Function at 0x436c6e
Capabilities:
Contain obfuscated stackstrings
Move file

Disassembly:
push 0x1d4
mov eax, 0x4a7930
call fcn.00473d21
mov edi, ecx
cmp dword [ebp + 0x14], 0
mov eax, dword [ebp + 8]
mov ecx, dword [0x4f092c]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], ecx
jne 0x436cc3
cmp dword [ebp + 0x18], 0
jne 0x436cc3
xor eax, eax
inc eax
jmp 0x437ac1
xor esi, esi
mov ecx, edi
mov dword [eax], esi
call fcn.0040f7e9
mov dword [ebp - 0x1d4], eax
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x130], 0x4cb780
mov dword [ebp - 0x108], 0x4cb720
call fcn.00403e30
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x100], 0x4cb730
mov dword [ebp - 0xd8], 0x4cbc34
call fcn.00403b80
mov byte [ebp - 4], 3
push ebx
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.00411496
mov byte [ebp - 4], 4
push ebx
push ebx
lea eax, [ebp - 0x1e0]
push eax
push esi
lea eax, [ebp - 0x130]
push eax
push str.dotnetfx.exe
lea eax, [ebp - 0x70]
push eax
mov ecx, edi
call fcn.00431a41
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401b80
inc bl
jne 0x437aa1
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.00411496
mov byte [ebp - 4], 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x130]
call fcn.0042986b
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401b80
test bl, bl
je 0x436e61
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.00411496
mov byte [ebp - 4], 0xa
push esi
push esi
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x130]
call fcn.00416103
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.0042006d
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa0]
call fcn.00401b80
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x70]
call fcn.00401b80
cmp dword [ebp - 0x28], 8
lea ecx, [ebp - 0x3c]
cmovae ecx, dword [ebp - 0x3c]
cmp dword [ebp - 0x118], 8
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x436e55
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.00411b2a
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401b80
cmp dword [ebp - 0x1e0], 1
jne 0x4371ca
push esi
lea eax, [ebp - 0x1c1]
mov ebx, 0x4cb780
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x48], 0x4cb720
call fcn.00403e30
mov byte [ebp - 4], 0x13
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x138], 0x4cb720
call fcn.00403e30
mov byte [ebp - 4], 0x15
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x436f21
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetredist.exe
lea ecx, [ebp - 0x40]
call fcn.00411496
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x1cc]
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00431725
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x160]
call fcn.00411b2a
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa0]
call fcn.00401b80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
jmp 0x437039
cmp byte [ebx + 0x45], 0
je 0x437040
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.1033
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x1a
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x1b
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.Startup
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov ecx, ebx
call fcn.00444aba
mov byte [ebp - 4], 0x1d
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x436fae
mov eax, dword [eax]
mov edx, 0x4cb558
test eax, eax
mov ecx, edx
cmovne ecx, eax
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00406360
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c0]
call fcn.00401ac0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x40]
call fcn.00401ac0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x1c0]
call fcn.00411496
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x160]
call fcn.00419282
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c0]
call fcn.00401b80
jmp 0x437056
cmp byte [ebx + 0x46], 0
je 0x437056
push str.dotnetfx20.exe
lea ecx, [ebp - 0x15c]
call fcn.00406360
push esi
push 1
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x160]
push eax
mov ecx, edi
call fcn.004325c4
test eax, eax
je 0x4370e3
cmp byte [ebx + 0x44], 0
je 0x437084
push dword [ebp - 0x1cc]
mov ecx, edi
call fcn.0043068a
jmp 0x4370df
cmp byte [ebx + 0x45], 0
je 0x4370fe
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x4370c3
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 1
call fcn.00430987
test eax, eax
je 0x4370e3
mov eax, dword [ebp - 0x1c8]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x4370b7
mov eax, dword [eax]
push eax
mov ecx, edi
call fcn.00430737
test eax, eax
je 0x4370e3
push 0x4b6064
mov ecx, edi
call fcn.00430737
test eax, eax
je 0x4370e3
push str.1033
mov ecx, edi
call fcn.00430737
test eax, eax
jne 0x43711e
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401b80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
jmp 0x437a9c
cmp byte [ebx + 0x46], 0
je 0x43711e
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x43711e
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 2
call fcn.00430987
jmp 0x4370df
cmp dword [ebp + 0x18], 0
je 0x4371af
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x4cb780
mov dword [ebp - 0x18], 0x4cb720
call fcn.00403e30
mov byte [ebp - 4], 0x41
cmp byte [ebx + 0x45], 0
je 0x43725b
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist.exe
lea ecx, [ebp - 0xa0]
call fcn.00411496
mov byte [ebp - 4], 0x42
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.004325c4
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa0]
call fcn.00401b80
inc bl
jne 0x4372a2
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401b80
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401b80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401b80
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x4372b3
cmp dword [ebp - 0x1d0], 0
je 0x4371ff
push str.__q:a__c:_install__q_
call fcn.00473c34
pop ecx
push eax
push str.__q:a__c:_install__q_
lea ecx, [ebp - 0xfc]
call fcn.004385cf
push 1
push 0xa
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xa0]
