dword [0x528f58], 0xffffffff
jne 0x41f54e
mov byte [ebp - 4], 0x61
call fcn.004515a0
cmp eax, 1
mov byte [ebp - 4], 0x60
mov edx, str.AVG_Antivirus
mov ecx, 0x501bc0
cmovne ecx, edx
push 0x528f58
mov dword [0x528f5c], ecx
call fcn.004a3c20
add esp, 4
push 0x10
push dword [0x528f5c]
lea eax, [ebp - 0xac8]
push eax
push dword [ebp - 0xfd0]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0xb9c], 8
lea eax, [ebp - 0xbb0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
cmovae eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x121c], eax
mov eax, dword [0x521bbc]
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b1c0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x3a1
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040b690
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41f5fc
push esi
push dword [ebp - 0x121c]
lea eax, [ebp - 0xb08]
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
push eax
push 7
call fcn.00413f40
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1244], ecx
test ecx, ecx
je 0x41f653
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f653
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov ecx, dword [ebp - 0x1244]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41f64d
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov esi, dword [ebp - 0x1238]
lea ecx, [ebp - 0xe88]
call fcn.0040a450
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0xdec]
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0x123c], ecx
cmp eax, ecx
je 0x41f698
mov esi, eax
nop word [eax + eax]
mov ecx, esi
call fcn.00423820
add esi, 8
cmp esi, dword [ebp - 0x123c]
jne 0x41f680
mov esi, dword [ebp - 0x1238]
lea ecx, [ebp - 0xdf0]
call fcn.004209e0
lea eax, [ebp - 0xe20]
push eax
call fcn.004a1dfa
mov eax, dword [ebp - 0xe28]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xe28]
push eax
mov ecx, eax
call fcn.00416c60
push 0x40
push dword [ebp - 0xe28]
call fcn.004a38d3
add esp, 8
lea ecx, [ebp - 0xe40]
call fcn.0040a450
lea ecx, [ebp - 0x1018]
call fcn.00418480
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], 0x14
call fcn.0040a450
jmp 0x41c4a5
cmp dword [ebp - 0xb9c], 8
lea eax, [ebp - 0xbb0]
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
cmovae eax, dword [ebp - 0xbb0]
mov esi, dword [ebp - 0x1248]
mov dword [ebp - 0x121c], eax
mov eax, dword [0x521bbc]
mov dword [ebp - 0x1238], esi
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b1c0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x3a9
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040b690
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41f7a2
push esi
push dword [ebp - 0x121c]
lea eax, [ebp - 0xb08]
push str.Installer_updater_executable__s_finished__process_return_code_0x_x_
push eax
push 2
call fcn.00413f40
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1244], ecx
test ecx, ecx
je 0x41f7f9
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f7f9
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov ecx, dword [ebp - 0x1244]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41f7f3
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov esi, dword [ebp - 0x1238]
lea ecx, [ebp - 0xe88]
call fcn.0040a450
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0xdec]
mov eax, dword [ebp - 0xdf0]
mov dword [ebp - 0x123c], ecx
cmp eax, ecx
je 0x41f838
mov esi, eax
mov ecx, esi
call fcn.00423820
add esi, 8
cmp esi, dword [ebp - 0x123c]
jne 0x41f820
mov esi, dword [ebp - 0x1238]
lea ecx, [ebp - 0xdf0]
call fcn.004209e0
lea eax, [ebp - 0xe20]
push eax
call fcn.004a1dfa
mov eax, dword [ebp - 0xe28]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xe28]
push eax
