Function at 0x403418
Capabilities:
Check os version
Contain obfuscated stackstrings
Resolve function by parsing pe exports
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x17bd4
call fcn.0041bf60
mov eax, dword [0x435504]
xor eax, esp
mov dword [esp + 0x17bd0], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, ecx
xor esi, esi
mov dword [esp + 0x34], edi
mov dword [esp + 0x48], eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x58], esi
mov byte [esp + 0x2f], 0
call fcn.0040121b
test al, al
je 0x403491
push esi
lea eax, [esp + 0xd8]
push eax
push 0x444da0
mov dword [esp + 0xe0], 1
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe8], esi
mov dword [esp + 0xec], esi
call sub.gdiplus.dll_GdiplusStartup
push str.IsWow64Process
push str.kernel32
mov byte [esp + 0xec], 0
mov dword [esp + 0x40], esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
cmp ebx, esi
je 0x4034c8
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
cmp dword [esp + 0x38], esi
lea eax, [esp + 0xe4]
jne 0x4034d9
push 0x20
jmp 0x4034db
push 0x40
push 0x42ef40
push eax
call fcn.004176b2
add esp, 0xc
call fcn.004077d8
push edi
mov dword [esp + 0x50], eax
mov byte [esp + 0x6c], 0x59
mov byte [esp + 0x6d], 0xbd
mov byte [esp + 0x6e], 0xc9
mov byte [esp + 0x6f], 0x52
mov byte [esp + 0x70], 0xaa
mov byte [esp + 0x71], 0x35
mov byte [esp + 0x72], 0xad
mov byte [esp + 0x73], 0xbb
mov byte [esp + 0x74], 0x10
mov byte [esp + 0x75], 0xef
mov byte [esp + 0x76], 0xde
mov byte [esp + 0x77], 0x67
mov byte [esp + 0x78], 0x2c
mov byte [esp + 0x79], 0x47
mov byte [esp + 0x7a], 0xe0
mov byte [esp + 0x7b], 0xb5
mov byte [esp + 0x7c], 0xd4
mov byte [esp + 0x7d], 0x82
mov byte [esp + 0x7e], 0x1f
mov byte [esp + 0x7f], 0x81
mov byte [esp + 0x80], 0x52
mov byte [esp + 0x81], 0xa1
mov byte [esp + 0x82], 2
mov byte [esp + 0x83], 0x44
mov byte [esp + 0x84], 0x2a
mov byte [esp + 0x85], 0xeb
mov byte [esp + 0x86], 0xaa
mov byte [esp + 0x87], 0x7b
mov byte [esp + 0x88], 0x79
mov byte [esp + 0x89], 0x3b
mov byte [esp + 0x8a], 0x93
mov byte [esp + 0x8b], 0x45
mov byte [esp + 0x8c], 0xae
mov byte [esp + 0x8d], 0xd2
mov byte [esp + 0x8e], 9
mov byte [esp + 0x8f], 0x7a
mov byte [esp + 0x90], 0x3e
mov byte [esp + 0x91], 0x2f
mov byte [esp + 0x92], 0x2e
mov byte [esp + 0x93], 0xfa
mov byte [esp + 0x94], 0xff
mov byte [esp + 0x95], 0x1d
mov byte [esp + 0x96], pe_nt_image_headers32
mov byte [esp + 0x97], 0x9b
mov byte [esp + 0x98], 0x19
mov byte [esp + 0x99], 0x7c
mov byte [esp + 0x9a], 0x15
mov byte [esp + 0x9b], 0xb8
mov byte [esp + 0x9c], 0x1e
mov byte [esp + 0x9d], 0x6d
mov byte [esp + 0x9e], 0xc6
mov byte [esp + 0x9f], 0x10
mov byte [esp + 0xa0], 0x41
mov byte [esp + 0xa1], 0x7e
mov byte [esp + 0xa2], 0x5c
mov byte [esp + 0xa3], 0xed
mov byte [esp + 0xa4], 0x51
mov byte [esp + 0xa5], 0xb1
mov byte [esp + 0xa6], 0x19
mov byte [esp + 0xa7], 0x1c
mov byte [esp + 0xa8], 0x3c
mov byte [esp + 0xa9], 0xe2
mov byte [esp + 0xaa], 0x94
mov byte [esp + 0xab], 0xd8
call fcn.00416c10
cmp eax, 3
pop ecx
jb 0x4036df
cmp byte [edi], 0x5c
jne 0x4036cd
cmp byte [edi + 1], 0x5c
je 0x4036d9
cmp byte [edi + 1], 0x3a
jne 0x4036df
cmp byte [edi + 2], 0x5c
jne 0x4036df
mov dword [esp + 0x3c], edi
jmp 0x403705
mov esi, 0x400
push esi
call fcn.00416a80
pop ecx
mov ebx, eax
push esi
push ebx
call fcn.00419bb5
push edi
mov esi, ebx
call fcn.00407eda
add esp, 0xc
mov dword [esp + 0x3c], ebx
xor esi, esi
push dword [esp + 0x3c]
push str._Extractor__The_absolute_wrapper_path_is__s_n
call fcn.00407f5c
push edi
push str._Extractor__The_executable_name_is__s_n
call fcn.00407f5c
push 0x42eb0c
push edi
call fcn.00418609
add esp, 0x18
cmp eax, esi
mov dword [esp + 0x1c], eax
jne 0x403748
push edi
push str._Extractor___Failed_to_extract_wrapper_params___couldnt_open_file__s_n
call fcn.00407f5c
pop ecx
pop ecx
push 1
call fcn.00417a4d
xor edi, edi
push dword [esp + 0x1c]
call fcn.004183e4
pop ecx
push dword [esp + 0x1c]
mov ebx, eax
inc esi
call fcn.0041ac16
test eax, eax
pop ecx
jne 0x40384c
cmp bl, byte [esp + edi + 0x68]
jne 0x403772
inc edi
jmp 0x403774
xor edi, edi
cmp edi, 0x40
jne 0x40374a
push str._Extractor__Found_Params_marker._Extracting_now..._n
mov dword [0x444e44], esi
call fcn.00407f5c
pop ecx
mov edi, 0x30d40
push edi
call fcn.00416a80
pop ecx
push edi
push 0
push eax
