Function at 0x4059c0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Get common file path
Identify system language via api
Resolve function by parsing pe exports
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x53bb84
mov eax, dword fs:[0]
push eax
sub esp, 0xdc0
mov eax, dword [0x597950]
xor eax, esp
mov dword [esp + 0xdb8], eax
push ebx
push esi
push edi
mov eax, dword [0x597950]
xor eax, esp
push eax
lea eax, [esp + 0xdd0]
mov dword fs:[0], eax
lea eax, [esp + 0xac]
push eax
mov edi, ecx
mov dword [esp + 0xb0], 8
mov dword [esp + 0xb4], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, edi
call fcn.004217d5
call fcn.00427140
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogOpen_void_]
push ecx
mov ecx, esp
mov dword [esp + 0x88], esp
push 0x5699e8
call fcn.0040d380
mov esi, dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
call esi
add esp, 4
lea ecx, [esp + 0x774]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [esp + 0x774]
movzx eax, word [esp + 0x77a]
movzx ecx, word [esp + 0x776]
push edx
push eax
push ecx
push str._d__d__d
lea edx, [esp + 0xbcc]
push 0x104
push edx
call fcn.00510a55
add esp, 0x18
lea eax, [esp + 0xbbc]
push eax
lea ecx, [esp + 0x64]
call fcn.0040d380
push eax
lea ecx, [esp + 0x60]
push 0x569abc
push ecx
mov dword [esp + 0xde4], 0
call fcn.0040ddb0
add esp, 8
mov edx, esp
mov byte [esp + 0xddc], 1
mov dword [esp + 0x18], esp
push 0x569ab8
push eax
push edx
call fcn.0040dcd0
add esp, 0xc
call esi
mov byte [esp + 0xddc], 0
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405b13
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xdd8], 0xffffffff
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405b3e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.0041fe1b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x405b58
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
push 0x569acc
lea ecx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____Bootstrap_app_started._Application_Version___s._n
push ecx
mov dword [esp + 0xde4], 2
call fcn.004127d0
add esp, 8
lea edx, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
call esi
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x9be]
push ecx
mov word [esp + 0x9c0], ax
call fcn.00513270
add esp, 0xc
push 0x569338
lea ecx, [esp + 0x30]
call fcn.0040d380
lea edx, [esp + 0x9b4]
push edx
push 0x104
mov byte [esp + 0xde0], 3
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
call fcn.0041fe1b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x405c02
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov ecx, 0x569b8c
mov byte [esp + 0xdd8], 4
test ecx, 0xffff0000
jne 0x405c43
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.0041fd36
test eax, eax
je 0x405c51
push ebx
push eax
lea ecx, [esp + 0x5c]
call fcn.00410790
jmp 0x405c51
push 0x569b8c
lea ecx, [esp + 0x58]
call fcn.0040d530
lea eax, [esp + 0x9b4]
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0xddc], 5
call fcn.0040d380
mov dword [esp + 0x5c], eax
mov byte [esp + 0xdd8], 6
call fcn.0041fe1b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x405c90
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x24], eax
mov ecx, str.CBootstrapApp::InitInstance_____Current_working_directory:
mov byte [esp + 0xdd8], 7
test ecx, 0xffff0000
jne 0x405cd1
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.0041fd36
test eax, eax
je 0x405cdf
push ebx
push eax
lea ecx, [esp + 0x2c]
call fcn.00410790
jmp 0x405cdf
push str.CBootstrapApp::InitInstance_____Current_working_directory:
lea ecx, [esp + 0x28]
call fcn.0040d530
mov byte [esp + 0xdd8], 8
mov eax, dword [esp + 0x5c]
push eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x3c]
push edx
call fcn.0040dc10
add esp, 8
mov ecx, esp
mov byte [esp + 0xddc], 9
mov dword [esp + 0x18], esp
lea edx, [esp + 0x58]
push edx
push eax
push ecx
call fcn.0040dc10
add esp, 0xc
call esi
mov byte [esp + 0xddc], 8
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405d48
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 6
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405d70
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 5
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405d98
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 3
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405dc0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.00425a2a
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x44]
push 0x104
lea ecx, [esp + 0x9b8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4062f9
push 0x569b8c
lea ecx, [esp + 0x68]
call fcn.0040d440
mov esi, eax
push 0x569bcc
lea ecx, [esp + 0x58]
mov byte [esp + 0xddc], 0xa
call fcn.0040d440
mov ebx, eax
push str.CBootstrapApp::InitInstance_____Application_directory_and_command_line:
lea ecx, [esp + 0x28]
mov byte [esp + 0xddc], 0xb
call fcn.0040d440
lea ecx, [esp + 0x9b4]
push ecx
push eax
lea edx, [esp + 0x58]
push edx
mov byte [esp + 0xde4], 0xc
call fcn.0040dcd0
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0xde4], 0xd
call fcn.0040dc10
add esp, 0xc
lea ecx, [edi + 0xfc]
push ecx
push eax
lea edx, [esp + 0x64]
push edx
mov byte [esp + 0xde4], 0xe
call fcn.0040dc10
add esp, 8
mov ecx, esp
mov byte [esp + 0xddc], 0xf
mov dword [esp + 0x18], esp
push esi
push eax
push ecx
call fcn.0040dc10
add esp, 0xc
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
mov byte [esp + 0xddc], 0xe
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
add esp, 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x405ec1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0xd
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405ee9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0xc
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f11
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0xb
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f39
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0xa
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f61
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 3
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405f89
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x9b4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
