Function at 0x402ff5
Capabilities:
Check os version
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16870
call fcn.0041cbc0
mov eax, dword [0x445504]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
xor ebx, ebx
mov edi, ecx
mov dword [ebp - 0x16828], edi
mov dword [ebp - 0x16858], eax
mov dword [0x454db0], ebx
mov dword [ebp - 0x16868], ebx
mov byte [ebp - 0x1685c], bl
call fcn.0040569d
push str.IsWow64Process
push str.kernel32
mov byte [ebp - 0x80], bl
mov dword [ebp - 0x16830], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
cmp esi, ebx
je 0x40306f
lea eax, [ebp - 0x16830]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
cmp dword [ebp - 0x16830], ebx
lea eax, [ebp - 0x80]
jne 0x40307e
push 0x20
jmp 0x403080
push 0x40
push 0x43e2a0
push eax
call fcn.00418ab3
add esp, 0xc
call fcn.00408b73
push edi
mov dword [ebp - 0x16850], eax
mov byte [ebp - 0x32], 9
mov byte [ebp - 0x31], 0x7a
mov byte [ebp - 0x30], 0x3e
mov byte [ebp - 0x2f], 0x2f
mov byte [ebp - 0x2e], 0x2e
mov byte [ebp - 0x2d], 0xfa
mov byte [ebp - 0x2c], 0xff
mov byte [ebp - 0x2b], 0x1d
mov byte [ebp - 0x2a], 0xf0
mov byte [ebp - 0x29], 0x9b
mov byte [ebp - 0x28], 0x19
mov byte [ebp - 0x27], 0x7c
mov byte [ebp - 0x26], 0x15
mov byte [ebp - 0x25], 0xb8
mov byte [ebp - 0x24], 0x1e
mov byte [ebp - 0x23], 0x6d
mov byte [ebp - 0x22], 0xc6
mov byte [ebp - 0x21], 0x10
mov byte [ebp - 0x20], 0x41
mov byte [ebp - 0x1f], 0x7e
mov byte [ebp - 0x1e], 0x5c
mov byte [ebp - 0x1d], 0xed
mov byte [ebp - 0x1c], 0x51
mov byte [ebp - 0x1b], 0xb1
mov byte [ebp - 0x1a], 0x19
mov byte [ebp - 0x19], 0x1c
mov byte [ebp - 0x18], 0x3c
mov byte [ebp - 0x17], 0xe2
mov byte [ebp - 0x16], 0x94
mov byte [ebp - 0x15], 0xd8
mov byte [ebp - 0x54], 0x59
mov byte [ebp - 0x53], 0xbd
mov byte [ebp - 0x52], 0xc9
mov byte [ebp - 0x51], 0x52
mov byte [ebp - 0x50], 0xaa
mov byte [ebp - 0x4f], 0x35
mov byte [ebp - 0x4e], 0xad
mov byte [ebp - 0x4d], 0xbb
mov byte [ebp - 0x4c], 0x10
mov byte [ebp - 0x4b], 0xef
mov byte [ebp - 0x4a], 0xde
mov byte [ebp - 0x49], 0x67
mov byte [ebp - 0x48], 0x2c
mov byte [ebp - 0x47], 0x47
mov byte [ebp - 0x46], 0xe0
mov byte [ebp - 0x45], 0xb5
mov byte [ebp - 0x44], 0xd4
mov byte [ebp - 0x43], 0x82
mov byte [ebp - 0x42], 0x1f
mov byte [ebp - 0x41], 0x81
mov byte [ebp - 0x40], 0x52
mov byte [ebp - 0x3f], 0xa1
mov byte [ebp - 0x3e], 2
mov byte [ebp - 0x3d], 0x44
mov byte [ebp - 0x3c], 0x2a
mov byte [ebp - 0x3b], 0xeb
mov byte [ebp - 0x3a], 0xaa
mov byte [ebp - 0x39], 0x7b
mov byte [ebp - 0x38], 0x79
mov byte [ebp - 0x37], 0x3b
mov byte [ebp - 0x36], 0x93
mov byte [ebp - 0x35], 0x45
mov byte [ebp - 0x34], 0xae
mov byte [ebp - 0x33], 0xd2
call fcn.00418150
cmp eax, 3
pop ecx
jb 0x4031c4
cmp byte [edi], 0x5c
jne 0x4031b0
cmp byte [edi + 1], 0x5c
je 0x4031bc
cmp byte [edi + 1], 0x3a
jne 0x4031c4
cmp byte [edi + 2], 0x5c
jne 0x4031c4
mov dword [ebp - 0x16844], edi
jmp 0x4031ea
mov esi, 0x400
push esi
call fcn.00417fc0
pop ecx
mov ebx, eax
push esi
push ebx
call fcn.0041a685
push edi
mov esi, ebx
call fcn.0040927d
add esp, 0xc
mov dword [ebp - 0x16844], ebx
push dword [ebp - 0x16844]
push str._Extractor__The_absolute_wrapper_path_is__s_n
call fcn.0040935a
push edi
push str._Extractor__The_executable_name_is__s_n
call fcn.0040935a
push 0x800
call fcn.00417fc0
add esp, 0x14
push dword [ebp - 0x16844]
mov esi, eax
push esi
mov byte [esi], 0
call fcn.004181f0
push esi
xor edi, edi
xor ebx, ebx
call fcn.00418150
add esp, 0xc
test eax, eax
jle 0x403248
cmp byte [ebx + esi], 0x5c
jne 0x40323c
mov edi, ebx
push esi
inc ebx
call fcn.00418150
cmp ebx, eax
pop ecx
jl 0x403234
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x16828]
mov byte [edi + esi], 0
call fcn.00402edd
push str._Extractor__Found_Params_marker._Extracting_now..._n
mov dword [ebp - 0x16834], eax
call fcn.0040935a
add esp, 0xc
mov esi, 0x30d40
push esi
call fcn.00417fc0
pop ecx
push esi
push 0
push eax
mov dword [ebp - 0x16848], eax
call fcn.004193f0
add esp, 0xc
push dword [ebp - 0x16834]