mov dword [esp + 0x50], eax
call fcn.00418920
add esp, 0xc
push dword [esp + 0x1c]
mov byte [esp + 0x13], 0
call fcn.004077c3
pop ecx
mov ebx, 0x43004c
push ebx
mov dword [esp + 0x28], eax
call fcn.00407f5c
pop ecx
mov esi, 0x430050
push esi
call fcn.00407f5c
pop ecx
push dword [esp + 0x24]
push str._Processing__d_dynamic_properties_n
call fcn.00407f5c
push esi
call fcn.00407f5c
and dword [esp + 0x34], 0
add esp, 0xc
cmp dword [esp + 0x24], 0
jle 0x403a56
push dword [esp + 0x1c]
call fcn.004077b2
pop ecx
push edi
push dword [esp + 0x20]
mov dword [esp + 0x18], eax
call fcn.00407746
mov esi, eax
push esi
call fcn.00416c10
add esp, 0xc
cmp eax, 0x64
jbe 0x40385b
lea eax, [esp + 0x68]
push 0x63
push eax
push eax
call fcn.00418670
add esp, 0xc
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x14]
mov byte [esp + 0xd3], 0
push dword [esp + 0x30]
push str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x403869
push str.Params
push str.Could_not_find_marker:__s_n
jmp 0x40373a
push esi
push dword [esp + 0x14]
push dword [esp + 0x30]
push str._DynProps__Dynamic_Param__d:__s__s__n
call fcn.00407f5c
mov eax, dword [esp + 0x54]
add esp, 0x10
push esi
push dword [esp + 0x14]
call fcn.0040771e
push str.update_url
push dword [esp + 0x1c]
call fcn.00418c20
add esp, 0x10
test eax, eax
jne 0x4038a5
push esi
push str._DynProps__Dynamic_Update_URL:__s_n
mov dword [esp + 0x58], esi
call fcn.00407f5c
pop ecx
pop ecx
push str.match_versions
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x4038c6
push str.true
push esi
call fcn.00418c20
pop ecx
pop ecx
push str.wrapper_autotest
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x4038df
mov byte [esp + 0x2f], 1
push str.show_no_ui
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x403909
push str.true
push esi
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x403909
mov byte [esp + 0xf], 1
push str.force_spawn
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x403934
push str.true
push esi
call fcn.00418c20
neg eax
sbb eax, eax
pop ecx
inc eax
pop ecx
mov dword [0x444db0], eax
push str.splash_buffer
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x40395f
push esi
call fcn.00416c10
test eax, eax
pop ecx
jbe 0x40395f
push esi
call fcn.004183df
pop ecx
mov dword [0x444e40], eax
push str.splash_image
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x4039de
push esi
call fcn.00416c10
cmp eax, 0x64
pop ecx
jae 0x403987
push esi
push str._DynProps__Splash_Image_is__s_n
jmp 0x4039a9
push 0x63
lea eax, [esp + 0x6c]
push esi
push eax
call fcn.00418670
add esp, 0xc
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0xcf], 0
push str._DynProps__Splash_Image_is__s..._n
call fcn.00407f5c
pop ecx
pop ecx
push str._DynProps__Base64_decoding_image..._n
call fcn.00407f5c
pop ecx
push esi
call fcn.00416c10
pop ecx
push eax
push esi
lea eax, [esp + 0x68]
call fcn.004013e4
push str._DynProps__Decode_complete_n
mov dword [esp + 0x64], eax
call fcn.00407f5c
add esp, 0xc
push str.jre_name
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x403a1c
mov byte [esp + 0x2800], al
lea eax, [esp + 0x2800]
push esi
push eax
call fcn.00416cb0
lea eax, [esp + 0x2808]
push eax
push str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.00407f5c
add esp, 0x10
push str.windows_app_id
push dword [esp + 0x14]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x403a44
push esi
push str._DynProps__Windows_APP_ID_is__s_n
call fcn.00407f5c
pop ecx
pop ecx
mov eax, esi
call fcn.0040327c
inc dword [esp + 0x28]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x24]
jl 0x4037f8
push str.Processing_dynamic_properties_n
call fcn.00408132
cmp byte [ebp + 0x10], 0
pop ecx
je 0x403a72
push str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.00407f5c
pop ecx
push ebx
call fcn.00407f5c
mov dword [esp], str.Extracting_wrapper_tail_n
call fcn.0040810a
pop ecx
push dword [esp + 0x1c]
call fcn.0041a385
mov dword [esp], 0x42eb0c
push dword [esp + 0x38]
call fcn.00418609
mov ebx, eax
test ebx, ebx
pop ecx
pop ecx
mov dword [esp + 0x1c], ebx
jne 0x403ab8
push dword [esp + 0x34]
push str._Extractor___Failed_to_extract_wrapper_tail___couldnt_open_file__s_n
jmp 0x40373a
xor edi, edi
xor esi, esi
push ebx
call fcn.004183e4
pop ecx
push ebx
mov dword [esp + 0x58], eax
inc edi
call fcn.0041ac16
test eax, eax
