Function at 0x428f74
Capabilities:
Create thread
Delete file
Terminate process

Disassembly:
push 0x5c
mov eax, 0x4bf5dd
call fcn.00494508
mov esi, ecx
xor ebx, ebx
lea eax, [ebp - 0x1c]
push eax
push ebx
push esi
push 0x428115
push ebx
push ebx
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0xa48], eax
cmp eax, ebx
jne 0x428fd7
push str.actionerrorvaluespawnthreads
lea ecx, [ebp - 0x24]
call fcn.00472760
mov dword [ebp - 4], ebx
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00472740
mov eax, 0x80004005
call fcn.004945e0
ret
cmp dword [esi + 0xeb8], ebx
jne 0x4290fa
cmp dword [esi + 0x34], ebx
jne 0x429016
cmp dword [esi + 0x1c4], ebx
jne 0x429016
push ebx
push 0x4234b6
push ebx
push 0x7f
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
lea ecx, [esi + 4]
mov dword [esi + 0x1c4], eax
mov eax, dword [ecx]
push ebx
call dword [eax + 4]
lea ecx, [ebp - 0x18]
call fcn.004724b0
lea eax, [ebp - 0x18]
push eax
push 0xb0
mov ecx, esi
mov dword [ebp - 4], 1
call fcn.00424fbc
cmp byte [ebp - 0x11], 0xff
lea eax, [ebp - 0x18]
jne 0x429041
mov eax, dword [ebp - 0x18]
push eax
push dword [esi + 0x1c4]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x640000
push ebx
push 0x401
push 0x3f0
push dword [esi + 0x1c4]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push esi
push 0xffffffffffffffeb
push dword [esi + 0x1c4]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 5
push dword [esi + 0x1c4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 0x1c4]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x64]
mov dword [ebp - 0x68], ebx
rep stosd dword es:[edi], eax
jmp 0x4290d2
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
cmp eax, ebx
je 0x4290cb
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x4290d2
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0xa48], ebx
jne 0x4290a2
push dword [esi + 0x1c4]
call dword [sym.imp.USER32.dll_DestroyWindow]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
mov dword [esi + 0x1c4], ebx
call fcn.00472740
jmp 0x429109
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0xa48], ebx
jne 0x4290fa
cmp dword [esi + 0x14c], ebx
je 0x429127
mov eax, dword [esi + 0x40]
neg eax
sbb eax, eax
and eax, 0x7fffbffb
add eax, 0x80004005
jmp 0x428fd1
cmp dword [esi + 0x40], ebx
je 0x428fcc
cmp dword [esi + 0xa58], ebx
je 0x428fcc
lea edi, [esi + 0x16c]
push 0x4cdb68
push edi
call fcn.0040d57d
pop ecx
pop ecx
test al, al
jne 0x429168
push str.RealPlayer_Cloud
push edi
call fcn.0040d57d
pop ecx
pop ecx
test al, al
je 0x429409
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
call fcn.0041baae
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.inst_configcompat.dll
push eax
push ecx
mov dword [ebp - 4], 2
call fcn.00473040
add esp, 0xc
call fcn.00414670
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x24]
mov edi, eax
call fcn.00472740
mov dword [ebp - 0x10], ebx
cmp edi, ebx
je 0x4291c8
push str.RPIsPlusEnabled
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x4291c1
call eax
mov dword [ebp - 0x10], eax
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [esi + 0x34], ebx
jne 0x429409
cmp dword [ebp - 0x10], ebx
je 0x429409
cmp dword [esi + 0x4f8], ebx
jne 0x429409
mov eax, dword [esi + 8]
push ebx
push 0x461
lea ecx, [esi + 8]
call dword [eax]
cmp eax, 0x45f
jne 0x42935f
push str.actionclickvaluedlg_plus_continue
lea ecx, [ebp - 0x24]
call fcn.00472760
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
mov dword [ebp - 4], 3
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00472740
mov eax, dword [esi + 8]
push ebx
push 0x467
lea ecx, [esi + 8]
call dword [eax]
cmp eax, 0x45f
jne 0x4292b3
lea ecx, [ebp - 0x18]
call fcn.004724b0
push ebx
lea eax, [ebp - 0x18]
push eax
push str.CookiesPath
push str.RealMediaSDK
push SysReAllocString
mov dword [ebp - 4], 4
call fcn.0041022e
add esp, 0x14
test eax, eax
je 0x429282
cmp byte [ebp - 0x11], 0xff
lea eax, [ebp - 0x18]
jne 0x42927b
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.actionclickvaluedlg_plus2_continue
lea ecx, [ebp - 0x24]
call fcn.00472760
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
mov byte [ebp - 4], 5
call dword [eax + 0x10]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.00472740
lea ecx, [ebp - 0x18]
jmp 0x429354
cmp eax, 0x468
jne 0x42931f
push str.actioncancelvaluedlg_plus2_learnmore
lea ecx, [ebp - 0x24]
call fcn.00472760
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
mov dword [ebp - 4], 6
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00472740
lea edi, [esi + 0x424]
mov ecx, edi
call fcn.0040d513
push ecx
push ecx
mov dword [ebp - 0x14], esp
test al, al
jne 0x429302
mov eax, esp
push edi
push eax
jmp 0x42930c
lea eax, [esi + 0x41c]
mov ecx, esp
push eax
push ecx
mov ecx, esi
call fcn.004238b9
call fcn.00424c7f
pop ecx
pop ecx
jmp 0x4293cc
cmp eax, 0x45e
jne 0x4293d3
push str.actioncancelvaluedlg_plus2_cancel
lea ecx, [ebp - 0x24]
mov dword [esi + 0x14], 1
call fcn.00472760
