Function at 0x41ece4
Capabilities:
Create thread

Disassembly:
push 0x5c
mov eax, 0x496309
call fcn.00470906
mov esi, ecx
xor ebx, ebx
lea eax, [ebp - 0x24]
push eax
push ebx
push esi
push 0x41d805
push ebx
push ebx
mov dword [ebp - 0x24], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x6fc], eax
cmp eax, ebx
jne 0x41ed47
push str.actionerrorvaluespawnthreads
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov dword [ebp - 4], ebx
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0044e260
mov eax, 0x80004005
call fcn.004709de
ret
cmp dword [esi + 0x1dc], ebx
jne 0x41ee80
cmp dword [esi + 0x1e0], ebx
jne 0x41ee80
cmp dword [esi + 0x1ec], ebx
jne 0x41ee80
cmp dword [esi + 0x30], ebx
jne 0x41ed9e
cmp dword [esi + 0x1f4], ebx
jne 0x41ed9e
push ebx
push 0x4185b1
push ebx
push 0x7f
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamW]
lea ecx, [esi + 4]
mov dword [esi + 0x1f4], eax
mov eax, dword [ecx]
push ebx
call dword [eax + 4]
push 0x4c186c
lea ecx, [ebp - 0x18]
call fcn.00404a10
lea eax, [ebp - 0x18]
push eax
push 0xb0
mov ecx, esi
mov dword [ebp - 4], 1
call fcn.0041e109
push dword [ebp - 0x18]
push dword [esi + 0x1f4]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x640000
push ebx
push 0x401
push 0x3f0
push dword [esi + 0x1f4]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push esi
push 0xffffffffffffffeb
push dword [esi + 0x1f4]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 5
push dword [esi + 0x1f4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 0x1f4]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x64]
mov dword [ebp - 0x68], ebx
rep stosd dword es:[edi], eax
jmp 0x41ee55
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
cmp eax, ebx
je 0x41ee4e
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x41ee55
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x6fc], ebx
jne 0x41ee25
push dword [esi + 0x1f4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov ecx, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
mov dword [esi + 0x1f4], ebx
call fcn.004011bc
jmp 0x41eec5
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x64]
mov dword [ebp - 0x68], ebx
rep stosd dword es:[edi], eax
push 1
push ebx
push ebx
push ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x41eeb6
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x41eebd
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x6fc], ebx
jne 0x41ee8d
cmp dword [esi + 0x14c], ebx
je 0x41eee3
mov eax, dword [esi + 0x3c]
neg eax
sbb eax, eax
and eax, 0x7fffbffb
add eax, 0x80004005
jmp 0x41ed41
cmp dword [esi + 0x1ec], ebx
je 0x41ef3d
mov eax, dword [esi + 0x5fc]
cmp eax, dword [esi + 0x600]
je 0x41ef36
lea edi, [eax + 8]
lea eax, [edi + 0x4c]
push str.main
push eax
call fcn.00401283
pop ecx
pop ecx
test al, al
jne 0x41ef23
add edi, 0xe0
lea ecx, [edi - 8]
cmp ecx, dword [esi + 0x600]
jne 0x41eefc
jmp 0x41ef36
push edi
lea ecx, [esi + 0x6dc]
call fcn.0044f450
mov dword [edi + 8], 1
xor eax, eax
jmp 0x41ed41
cmp dword [esi + 0x3c], ebx
je 0x41ed3c
cmp dword [esi + 0x70c], ebx
je 0x41ed3c
cmp dword [esi + 0x4b4], ebx
je 0x41f2ad
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.004112d2
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
push str.inst_configcompat.dll
push eax
push ecx
mov dword [ebp - 4], 2
call fcn.0044eb40
add esp, 0xc
call fcn.00407620
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x18], eax
call fcn.0044e260
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x18], ebx
je 0x41f2ad
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.RPIsPlusEnabled
push dword [ebp - 0x18]
call edi
cmp eax, ebx
je 0x41efc4
