Function at 0x42c17f
Capabilities:
Contain obfuscated stackstrings
Identify system language via api
Query environment variable

Disassembly:
push 0x28c
mov eax, 0x465fdb
call fcn.0043f429
mov ebx, ecx
mov esi, dword [ebp + 0x24]
mov dword [ebp - 0x288], esi
and dword [ebp - 4], 0
cmp byte [ebx + 0x43c], 0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantInit]
je 0x42cb29
push dword [ebp + 0x18]
call edi
push 0
push str.operatingsystemcondition
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b26c
test eax, eax
jne 0x42c831
cmp byte [ebx + 0x266], al
jne 0x42c831
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47602c
mov edi, 0x46c7e0
push str.operatingsystemcondition
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.004253ea
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00401500
push 1
push dword [ebx + 0x38]
mov ecx, ebx
push str.MajorVersion
push dword [ebp - 0x288]
mov byte [ebx + 0x265], 1
call fcn.004255b3
test al, al
jne 0x42c278
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 2
push 1
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.004253ea
lea ecx, [ebp - 0x40]
jmp 0x42d884
push 1
push dword [ebx + 0x3c]
mov ecx, ebx
push str.MinorVersion
push dword [ebp - 0x288]
call fcn.004255b3
test al, al
jne 0x42c2d8
cmp dword [ebx + 0x44], 1
movzx eax, byte [ebx + 0x42]
jne 0x42c2b6
push 1
push eax
push str.MinorVersion
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.004255b3
test al, al
jne 0x42c2d8
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 3
jmp 0x42c261
cmp dword [ebx + 0x44], 1
jne 0x42c323
cmp byte [ebx + 0x42], 0x5a
jne 0x42c323
push 1
push 0x5a
push str.MinorVersion
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.004255b3
test al, al
jne 0x42c323
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 4
jmp 0x42c261
movzx eax, word [ebx + 0x25c]
push 5
push eax
push str.ServicePackMajorMin
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.004255b3
test al, al
jne 0x42c368
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 5
jmp 0x42c261
movzx eax, word [ebx + 0x25c]
push 3
push eax
push str.ServicePackMajorMax
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.004255b3
test al, al
jne 0x42c3ad
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 6
jmp 0x42c261
push 5
push dword [ebx + 0x40]
mov ecx, ebx
push str.BuildNumber
push dword [ebp - 0x288]
call fcn.004255b3
test al, al
jne 0x42c3ed
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 7
jmp 0x42c261
push 1
push dword [ebx + 0x44]
mov ecx, ebx
push str.PlatformId
push dword [ebp - 0x288]
call fcn.004255b3
test al, al
jne 0x42c42d
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 8
jmp 0x42c261
mov ecx, dword [ebp - 0x288]
push str.CSDVersion
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 9
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xb
call fcn.00412e1c
cmp dword [ebp - 0x8c], 0
je 0x42c58c
push 1
push 0
lea eax, [ebp - 0xa0]
push eax
mov ecx, ebx
call fcn.004253ea
push 1
lea eax, [ebp - 0x281]
push eax
push 0x46bec4
lea ecx, [ebp - 0x100]
call fcn.00403400
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.0042d961
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xb
call fcn.00401500
push 1
lea eax, [ebp - 0x281]
push eax
lea eax, [ebx + 0x48]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402330
push 1
lea eax, [ebp - 0x281]
push eax
push 0x46bec4
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xd
call fcn.00403400
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xe
call fcn.0042d961
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xd
call fcn.00401500
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.004063e0
test eax, eax
jle 0x42c57d
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf
call fcn.004253ea
lea ecx, [ebp - 0x40]
call fcn.00401500
lea ecx, [ebp - 0x160]
jmp 0x42c7e1
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xb
call fcn.00401500
movzx eax, byte [ebx + 0x262]
push 1
push eax
push str.ProductType
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.0042564c
test al, al
jne 0x42c5e3
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 1
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x10
call fcn.004253ea
lea ecx, [ebp - 0x40]
jmp 0x42c7e1
mov ecx, dword [ebp - 0x288]
push str.Language
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
call fcn.00412e1c
cmp dword [ebp - 0x5c], 0
je 0x42c698
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
call fcn.004253ea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x70]
call fcn.0042d908
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
cmp dword [ebp - 0x28c], eax
je 0x42c698
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xa8], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x14
call fcn.004253ea
lea ecx, [ebp - 0xd0]
jmp 0x42c7d9
mov ecx, dword [ebp - 0x288]
push str.Bits
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x15
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x17
call fcn.00412e1c
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x130]