xor eax, eax
mov byte [ebp - 0x16815], 0
call fcn.0040810e
pop ecx
mov ebx, 0x43f214
push ebx
mov dword [ebp - 0x16830], eax
call fcn.0040935a
pop ecx
mov edi, 0x43f218
push edi
call fcn.0040935a
pop ecx
push dword [ebp - 0x16830]
push str._Processing__d_dynamic_properties_n
call fcn.0040935a
push edi
call fcn.0040935a
and dword [ebp - 0x1682c], 0
add esp, 0xc
cmp dword [ebp - 0x16830], 0
jle 0x403568
push dword [ebp - 0x16834]
call fcn.004080fb
pop ecx
push esi
push dword [ebp - 0x16834]
mov dword [ebp - 0x1681c], eax
xor eax, eax
call fcn.004080b1
mov edi, eax
push edi
call fcn.00418150
add esp, 0xc
cmp eax, 0x64
jbe 0x403346
lea eax, [ebp - 0x74]
push 0x63
push eax
push eax
call fcn.004192c0
add esp, 0xc
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x1681c]
mov byte [ebp - 0x11], 0
push dword [ebp - 0x1682c]
push str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x403358
push edi
push dword [ebp - 0x1681c]
push dword [ebp - 0x1682c]
push str._DynProps__Dynamic_Param__d:__s__s__n
call fcn.0040935a
mov eax, dword [ebp - 0x16848]
add esp, 0x10
push edi
push dword [ebp - 0x1681c]
call fcn.00407fb5
push str.update_url
push dword [ebp - 0x1681c]
call fcn.004196f0
add esp, 0x10
test eax, eax
jne 0x40339c
push edi
push str._DynProps__Dynamic_Update_URL:__s_n
mov dword [ebp - 0x16854], edi
call fcn.0040935a
pop ecx
pop ecx
push str.match_versions
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x4033bf
push str.true
push edi
call fcn.004196f0
pop ecx
pop ecx
push str.wrapper_autotest
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x4033dc
mov byte [ebp - 0x1685c], 1
push str.show_no_ui
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x40340a
push str.true
push edi
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x40340a
mov byte [ebp - 0x16815], 1
push str.force_spawn
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x403437
push str.true
push edi
call fcn.004196f0
neg eax
sbb eax, eax
pop ecx
inc eax
pop ecx
mov dword [0x454db8], eax
push str.splash_buffer
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x403464
push edi
call fcn.00418150
test eax, eax
pop ecx
jbe 0x403464
push edi
call fcn.00419163
pop ecx
mov dword [0x454e50], eax
push str.splash_image
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x4034e9
push edi
call fcn.00418150
cmp eax, 0x64
pop ecx
jae 0x40348e
push edi
push str._DynProps__Splash_Image_is__s_n
jmp 0x4034aa
push 0x63
lea eax, [ebp - 0x74]
push edi
push eax
call fcn.004192c0
add esp, 0xc
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 0x11], 0
push str._DynProps__Splash_Image_is__s..._n
call fcn.0040935a
pop ecx
pop ecx
push str._DynProps__Base64_decoding_image..._n
call fcn.0040935a
pop ecx
push edi
call fcn.00418150
pop ecx
push eax
push edi
lea eax, [ebp - 0x16860]
call fcn.00401401
push dword [ebp - 0x16860]
mov dword [ebp - 0x16868], eax
push str._DynProps__Decode_complete__image_size_is__d__n
call fcn.0040935a
add esp, 0x10
push str.jre_name
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x403526
mov byte [ebp - 0x431c], al
lea eax, [ebp - 0x431c]
push edi
push eax
call fcn.004181f0
lea eax, [ebp - 0x431c]
push eax
push str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.0040935a
add esp, 0x10
push str.windows_app_id
push dword [ebp - 0x1681c]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x403550
push edi
push str._DynProps__Windows_APP_ID_is__s_n
call fcn.0040935a
pop ecx
pop ecx
mov eax, edi
call fcn.00402855
inc dword [ebp - 0x1682c]
mov eax, dword [ebp - 0x1682c]
cmp eax, dword [ebp - 0x16830]
jl 0x4032ec
mov esi, dword [ebp - 0x16834]
call fcn.0040640c
push str.Processing_dynamic_properties
call fcn.00409530
cmp byte [ebp + 0x10], 0
pop ecx
je 0x40358f
push str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.0040935a
pop ecx
push ebx
call fcn.0040935a
mov dword [esp], str.Extracting_wrapper_tail
call fcn.00409508
pop ecx
push dword [ebp - 0x16850]
push dword [ebp - 0x16828]
call fcn.00402f62
mov ebx, eax
push ebx