call eax
mov dword [ebp - 0x10], eax
push str.RDIsExpressEnabled
push dword [ebp - 0x18]
call edi
cmp eax, ebx
je 0x41efd7
call eax
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x10], ebx
jne 0x41efee
cmp dword [ebp - 0x1c], ebx
je 0x41f2ad
cmp dword [esi + 0x530], ebx
jne 0x41f2ad
cmp dword [esi + 0x534], ebx
jne 0x41f2ad
cmp dword [esi + 0x1dc], ebx
jne 0x41f2ad
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 8]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffff6
add ecx, 0x46b
push ebx
push ecx
lea ecx, [esi + 8]
call dword [eax]
mov dword [ebp - 0x18], eax
cmp eax, 0x45f
je 0x41f0e9
cmp eax, 0x470
je 0x41f0e9
cmp eax, 0x45e
jne 0x41f077
mov dword [esi + 0x14], 1
mov eax, str.actioncancelvaluedlg_plus_cancel
cmp dword [ebp - 0x10], ebx
jne 0x41f062
mov eax, str.actioncancelvaluedlg_rdx_cancel
push eax
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov dword [ebp - 4], 7
jmp 0x41f25f
mov edi, 0x460
cmp eax, edi
je 0x41f08b
cmp eax, 0x46d
jne 0x41f277
mov dword [esi + 0x14], 1
call fcn.00404570
mov eax, str.actionclickvaluedlg_plus_upgrade
cmp dword [ebp - 0x10], ebx
jne 0x41f0a6
mov eax, str.actionclickvaluedlg_rdx_upgrade
push eax
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
mov dword [ebp - 4], 8
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0044e260
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c], esp
cmp dword [ebp - 0x18], edi
jne 0x41f223
lea eax, [esi + 0x448]
jmp 0x41f229
mov eax, str.actionclickvaluedlg_plus_continue
cmp dword [ebp - 0x10], ebx
jne 0x41f0f8
mov eax, str.actionclickvaluedlg_rdx_continue
push eax
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
mov dword [ebp - 4], 3
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0044e260
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 8]
neg ecx
sbb ecx, ecx
and ecx, 0xfffffffb
add ecx, 0x46c
push ebx
push ecx
lea ecx, [esi + 8]
call dword [eax]
mov dword [ebp - 0x18], eax
cmp eax, 0x45f
je 0x41f23b
cmp eax, 0x470
je 0x41f23b
mov edi, 0x468
cmp eax, edi
je 0x41f199
cmp eax, 0x46e
je 0x41f199
cmp eax, 0x45e
jne 0x41f277
mov dword [esi + 0x14], 1
mov eax, str.actioncancelvaluedlg_plus2_cancel
cmp dword [ebp - 0x10], ebx
jne 0x41f184
mov eax, str.actioncancelvaluedlg_rdx2_cancel
push eax
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov dword [ebp - 4], 6
jmp 0x41f25f
mov dword [esi + 0x14], 1
call fcn.00404570
mov eax, str.actionclickvaluedlg_plus2_learnmore
cmp dword [ebp - 0x10], ebx
jne 0x41f1b4
mov eax, str.actionclickvaluedlg_rdx2_learnmore
push eax
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
mov dword [ebp - 4], 5
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0044e260
cmp dword [ebp - 0x18], edi
jne 0x41f207
lea edi, [esi + 0x450]
mov ecx, edi
call fcn.00401219
push ecx
push ecx
mov dword [ebp - 0x1c], esp
test al, al
jne 0x41f1fd
mov eax, esp
push edi
push eax
jmp 0x41f22b
lea eax, [esi + 0x448]
mov ecx, esp
jmp 0x41f229
lea ecx, [esi + 0x450]
call fcn.00401219
push ecx
push ecx
test al, al
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea eax, [esi + 0x460]
je 0x41f229
lea eax, [esi + 0x458]
push eax
push ecx
mov ecx, esi
call fcn.00418afe
mov ecx, esi
call fcn.0041cbe6
jmp 0x41f277
call fcn.00404570
mov eax, str.actionclickvaluedlg_plus2_continue
cmp dword [ebp - 0x10], ebx
jne 0x41f24f
mov eax, str.actionclickvaluedlg_rdx2_continue
push eax
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov dword [ebp - 4], 4
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, esi
call dword [eax + 0x10]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.0044e260
cmp dword [esi + 0x14], ebx