pop ecx
jne 0x403bc8
mov al, byte [esp + 0x54]
mov ecx, dword [esp + 0x4c]
cmp al, byte [esi + ecx]
jne 0x403ae7
inc esi
jmp 0x403ae9
xor esi, esi
cmp esi, 0x80
jne 0x403abc
push str._Extractor__Found_tail_marker_n
mov dword [0x444e44], edi
call fcn.00407f5c
pop ecx
push ebx
call fcn.004077b2
pop ecx
push ebx
mov dword [esp + 0x28], eax
call fcn.004077b2
pop ecx
push ebx
mov dword [esp + 0x14], eax
call fcn.004077b2
pop ecx
push ebx
mov dword [esp + 0x58], eax
call fcn.004077b2
pop ecx
push ebx
mov dword [esp + 0x44], eax
call fcn.004077b2
mov dword [esp], 0x2000
push ebx
mov dword [esp + 0x38], eax
call fcn.00407746
push ebx
mov dword [esp + 0x2c], eax
call fcn.004077b2
add esp, 0xc
push ebx
mov dword [esp + 0x3c], eax
call fcn.004077b2
pop ecx
push ebx
mov dword [esp + 0x50], eax
call fcn.004077b2
pop ecx
push ebx
mov dword [esp + 0x60], eax
call fcn.004077b2
mov esi, eax
mov dword [esp], 0x1388
push ebx
mov dword [esp + 0x6c], esi
call fcn.00407746
test esi, esi
pop ecx
pop ecx
mov dword [esp + 0x34], eax
je 0x403ba7
push esi
call fcn.00416c10
test eax, eax
pop ecx
jbe 0x403ba7
push esi
push str._Extractor__Required_Java_version__s_n
call fcn.00407f5c
pop ecx
pop ecx
mov edi, dword [esp + 0x34]
push 0x42efac
push edi
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x403bd2
mov edi, dword [esp + 0x50]
push edi
push str._Extractor__Will_use_Dynamic_Update_URL:__s_n
jmp 0x403bd8
push str.Tail
jmp 0x403851
push edi
push str._Extractor__Will_use_Static_Update_URL:__s_n
call fcn.00407f5c
cmp byte [esp + 0x17], 0
pop ecx
mov dword [esp + 0x2c], edi
pop ecx
jne 0x403c01
push dword [esp + 0x48]
push dword [ebp + 8]
push dword [esp + 0x64]
call fcn.0040314b
add esp, 0xc
mov byte [esp + 0xf], al
movzx eax, byte [esp + 0xf]
push eax
push str._Extractor__Is_silent_install_is__d_n
call fcn.00407f5c
push str.Extracting_tail_n
call fcn.00408132
add esp, 0xc
push str._Extractor__Setting_up_static_properties_n
call fcn.00407f5c
mov edi, dword [esp + 0x48]
pop ecx
push dword [esp + 0x34]
mov eax, edi
push str.update_url
call fcn.004076f6
push dword [esp + 0x54]
mov eax, edi
push str.install_type
call fcn.004076f6
push dword [esp + 0x40]
mov eax, edi
push str.min_splash_ms
call fcn.004076f6
push dword [esp + 0x38]
mov eax, edi
push str.jwsig_public_key
call fcn.004076f6
push dword [esp + 0x58]
mov eax, edi
push str.can_override_splash
call fcn.004076f6
push dword [esp + 0x4c]
mov eax, edi
push str.app_name
call fcn.004076f6
push dword [esp + 0x40]
mov eax, edi
push str.wrapper_app_version
call fcn.004076f6
push dword [esp + 0x78]
mov eax, edi
push str.wrapper_gu_version
call fcn.004076f6
add esp, 0x40
push dword [esp + 0x5c]
mov eax, edi
push str.silent_parameter
call fcn.004076f6
push esi
push str.java_version
mov eax, edi
call fcn.004076f6
add esp, 0x10
cmp byte [esp + 0xf], 0
je 0x403cea
push str.true
push str.show_no_ui
mov eax, edi
call fcn.004076f6
pop ecx
pop ecx
cmp dword [esp + 0x20], 0
je 0x403daf
push dword [esp + 0x20]
call fcn.00416c10
test eax, eax
pop ecx
push dword [esp + 0x20]
jbe 0x403dbb
call fcn.00416c10
mov esi, eax
shr esi, 1
inc esi
pop ecx
inc esi
push esi
call fcn.00416a80
pop ecx
push esi
push 0
push eax
mov dword [esp + 0x24], eax
call fcn.00418920
add esp, 0xc
push dword [esp + 0x20]
push esi
push dword [esp + 0x20]
call fcn.004079e3
add esp, 0xc
push eax
push str._Extractor__Processed_public_key_of_length__d_n
mov dword [esp + 0x38], eax
call fcn.00407f5c
push 0x31
pop ecx
mov esi, 0x42b790
mov edi, 0x444e60
push 0x24
rep movsd dword es:[edi], dword [esi]
call fcn.00416a80
add esp, 0xc
mov esi, eax
push esi
push dword [esp + 0x34]
push dword [esp + 0x20]
call fcn.0040a9d0
add esp, 0xc
test eax, eax
je 0x403d97
push str.ERROR___unable_to_import_public_key._n
call fcn.00416b43
pop ecx
push esi
call fcn.004169a3
and dword [esp + 0x1c], 0
pop ecx
jmp 0x403d9b
mov dword [esp + 0x18], esi
push dword [esp + 0x18]
push str._Extractor__Public_Key:__08X_n
call fcn.00407f5c
mov edi, dword [esp + 0x4c]
jmp 0x403dd1
push str._Extractor__Public_key_empty__no_public_key__n
call fcn.00407f5c
jmp 0x403dd2
call fcn.00416c10
test eax, eax
pop ecx
ja 0x403dd3
push 0
push str._Extractor__Public_key_length__d__no_public_key__n
call fcn.00407f5c
pop ecx
pop ecx
mov ecx, dword [esp + 0x4c]
call fcn.004082ad