test eax, eax
jne 0x405f9f
xor ecx, ecx
jmp 0x405fb3
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x405fa4
sub ecx, esi
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x34]
call fcn.004118f0
push 0x569b8c
lea ecx, [esp + 0x54]
call fcn.0040d440
mov esi, eax
push str.CBootstrapApp::InitInstance_____Application_name:
lea ecx, [esp + 0x38]
mov byte [esp + 0xddc], 0x10
call fcn.0040d440
lea edx, [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0xde4], 0x11
call fcn.0040dc10
add esp, 8
mov ecx, esp
mov byte [esp + 0xddc], 0x12
mov dword [esp + 0x18], esp
push esi
push eax
push ecx
call fcn.0040dc10
mov ebx, dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
add esp, 0xc
call ebx
mov byte [esp + 0xddc], 0x11
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
add esp, 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40604b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x10
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406073
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 3
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40609b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x9b4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea edx, [esp + 0x9b4]
push edx
lea ecx, [esp + 0x64]
call fcn.0040d380
push 0x569b8c
lea ecx, [esp + 0x54]
mov byte [esp + 0xddc], 0x13
call fcn.0040d440
mov esi, eax
push str.CBootstrapApp::InitInstance_____Setting_current_working_directory_to:
lea ecx, [esp + 0x38]
mov byte [esp + 0xddc], 0x14
call fcn.0040d440
lea ecx, [esp + 0x60]
push ecx
push eax
lea edx, [esp + 0x64]
push edx
mov byte [esp + 0xde4], 0x15
call fcn.0040dc10
add esp, 8
mov ecx, esp
mov byte [esp + 0xddc], 0x16
mov dword [esp + 0x18], esp
push esi
push eax
push ecx
call fcn.0040dc10
add esp, 0xc
call ebx
mov byte [esp + 0xddc], 0x15
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
add esp, 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x406149
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x14
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406171
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x13
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406199
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea edx, [esp + 0x9b4]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x569b8c
lea ecx, [esp + 0x28]
call fcn.0040d440
mov esi, eax
lea eax, [esp + 0x9b4]
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0xddc], 0x17
call fcn.0040d380
mov ebx, eax
push str.CBootstrapApp::InitInstance_____New_current_working_directory_is:
lea ecx, [esp + 0x38]
mov byte [esp + 0xddc], 0x18
call fcn.0040d440
push ebx
push eax
lea ecx, [esp + 0x64]
push ecx
mov byte [esp + 0xde4], 0x19
call fcn.0040dc10
add esp, 8
mov edx, esp
mov byte [esp + 0xddc], 0x1a
mov dword [esp + 0x18], esp
push esi
push eax
push edx
call fcn.0040dc10
add esp, 0xc
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
mov byte [esp + 0xddc], 0x19
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406259
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x18
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406281
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x17
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4062a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x13
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4062d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 3
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4062f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esp + 0x9b4]
lea ecx, [edi + 0x100]
lea esi, [eax + 2]
lea esp, [esp]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x406310
sub eax, esi
sar eax, 1
push eax
lea edx, [esp + 0x9b8]
push edx
call fcn.004118f0
lea ecx, [esp + 0x2c]
call fcn.004105f0
mov ecx, eax
call fcn.00410670
lea ecx, [edi + 0x104]
push eax
call fcn.00410990
lea ecx, [esp + 0x13c]
call sym.Autorun.exe_public:_void___thiscall_InstallerConfig::constructor_void_
lea ecx, [esp + 0x88]
mov byte [esp + 0xdd8], 0x1b
call dword [sym.imp.BootstrapLibrary.dll_public:_void___thiscall_ConditionChecker::constructor_void_]
mov byte [esp + 0xdd8], 0x1c
call fcn.0041fe1b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40638c
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x3c4]
push ecx
mov byte [esp + 0xddc], 0x1d
lea ecx, [esp + 0x140]
mov byte [esp + 0x64], 0
call dword [sym.imp.BootstrapLibrary.dll_public:_class_CBootstrapConfigItem___thiscall_CBootstrapInit::BootstrapConfigInit_void_]
lea ecx, [edi + 0x114]
mov byte [esp + 0xdd8], 0x1e
push eax
mov dword [esp + 0x60], ecx
call sym.Autorun.exe_public:_class_CBootstrapConfigItem____thiscall_CBootstrapConfigItem::operator_class_CBootstrapConfigItem_const__
lea ecx, [esp + 0x3c4]
mov byte [esp + 0xdd8], 0x1d
call sym.Autorun.exe_public:_void___thiscall_CBootstrapConfigItem::destructor_void_
mov eax, dword [edi + 0x120]
lea ebx, [edi + 0x120]
mov dword [esp + 0x6c], ebx
mov ecx, 0x569204
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x406426
test dx, dx
je 0x406422
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x406426
add eax, 4
add ecx, 4
test dx, dx
jne 0x406400
xor eax, eax
jmp 0x40642b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
setne al
test al, al
je 0x4065e0
mov esi, dword [sym.imp.BootstrapLibrary.dll_public:_int___thiscall_ConditionChecker::getOSMajorVersion_void_]
lea ecx, [esp + 0x88]
call esi
cmp eax, 6
jne 0x4064d3
lea ecx, [esp + 0x88]
call dword [sym.imp.BootstrapLibrary.dll_public:_int___thiscall_ConditionChecker::getOSMinorVersion_void_]
test eax, eax
jne 0x4064d3
lea ecx, [esp + 0x88]
call dword [sym.imp.BootstrapLibrary.dll_public:_enum_SystemArchitectureType___thiscall_ConditionChecker::getOSArchitecture_void_]
cmp eax, 1
jne 0x4064d3
lea ecx, [esp + 0x88]
call dword [sym.imp.BootstrapLibrary.dll_public:_int___thiscall_ConditionChecker::getOSProductType_void_]
cmp eax, 1
jle 0x4064d3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Server_2008_x64._Proceeding_with_non_Legacy_Installer._n
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
lea edx, [edi + 0x118]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