call fcn.0042d908
mov eax, dword [ebp - 0x28c]
test al, 1
je 0x42c729
call fcn.004354ca
test al, al
je 0x42c7f1
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x18
jmp 0x42c7bc
test al, 2
je 0x42c75c
call fcn.004354ca
test al, al
jne 0x42c7f1
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x19
jmp 0x42c7bc
test al, 4
je 0x42c78f
call fcn.004354ff
test al, al
jne 0x42c7f1
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x1a
jmp 0x42c7bc
test al, 8
je 0x42c7f1
call fcn.004354e3
test al, al
jne 0x42c7f1
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x1b
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.004253ea
lea ecx, [ebp - 0x40]
call fcn.00401500
lea ecx, [ebp - 0x130]
call fcn.00401500
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0xa0]
jmp 0x42d884
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x1c
call fcn.004253ea
lea ecx, [ebp - 0x40]
call fcn.00401500
mov byte [ebx + 0x266], 1
jmp 0x42c7d3
cmp byte [ebx + 0x43c], 0
je 0x42cb29
push dword [ebp + 0x18]
call edi
push 0
push str.condition
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b26c
test eax, eax
jne 0x42cb29
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47602c
mov edi, 0x46c7e0
push str.condition
lea ecx, [ebp - 0x70]
mov byte [ebx + 0x267], 1
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x1d
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
mov ecx, dword [ebp - 0x288]
push str.Type
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x1e
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x20
call fcn.00412e1c
mov ecx, dword [ebp - 0x288]
push str.Comparison
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x21
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x23
call fcn.00412e1c
mov ecx, dword [ebp - 0x288]
push str.Path
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x24
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call fcn.00412e1c
mov ecx, dword [ebp - 0x288]
push str.FileName
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x27
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x29
call fcn.00412e1c
mov ecx, dword [ebp - 0x288]
push str.ReturnValue
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x2a
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.00412e1c
mov ecx, dword [ebp - 0x288]
push str.Bits
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x2d
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x2f
call fcn.00412e1c
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, ebx
call fcn.004252f8
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, ebx
call fcn.00425840
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
push 0
lea ecx, [ebp - 0x70]
test al, al
lea eax, [ebp - 0x281]
push eax
jne 0x42cac2
push str.____Failed_
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x30
call fcn.004253ea
lea ecx, [ebp - 0x70]
call fcn.00401500
mov byte [ebx + 0x268], 0
jmp 0x42cae7
push str.____Successful
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x31
call fcn.004253ea
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x130]
call fcn.00401500
lea ecx, [ebp - 0xa0]
call fcn.00401500
lea ecx, [ebp - 0x190]
call fcn.00401500
lea ecx, [ebp - 0x1c0]
call fcn.00401500
lea ecx, [ebp - 0x1f0]
call fcn.00401500
lea ecx, [ebp - 0x100]
jmp 0x42d884
push dword [ebp + 0x18]
call edi
push 0
push str.file
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b26c
test eax, eax
jne 0x42cd72
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47602c
mov edi, 0x46c7e0
push str.file
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x32
call fcn.004253ea
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x280]
call fcn.00424827
mov ecx, dword [ebp - 0x288]
push str.CheckSum
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x33
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x34
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412e1c
mov ecx, dword [ebp - 0x288]
push str.LocalFile
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x35
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412e1c
mov ecx, dword [ebp - 0x288]
push 0x46e5a8
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x36
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412e1c
push 0
lea eax, [ebp - 0x281]
push eax
push 0x475ec0
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
lea eax, [ebp - 0x281]
push eax
push 0x475ec0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x37
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x78], edi
call fcn.00403400
push 0
lea eax, [ebp - 0x281]
push eax
push 0x475ec0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x220]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x39
call fcn.004252f8
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0xa0]
call fcn.00401500
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x33
call fcn.00401500
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebx + 0x26c]
call fcn.00425261
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3a
call fcn.004253ea
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x280]