mov ecx, eax
call fcn.00416c60
push 0x40
push dword [ebp - 0xe28]
call fcn.004a38d3
add esp, 8
lea ecx, [ebp - 0xe40]
call fcn.0040a450
lea ecx, [ebp - 0x1018]
call fcn.00418480
lea ecx, [ebp - 0xcec]
mov byte [ebp - 4], 0x14
call fcn.0040a450
jmp 0x41c4a5
sub esp, 8
call fcn.00486be0
add esp, 8
cmp byte [ebp - 0x1231], 0
je 0x41f8bc
call fcn.00414dd0
movq xmm0, qword [str.sfxinst]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x521bbc]
movq qword [ebp - 0xb08], xmm0
mov dword [ebp - 0xb00], eax
call fcn.0040b1c0
xorps xmm0, xmm0
mov dword [ebp - 0xafc], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xaf8], edx
mov dword [ebp - 0xaf4], 0x3c6
movlpd qword [ebp - 0xad0], xmm0
call fcn.0040b690
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0xad0]
test ecx, ecx
je 0x41f92f
push esi
push str.Leaving_SFX_stub_guarded_code_section__return_code_0x_x_
lea eax, [ebp - 0xb08]
push eax
push 2
call fcn.00413d50
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0x1244], ecx
test ecx, ecx
je 0x41f97f
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f97f
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1244]
call esi
mov eax, dword [ebp - 0x1244]
lock xadd dword [eax + 8], edi
dec edi
jne 0x41f97f
mov eax, dword [eax]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4ed33c]
mov ecx, dword [ebp - 0x1244]
call esi
lea ecx, [ebp - 0xcd4]
call fcn.0040a450
lea ecx, [ebp - 0xca4]
call fcn.0040a450
lea ecx, [ebp - 0xc88]
call fcn.0040a450
lea ecx, [ebp - 0xc3c]
call fcn.0040a450
lea ecx, [ebp - 0x1200]
call fcn.0041fe50
mov edx, dword [ebp - 0x1280]
mov byte [ebp - 4], 0xe
test edx, edx
je 0x41f9f4
mov ecx, dword [ebp - 0xbb4]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x41f9ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb96
push ecx
push edx
call fcn.004a38d3
add esp, 8
lea ecx, [ebp - 0xcbc]
call fcn.0040a450
lea eax, [ebp - 0xda8]
mov dword [ebp - fcn.0040e860], vtable.ProgressCallback.0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0xd90]
test eax, eax
je 0x41fa27
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xd40]
call fcn.0040f3c0
lea ecx, [ebp - 0xd60]
call fcn.0040a450
lea ecx, [ebp - 0xd78]
call fcn.0040a450
lea ecx, [ebp - 0xd8c]
call fcn.0040e1a0
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0xf48]
mov dword [ebp - 0xec4], 0
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0x4ed33c]
lea ecx, [ebp - 0xf48]
call esi
lea eax, [ebp - 0xebc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0xed0]
call fcn.00413080
lea ecx, [ebp - 0xee8]
call fcn.0040a450
lea ecx, [ebp - 0xf00]
call fcn.0040a450
lea ecx, [ebp - 0xf28]
call fcn.0040a450
lea ecx, [ebp - 0xf48]
call fcn.00491e00
lea ecx, [ebp - 0xf60]
call fcn.0040a450
lea ecx, [ebp - 0xbe4]
call fcn.0040c0d0
lea ecx, [ebp - 0xbf0]
call fcn.004210c0
cmp byte [ebp - 0xbf4], 0
je 0x41faf3
lea ecx, [ebp - 0xc0c]
call fcn.0040a450
lea ecx, [ebp - 0xc24]
call fcn.0040a450
lea ecx, [ebp - 0xe70]
call fcn.0040a450
lea ecx, [ebp - 0xe58]
call fcn.0040a450
lea ecx, [ebp - 0xea0]
call fcn.0040a450
lea ecx, [ebp - 0xaf0]
call fcn.0040a450
lea ecx, [ebp - 0xb50]
call fcn.0040a450
lea ecx, [ebp - 0xbb0]
call fcn.0040a450
mov eax, dword [ebp - 0x1238]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004a389b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
call fcn.0040a1f0
call fcn.0040c550
push str.Invalid_brand
lea ecx, [ebp - 0x1318]
call fcn.00491020
push 0x51dbe4
lea eax, [ebp - 0x1318]
push eax
call fcn.004a629b
call fcn.0040a1f0
call fcn.004b013f
nop
xchg edx, esp
inc ecx
add byte [esi + 0x700041e2], cl
sti
inc ecx
add byte [eax - 5], dh
inc ecx
add byte [edx - 0x1d6affbf], bl
inc ecx
add ah, cl
int3