push eax
push str._Extractor__Shared_dir_is__s_n
mov dword [esp + 0x38], eax
call fcn.00407f5c
mov esi, dword [esp + 0x30]
push esi
push str._Extractor__Update_URL_is_currently__s_n
call fcn.00407f5c
push esi
call fcn.00416c10
add esp, 0x14
test eax, eax
jle 0x403e16
add eax, esi
cmp byte [eax - 1], 0x2f
je 0x403e16
mov byte [eax], 0x2f
mov byte [eax + 1], 0
push esi
push str._Extractor__Update_URL_is_now__s_n
call fcn.00407f5c
push str.JWrapper_
push dword [esp + 0x3c]
lea eax, [esp + 0x100]
call fcn.00407f20
push dword [esp + 0x34]
lea eax, [esp + 0x104]
push eax
call fcn.00416cb0
lea eax, [esp + 0x108]
push eax
push str._Extractor__Master_folder_is__s_n
call fcn.00407f5c
lea eax, [esp + 0x110]
push eax
call fcn.004012c1
add esp, 0x24
lea eax, [esp + 0xf0]
push str.JWApps
push eax
lea eax, [esp + 0xf328]
call fcn.00407f20
lea eax, [esp + 0xf328]
push str.JreNameOverride
push eax
lea eax, [esp + 0x11a40]
call fcn.00407f20
lea eax, [esp + 0x11a40]
push 0x42fd44
push eax
call fcn.00418609
mov esi, eax
add esp, 0x18
test esi, esi
je 0x403f2c
push str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.00407f5c
mov dword [esp], 0x1f4
push esi
call fcn.00407746
test eax, eax
pop ecx
pop ecx
mov dword [esp + 0x20], eax
je 0x403efb
push eax
call fcn.00416c10
cmp eax, 1
pop ecx
jne 0x403efb
mov eax, dword [esp + 0x20]
cmp byte [eax], 0x2d
jne 0x403efb
lea eax, [esp + 0x2800]
push eax
push str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x403f39
push dword [esp + 0x20]
lea eax, [esp + 0x2804]
push eax
mov byte [esp + 0x2808], 0
call fcn.00416cb0
push esi
call fcn.0041a385
add esp, 0xc
lea eax, [esp + 0x2800]
push eax
push str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x403f39
lea eax, [esp + 0x2800]
push eax
push str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
call fcn.00407f5c
pop ecx
pop ecx
lea eax, [esp + 0xf0]
push str.JWAppsSharedConfig
push eax
lea eax, [esp + 0xdfa0]
call fcn.00407f20
lea eax, [esp + 0xdfa0]
push eax
call fcn.00407ebb
add esp, 0xc
push dword [esp + 0x40]
mov byte [esp + 0x1b], 1
call fcn.00416c10
test eax, eax
pop ecx
jne 0x403f8d
push str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.00407f5c
mov byte [esp + 0x1b], 0
jmp 0x403f9c
push dword [esp + 0x40]
push str._Extractor__GenericUpdater_version_is__s_n
call fcn.00407f5c
pop ecx
pop ecx
push dword [esp + 0x10]
call fcn.00416c10
test eax, eax
pop ecx
jne 0x403fb7
push str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.00407f5c
jmp 0x403fc6
push dword [esp + 0x10]
push str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
call fcn.00407f5c
pop ecx
pop ecx
push str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.00407f5c
lea eax, [esp + 0xf4]
mov dword [esp], str.JWrapper
push eax
call fcn.0040817f
mov esi, eax
lea eax, [esp + 0x2808]
push eax
lea eax, [esp + 0xfc]
push eax
call fcn.0040817f
add esp, 0x10
test esi, esi
mov dword [esp + 0x20], eax
je 0x404113
test eax, eax
je 0x404113
push esi
push str._Extractor__Latest_GU_version_exists:__s_n
call fcn.00407f5c
push dword [esp + 0x28]
push str._Extractor__Existing_JRE_exists:__s_n
call fcn.00407f5c
push esi
call fcn.004083ec
add esp, 0x14
push dword [esp + 0x40]
mov dword [esp + 0x34], eax
call fcn.004183ce
cmp byte [esp + 0x1b], 0
pop ecx
je 0x40405a
cmp eax, dword [esp + 0x30]
jle 0x40405a
push str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x404118
push str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00407f5c
cmp byte [esp + 0x1b], 0
pop ecx
je 0x4040be
push dword [esp + 0x10]
call fcn.00416c10
test eax, eax
pop ecx
jbe 0x4040be
push dword [esp + 0x24]
lea eax, [esp + 0xf4]
push eax
call fcn.0040817f
test eax, eax
pop ecx
pop ecx
je 0x40410c
push eax
call fcn.004083ec
pop ecx
push dword [esp + 0x10]
mov dword [esp + 0x34], eax
call fcn.004183ce
cmp eax, dword [esp + 0x34]
pop ecx
jle 0x4040b3
push str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x404118
push str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00407f5c
pop ecx
push str._Extractor__Running_without_extraction_now_n
call fcn.00407f5c
pop ecx
push ebx
call fcn.0041a385
cmp byte [ebp + 0x10], 0
pop ecx
jne 0x404105
push dword [esp + 0x3c]
lea eax, [esp + 0xf4]
push 0
push dword [esp + 0x58]
lea edx, [esp + 0x280c]
push dword [esp + 0x40]
mov ecx, esi