call fcn.00424dbf
jmp 0x42d889
push dword [ebp + 0x18]
call edi
push 0
push str.properties
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b26c
test eax, eax
jne 0x42cea1
push eax
lea eax, [ebp - 0x281]
push eax
mov edi, 0x47602c
push 0x46e5c8
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x48], 0x46c7e0
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3b
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push 0x46e5c8
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c148
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x475ec0
cmovne eax, ecx
lea esi, [ebx + 0x284]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x3c
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412e1c
push 1
push 0
push esi
mov ecx, ebx
call fcn.004253ea
mov ecx, dword [ebp - 0x288]
push str.AltPrqURL
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov ecx, 0x475ec0
cmovne ecx, dword [eax + 0x10]
lea esi, [ebx + 0x3d4]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3d
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412e1c
push 1
push 0
push esi
mov ecx, ebx
call fcn.004253ea
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x48], 0x46c7e0
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3e
call fcn.004253ea
lea ecx, [ebp - 0x70]
jmp 0x42d884
push dword [ebp + 0x18]
call edi
push 0
push str.execute
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b26c
test eax, eax
jne 0x42d2cc
push eax
lea eax, [ebp - 0x281]
push eax
push str.execute
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x47602c
mov dword [ebp - 0x48], 0x46c7e0
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3f
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push str.file
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c148
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x475ec0
cmovne eax, ecx
push eax
lea ecx, [ebx + 0x2b4]
mov byte [ebp - 4], 0x40
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412e1c
cmp dword [ebx + 0x2f8], 0
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jne 0x42d04b
push str.cmdline
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x41
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x43
call fcn.00412e1c
push 0x104
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebx + 0x2e4]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x44
mov byte [eax + 4], 1
call fcn.004034e0
cmp dword [ebp - 0x88], 8
push 0x104
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x43
call fcn.00403240
mov eax, dword [ebp - 0x28c]
cmp eax, 0x104
jbe 0x42d03c
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebx + 0x2e4]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x45
mov byte [eax + 4], 1
call fcn.004034e0
mov edx, dword [ebp - 0x28c]
cmp dword [ebp - 0x88], 8
push edx
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x43
call fcn.00403240
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0
call fcn.00401500
cmp dword [ebx + 0x328], 0
jne 0x42d155
push str.cmdlinesilent
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x46
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.00412e1c
push 0x104
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebx + 0x314]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x49
mov byte [eax + 4], 1
call fcn.004034e0
cmp dword [ebp - 0x88], 8
push 0x104
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x48
call fcn.00403240
mov eax, dword [ebp - 0x28c]
cmp eax, 0x104
jbe 0x42d146
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebx + 0x314]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x4a
mov byte [eax + 4], 1
call fcn.004034e0
mov edx, dword [ebp - 0x28c]
cmp dword [ebp - 0x88], 8
push edx
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x48
call fcn.00403240
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0
call fcn.00401500
push str.returncodetoreboot
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c148
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x475ec0
cmovne eax, ecx
lea edi, [ebx + 0x344]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4b
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412e1c
push str.forcesilent
lea eax, [ebp - 0xbc]
push eax
mov ecx, esi
call fcn.0043c148
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x475ec0
cmovne eax, ecx
lea esi, [ebx + 0x374]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x4c
call fcn.00403560
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0
call fcn.00412e1c
push 0
lea eax, [ebp - 0x281]
push eax
push 0x475ec0
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x47602c
mov dword [ebp - 0x48], 0x46c7e0
call fcn.00403400
lea eax, [ebp - 0x70]
push eax
push esi
push edi
lea eax, [ebx + 0x314]
push eax
lea eax, [ebx + 0x2e4]
push eax
lea eax, [ebx + 0x2b4]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x4d
call fcn.004252f8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x47602c
mov dword [ebp - 0x48], 0x46c7e0
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x4e
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push str.requiresmsiengine