mov dword [ebp - 0x16834], ebx
call fcn.004080fb
add esp, 0xc
push ebx
mov dword [ebp - 0x16828], eax
call fcn.004080fb
pop ecx
push ebx
mov dword [ebp - 0x1683c], eax
call fcn.004080fb
pop ecx
push ebx
mov dword [ebp - 0x16850], eax
call fcn.004080fb
pop ecx
push ebx
mov dword [ebp - 0x1684c], eax
call fcn.004080fb
mov dword [ebp - 0x16838], eax
mov dword [esp], 0x2000
push ebx
xor eax, eax
call fcn.004080b1
push ebx
mov dword [ebp - 0x1681c], eax
call fcn.004080fb
add esp, 0xc
push ebx
mov dword [ebp - 0x16864], eax
call fcn.004080fb
pop ecx
push ebx
mov dword [ebp - 0x16840], eax
call fcn.004080fb
pop ecx
push ebx
mov dword [ebp - 0x16824], eax
call fcn.004080fb
mov esi, eax
mov dword [esp], 0x1388
push ebx
xor eax, eax
mov dword [ebp - 0x1686c], esi
call fcn.004080b1
test esi, esi
pop ecx
mov edi, eax
pop ecx
mov dword [ebp - 0x16830], edi
je 0x40367e
push esi
call fcn.00418150
test eax, eax
pop ecx
jbe 0x40367e
push esi
push str._Extractor__Required_Java_version__s_n
call fcn.0040935a
pop ecx
pop ecx
push 0x43e30c
push edi
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
jne 0x40369d
mov edi, dword [ebp - 0x16854]
push edi
push str._Extractor__Will_use_Dynamic_Update_URL:__s_n
jmp 0x4036a3
push edi
push str._Extractor__Will_use_Static_Update_URL:__s_n
call fcn.0040935a
cmp byte [ebp - 0x16815], 0
pop ecx
mov dword [ebp - 0x1682c], edi
pop ecx
jne 0x403704
cmp dword [ebp - 0x16824], 0
je 0x4036fd
push dword [ebp - 0x16824]
call fcn.00418150
test eax, eax
pop ecx
je 0x4036fd
xor edi, edi
cmp dword [ebp + 8], edi
jle 0x4036fd
mov eax, dword [ebp - 0x16858]
push dword [eax + edi*4]
push dword [ebp - 0x16824]
call fcn.004196f0
test eax, eax
pop ecx
pop ecx
je 0x4038e8
inc edi
cmp edi, dword [ebp + 8]
jl 0x4036d9
mov byte [ebp - 0x16815], 0
movzx eax, byte [ebp - 0x16815]
push eax
push str._Extractor__Is_silent_install_is__d_n
call fcn.0040935a
push str.Extracting_tail
call fcn.00409530
add esp, 0xc
push str._Extractor__Setting_up_static_properties_n
call fcn.0040935a
mov edi, dword [ebp - 0x16848]
pop ecx
push dword [ebp - 0x16830]
mov eax, edi
push str.update_url
call fcn.00407f8d
push dword [ebp - 0x16840]
mov eax, edi
push str.install_type
call fcn.00407f8d
push dword [ebp - 0x16838]
mov eax, edi
push str.min_splash_ms
call fcn.00407f8d
push dword [ebp - 0x1681c]
mov eax, edi
push str.jwsig_public_key
call fcn.00407f8d
push dword [ebp - 0x16864]
mov eax, edi
push str.can_override_splash
call fcn.00407f8d
push dword [ebp - 0x16828]
mov eax, edi
push str.app_name
call fcn.00407f8d
push dword [ebp - 0x1683c]
mov eax, edi
push str.wrapper_app_version
call fcn.00407f8d
push dword [ebp - 0x1684c]
mov eax, edi
push str.wrapper_gu_version
call fcn.00407f8d
add esp, 0x40
push dword [ebp - 0x16824]
mov eax, edi
push str.silent_parameter
call fcn.00407f8d
push esi
push str.java_version
mov eax, edi
call fcn.00407f8d
add esp, 0x10
cmp byte [ebp - 0x16815], 0
je 0x403805
push str.true
push str.show_no_ui
mov eax, edi
call fcn.00407f8d
pop ecx
pop ecx
cmp dword [ebp - 0x1681c], 0
je 0x4038f4
push dword [ebp - 0x1681c]
call fcn.00418150
test eax, eax
pop ecx
push dword [ebp - 0x1681c]
jbe 0x403900
call fcn.00418150
mov esi, eax
shr esi, 1
inc esi
pop ecx
inc esi
push esi
call fcn.00417fc0
pop ecx
push esi
push 0
push eax
mov dword [ebp - 0x16838], eax
call fcn.004193f0
add esp, 0xc
push dword [ebp - 0x1681c]
push esi
push dword [ebp - 0x16838]
call fcn.00408d7e
add esp, 0xc
push eax
push str._Extractor__Processed_public_key_of_length__d_n
mov dword [ebp - 0x16824], eax
call fcn.0040935a
push dword [ebp - 0x1681c]
push str._Extractor__Hex:__s_n
call fcn.0040935a
push 0x31
pop ecx
mov esi, 0x4367b0
mov edi, 0x454e80
push 0x24
rep movsd dword es:[edi], dword [esi]
call fcn.00417fc0
add esp, 0x14
mov esi, eax
push esi
push dword [ebp - 0x16824]
push dword [ebp - 0x16838]
call fcn.0040bf10
add esp, 0xc
test eax, eax
je 0x4038cf
push str.ERROR___unable_to_import_public_key._n
call fcn.00418083
pop ecx
push esi
call fcn.00417ee3