call fcn.0042ba1b
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x1c0]
push 0x4b7718
push eax
call fcn.0042adc3
add esp, 0xc
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x100]
call fcn.00405e30
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x1c0]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa0]
jmp 0x437974
cmp byte [ebx + 0x46], 0
je 0x4371a3
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist20.exe
lea ecx, [ebp - 0xa0]
call fcn.00411496
mov byte [ebp - 4], 0x49
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.004325c4
mov ebx, eax
neg ebx
sbb bl, bl
jmp 0x43718c
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401b80
jmp 0x4370e3
cmp dword [ebp + 0x14], 0
je 0x437553
push str.__q:a
call fcn.00473c34
pop ecx
push eax
push str.__q:a
lea ecx, [ebp - 0xfc]
call fcn.004385cf
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x57
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4b5a30
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x58
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__ver:
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x59
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4b6068
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
cmp dword [ebp - 0x1d0], 0
mov ecx, str._redistui:F
mov eax, str._redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.004385a8
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__c:_
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x5f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4b7778
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x60
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x61
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetFxCmd
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x67
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4b7798
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x68
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x69
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
jmp 0x43755d
cmp dword [ebp + 0x18], 0
je 0x437979
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x6f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x70
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__coreui:
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x71
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x77
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x78
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langs:
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x79
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPacks
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
cmp dword [ebp + 0x18], 0
je 0x437979
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x7f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x80
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jsharpver:
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x81
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JVersion
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
cmp dword [ebp + 0x14], 0
jne 0x4378b1
cmp dword [ebp - 0x1d0], 0
mov ecx, str.__redistui:F
mov eax, str.__redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.004385a8
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4cb558
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x87
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4b7798
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x88
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x89
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__q:a__c:_
lea ecx, [ebp - 0x40]
call fcn.00402ca0
mov byte [ebp - 4], 0x8f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4b78b4
lea ecx, [ebp - 0x70]
call fcn.00402ca0
mov byte [ebp - 4], 0x90
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jscmd:
lea ecx, [ebp - 0xd0]
call fcn.00402ca0
mov byte [ebp - 4], 0x91
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JCmdLine
lea ecx, [ebp - 0xa0]
call fcn.00402ca0
mov byte [ebp - 4], 0x92
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0042c4f9
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xa0]
call fcn.00401ac0
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xd0]
call fcn.00401ac0
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x70]
call fcn.00401ac0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401ac0
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], 0x4cb780
mov dword [ebp - 0x168], 0x4cb720
call fcn.00403e30
mov byte [ebp - 4], 0x98
push 0x452
lea eax, [ebp - 0x1c0]
push eax
mov ecx, edi
call fcn.0040f7e9
mov ecx, dword [eax + 0x260]
call fcn.004208a4
mov byte [ebp - 4], 0x99
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x4379d1
mov eax, dword [eax]
push str.Microsoft_R__.NET_Framework
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00420ffd
add esp, 0xc
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1c0]
call fcn.00401b80
cmp dword [ebp - 0x178], 8
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
push eax
mov ecx, ebx
call fcn.00446deb
mov eax, dword [ebx + 0x260]
cmp byte [eax + 1], 0
jne 0x437a28
cmp byte [eax + 2], 0
jne 0x437a28
xor eax, eax
inc eax
jmp 0x437a2a
mov eax, esi
push 2
push dword [ebp - 0x1d8]
xor ebx, ebx
test al, al
setne bl
call dword [sym.imp.USER32.dll_GetDlgItem]
push esi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
mov edi, eax
push edi
call esi
cmp dword [ebp - 0xe8], 8
mov edx, dword [ebp - 0x1d4]
push edx
lea ecx, [ebp - 0xfc]
cmovae ecx, dword [ebp - 0xfc]
cmp dword [ebp - 0x118], 8
push ebx
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.00450597
mov ecx, dword [ebp - 0x1dc]
push 1
push edi
mov dword [ecx], eax
call esi
xor esi, esi
inc esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x190]
call fcn.00401b80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x100]
call fcn.00401ac0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.00401b80
mov eax, esi
call fcn.00473cd0
ret 0x18