lea ecx, [esp + 0x140]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapInit::BootstrapInstallerConfigInit_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
lea eax, [esp + 0x294]
push eax
lea ecx, [edi + 0x16c]
call sym.Autorun.exe_public:_class_CInstallerConfigItem____thiscall_CInstallerConfigItem::operator_class_CInstallerConfigItem_const__
jmp 0x406675
lea ecx, [esp + 0x88]
call esi
cmp eax, 5
jle 0x406500
lea ecx, [esp + 0x88]
call dword [sym.imp.BootstrapLibrary.dll_public:_int___thiscall_ConditionChecker::getOSMinorVersion_void_]
test eax, eax
jle 0x406500
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Proceeding_with_non_Legacy_Installer._n
jmp 0x406491
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Proceeding_with_Legacy_Installer._n
mov byte [esp + 0x68], 1
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
mov dword [esp + 0x18], esp
mov ecx, esp
push ebx
call fcn.00410900
lea ecx, [esp + 0x140]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapInit::BootstrapInstallerConfigInit_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
lea ecx, [esp + 0x294]
push ecx
lea ecx, [edi + 0x16c]
call fcn.00410990
lea edx, [esp + 0x298]
lea ecx, [edi + 0x170]
push edx
call fcn.00410990
lea eax, [esp + 0x29c]
lea ecx, [edi + 0x174]
push eax
call fcn.00410990
lea edx, [esp + 0x2a0]
lea ecx, [edi + 0x178]
push edx
call fcn.00410990
lea eax, [esp + 0x2a4]
push eax
lea ecx, [edi + 0x17c]
call fcn.00410990
push 0x569204
push ebx
call fcn.0040de90
add esp, 8
test al, al
je 0x4067d7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Issue_loading_or_parsing_Legacy_Config_file._The_bootstrap_application_cannot_continue._n
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
add esp, 4
push 0x8b
call fcn.0041fd36
test eax, eax
je 0x4066ef
push 0x8b
jmp 0x4066e5
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Proceeding_with_non_Legacy_Installer._n
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
lea edx, [edi + 0x118]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
lea ecx, [esp + 0x140]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapInit::BootstrapInstallerConfigInit_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
lea eax, [esp + 0x294]
push eax
lea ecx, [edi + 0x16c]
call fcn.00410990
lea edx, [esp + 0x298]
lea ecx, [edi + 0x170]
push edx
call fcn.00410990
lea eax, [esp + 0x29c]
lea ecx, [edi + 0x174]
push eax
call fcn.00410990
lea edx, [esp + 0x2a0]
lea ecx, [edi + 0x178]
push edx
call fcn.00410990
lea eax, [esp + 0x2a4]
push eax
lea ecx, [edi + 0x17c]
call fcn.00410990
mov eax, dword [edi + 0x128]
mov ecx, 0x569204
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4066a6
test dx, dx
je 0x4066a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4066a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x406680
xor eax, eax
jmp 0x4066ab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
je 0x4067d7
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Issue_loading_or_parsing_Application_config_file._The_bootstrap_application_cannot_continue._n
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
add esp, 4
push 0x88
call fcn.0041fd36
test eax, eax
je 0x4066ef
push 0x88
push eax
lea ecx, [esp + 0x24]
call fcn.00410790
mov ecx, dword [edi + 0x1f4]
mov eax, dword [edi + 0x134]
mov esi, dword [esp + 0x1c]
push ecx
push eax
push esi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, edi
call fcn.004090e0
lea eax, [esi - 0x10]
or ecx, 0xffffffff
lea edx, [eax + 0xc]
mov byte [esp + 0xdd8], 0x1c
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x406735
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x88]
mov byte [esp + 0xdd8], 0x1b
call dword [sym.imp.BootstrapLibrary.dll_public:_void___thiscall_ConditionChecker::destructor_void_]
lea ecx, [esp + 0x13c]
mov byte [esp + 0xdd8], 3
call sym.Autorun.exe_public:_void___thiscall_InstallerConfig::destructor_void_
mov byte [esp + 0xdd8], 2
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406786
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xdd8], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4067b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0xdd0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xdb8]
xor ecx, esp
call fcn.00510a46
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x569ab8
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
mov esi, dword [edi + 0x12c]
add esp, 4
mov ecx, 0x569204
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x406826
test dx, dx
je 0x406822
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x406826
add eax, 4
add ecx, 4
test dx, dx
jne 0x406800
xor eax, eax
jmp 0x40682b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x406865
mov ecx, str.InstallerhpbcsiInstaller.exe
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40685c
test dx, dx
je 0x406858
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40685c
add eax, 4
add ecx, 4
test dx, dx
jne 0x406836
xor eax, eax
jmp 0x406861
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x406871
push 0x56a0d8
mov ecx, edi
call fcn.00421ae6
call fcn.00425a2a
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x48]
lea esi, [edi + 0xfc]
test edx, edx
jne 0x40688a
xor eax, eax
jmp 0x40689f
mov eax, edx
lea ebx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x406890
sub eax, ebx
sar eax, 1
push eax
push edx
mov ecx, esi
call fcn.004118f0
mov eax, dword [edi + 0x104]
cmp dword [eax - 0xc], 0
jl 0x4068fb
push str.Uninstall.exe
push eax
call fcn.005124ce
add esp, 8
test eax, eax
je 0x4068fb
sub eax, dword [edi + 0x104]
sar eax, 1
cmp eax, 0xffffffff
je 0x4068fb
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Uninstall_by_application_name._n
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
add esp, 4
push 0xb
push str.__Uninstall
mov ecx, esi
call fcn.004118f0
push esi
lea ecx, [esp + 0x48]
call fcn.00410900
mov byte [esp + 0xdd8], 0x1f
mov ebx, dword [esp + 0x44]
mov esi, dword [ebx - 0xc]
test esi, esi
jns 0x406922
push 0x80070057
call fcn.00401090
mov eax, dword [ebx - 8]
mov ecx, 1
sub ecx, dword [ebx - 4]
sub eax, esi
or eax, ecx
jge 0x406941
push esi
lea ecx, [esp + 0x48]
call fcn.004119d0
mov ebx, dword [esp + 0x44]