pop ecx
xor esi, esi
push esi
push str._Extractor__Public_Key:__08X_n
mov dword [0x454db0], esi
call fcn.0040935a
mov edi, dword [ebp - 0x16848]
jmp 0x403916
mov byte [ebp - 0x16815], 1
jmp 0x403704
push str._Extractor__Public_key_empty__no_public_key__n
call fcn.0040935a
jmp 0x403917
call fcn.00418150
test eax, eax
pop ecx
ja 0x403918
push 0
push str._Extractor__Public_key_length__d__no_public_key__n
call fcn.0040935a
pop ecx
pop ecx
mov ecx, dword [ebp - 0x16840]
call fcn.004097db
push eax
push str._Extractor__Shared_dir_is__s_n
mov dword [ebp - 0x16840], eax
call fcn.0040935a
mov esi, dword [ebp - 0x1682c]
push esi
push str._Extractor__Update_URL_is_currently__s_n
call fcn.0040935a
push esi
call fcn.00418150
add esp, 0x14
test eax, eax
jle 0x403961
add eax, esi
cmp byte [eax - 1], 0x2f
je 0x403961
mov byte [eax], 0x2f
mov byte [eax + 1], 0
push esi
push str._Extractor__Update_URL_is_now__s_n
call fcn.0040935a
push str.JWrapper_
push dword [ebp - 0x16840]
lea eax, [ebp - 0x140c]
call fcn.004092fc
push dword [ebp - 0x16828]
lea eax, [ebp - 0x140c]
push eax
call fcn.004181f0
lea eax, [ebp - 0x140c]
push eax
push str._Extractor__Master_folder_is__s_n
call fcn.0040935a
lea eax, [ebp - 0x140c]
push eax
call fcn.004012de
add esp, 0x24
lea eax, [ebp - 0x140c]
push str.JWApps
push eax
lea eax, [ebp - 0x16814]
call fcn.004092fc
lea eax, [ebp - 0x16814]
push str.JreNameOverride
push eax
lea eax, [ebp - 0xdf5c]
call fcn.004092fc
lea eax, [ebp - 0xdf5c]
push 0x43e888
push eax
call fcn.00419256
mov esi, eax
add esp, 0x18
test esi, esi
je 0x403a74
push str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.0040935a
mov dword [esp], 0x1f4
push esi
call fcn.00407fdd
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x16840], eax
je 0x403a44
push eax
call fcn.00418150
cmp eax, 1
pop ecx
jne 0x403a44
mov eax, dword [ebp - 0x16840]
cmp byte [eax], 0x2d
jne 0x403a44
lea eax, [ebp - 0x431c]
push eax
push str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x403a80
push dword [ebp - 0x16840]
lea eax, [ebp - 0x431c]
push eax
mov byte [ebp - 0x431c], 0
call fcn.004181f0
push esi
call fcn.0041ac63
add esp, 0xc
lea eax, [ebp - 0x431c]
push eax
push str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x403a80
lea eax, [ebp - 0x431c]
push eax
push str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
call fcn.0040935a
pop ecx
pop ecx
lea eax, [ebp - 0x140c]
push str.JWAppsSharedConfig
push eax
lea eax, [ebp - 0x14104]
call fcn.004092fc
lea eax, [ebp - 0x14104]
push eax
call fcn.0040925e
add esp, 0xc
push dword [ebp - 0x1684c]
mov byte [ebp - 0x1681d], 1
call fcn.00418150
test eax, eax
pop ecx
jne 0x403ad7
push str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.0040935a
mov byte [ebp - 0x1681d], 0
jmp 0x403ae8
push dword [ebp - 0x1684c]
push str._Extractor__GenericUpdater_version_is__s_n
call fcn.0040935a
pop ecx
pop ecx
push dword [ebp - 0x1683c]
call fcn.00418150
test eax, eax
pop ecx
jne 0x403b05
push str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.0040935a
jmp 0x403b16
push dword [ebp - 0x1683c]
push str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
call fcn.0040935a
pop ecx
pop ecx
push str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.0040935a
lea eax, [ebp - 0x140c]
mov dword [esp], str.JWrapper
push eax
call fcn.004096ad
mov dword [ebp - 0x16824], eax
lea eax, [ebp - 0x431c]
push eax
lea eax, [ebp - 0x140c]
push eax
call fcn.004096ad
add esp, 0x10
test eax, eax
mov dword [ebp - 0x1681c], eax
je 0x403c6c
push str.java.exe
push 0x43da84
push eax
lea eax, [ebp - 0x140c]
push eax
lea eax, [ebp - 0x1c0c]
call fcn.00409338
lea esi, [ebp - 0x1c0c]
call fcn.00408efc
push str.javaw.exe
mov esi, eax
push 0x43da84
push dword [ebp - 0x1681c]
neg esi
lea eax, [ebp - 0x140c]
sbb esi, esi
push eax
lea eax, [ebp - 0x1c0c]
neg esi
call fcn.00409338
add esp, 0x20
test esi, esi
je 0x403bd2
lea esi, [ebp - 0x1c0c]
call fcn.00408efc
test eax, eax
je 0x403bd2
mov dword [ebp - 0x16838], 1
jmp 0x403bd9