push dword [esp + 0x58]
push dword [ebp + 8]
push edi
push eax
call fcn.00401b6d
add esp, 0x20
push 0
jmp 0x403743
push str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x404118
push str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.00407f5c
cmp dword [esp + 0x24], 0
pop ecx
jne 0x40412c
push str._Extractor__Note:_No_latest_JRE_version_exists_n
jmp 0x404131
push str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.00407f5c
test esi, esi
pop ecx
jne 0x404142
push str._Extractor__Note:_No_latest_GU_version_exists_n
jmp 0x404147
push str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.00407f5c
cmp byte [esp + 0x1b], 0
pop ecx
jne 0x404163
push str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.00407f5c
jmp 0x403740
lea eax, [esp + 0xf0]
push eax
call fcn.00407ebb
pop ecx
push dword [esp + 0x40]
lea eax, [esp + 0xf4]
push str.JWrapper
push eax
lea esi, [esp + 0xa50c]
call fcn.00401a09
lea eax, [esp + 0xfc]
add esp, 0xc
push eax
lea esi, [esp + 0x3b8c]
call fcn.00401a49
pop ecx
push dword [esp + 0x10]
lea eax, [esp + 0xf4]
push dword [esp + 0x28]
lea esi, [esp + 0x12dc0]
push eax
call fcn.00401a09
lea eax, [esp + 0xfc]
add esp, 0xc
push eax
lea esi, [esp + 0x917c]
call fcn.00401a49
pop ecx
lea eax, [esp + 0xa500]
push eax
push str._Extractor__GU_folder_is__s_n
call fcn.00407f5c
lea eax, [esp + 0x3b90]
push eax
push str._Extractor__GU_temp_is__s_n
call fcn.00407f5c
lea eax, [esp + 0x3b98]
push eax
call fcn.00407ebb
add esp, 0x14
test eax, eax
je 0x40421c
push str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
jmp 0x404159
lea eax, [esp + 0x3b88]
push str.lzma.exe
push eax
lea eax, [esp + 0x62a0]
call fcn.00407f20
lea eax, [esp + 0x62a0]
push eax
mov ebx, str._Extractor__LZMA_path_is__s_n
push ebx
call fcn.00407f5c
push dword [esp + 0x28]
mov edx, dword [esp + 0x30]
xor esi, esi
lea eax, [esp + 0x62ac]
push esi
push eax
lea ecx, [esp + 0x3ba4]
call fcn.004027c9
add esp, 0x1c
lea eax, [esp + 0x6298]
call fcn.00401626
push dword [esp + 0x18]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x629c]
push esi
push eax
lea ecx, [esp + 0x3b94]
call fcn.004027c9
add esp, 0xc
cmp dword [esp + 0x38], esi
je 0x40432f
push 0x430ce0
push dword [esp + 0x3c]
call fcn.00418c20
test eax, eax
pop ecx
pop ecx
jne 0x40432f
push str._Extractor__Authorised_to_override_the_splash_image._n
call fcn.00407f5c
cmp dword [esp + 0x5c], esi
pop ecx
je 0x40432f
cmp dword [esp + 0x60], esi
jbe 0x40432f
lea eax, [esp + 0x3b88]
push str.nativesplash.png
push eax
lea eax, [esp + 0x7628]
call fcn.00407f20
lea eax, [esp + 0x7628]
call fcn.00407f0f
lea eax, [esp + 0x7628]
push eax
push str._Extractor__Overwriting_splash_image_at__s_n
call fcn.00407f5c
lea eax, [esp + 0x7630]
push 0x42eb60
push eax
call fcn.00418609
mov esi, eax
push esi
push dword [esp + 0x7c]
push 1
push dword [esp + 0x7c]
call fcn.004199bc
push esi
call fcn.0041a385
add esp, 0x2c
push dword [esp + 0x18]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x629c]
push 0
push eax
lea ecx, [esp + 0x3b94]
call fcn.004027c9
mov edx, dword [esp + 0x28]
add esp, 0xc
push dword [esp + 0x18]
lea eax, [esp + 0x629c]
push 0
push eax
lea ecx, [esp + 0x3b94]
call fcn.004027c9
add esp, 0xc
push str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.00407f5c
pop ecx
lea eax, [esp + 0xa500]
push eax
push str._Extractor__Renaming_GU_folder_to__s_n
call fcn.00407f5c
lea esi, [esp + 0xa508]
lea edi, [esp + 0x3b90]
call fcn.00401512
push str._Extractor__Recreating_GU_location_n
call fcn.00407f5c
add esp, 0xc
mov eax, esi
push eax
mov eax, edi
push eax
mov byte [esp + 0x3b90], 0
call fcn.00416cb0
mov eax, esi
push str.lzma.exe
push eax
lea eax, [esp + 0x62a8]
call fcn.00407f20
lea eax, [esp + 0x62a8]
push eax
push ebx
call fcn.00407f5c
mov eax, edi
push str.verpatch.exe
push eax
lea eax, [esp + 0x16870]
call fcn.00407f20
mov eax, esi
push str.nativesplash.png
push eax
lea eax, [esp + 0xcc38]
call fcn.00407f20
lea eax, [esp + 0xcc38]
push eax
push str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.00407f5c
push str._Extractor__Configuring_splash_n
call fcn.00407f5c
add esp, 0x34
call fcn.0040121b
test al, al
je 0x404448
lea eax, [esp + 0xcc10]
push eax
call fcn.004052a3
pop ecx
mov ecx, eax
call fcn.00406bcf
push str._Extractor__Showing_splash_n
call fcn.00407f5c