lea ecx, [esi + 1]
push ecx
push ebx
call fcn.00512342
add esp, 8
cmp esi, dword [ebx - 8]
jg 0x406918
xor edx, edx
mov dword [ebx - 0xc], esi
mov word [ebx + esi*2], dx
mov eax, dword [ebx - 0xc]
test eax, eax
jne 0x406982
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____No_command_line_parameters_detected._n
call fcn.0040d380
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
add esp, 4
jmp 0x406a9b
push 0x569b8c
lea ecx, [esp + 0x58]
call fcn.0040d440
mov esi, eax
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xddc], 0x20
call fcn.00410900
push str.CBootstrapApp::InitInstance_____Bootstrap_command_line:
lea ecx, [esp + 0x28]
mov byte [esp + 0xddc], 0x21
call fcn.0040d440
lea ecx, [esp + 0x34]
push ecx
push eax
lea edx, [esp + 0x58]
push edx
mov byte [esp + 0xde4], 0x22
call fcn.0040dc10
add esp, 8
mov ecx, esp
mov byte [esp + 0xddc], 0x23
mov dword [esp + 0x18], esp
push esi
push eax
push ecx
call fcn.0040dc10
add esp, 0xc
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
mov byte [esp + 0xddc], 0x22
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
add esp, 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x406a23
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x21
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406a4b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x20
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406a73
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x1f
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x406a9b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [ebx - 0xc], 0
jl 0x406b2b
push str.HELP
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x406ac4
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
jne 0x4086c9
cmp dword [ebx - 0xc], 0
jl 0x406b2b
push 0x56a27c
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x406ae9
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
jne 0x4086c9
cmp dword [ebx - 0xc], 0
jl 0x406b2b
push str.UNINSTALL
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x406b0a
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
jne 0x406b3a
cmp dword [ebx - 0xc], 0
jl 0x406b2b
push str.FORCEDUNINSTALL
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x406b2b
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
jne 0x406b3a
mov esi, dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
mov byte [edi + 0x10d], 0
jmp 0x406b5d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____UINSTALL_or_FORCEDUNINSTALL_flag_found_on_the_command_line._n
call fcn.0040d380
mov esi, dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
call esi
add esp, 4
mov byte [edi + 0x10d], 1
cmp dword [ebx - 0xc], 0
jl 0x406b9d
push str.SILENT
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x406b9d
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
je 0x406b9d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____SILENT_flag_found_on_the_command_line._n
call fcn.0040d380
call esi
add esp, 4
mov byte [edi + 0x10c], 1
jmp 0x406ba4
mov byte [edi + 0x10c], 0
cmp dword [ebx - 0xc], 0
jl 0x406be4
push str.DRIVERONLY
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x406be4
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
je 0x406be4
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____DRIVERONLY_flag_found_on_the_command_line._n
call fcn.0040d380
call esi
add esp, 4
mov byte [edi + 0x10e], 1
jmp 0x406beb
mov byte [edi + 0x10e], 0
cmp dword [ebx - 0xc], 0
jl 0x4070fa
push str.HWFIRST
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x4070bd
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
je 0x4070bd
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____HWFIRST_flag_found_on_the_command_line._n
call fcn.0040d380
call esi
add esp, 4
mov byte [edi + 0x111], 1
call fcn.0041fe1b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x406c4f
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0xdd8], 0x35
call fcn.0041fe1b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x406c81
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0xdd8], 0x36
call fcn.0041fe1b
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x406cb3
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
push ecx
mov byte [esp + 0xddc], 0x37
lea edx, [edi + 0x118]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
lea eax, [esp + 0x3c8]
push eax
call fcn.00402ee0
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x3d0]
mov byte [esp + 0xde4], 0x38
call fcn.00403100
mov ecx, dword [esp + 0x68]
cmp dword [ecx - 0xc], 0
je 0x40706a
mov edx, dword [esp + 0x48]
cmp dword [edx - 0xc], 0
je 0x40706a
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], 0
je 0x40706a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Parsed_CSI_installer_config_file_to_retrieve_instanceID__path_and_name_of_install_data_file._n
call fcn.0040d380
call esi
add esp, 4
push 0
push 0x56a7a4
lea ecx, [esp + 0x30]
call fcn.0040d640
push 0
push str._ProgramData_
lea ecx, [esp + 0x50]
call fcn.0040da90
cmp eax, 0xffffffff
je 0x406dd6
mov edx, dword [edi + 0x17c]
cmp dword [edx - 0xc], 0
lea ecx, [edi + 0x17c]
je 0x406dd6
push str.true
call fcn.0040d4e0
cmp dword [eax], 0
je 0x406dd6
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The__ProgramData__string_in_the_path_will_be_replaced_with_the_matching_Windows_app_data_path._n
call fcn.0040d380
call esi
add esp, 4
lea eax, [esp + 0x784]
push eax
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea ecx, [esp + 0x784]
push ecx
push str._ProgramData_
lea ecx, [esp + 0x50]
call fcn.0040d640
push str..xml
lea ecx, [esp + 0x68]
call fcn.0040d440
mov esi, eax
push 0x56a8e0
lea ecx, [esp + 0x58]
mov byte [esp + 0xddc], 0x39
call fcn.0040d440
push eax
lea edx, [esp + 0x4c]
push edx
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0xde4], 0x3a
call fcn.0040dc10
add esp, 0xc
lea ecx, [esp + 0x28]
push ecx
push eax
lea edx, [esp + 0x58]
push edx
mov byte [esp + 0xde4], 0x3b
call fcn.0040dc10
add esp, 0xc
lea ecx, [esp + 0x68]
push ecx
push eax
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0xde4], 0x3c
call fcn.0040dc10
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0xde4], 0x3d
call fcn.0040dc10
add esp, 0xc