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x8c]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x4f
call fcn.00402330
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x51
call fcn.00412e1c
push 0x46beac
lea ecx, [ebp - 0xfc]
call fcn.0042b345
neg eax
sbb al, al
inc al
mov byte [ebx + 0x43d], al
jmp 0x42cb1e
push dword [ebp + 0x18]
call edi
push 0
push str.dependency
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b26c
test eax, eax
jne 0x42d3d8
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47602c
mov edi, 0x46c7e0
push str.dependency
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x52
call fcn.004253ea
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x40]
call fcn.00424794
mov ecx, dword [ebp - 0x288]
push str.File
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x53
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
cmovne edx, ecx
push edx
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x54
call fcn.004050d0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x53
call fcn.00412e1c
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebx + 0x278]
call fcn.004251eb
push 1
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.004253ea
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x55
call fcn.004253ea
lea ecx, [ebp - 0x70]
call fcn.00401500
jmp 0x42c270
push dword [ebp + 0x18]
call edi
push 0
push str.behavior
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b26c
test eax, eax
jne 0x42d889
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47602c
mov edi, 0x46c7e0
push str.behavior
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x56
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
mov ecx, dword [ebp - 0x288]
push str.Optional
lea eax, [ebp - 0x8c]
push eax
call fcn.0043c148
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x57
call fcn.00402330
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x59
call fcn.00412e1c
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042d908
cmp dword [ebp - 0x28c], 0
je 0x42d4a0
mov byte [ebx + 0x45c], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.Optional
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5a
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 1
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253ea
mov ecx, dword [ebp - 0x288]
push str.Reboot
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5b
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412e1c
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042d908
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x42d557
mov dword [ebx + 0x454], eax
push 0
lea eax, [ebp - 0x281]
push eax
push str.Reboot
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5c
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 1
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253ea
mov ecx, dword [ebp - 0x288]
push str.Failure
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5d
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412e1c
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042d908
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x42d60e
mov dword [ebx + 0x458], eax
push 0
lea eax, [ebp - 0x281]
push eax
push str.Failure
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5e
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253ea
mov ecx, dword [ebp - 0x288]
push 0x46e6c4
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5f
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412e1c
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042d908
cmp dword [ebp - 0x28c], 0
je 0x42d6c5
mov byte [ebx + 0x45d], 1
push 0
lea eax, [ebp - 0x281]
push eax
push 0x46e6c4
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x60
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253ea
mov ecx, dword [ebp - 0x288]
push str.Hidden
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x61
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412e1c
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042d908
cmp dword [ebp - 0x28c], 0
je 0x42d77c
mov byte [ebx + 0x269], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.Hidden
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x62
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253ea
mov ecx, dword [ebp - 0x288]
push str.MsiProgress
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c148
cmp dword [eax + 0x10], 0
mov edx, 0x475ec0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
cmovne edx, ecx
push edx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x63
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412e1c
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042d908
cmp dword [ebp - 0x28c], 0
je 0x42d831
mov byte [ebx + 0x26a], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.MsiProgress
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x64
call fcn.004253ea
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253ea
lea ecx, [ebp - 0xd0]
call fcn.00401500
lea ecx, [ebp + 8]
call fcn.00412e1c
call fcn.0043f3d8
ret 0x20