and dword [ebp - 0x16838], 0
push str.rt.jar
push 0x43da6c
push dword [ebp - 0x1681c]
lea eax, [ebp - 0x140c]
push eax
lea eax, [ebp - 0x1c0c]
call fcn.00409338
add esp, 0x10
lea esi, [ebp - 0x1c0c]
call fcn.00408efc
test eax, eax
jne 0x403c51
push 0x43da6c
push 0x43da68
push dword [ebp - 0x1681c]
lea eax, [ebp - 0x140c]
push eax
mov eax, esi
call fcn.00409338
push str.rt.jar
call fcn.0040927d
add esp, 0x14
cmp dword [ebp - 0x16838], 0
je 0x403c4a
call fcn.00408efc
test eax, eax
jne 0x403c6c
and dword [ebp - 0x16838], 0
cmp dword [ebp - 0x16838], 0
jne 0x403c6c
push str._Extractor__The_existing_JRE_is_broken._Instructing_the_wrapper_to_update._n
call fcn.0040935a
and dword [ebp - 0x1681c], 0
pop ecx
cmp dword [ebp - 0x16824], 0
je 0x403da8
cmp dword [ebp - 0x1681c], 0
je 0x403da8
push dword [ebp - 0x16824]
push str._Extractor__Latest_GU_version_exists:__s_n
call fcn.0040935a
push dword [ebp - 0x1681c]
push str._Extractor__Existing_JRE_exists:__s_n
call fcn.0040935a
push dword [ebp - 0x16824]
call fcn.0040991a
add esp, 0x14
push dword [ebp - 0x1684c]
mov esi, eax
call fcn.00419152
cmp byte [ebp - 0x1681d], 0
pop ecx
je 0x403cd9
cmp eax, esi
jle 0x403cd9
push str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403dad
push str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.0040935a
cmp byte [ebp - 0x1681d], 0
pop ecx
je 0x403d44
push dword [ebp - 0x1683c]
call fcn.00418150
test eax, eax
pop ecx
jbe 0x403d44
push dword [ebp - 0x16828]
lea eax, [ebp - 0x140c]
push eax
call fcn.004096ad
test eax, eax
pop ecx
pop ecx
je 0x403da1
push eax
call fcn.0040991a
pop ecx
push dword [ebp - 0x1683c]
mov esi, eax
call fcn.00419152
cmp eax, esi
pop ecx
jle 0x403d39
push str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403dad
push str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.0040935a
pop ecx
push str._Extractor__Running_without_extraction_now_n
call fcn.0040935a
pop ecx
call fcn.004056cf
mov esi, ebx
call fcn.0040640c
cmp byte [ebp + 0x10], 0
jne 0x403d9a
push dword [ebp - 0x16844]
mov ecx, dword [ebp - 0x16824]
push 0
push dword [ebp - 0x16854]
lea eax, [ebp - 0x140c]
push dword [ebp - 0x16830]
lea edx, [ebp - 0x431c]
push dword [ebp - 0x16858]
push dword [ebp + 8]
push edi
push eax
call fcn.00401a81
add esp, 0x20
push 0
call fcn.00418e2e
push str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x403dad
push str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.0040935a
cmp dword [ebp - 0x1681c], 0
pop ecx
jne 0x403dc3
push str._Extractor__Note:_No_latest_JRE_version_exists_n
jmp 0x403dc8
push str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.0040935a
cmp dword [ebp - 0x16824], 0
pop ecx
jne 0x403dde
push str._Extractor__Note:_No_latest_GU_version_exists_n
jmp 0x403de3
push str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.0040935a
cmp byte [ebp - 0x1681d], 0
pop ecx
jne 0x403e01
push str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.0040935a
pop ecx
push 1
jmp 0x403d9c
lea eax, [ebp - 0x140c]
push eax
call fcn.0040925e
pop ecx
push dword [ebp - 0x1684c]
lea eax, [ebp - 0x140c]
push str.JWrapper
push eax
lea esi, [ebp - 0xb84c]
call fcn.00401937
lea eax, [ebp - 0x140c]
add esp, 0xc
push eax
lea esi, [ebp - 0x56a4]
call fcn.00401977
pop ecx
push dword [ebp - 0x1683c]
lea eax, [ebp - 0x140c]
push dword [ebp - 0x16828]
lea esi, [ebp - 0x12d7c]
push eax
call fcn.00401937
lea eax, [ebp - 0x140c]
add esp, 0xc
push eax
lea esi, [ebp - 0x913c]
call fcn.00401977
pop ecx
lea eax, [ebp - 0xb84c]
push eax
push str._Extractor__GU_folder_is__s_n
call fcn.0040935a
lea eax, [ebp - 0x56a4]
push eax
push str._Extractor__GU_temp_is__s_n
call fcn.0040935a
lea eax, [ebp - 0x56a4]
push eax
call fcn.0040925e
add esp, 0x14
test eax, eax
je 0x403eb4
push str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
jmp 0x403df7
lea eax, [ebp - 0x56a4]
push str.lzma.exe
push eax
lea eax, [ebp - 0xa4c4]
call fcn.004092fc
lea eax, [ebp - 0xa4c4]
push eax
mov ebx, str._Extractor__LZMA_path_is__s_n
push ebx
call fcn.0040935a