lea ecx, [esp + 0x34]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x50]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x24]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x54]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x64]
mov byte [esp + 0xdd8], 0x43
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x124]
call fcn.00422eba
push 0
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x11c]
mov byte [esp + 0xde4], 0x44
call fcn.004012f0
mov byte [esp + 0xdd8], 0x45
mov ecx, dword [esp + 0x38]
push ecx
lea edx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____Attempting_to_open_install_data_file:__s._If_present__bootstrap_considers_this_a_relaunch_and_simply_returns._n
push edx
call fcn.004127d0
add esp, 8
mov dword [esp + 0x18], esp
mov ecx, esp
lea eax, [esp + 0x1c]
push eax
call fcn.00410900
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
mov edx, dword [esp + 0x3c]
add esp, 4
lea ecx, [esp + 0x110]
push ecx
push 0
push edx
lea ecx, [esp + 0x130]
call fcn.00422d98
test eax, eax
je 0x407007
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____Opened_file__s._Considering_this_a_relaunch_and_exiting._n
push ecx
call fcn.004127d0
add esp, 8
lea edx, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
add esp, 4
lea ecx, [esp + 0x124]
call fcn.0042315b
mov eax, edi
call fcn.004090e0
lea ecx, [esp + 0x110]
call fcn.00401400
lea ecx, [esp + 0x124]
mov byte [esp + 0xdd8], 0x43
call fcn.00423199
lea ecx, [esp + 0x38]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea esi, [esp + 0x3c4]
mov byte [esp + 0xdd8], 0x37
call fcn.00403050
lea ecx, [esp + 0x28]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x48]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x68]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x44]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x1c]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x88]
mov byte [esp + 0xdd8], 0x1b
call dword [sym.imp.BootstrapLibrary.dll_public:_void___thiscall_ConditionChecker::destructor_void_]
lea ecx, [esp + 0x13c]
mov byte [esp + 0xdd8], 3
call sym.Autorun.exe_public:_void___thiscall_InstallerConfig::destructor_void_
lea ecx, [esp + 0x2c]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x18]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
jmp 0x4067b1
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x38]
push eax
push ecx
lea edx, [esp + 0x20]
push str.CBootstrapApp::InitInstance_____Cant_open_file__s__error___u._Not_a_relaunch__continue_executing_bootstrap._n
push edx
call fcn.004127d0
add esp, 0xc
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.00410900
call dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
add esp, 4
lea ecx, [esp + 0x110]
call fcn.00401400
lea ecx, [esp + 0x124]
mov byte [esp + 0xdd8], 0x43
call fcn.00423199
lea ecx, [esp + 0x38]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
jmp 0x407080
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____InstanceID__path_and_name_of_install_data_file_not_found._Continuing_with_bootstrap_execution_as_this_is_a_non_fatal_error._n
call fcn.0040d380
call esi
add esp, 4
lea esi, [esp + 0x3c4]
mov byte [esp + 0xdd8], 0x37
call fcn.00403050
lea ecx, [esp + 0x28]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x48]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x68]
mov byte [esp + 0xdd8], 0x1f
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
mov esi, dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
cmp dword [ebx - 0xc], 0
jl 0x4070fa
push str.LAUNCHINSTALLER
push ebx
call fcn.005124ce
add esp, 8
test eax, eax
je 0x4070fa
sub eax, ebx
sar eax, 1
cmp eax, 0xffffffff
je 0x4070fa
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____LAUNCHINSTALLER_flag_found_on_the_command_line._n
call fcn.0040d380
call esi
mov byte [edi + 0x113], 1
jmp 0x407114
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____LAUNCHINSTALLER_flag_not_found_on_the_command_line._n
call fcn.0040d380
call esi
mov byte [edi + 0x113], 0
add esp, 4
call fcn.00425a2a
mov eax, dword [eax + 0xc]
mov dword [edi + 0x1f8], eax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx ecx, ax
push ecx
lea edx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____GetUserDefaultLangID___returned__x__n
push edx
call fcn.004127d0
add esp, 8
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.00410900
mov ebx, dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
call ebx
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
movzx esi, ax
mov ecx, esi
mov edx, esi
mov eax, ecx
and edx, 0x3ff
push edx
and eax, 0xfc00
push eax
push ecx
lea eax, [esp + 0x24]
push str.CBootstrapApp::InitInstance_____GetUserDefaultLCID___returned__x__langId0xFC00___x__langId0x3FF___x_n
push eax
call fcn.004127d0
add esp, 0x10
lea edx, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
call ebx
add esp, 4
lea ecx, [esp + 0x30]
call fcn.0040d350
push esi
lea esi, [esp + 0x38]
mov byte [esp + 0xddc], 0x46
call fcn.00408fa0
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xddc], 0x47
call fcn.00410990
mov byte [esp + 0xdd8], 0x46
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4071f5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x30]
push ecx
lea edx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____GetUserDefaultLCID___returned_strMessage___s_n
push edx
call fcn.004127d0
add esp, 8
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.00410900
call ebx
add esp, 4
push 2
push 0
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x3c]
call fcn.0040db30
mov ecx, eax
mov byte [esp + 0xdd8], 0x48
call fcn.0040dad0
push eax
lea ecx, [esp + 0x44]
call fcn.00410900
mov byte [esp + 0xdd8], 0x4a
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x407274
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x40]
push 0x56b060
push ecx
call fcn.00510c71
add esp, 8
test eax, eax
jne 0x4072e4
push 5
push eax
lea edx, [esp + 0x58]
push edx
lea ecx, [esp + 0x3c]
call fcn.0040db30
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xddc], 0x4b
call fcn.00410990
lea ecx, [esp + 0x50]
mov byte [esp + 0xdd8], 0x4a
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
push 0x569204