cmp byte [esp + 0x13], 0
pop ecx
jne 0x404465
cmp byte [ebp + 0x10], 0
jne 0x404465
call fcn.00405b23
call fcn.00405b4e
push str._Extractor__Setting_up_a_JRE_n
call fcn.00407f5c
pop ecx
push dword [esp + 0x54]
call fcn.00416c10
test eax, eax
pop ecx
jbe 0x4045c6
mov ebx, str.Extracting_Offline_JRE
push ebx
call fcn.0040810a
mov dword [esp], str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00407f5c
pop ecx
push dword [esp + 0x28]
lea eax, [esp + 0x3b8c]
push eax
lea ecx, [esp + 0x2808]
call fcn.0040318b
lea eax, [esp + 0xf8]
push eax
lea esi, [esp + 0x4f1c]
call fcn.00401a49
mov eax, esi
add esp, 0xc
push eax
call fcn.00407ebb
pop ecx
push dword [esp + 0x54]
lea eax, [esp + 0x2804]
push eax
lea eax, [esp + 0xf8]
push eax
lea esi, [esp + 0xb894]
call fcn.00401a09
add esp, 0xc
push str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.00407f5c
lea eax, [esp + 0x4f14]
mov dword [esp], str.JRE.p2
push eax
lea eax, [esp + 0x154d0]
call fcn.00407f20
lea eax, [esp + 0x4f18]
push eax
call fcn.0040126c
add esp, 0xc
mov esi, eax
push esi
push str._Extractor__UP200_path_is__s_n
call fcn.00407f5c
push str._Extractor__Extracting_JRE_archive..._n
call fcn.00407f5c
mov edx, dword [esp + 0x28]
add esp, 0xc
push dword [esp + 0x18]
lea eax, [esp + 0x629c]
push esi
push eax
lea ecx, [esp + 0x4f1c]
call fcn.004027c9
add esp, 0xc
lea eax, [esp + 0x2800]
push eax
push str._Extractor__Extracted_JRE__s_n
call fcn.00407f5c
push str._Extractor__Regenerating_jsa..._n
call fcn.00407f5c
lea eax, [esp + 0x4f1c]
add esp, 0xc
push eax
call fcn.00401237
pop ecx
mov esi, eax
call fcn.00406789
mov edi, eax
push esi
push edi
call fcn.004067e2
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.004067b7
call fcn.00406811
push edi
call fcn.004169a3
add esp, 0xc
push ebx
jmp 0x404c49
push str.Setting_up_online_JRE
call fcn.0040810a
mov byte [esp + 0x6c], 0
mov dword [esp], str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
call fcn.00407f5c
pop ecx
push 0x14
pop ebx
push 0xa
lea eax, [esp + 0xd8]
push eax
push ebx
call fcn.0041776d
add esp, 0xc
push ebx
push str._JRESearch__Checking_for_JRE__d_n
call fcn.00407f5c
push str.PROGRAMFILES
mov byte [esp + 0x1484], 0
call fcn.0041a1a9
add esp, 0xc
push eax
lea eax, [esp + 0x147c]
push eax
call fcn.00416cb0
cmp byte [esp + 0x37], 0
pop ecx
pop ecx
lea esi, [esp + 0x1478]
je 0x40463d
push str.Java_JWAutoTest
jmp 0x404642
push str.Java
call fcn.00407eda
pop ecx
push 0x431080
lea esi, [esp + 0x147c]
call fcn.00407eda
pop ecx
lea eax, [esp + 0xd4]
push eax
mov eax, esi
push eax
call fcn.00416cb0
mov eax, esi
push eax
call fcn.0040126c
mov edi, eax
mov eax, esi
add esp, 0xc
push eax
call fcn.00401237
pop ecx
mov esi, eax
push esi
push str._JRESearch__Looking_at_JRE__s_n
call fcn.00407f5c
push esi
call fcn.00407b61
add esp, 0xc
test eax, eax
je 0x404711
push edi
call fcn.00407b61
test eax, eax
pop ecx
je 0x404711
mov edi, dword [esp + 0x64]
mov ecx, esi
call fcn.00403312
test eax, eax
je 0x404711
push esi
push str._JRESearch__JRE_unpack200_exists__s_n
call fcn.00407f5c
lea eax, [esp + 0xf8]
push str.JWrapper
push eax
call fcn.0040817f
add esp, 0x10
test eax, eax
je 0x40472b
push dword [esp + 0x3c]
lea ecx, [esp + 0xf4]
push 1
push dword [esp + 0x58]
mov edx, esi
push dword [esp + 0x40]
push dword [esp + 0x58]
push dword [ebp + 8]
push dword [esp + 0x5c]
push ecx
mov ecx, eax
call fcn.00401b6d
add esp, 0x20
cmp eax, 0x48
je 0x404735
push str._JRESearch__JRE_failed_compatibility_test_n
jmp 0x404716
push str._JRESearch__JRE_does_not_exist_or_does_not_have_unpack200_n
call fcn.00407f5c
dec ebx
cmp ebx, 5
pop ecx
jge 0x4045e5
jmp 0x4047d9
push str._JRESearch___No_latest_App_version_even_after_download__n
jmp 0x404159
push str._JRESearch__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00407f5c
pop ecx
push dword [esp + 0x28]
lea eax, [esp + 0x3b8c]
push eax
lea ecx, [esp + 0x2808]
call fcn.0040318b
push str._JRESearch__JRE_is_valid__copying..._n
call fcn.00407f5c
lea eax, [esp + 0xfc]
add esp, 0xc
push eax
lea esi, [esp + 0x4f14]
call fcn.00401a49
pop ecx
mov eax, esi
push eax
call fcn.00407ebb
pop ecx
mov eax, esi
push eax
lea eax, [esp + 0x147c]
push eax
call fcn.004017c7
test eax, eax
pop ecx
pop ecx
jne 0x4047ce
mov eax, esi
push eax
push str._JRESearch__JRE_copied_to__s_OK_n
call fcn.00407f5c