mov edi, dword [ebp - 0x16834]
lea eax, [ebp - 0x56a4]
push eax
push edi
call fcn.004081c9
lea eax, [ebp - 0xa4c4]
call fcn.0040957d
lea eax, [ebp - 0x56a4]
push eax
push edi
call fcn.004081c9
mov esi, str.nativesplash.png
lea eax, [ebp - 0x56a4]
push esi
push eax
lea eax, [ebp - 0x1bdc]
call fcn.004092fc
lea eax, [ebp - 0x1bdc]
call fcn.004092eb
lea eax, [ebp - 0x1bdc]
push eax
push dword [ebp - 0x16860]
push dword [ebp - 0x16868]
push dword [ebp - 0x16864]
call fcn.00402a1c
lea eax, [ebp - 0x56a4]
push eax
push edi
call fcn.004081c9
add esp, 0x40
lea eax, [ebp - 0x56a4]
push eax
push edi
call fcn.004081c9
lea eax, [ebp - 0x56a4]
push eax
push edi
call fcn.004081c9
push str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.0040935a
add esp, 0x14
lea eax, [ebp - 0xb84c]
push eax
push str._Extractor__Renaming_GU_folder_to__s_n
call fcn.0040935a
lea eax, [ebp - 0xb84c]
lea edi, [ebp - 0x56a4]
call fcn.00401549
push str._Extractor__Recreating_GU_location_n
call fcn.0040935a
add esp, 0xc
lea eax, [ebp - 0xb84c]
push eax
mov eax, edi
push eax
mov byte [ebp - 0x56a4], 0
call fcn.004181f0
lea eax, [ebp - 0xb84c]
push str.lzma.exe
push eax
lea eax, [ebp - 0xa4c4]
call fcn.004092fc
lea eax, [ebp - 0xa4c4]
push eax
push ebx
call fcn.0040935a
lea eax, [ebp - 0xb84c]
push str.cacerts
push eax
lea eax, [ebp - 0x119f4]
call fcn.004092fc
lea eax, [ebp - 0x119f4]
push eax
push str._Extractor__CACerts_override_path_is__s_n
call fcn.0040935a
mov eax, edi
push str.verpatch.exe
push eax
lea eax, [ebp - 0x1548c]
call fcn.004092fc
lea eax, [ebp - 0xb84c]
push esi
push eax
lea eax, [ebp - 0xf2e4]
call fcn.004092fc
lea eax, [ebp - 0xf2e4]
push eax
push str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.0040935a
add esp, 0x40
push str._Extractor__Configuring_splash_n
call fcn.0040935a
pop ecx
call fcn.004011ed
test al, al
je 0x404073
lea eax, [ebp - 0xf2e4]
push eax
call fcn.00404c01
pop ecx
mov ecx, eax
call fcn.00407097
push str._Extractor__Showing_splash_n
call fcn.0040935a
cmp byte [ebp - 0x16815], 0
pop ecx
jne 0x404092
cmp byte [ebp + 0x10], 0
jne 0x404092
call fcn.00405706
push 0xffffffffffffffff
call fcn.0040571e
mov dword [esp], str._Extractor__Setting_up_a_JRE_n
call fcn.0040935a
pop ecx
push dword [ebp - 0x16850]
call fcn.00418150
test eax, eax
pop ecx
jbe 0x4041e6
mov ebx, str.Extracting_Offline_JRE
push ebx
call fcn.00409508
mov dword [esp], str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.0040935a
pop ecx
push dword [ebp - 0x1682c]
lea eax, [ebp - 0x56a4]
push eax
lea ecx, [ebp - 0x431c]
call fcn.00402728
lea eax, [ebp - 0x140c]
push eax
lea esi, [ebp - 0x6a2c]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.0040925e
pop ecx
push dword [ebp - 0x16850]
lea eax, [ebp - 0x431c]
push eax
lea eax, [ebp - 0x140c]
push eax
lea esi, [ebp - 0xcbd4]
call fcn.00401937
add esp, 0xc
push str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.0040935a
lea eax, [ebp - 0x6a2c]
mov dword [esp], str.JRE.p2
push eax
lea eax, [ebp - 0x2f94]
call fcn.004092fc
lea eax, [ebp - 0x6a2c]
push eax
call fcn.00401289
add esp, 0xc
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.0040935a
push str._Extractor__Extracting_JRE_archive..._n
call fcn.0040935a
add esp, 0xc
lea eax, [ebp - 0x6a2c]
push eax
push dword [ebp - 0x16834]
call fcn.004081c9
lea eax, [ebp - 0x431c]
push eax
push str._Extractor__Extracted_JRE__s_n
call fcn.0040935a
push str._Extractor__Regenerating_jsa..._n
call fcn.0040935a
lea eax, [ebp - 0x6a2c]
add esp, 0x14
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406c51
mov edi, eax
push esi
push edi
call fcn.00406caa
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406c7f
call fcn.00406cd9
push edi
call fcn.00417ee3
add esp, 0xc
push ebx
jmp 0x4045ed
push str.Setting_up_online_JRE
call fcn.00409508
mov byte [ebp - 0x74], 0
mov dword [esp], str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
call fcn.0040935a
pop ecx
push dword [ebp - 0x16844]
lea eax, [ebp - 0x6a2c]
push dword [ebp - 0x16854]