push 0x56b068
lea ecx, [esp + 0x38]
call fcn.0040d640
lea ecx, [esp + 0x30]
call fcn.0040dad0
push eax
lea ecx, [esp + 0x44]
call fcn.00410990
lea ecx, [esp + 0x88]
call dword [sym.imp.BootstrapLibrary.dll_public:_enum_HPLocalizationLanguageType___thiscall_ConditionChecker::getLanguage_void_]
mov esi, eax
test esi, esi
je 0x407320
cmp esi, 0xe
je 0x407320
mov ecx, 0x56b06c
lea edx, [esp + 0x40]
call fcn.0040def0
test al, al
jne 0x407320
mov ecx, 0x56b070
lea edx, [esp + 0x40]
call fcn.0040def0
test al, al
je 0x407347
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The_language_is_Hebrew_or_Arabic._Setting_flag_to_display_message_boxes_right_to_left._n
call fcn.0040d380
call ebx
add esp, 4
mov dword [edi + 0x1f4], 0x100010
mov byte [edi + 0x110], 1
mov ebx, esi
lea esi, [esp + 0x58]
call fcn.0040a9f0
mov byte [esp + 0xdd8], 0x4c
mov eax, dword [esp + 0x58]
push eax
lea ecx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____LangID___s_n
push ecx
call fcn.004127d0
add esp, 8
lea edx, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
mov esi, dword [sym.imp.BootstrapLibrary.dll_public:_static_bool___cdecl_CBootstrapLog::LogEntry_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
call esi
add esp, 4
push 0x569200
lea ebx, [edi + 0x158]
lea eax, [esp + 0x28]
push ebx
push eax
call fcn.0040dcd0
add esp, 0xc
push str.hpbcsiBootstrapResources
push eax
lea ecx, [esp + 0x58]
push ecx
mov byte [esp + 0xde4], 0x4d
call fcn.0040dcd0
add esp, 0xc
lea edx, [esp + 0x40]
push edx
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0xde4], 0x4e
call fcn.0040dc10
add esp, 0xc
push str..dll
push eax
lea ecx, [esp + 0x44]
push ecx
mov byte [esp + 0xde4], 0x4f
call fcn.0040dcd0
add esp, 0xc
mov byte [esp + 0xdd8], 0x51
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40741e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x52
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x407446
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x53
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40746e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [edi + 0x108]
mov ecx, dword [esp + 0x58]
push eax
push ecx
lea edx, [esp + 0x20]
push str.CBootstrapApp::InitInstance_____GetUserDefaultLCID___returned_user_UI_language___s__Language_ID___s_n
push edx
call fcn.004127d0
add esp, 0xc
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.00410900
call esi
mov ecx, dword [esp + 0x40]
add esp, 4
push ecx
lea edx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____Resource_file___s_n
push edx
call fcn.004127d0
add esp, 8
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.00410900
call esi
mov ecx, dword [esp + 0x40]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [edi + 0x1fc], eax
test eax, eax
jne 0x40753c
push 0x569200
lea edx, [esp + 0x68]
push ebx
push edx
call fcn.0040dcd0
add esp, 0xc
push str.hpbcsiBootstrapResourcesEN.dll
push eax
lea eax, [esp + 0x5c]
push eax
mov byte [esp + 0xde4], 0x54
call fcn.0040dcd0
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0xddc], 0x55
call fcn.00410990
lea ecx, [esp + 0x54]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x64]
mov byte [esp + 0xdd8], 0x53
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
mov ecx, dword [esp + 0x3c]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, eax
mov dword [edi + 0x1fc], ebx
test ebx, ebx
jne 0x4075b1
mov ebx, dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
lea edx, [esp + 0x20]
push str.CBootstrapApp::InitInstance_____Issue_loading_the_localized_resource_file__s._Last_Error_is:__d.__The_bootstrap_application_cannot_continue._n
push edx
call fcn.004127d0
add esp, 0xc
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.00410900
call esi
add esp, 4
mov eax, edi
call fcn.004090e0
lea ecx, [esp + 0x3c]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x58]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x40]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x30]
jmp 0x406fb0
call fcn.00425a2a
lea ecx, [esp + 0x88]
mov dword [eax + 0xc], ebx
call dword [sym.imp.BootstrapLibrary.dll_public:_unsigned_long_long_unsigned___int64____thiscall_ConditionChecker::getTotalRAM_void_]
push edx
push eax
lea ecx, [esp + 0x20]
push str.CBootstrapApp::InitInstance_____Physical_RAM___u._n
push ecx
call fcn.004127d0
add esp, 0xc
lea edx, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
call esi
add esp, 4
push str.CSIBootstrapRunning
lea ecx, [esp + 0x50]
call fcn.0040d380
lea ecx, [esp + 0x28]
call fcn.0040d350
lea ecx, [esp + 0x20]
call fcn.0040d350
lea ecx, [esp + 0x38]
call fcn.0040d350
lea ebx, [edi + 0x130]
push 0x569204
mov ecx, ebx
mov byte [esp + 0xddc], 0x59
call fcn.0040d5c0
lea ecx, [esp + 0x28]
test eax, eax
jne 0x407646
push str.hpbcsiInstaller
call fcn.0040d4e0
jmp 0x40764c
push ebx
call fcn.00410990
lea ecx, [esp + 0x88]
call dword [sym.imp.BootstrapLibrary.dll_public:_int___thiscall_ConditionChecker::getOSMajorVersion_void_]
cmp eax, 6
jl 0x4076af
push str.GlobalCSIBootstrapRunning
lea eax, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____Prepending__s._n
push eax
call fcn.004127d0
add esp, 8
lea edx, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
call esi
add esp, 4
push str.GlobalCSIBootstrapRunning
lea ecx, [esp + 0x50]
call fcn.0040d4e0
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x2c]
push str.Global_s
push ecx
call fcn.004127d0
add esp, 0xc
mov edx, dword [esp + 0x4c]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventW]
push edx
push 0
push 0x1f0003
call ebx
test eax, eax
je 0x40776f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x4c]
push eax
lea ecx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____Bootstrap_is_already_running._User_will_be_notified_before_exiting._OpenEvent_succeeded_on_event_name___s_n
push ecx
call fcn.004127d0
add esp, 8
lea edx, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push edx
call fcn.00410900
call esi
add esp, 4
lea ecx, [esp + 0x60]
call fcn.0040d350
push 0x95
lea ecx, [esp + 0x64]
mov byte [esp + 0xddc], 0x5a
call fcn.0040dbe0
mov ecx, dword [edi + 0x1f4]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x60]
push ecx