lea eax, [esp + 0x70]
push str.00000000000
push eax
mov byte [esp + 0x78], 0
call fcn.00416cb0
lea eax, [esp + 0x78]
push eax
push str._JRESearch__Copied_JRE_version_is__s_n
call fcn.00407f5c
add esp, 0x18
jmp 0x4047d9
push str._JRESearch__JRE_copy_failed__cannot_pick_up_existing_JRE_n
call fcn.00407f5c
pop ecx
lea eax, [esp + 0x68]
push eax
call fcn.00416c10
test eax, eax
pop ecx
jne 0x404bc0
push str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.00407f5c
pop ecx
mov edi, str.JWrapper_
lea eax, [esp + 0x3b88]
push edi
push eax
lea eax, [esp + 0x7df8]
call fcn.00407f20
lea eax, [esp + 0x2808]
push eax
lea eax, [esp + 0x7dfc]
push eax
call fcn.00416cb0
mov esi, str._version.txt
lea eax, [esp + 0x7e00]
push esi
push eax
call fcn.00416cb0
push dword [esp + 0x40]
lea eax, [esp + 0x1494]
push eax
mov byte [esp + 0x1498], 0
call fcn.00416cb0
lea eax, [esp + 0x1498]
push edi
push eax
call fcn.00416cb0
lea eax, [esp + 0x2828]
push eax
lea eax, [esp + 0x14a4]
push eax
call fcn.00416cb0
lea eax, [esp + 0x14a8]
push esi
push eax
call fcn.00416cb0
add esp, 0x38
cmp byte [esp + 0xf], 0
jne 0x404898
cmp byte [ebp + 0x10], 0
jne 0x404898
call fcn.00405b23
lea eax, [esp + 0x1478]
push eax
push str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.00407f5c
lea eax, [esp + 0x7df8]
push eax
lea eax, [esp + 0x1484]
push eax
call fcn.00405e5a
add esp, 0x10
test eax, eax
je 0x404bf5
call fcn.00405b4e
lea eax, [esp + 0x7df0]
push eax
push str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.00407f5c
lea eax, [esp + 0x7df8]
push 0x42fd44
push eax
call fcn.00418609
add esp, 0x10
test eax, eax
mov dword [esp + 0x24], eax
jne 0x404911
call fcn.00416ea9
push dword [eax]
push str._JREDownload___Unable_to_open_version_file____d_
call fcn.00407f5c
pop ecx
pop ecx
push str._JREDownload__Extracting_version:
xor esi, esi
call fcn.00407f5c
pop ecx
jmp 0x404946
push ebx
push 0x4313c0
call fcn.00407f5c
cmp ebx, 0xd
pop ecx
pop ecx
je 0x404963
cmp ebx, 0xa
je 0x404963
cmp ebx, 0x20
je 0x404963
cmp esi, 0x32
mov byte [esp + esi + 0x68], bl
jge 0x404959
inc esi
push dword [esp + 0x24]
call fcn.004183e4
mov ebx, eax
cmp ebx, 0xffffffff
pop ecx
jne 0x404920
jmp 0x40496e
push str._n_JREDownload__Version_invalid__too_long__n
jmp 0x404159
push str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.00407f5c
pop ecx
push 0x43004c
call fcn.00407f5c
cmp dword [esp + 0x28], 0
pop ecx
je 0x40498a
push dword [esp + 0x24]
call fcn.0041a385
pop ecx
lea eax, [esp + 0x68]
push eax
push str._JREDownload__JRE_Version_is__s_n
mov byte [esp + esi + 0x70], 0
call fcn.00407f5c
lea eax, [esp + 0xf8]
push eax
lea esi, [esp + 0x4f1c]
call fcn.00401a49
mov eax, esi
add esp, 0xc
push eax
call fcn.00407ebb
mov eax, esi
mov dword [esp], str.JREArchive.p2.l2
push eax
lea eax, [esp + 0x106b0]
call fcn.00407f20
push dword [esp + 0x30]
lea eax, [esp + 0x1484]
push eax
mov byte [esp + 0x1488], 0
call fcn.00416cb0
lea eax, [esp + 0x1488]
push edi
push eax
call fcn.00416cb0
lea eax, [esp + 0x2818]
push eax
lea eax, [esp + 0x1494]
push eax
call fcn.00416cb0
lea eax, [esp + 0x1498]
push 0x42ed9c
push eax
call fcn.00416cb0
lea eax, [esp + 0x90]
push eax
lea eax, [esp + 0x14a4]
push eax
call fcn.00416cb0
lea eax, [esp + 0x14a8]
push str._archive.p2.l2
push eax
call fcn.00416cb0
add esp, 0x38
cmp byte [esp + 0xf], 0
jne 0x404a5d
cmp byte [ebp + 0x10], 0
jne 0x404a5d
call fcn.00405b23
push str._JREDownload__Downloading_JRE_n
call fcn.00407f5c
pop ecx
lea eax, [esp + 0x106a8]
push eax
lea eax, [esp + 0x147c]
push eax
call fcn.00405e5a
test eax, eax
pop ecx
pop ecx
je 0x404bd9
call fcn.00405b4e
push str._JREDownload__JRE_Downloaded_OK__will_extract_n
call fcn.00407f5c
lea eax, [esp + 0x4f14]
mov dword [esp], str.JREArchive.p2
push eax
lea eax, [esp + 0x154d0]
call fcn.00407f20
call fcn.00406789
mov edi, eax
lea eax, [esp + 0x62a0]
push eax
push edi
call fcn.004067e2
mov edx, 0x42f7e4
mov ecx, edi
call fcn.004067b7
lea edx, [esp + 0x106b8]
mov ecx, edi
call fcn.004067b7
lea edx, [esp + 0x154d8]
mov ecx, edi
call fcn.004067b7
push str._JREDownload__Decompressing_JRE_archive_n
call fcn.00407f5c
add esp, 0x14
call fcn.00406811
test eax, eax
je 0x404b13
push str._JREDownload__Failed_to_decompress_JRE_archive_n
call fcn.0040800d
jmp 0x403740
push edi
call fcn.004169a3
pop ecx