push dword [ebp - 0x16830]
push dword [ebp - 0x16858]
push dword [ebp + 8]
push dword [ebp - 0x16848]
push eax
lea eax, [ebp - 0x140c]
push eax
push dword [ebp - 0x1686c]
lea eax, [ebp - 0x74]
push dword [ebp - 0x1685c]
push eax
call fcn.00402aa0
lea eax, [ebp - 0x74]
add esp, 0x2c
push eax
call fcn.00418150
test eax, eax
pop ecx
jbe 0x40427f
push str._Extractor__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.0040935a
pop ecx
push dword [ebp - 0x1682c]
lea eax, [ebp - 0x56a4]
push eax
lea ecx, [ebp - 0x431c]
call fcn.00402728
pop ecx
jmp 0x40459c
push str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.0040935a
pop ecx
call fcn.00402700
mov ebx, eax
mov edi, str.JWrapper_
lea eax, [ebp - 0x56a4]
push edi
push eax
lea eax, [ebp - 0x7db4]
call fcn.004092fc
lea eax, [ebp - 0x431c]
push eax
lea eax, [ebp - 0x7db4]
push eax
call fcn.004181f0
mov esi, str._version.txt
lea eax, [ebp - 0x7db4]
push esi
push eax
call fcn.004181f0
push dword [ebp - 0x1682c]
lea eax, [ebp - 0x2f94]
push eax
mov byte [ebp - 0x2f94], 0
call fcn.004181f0
lea eax, [ebp - 0x2f94]
push edi
push eax
call fcn.004181f0
lea eax, [ebp - 0x431c]
push eax
lea eax, [ebp - 0x2f94]
push eax
call fcn.004181f0
lea eax, [ebp - 0x2f94]
push esi
push eax
call fcn.004181f0
lea eax, [ebp - 0x2f94]
push str._time
push eax
call fcn.004181f0
add esp, 0x40
lea eax, [ebp - 0x2f94]
push ebx
push eax
call fcn.004181f0
push ebx
call fcn.00417ee3
add esp, 0xc
cmp byte [ebp - 0x16815], 0
jne 0x404352
cmp byte [ebp + 0x10], 0
jne 0x404352
call fcn.00405706
lea eax, [ebp - 0x2f94]
push eax
push str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.0040935a
lea eax, [ebp - 0x7db4]
push eax
push str._JREDownload__Saving_into__s_n
call fcn.0040935a
lea eax, [ebp - 0x7db4]
push eax
lea eax, [ebp - 0x2f94]
push eax
call fcn.00407c49
add esp, 0x18
test eax, eax
je 0x404802
push 0xffffffffffffffff
call fcn.0040571e
pop ecx
lea eax, [ebp - 0x7db4]
push eax
push str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.0040935a
lea eax, [ebp - 0x7db4]
push 0x43e888
push eax
call fcn.00419256
add esp, 0x10
test eax, eax
mov dword [ebp - 0x16828], eax
jne 0x4043dc
call fcn.004183e9
push dword [eax]
push str._JREDownload___Unable_to_open_version_file____d__n
call fcn.0040935a
pop ecx
pop ecx
push str._JREDownload__Extracting_version:
xor esi, esi
call fcn.0040935a
pop ecx
jmp 0x404411
push ebx
push 0x440348
call fcn.0040935a
cmp ebx, 0xd
pop ecx
pop ecx
je 0x404430
cmp ebx, 0xa
je 0x404430
cmp ebx, 0x20
je 0x404430
cmp esi, 0x32
mov byte [ebp + esi - 0x74], bl
jge 0x404426
inc esi
push dword [ebp - 0x16828]
call fcn.0041acdf
mov ebx, eax
cmp ebx, 0xffffffff
pop ecx
jne 0x4043eb
jmp 0x40443b
push str._n_JREDownload__Version_invalid__too_long__n
jmp 0x403df7
push str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.0040935a
pop ecx
push 0x43f214
call fcn.0040935a
cmp dword [ebp - 0x16828], 0
pop ecx
je 0x40445b
push dword [ebp - 0x16828]
call fcn.0041ac63
pop ecx
lea eax, [ebp - 0x74]
push eax
push str._JREDownload__JRE_Version_is__s_n
mov byte [ebp + esi - 0x74], 0
call fcn.0040935a
lea eax, [ebp - 0x140c]
push eax
lea esi, [ebp - 0x6a2c]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.0040925e
pop ecx
push dword [ebp - 0x1682c]
lea eax, [ebp - 0x2f94]
push eax
mov byte [ebp - 0x2f94], 0
call fcn.004181f0
lea eax, [ebp - 0x2f94]
push edi
push eax
call fcn.004181f0
lea eax, [ebp - 0x431c]
push eax
lea eax, [ebp - 0x2f94]
push eax
call fcn.004181f0
lea eax, [ebp - 0x2f94]
push 0x43e0fc
push eax
call fcn.004181f0
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x2f94]
push eax
call fcn.004181f0
lea eax, [ebp - 0x2f94]
push str._archive.p2.l2
push eax
call fcn.004181f0
mov eax, esi
push eax
call fcn.00401289
add esp, 0x34
cmp byte [ebp - 0x16815], 0
mov dword [0x454db4], eax
jne 0x40451b
cmp byte [ebp + 0x10], 0
jne 0x40451b
call fcn.00405706
lea eax, [ebp - 0x6a2c]
push eax
push str._JREDownload__Extracting_JRE_archive_to__s_n
call fcn.0040935a
lea eax, [ebp - 0x6a2c]