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, edi
call fcn.004090e0
lea ecx, [esp + 0x60]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x38]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x20]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x28]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x4c]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
jmp 0x40758d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Bootstrap_is_not_running._Confirm_that_CSI_is_not_running._n
call fcn.0040d380
call esi
mov eax, dword [esp + 0x2c]
add esp, 4
push eax
push 0
push 0x1f0003
call ebx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The_application_is_not_running._Creating_an_event_named_CSIBootstrapRunning_to_indicate_that_bootstrap_is_running._n
call fcn.0040d380
call esi
mov ecx, dword [esp + 0x50]
add esp, 4
push ecx
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [edi + 0x200], eax
test eax, eax
jne 0x4077f2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [esp + 0x1c]
push str.CBootstrapApp::InitInstance_____Failed_to_create_event_with_call_to_CreateEvent__._This_event_is_used_to_indicate_that_bootstrap_is_running._Proceeding_without_event_creation._Last_error:_d_n
push edx
call fcn.004127d0
add esp, 8
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.00410900
call esi
add esp, 4
cmp byte [edi + 0x10e], 0
je 0x40782b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The_driveronly_flag_was_detected_on_the_command_line._Launch_the_minimum_driver_install_path._n
call fcn.0040d380
call esi
add esp, 4
mov ecx, edi
mov byte [edi + 0x112], 1
call fcn.00409ee0
mov eax, edi
call fcn.004090e0
jmp 0x407746
lea ecx, [esp + 0xb4]
call sym.Autorun.exe_public:_void___thiscall_CBootstrapConfigItem::constructor_void_
lea ecx, [esp + 0x74]
push ecx
mov byte [esp + 0xddc], 0x5b
call fcn.00403510
lea ecx, [esp + 0x48]
call fcn.0040d350
lea ecx, [esp + 0x2ac]
mov byte [esp + 0xdd8], 0x5d
call dword [sym.imp.BootstrapLibrary.dll_public:_void___thiscall_EvaluateSystem::constructor_void_]
push ecx
mov byte [esp + 0xddc], 0x5e
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Checking_if_the_Windows_Installer_3.1_version_meets_the_.NET_prereq._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0xb4]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapPrereqCheck::IsWinInstallerInstalled_void_]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Checking_if_the_WebView2_Runtime_is_installed_in_current_OS._n
mov byte [esp + 0x6c], al
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0xb4]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapPrereqCheck::IsWebView2Installed_void_]
lea ecx, [esp + 0xb4]
mov bl, al
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapPrereqCheck::IsConnectedToInternet_void_]
mov byte [esp + 0x9b], al
call fcn.004089c0
push ecx
mov byte [esp + 0x77], al
mov ecx, esp
mov dword [esp + 0x18], esp
test bl, bl
jne 0x407b38
test al, al
je 0x4078f5
push str.CBootstrapApp::InitInstance_____Package_is_in_offline_mode._n
jmp 0x407b3d
push str.CBootstrapApp::InitInstance_____Package_is_in_online_mode.__Webview2false_n
call fcn.0040d380
call esi
add esp, 4
push 1
push ecx
lea edx, [edi + 0x118]
mov dword [esp + 0x1c], esp
mov ecx, esp
push edx
call fcn.00410900
call fcn.0040b190
test al, al
jne 0x407b47
lea eax, [edi + 0x168]
push eax
lea ecx, [esp + 0x28]
call fcn.00410900
push 0
mov bl, 0x5f
mov byte [esp + 0xddc], bl
movzx ecx, byte [edi + 0x10d]
mov edx, dword [esp + 0x60]
push 1
push ecx
push 0
push 0
sub esp, 0x58
mov ecx, esp
mov dword [esp + 0x80], esp
push edx
call sym.Autorun.exe_public:_void___thiscall_CBootstrapConfigItem::constructor_class_CBootstrapConfigItem_const__
movzx eax, byte [edi + 0x110]
mov ecx, dword [edi + 0x1f8]
push eax
push ecx
lea edx, [esp + 0x4a8]
push edx
call fcn.00414350
lea ecx, [esp + 0x434]
mov byte [esp + 0xdd8], 0x60
call fcn.00424ea2
sub eax, 2
je 0x407a9a
sub eax, 8
je 0x4079fe
sub eax, 2
jne 0x407a1d
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Installation_of_Webview2_runtime_is_failed._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov eax, dword [edi + 0x1f4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, edi
call fcn.004090e0
lea eax, [esp + 0x434]
push eax
jmp 0x407aeb
lea ecx, [edi + 0x134]
push 0x56a0d8
push ecx
call fcn.0040de90
add esp, 8
test al, al
je 0x407a47
mov ecx, edi
call fcn.00409ee0
lea edx, [esp + 0x434]
push edx
mov byte [esp + 0xddc], bl
call fcn.00408d90
lea ecx, [esp + 0x24]
mov byte [esp + 0xdd8], 0x5e
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
jmp 0x407b47
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov eax, dword [edi + 0x1f4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.User_choose_not_to_install_WebView2Runtime__n
call fcn.0040d380
call esi
add esp, 4
mov eax, edi
call fcn.004090e0
lea eax, [esp + 0x434]
push eax
jmp 0x407aeb
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The_user_canceled_the_installation._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov ecx, dword [edi + 0x1f4]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push ecx
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, edi
call fcn.004090e0
lea ecx, [esp + 0x434]
push ecx
mov byte [esp + 0xddc], bl
call fcn.00408d90
lea ecx, [esp + 0x24]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x2ac]
mov byte [esp + 0xdd8], 0x5d
call dword [sym.imp.BootstrapLibrary.dll_public:_void___thiscall_EvaluateSystem::destructor_void_]
lea ecx, [esp + 0x48]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea esi, [esp + 0x74]
call fcn.004036f0
lea ecx, [esp + 0xb4]
call sym.Autorun.exe_public:_void___thiscall_CBootstrapConfigItem::destructor_void_
jmp 0x407746
push str.CBootstrapApp::InitInstance_____Package_is_in_online_mode.__Isweview2true_n
call fcn.0040d380
call esi
add esp, 4
cmp byte [esp + 0x64], 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
je 0x407b5c
push str.CBootstrapApp::InitInstance_____Windows_Installer_3.1_version_meets_the_.NET_prereq.__n
jmp 0x407b61
push str.CBootstrapApp::InitInstance_____Windows_Installer_3.1_does_not_meet_the_.NET_prereq._n
call fcn.0040d380
call esi
add esp, 4
push 1
push 0