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
mov dword [ebp - 4], 7
call dword [eax + 0x10]
lea ecx, [ebp - 0x24]
or dword [ebp - 4], 0xffffffff
call fcn.00472740
jmp 0x4293d3
cmp eax, 0x45e
jne 0x42937c
push str.actioncancelvaluedlg_plus_cancel
lea ecx, [ebp - 0x24]
call fcn.00472760
mov dword [ebp - 4], 8
jmp 0x4293b4
cmp eax, 0x460
jne 0x4293cc
push ecx
push ecx
mov ecx, esp
lea eax, [esi + 0x41c]
mov dword [ebp - 0x14], esp
push eax
push ecx
mov ecx, esi
call fcn.004238b9
call fcn.00424c7f
pop ecx
pop ecx
push str.actioncancelvaluedlg_plus_upgrade
lea ecx, [ebp - 0x24]
call fcn.00472760
mov dword [ebp - 4], 9
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, esi
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00472740
mov dword [esi + 0x14], 1
cmp dword [esi + 0x14], ebx
je 0x429409
mov eax, dword [esi + 0x4f0]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
cmp eax, ebx
je 0x4293f8
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esi + 0x4f0], ebx
mov dword [esi + 0x14], 1
mov eax, 0x8000aaa3
jmp 0x428fd1
lea ecx, [esi + 0x1cc]
call fcn.00420135
test eax, eax
jns 0x429431
push str.actionerrorvaluecreatedialog
lea ecx, [ebp - 0x24]
call fcn.00472760
mov dword [ebp - 4], 0xa
jmp 0x428fb4
cmp dword [esi + 0x1d4], ebx
jne 0x429452
push str.actionerrorvaluecreatedialog
lea ecx, [ebp - 0x24]
call fcn.00472760
mov dword [ebp - 4], 0xb
jmp 0x428fb4
mov eax, dword [esi + 0x5d0]
cmp eax, dword [esi + 0x5d4]
je 0x42951e
lea edi, [eax + 0x4c]
lea eax, [edi + 8]
cmp dword [eax - 0x44], ebx
jne 0x429509
push str.main
push eax
call fcn.0040d5c5
pop ecx
pop ecx
test al, al
jne 0x429509
push 0x2c
mov ecx, edi
call fcn.004724f0
mov dword [ebp - 0x14], eax
xor eax, eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x14], eax
jl 0x429509
push dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push 0x2c
push eax
mov ecx, edi
call fcn.004730e0
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x634]
mov dword [ebp - 4], 0xc
call fcn.00428ef1
test eax, eax
je 0x4294ce
cmp dword [esi + 0x34], ebx
je 0x4294e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00472740
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x14]
jle 0x42949f
jmp 0x429509
lea eax, [edi - 0x44]
push eax
lea ecx, [esi + 0xa28]
call fcn.00473a10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
mov dword [edi - 0x3c], 1
call fcn.00472740
add edi, 0xd0
lea ecx, [edi - 0x4c]
cmp ecx, dword [esi + 0x5d4]
jne 0x429467
mov eax, dword [esi + 0x5d0]
cmp eax, dword [esi + 0x5d4]
je 0x429696
lea edi, [eax + 0x4c]
cmp dword [edi - 0x3c], ebx
jne 0x429681
lea eax, [edi + 8]
push str.main
push eax
call fcn.0040d57d
pop ecx
pop ecx
test al, al
jne 0x429681
push 0x2c
mov ecx, edi
call fcn.004724f0
mov dword [ebp - 0x14], eax
lea eax, [edi - 8]
push eax
lea eax, [ebp - 0x3c]
push str.Step_list_in_GetConfigStub:
push eax
call fcn.00473090
push 0x4cdc80
push eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 4], 0xd
call fcn.00473040
push edi
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0xe
call fcn.00472ff0
push eax
mov byte [ebp - 4], 0xf
call fcn.00411cd0
add esp, 0x28
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
call fcn.00472740
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xd
call fcn.00472740
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.00472740
xor eax, eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x14], eax
jl 0x429681
push dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push 0x2c
push eax
mov ecx, edi
call fcn.004730e0
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x634]
mov dword [ebp - 4], 0x10
call fcn.00428ef1
test eax, eax
je 0x429666
cmp dword [esi + 0x34], ebx
jne 0x429666
lea eax, [edi - 8]
push eax
lea eax, [ebp - 0x4c]
push str.Adding
push eax
call fcn.00473090
push str._to_download_list.
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x11
call fcn.00473040
push eax
mov byte [ebp - 4], 0x12
call fcn.00411cd0
add esp, 0x1c
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x11
call fcn.00472740
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
call fcn.00472740
lea eax, [edi - 0x44]
push eax
lea ecx, [esi + 0xa28]
call fcn.00473a10
mov dword [edi - 0x3c], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00472740
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x14]
jle 0x4295d7
add edi, 0xd0
lea ecx, [edi - 0x4c]
cmp ecx, dword [esi + 0x5d4]
jne 0x429533
cmp dword [esi + 0x28], ebx
je 0x429708
mov edi, 0x4cdb68
push edi
mov esi, str.Gemini
push esi
call fcn.00410780
pop ecx
pop ecx
cmp eax, ebx
je 0x429708
push ebx
push ebx
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push esi
call fcn.00410780
pop ecx
pop ecx
cmp eax, ebx
je 0x429708
lea ecx, [ebp - 0x10]
push ecx
push eax
mov dword [ebp - 0x10], ebx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x10]
push 1
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
cmp esi, ebx
je 0x429708
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x428fd1