je 0x41f2ad
mov eax, dword [esi + 0x528]
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
cmp eax, ebx
je 0x41f29c
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esi + 0x528], ebx
mov dword [esi + 0x14], 1
mov eax, 0x8000aaa3
jmp 0x41ed41
lea ecx, [esi + 0x1f8]
call fcn.00415575
test eax, eax
jns 0x41f2d5
push str.actionerrorvaluecreatedialog
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov dword [ebp - 4], 9
jmp 0x41ed24
cmp dword [esi + 0x200], ebx
jne 0x41f2f6
push str.actionerrorvaluecreatedialog
lea ecx, [ebp - 0x20]
call fcn.0044e280
mov dword [ebp - 4], 0xa
jmp 0x41ed24
cmp dword [esi + 0x1dc], ebx
jne 0x41ef36
mov eax, dword [esi + 0x5fc]
cmp eax, dword [esi + 0x600]
je 0x41f3ce
lea edi, [eax + 0x4c]
lea eax, [edi + 8]
cmp dword [eax - 0x44], ebx
jne 0x41f3b9
push str.main
push eax
call fcn.004012cb
pop ecx
pop ecx
test al, al
jne 0x41f3b9
push 0x2c
mov ecx, edi
call fcn.0044e050
mov dword [ebp - 0x1c], eax
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1c], eax
jl 0x41f3b9
push dword [ebp - 0x18]
lea eax, [ebp - 0x14]
push 0x2c
push eax
mov ecx, edi
call fcn.0044ebe0
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x660]
mov dword [ebp - 4], 0xb
call fcn.0041e77f
test eax, eax
je 0x41f37e
cmp dword [esi + 0x30], ebx
je 0x41f397
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0044e260
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jle 0x41f34f
jmp 0x41f3b9
lea eax, [edi - 0x44]
push eax
lea ecx, [esi + 0x6dc]
call fcn.0044f450
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
mov dword [edi - 0x3c], 1
call fcn.0044e260
add edi, 0xe0
lea ecx, [edi - 0x4c]
cmp ecx, dword [esi + 0x600]
jne 0x41f317
mov eax, dword [esi + 0x5fc]
cmp eax, dword [esi + 0x600]
je 0x41ef36
lea edi, [eax + 0x4c]
cmp dword [edi - 0x3c], ebx
jne 0x41f531
lea eax, [edi + 8]
push str.main
push eax
call fcn.00401283
pop ecx
pop ecx
test al, al
jne 0x41f531
push 0x2c
mov ecx, edi
call fcn.0044e050
mov dword [ebp - 0x1c], eax
lea eax, [edi - 8]
push eax
lea eax, [ebp - 0x3c]
push str.Step_list_in_GetConfigStub:
push eax
call fcn.0044eb90
push 0x4a0c2c
push eax
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 4], 0xc
call fcn.0044eb40
push edi
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xd
call fcn.0044eaf0
push eax
mov byte [ebp - 4], 0xe
call fcn.00404620
add esp, 0x28
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xd
call fcn.0044e260
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call fcn.0044e260
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.0044e260
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1c], eax
jl 0x41f531
push dword [ebp - 0x18]
lea eax, [ebp - 0x2c]
push 0x2c
push eax
mov ecx, edi
call fcn.0044ebe0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [esi + 0x660]
mov dword [ebp - 4], 0xf
call fcn.0041e77f
test eax, eax
je 0x41f516
cmp dword [esi + 0x30], ebx
jne 0x41f516
lea eax, [edi - 8]
push eax
lea eax, [ebp - 0x4c]
push str.Adding
push eax
call fcn.0044eb90
push str._to_download_list.
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x10
call fcn.0044eb40
push eax
mov byte [ebp - 4], 0x11
call fcn.00404620
add esp, 0x1c
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x10
call fcn.0044e260
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.0044e260
lea eax, [edi - 0x44]
push eax
lea ecx, [esi + 0x6dc]
call fcn.0044f450
mov dword [edi - 0x3c], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0044e260
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jle 0x41f487
add edi, 0xe0
lea ecx, [edi - 0x4c]
cmp ecx, dword [esi + 0x600]
jne 0x41f3e3
jmp 0x41ef36