lea eax, [esp + 0x4f10]
push eax
call fcn.0040126c
pop ecx
mov esi, eax
lea eax, [esp + 0x4f10]
push eax
push str._JREDownload__Extracting_JRE_archive_to__s_n
call fcn.00407f5c
push dword [esp + 0x20]
lea eax, [esp + 0x4f1c]
push eax
lea eax, [esp + 0x154d8]
push eax
push esi
call fcn.00402d2c
lea eax, [esp + 0x106c0]
push eax
call fcn.0041851b
add esp, 0x1c
push str._JREDownload__Done_extracting_JRE_archive_n
call fcn.00407f5c
mov dword [esp], str._JREDownload__Regenerating_jsa..._n
call fcn.00407f5c
pop ecx
lea eax, [esp + 0x4f10]
push eax
call fcn.00401237
pop ecx
mov esi, eax
call fcn.00406789
mov edi, eax
push esi
push edi
call fcn.004067e2
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.004067b7
call fcn.00406811
push edi
call fcn.004169a3
add esp, 0xc
push str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.00407f5c
pop ecx
lea eax, [esp + 0x68]
push eax
call fcn.00416c10
test eax, eax
pop ecx
jne 0x404c11
push str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
jmp 0x404b09
cmp byte [esp + 0xf], 0
jne 0x404beb
cmp byte [ebp + 0x10], 0
jne 0x404beb
call fcn.00405b3b
push str._JREDownload__Failed_to_download_JRE_n
jmp 0x404b09
cmp byte [esp + 0xf], 0
jne 0x404c07
cmp byte [ebp + 0x10], 0
jne 0x404c07
call fcn.00405b3b
push str._JREDownload__Failed_to_download_JRE_version_file_n
jmp 0x404b09
lea eax, [esp + 0x68]
push eax
push str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.00407f5c
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x280c]
push eax
lea eax, [esp + 0x100]
push eax
lea esi, [esp + 0xb89c]
call fcn.00401a09
add esp, 0x14
push str.Setting_up_online_JRE
call fcn.00408132
pop ecx
lea esi, [esp + 0xb888]
lea edi, [esp + 0x4f10]
call fcn.00401512
mov eax, esi
push eax
push str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.00407f5c
lea eax, [esp + 0xdfa0]
push str.DetectedProxy
push eax
lea eax, [esp + 0x14150]
call fcn.00407f20
push str._Extractor__Saving_proxy_configuration_n
call fcn.00407f5c
xor ebx, ebx
add esp, 0x14
cmp dword [0x444da4], ebx
je 0x404cad
lea eax, [esp + 0x14140]
push eax
call fcn.004064dd
pop ecx
lea eax, [esp + 0xb888]
push eax
call fcn.0040126c
pop ecx
mov esi, eax
push esi
push str._Extractor__UP200_path_is__s_n
call fcn.00407f5c
push dword [esp + 0x18]
call fcn.00416c10
add esp, 0xc
test eax, eax
jbe 0x404d76
push str._Extractor__Offline_installer___app_to_extract.
call fcn.00407f5c
pop ecx
lea eax, [esp + 0x12db8]
push eax
push str._Extractor__APP_folder_is__s_n
call fcn.00407f5c
lea eax, [esp + 0x9180]
push eax
push str._Extractor__APP_temp_is__s_n
call fcn.00407f5c
lea eax, [esp + 0x9188]
push eax
call fcn.00407ebb
add esp, 0x14
test eax, eax
je 0x404d29
push str.Unable_to_create_App_Temp_folder_n
jmp 0x404b09
push esi
push str._Extractor__Extracting_App..._n
call fcn.00407f5c
push dword [esp + 0x20]
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x62a4]
push esi
push eax
lea ecx, [esp + 0x918c]
call fcn.004027c9
mov edx, dword [esp + 0x30]
add esp, 0x14
push dword [esp + 0x18]
lea eax, [esp + 0x629c]
push esi
push eax
lea ecx, [esp + 0x9184]
call fcn.004027c9
add esp, 0xc
jmp 0x404d81
push str._Extractor__Online_installer___no_app_to_extract_n
call fcn.00407f5c
pop ecx
push dword [esp + 0x10]
call fcn.00416c10
test eax, eax
pop ecx
jbe 0x404db1
lea esi, [esp + 0x12db8]
lea edi, [esp + 0x9178]
call fcn.00401512
mov eax, esi
push eax
push str._Extractor__Renaming_App_folder_to__s_n
call fcn.00407f5c
pop ecx
pop ecx
lea eax, [esp + 0xf0]
push str.JWrapper
push eax
call fcn.0040817f
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
jne 0x404dd5
push str.No_latest_App_version_even_after_download__n
jmp 0x404b09
call fcn.00405b3b
push str._HttpDownloader__Cleaning_up..._n
call fcn.00407f5c
pop ecx
call fcn.0040121b
test al, al
je 0x404df9
push dword [0x444da0]
call sub.gdiplus.dll_GdiplusShutdown
push esi
push str._Extractor__Will_now_run_latest_GU__s_n
call fcn.00407f5c
push dword [esp + 0x24]
call fcn.0041a385
add esp, 0xc
cmp byte [ebp + 0x10], 0
jne 0x404e47
push dword [esp + 0x3c]
lea eax, [esp + 0xf4]
push ebx
push dword [esp + 0x58]
lea edx, [esp + 0x280c]
push dword [esp + 0x40]
mov ecx, esi
push dword [esp + 0x58]
push dword [ebp + 8]
push dword [esp + 0x5c]
push eax
call fcn.00401b6d
add esp, 0x20
push ebx
jmp 0x403743