push eax
lea eax, [ebp - 0x2f94]
push eax
call fcn.00407d30
add esp, 0x10
test eax, eax
jne 0x404550
push str._JREDownload__Failed_to_download_and_extract_JRE_archive._n
jmp 0x403df7
push str._JREDownload__Regenerating_jsa..._n
call fcn.0040935a
pop ecx
lea eax, [ebp - 0x6a2c]
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406c51
mov edi, eax
push esi
push edi
call fcn.00406caa
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406c7f
call fcn.00406cd9
push edi
call fcn.00417ee3
add esp, 0xc
push str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.0040935a
pop ecx
lea eax, [ebp - 0x74]
push eax
call fcn.00418150
test eax, eax
pop ecx
jne 0x4045ba
push str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
call fcn.0040940b
jmp 0x403dfc
lea eax, [ebp - 0x74]
push eax
push str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.0040935a
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x431c]
push eax
lea eax, [ebp - 0x140c]
push eax
lea esi, [ebp - 0xcbd4]
call fcn.00401937
add esp, 0x14
push str.Setting_up_online_JRE
call fcn.00409530
pop ecx
lea eax, [ebp - 0xcbd4]
lea edi, [ebp - 0x6a2c]
call fcn.00401549
lea eax, [ebp - 0xcbd4]
push eax
push str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.0040935a
push str._Extractor__JRE_setup._Overriding_cacerts._n
call fcn.0040935a
lea eax, [ebp - 0xcbd4]
add esp, 0xc
push eax
lea edi, [ebp - 0x119f4]
call fcn.00402def
lea eax, [ebp - 0x14104]
mov dword [esp], str.DetectedProxy
push eax
lea eax, [ebp - 0x1066c]
call fcn.004092fc
push str._Extractor__Saving_proxy_configuration_n
call fcn.0040935a
xor ebx, ebx
add esp, 0xc
cmp dword [0x454da4], ebx
je 0x40467d
push str._Proxy__Saving_proxy_settings_now.
call fcn.0040935a
pop ecx
lea eax, [ebp - 0x1066c]
push eax
call fcn.00406136
jmp 0x404687
push str._Proxy__No_working_proxy_was_found__so_no_proxy_to_be_saved.
call fcn.0040935a
pop ecx
lea eax, [ebp - 0xcbd4]
push eax
call fcn.00401289
pop ecx
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.0040935a
push dword [ebp - 0x1683c]
call fcn.00418150
add esp, 0xc
test eax, eax
jbe 0x40473e
push str._Extractor__Offline_installer___app_to_extract.
call fcn.0040935a
pop ecx
lea eax, [ebp - 0x12d7c]
push eax
push str._Extractor__APP_folder_is__s_n
call fcn.0040935a
lea eax, [ebp - 0x913c]
push eax
push str._Extractor__APP_temp_is__s_n
call fcn.0040935a
lea eax, [ebp - 0x913c]
push eax
call fcn.0040925e
add esp, 0x14
test eax, eax
je 0x404705
push str.Unable_to_create_App_Temp_folder_n
jmp 0x4045b0
push dword [0x454db4]
push str._Extractor__Extracting_App..._n
call fcn.0040935a
lea eax, [ebp - 0x913c]
push eax
push dword [ebp - 0x16834]
call fcn.004081c9
lea eax, [ebp - 0x913c]
push eax
push dword [ebp - 0x16834]
call fcn.004081c9
add esp, 0x18
jmp 0x404749
push str._Extractor__Online_installer___no_app_to_extract_n
call fcn.0040935a
pop ecx
push dword [ebp - 0x1683c]
call fcn.00418150
test eax, eax
pop ecx
jbe 0x40477d
lea eax, [ebp - 0x12d7c]
lea edi, [ebp - 0x913c]
call fcn.00401549
lea eax, [ebp - 0x12d7c]
push eax
push str._Extractor__Renaming_App_folder_to__s_n
call fcn.0040935a
pop ecx
pop ecx
lea eax, [ebp - 0x140c]
push str.JWrapper
push eax
call fcn.004096ad
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
jne 0x4047a0
push str.No_latest_App_version_even_after_download__n
jmp 0x4045b0
call fcn.004056cf
push edi
push str._Extractor__Will_now_run_latest_GU__s_n
call fcn.0040935a
mov esi, dword [ebp - 0x16834]
pop ecx
pop ecx
call fcn.0040640c
cmp byte [ebp + 0x10], 0
jne 0x4047fc
push dword [ebp - 0x16844]
lea eax, [ebp - 0x140c]
push ebx
push dword [ebp - 0x16854]
lea edx, [ebp - 0x431c]
push dword [ebp - 0x16830]
mov ecx, edi
push dword [ebp - 0x16858]
push dword [ebp + 8]
push dword [ebp - 0x16848]
push eax
call fcn.00401a81
add esp, 0x20
push ebx
jmp 0x403d9c
cmp byte [ebp - 0x16815], 0
jne 0x404816
cmp byte [ebp + 0x10], 0
jne 0x404816
call fcn.004056cf
push str._JREDownload__Failed_to_download_JRE_version_file_n
jmp 0x4045b0