call fcn.0040a610
test al, al
je 0x407b00
cmp byte [esp + 0x60], 0
push ecx
mov dword [esp + 0x18], esp
mov ecx, esp
je 0x407c22
mov ebx, dword [esp + 0x70]
push ebx
call fcn.00410900
lea ecx, [esp + 0x140]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapInit::BootstrapInstallerConfigInit_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
test al, al
jne 0x407cb8
push ebx
lea edx, [esp + 0x70]
push str.CBootstrapApp::InitInstance_____Issue_loading_or_parsing
push edx
call fcn.0040ddb0
add esp, 8
mov ecx, esp
mov byte [esp + 0xddc], 0x61
mov dword [esp + 0x18], esp
push str._file._The_bootstrap_application_cannot_continue._n
push eax
push ecx
call fcn.0040dcd0
add esp, 0xc
call esi
add esp, 4
lea ecx, [esp + 0x6c]
mov byte [esp + 0xdd8], 0x5e
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
push 0x8b
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov edx, dword [edi + 0x1f4]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, edi
call fcn.004090e0
jmp 0x407b00
lea ebx, [edi + 0x128]
push ebx
call fcn.00410900
lea ecx, [esp + 0x140]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapInit::BootstrapInstallerConfigInit_class_ATL::CStringT_wchar_t__class_StrTraitMFC_wchar_t__class_ATL::ChTraitsCRT_wchar_t____]
test al, al
jne 0x407cb8
push ebx
lea edx, [esp + 0x70]
push str.CBootstrapApp::InitInstance_____Issue_loading_or_parsing
push edx
call fcn.0040ddb0
add esp, 8
mov ecx, esp
mov byte [esp + 0xddc], 0x62
mov dword [esp + 0x18], esp
push str._file._The_bootstrap_application_cannot_continue._n
push eax
push ecx
call fcn.0040dcd0
add esp, 0xc
call esi
add esp, 4
lea ecx, [esp + 0x6c]
mov byte [esp + 0xdd8], 0x5e
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
push 0x8b
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov edx, dword [edi + 0x1f4]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, edi
call fcn.004090e0
jmp 0x407b00
lea ecx, [esp + 0x88]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_ConditionChecker::isCurrentUserAdmin_void_]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
test al, al
jne 0x407ce9
push str.CBootstrapApp::InitInstance_____User_does_not_have_admin_rights._The_bootstrap_application_cannot_continue._The_user_will_be_notified_in_a_message_box._n
call fcn.0040d380
call esi
add esp, 4
push 0x99
jmp 0x407bf4
push str.CBootstrapApp::InitInstance_____User_has_admin_rights__bootstrap_will_continue._n
call fcn.0040d380
call esi
add esp, 4
lea edx, [esp + 0x13c]
push edx
lea ecx, [esp + 0x2b0]
call dword [sym.imp.BootstrapLibrary.dll_public:_void___thiscall_EvaluateSystem::SaveSystemConditionItems_class_SystemConditionItems__]
lea eax, [esp + 0x1ac]
push eax
lea ecx, [esp + 0x2b0]
call dword [sym.imp.BootstrapLibrary.dll_public:_void___thiscall_EvaluateSystem::SaveSystemCheckConditions_class_SystemCheckConditions__]
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x2b0]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_EvaluateSystem::IsSystemBlocked_class_Condition__]
test al, al
je 0x407dbc
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The_system_is_blocked._The_user_will_be_notified_in_a_message_box._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov edx, dword [edi + 0x1f4]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea edx, [esp + 0x7c]
push 0x569204
push edx
call fcn.0040e020
add esp, 8
test al, al
je 0x407c16
mov eax, dword [esp + 0x7c]
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, edi
call fcn.004090e0
jmp 0x407b00
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x2b0]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_EvaluateSystem::IsSystemSupported_class_Condition__]
test al, al
jne 0x407e49
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The_system_is_not_supported._The_user_will_be_notified_in_a_message_box._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov edx, dword [edi + 0x1f4]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea edx, [esp + 0x7c]
push 0x569204
push edx
call fcn.0040e020
add esp, 8
test al, al
je 0x407c16
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____The_system_is_not_supported._Trying_to_open_webpage._n
call fcn.0040d380
call esi
add esp, 4
jmp 0x407d98
mov ecx, dword [edi + 0x160]
push ecx
lea ecx, [esp + 0xb8]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapPrereqCheck::IsDotNet35SPInstalled_int_]
lea ecx, [esp + 0xb4]
mov bl, al
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_CBootstrapPrereqCheck::IsOSVista_void_]
test bl, bl
jne 0x407ece
test al, al
je 0x407e85
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____For_Vista_.Net_3.51_is_required._The_.NET_prereq_has_not_been_met._n
jmp 0x408095
cmp byte [esp + 0x9b], 0
jne 0x407ece
cmp byte [esp + 0x73], 0
jne 0x407ece
push 0x88
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov edx, dword [edi + 0x1f4]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____No_internet__no_.net__online_mode._n
jmp 0x408095
lea edx, [esp + 0x74]
push edx
lea ecx, [esp + 0x2b0]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_EvaluateSystem::PrerequisitesMet_class_Condition__]
test al, al
jne 0x40865b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Prerequisites_have_not_been_met._The_user_will_be_notified_in_a_message_box._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
push str.TRUE
lea ecx, [esp + 0x298]
call fcn.0040dad0
push eax
call fcn.0040de90
add esp, 8
xor ebx, ebx
test al, al
je 0x40804f
push ebx
push str.DotNet
lea ecx, [esp + 0x7c]
call fcn.0040da90
test eax, eax
jle 0x40804f
lea eax, [edi + 0x148]
push eax
lea ecx, [esp + 0x58]
call fcn.00410900
lea ecx, [esp + 0x6c]
push ecx
push 0x56c920
lea edx, [esp + 0x2c]
mov byte [esp + 0xde0], 0x63
push edx
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], ebx
call fcn.0040d960
mov byte [esp + 0xdd8], 0x64
mov ecx, dword [esp + 0x24]
push ebx
lea eax, [esp + 0x788]
push eax
push ecx
mov dword [esp + 0x790], ebx
mov dword [esp + 0x794], ebx
mov dword [esp + 0x798], ebx
mov dword [esp + 0x79c], ebx
mov dword [esp + 0x7a0], ebx
mov dword [esp + 0x7a4], ebx
call fcn.00423687
test eax, eax
jne 0x408035
mov edx, dword [edi + 0x1f8]
push edx
lea eax, [esp + 0x438]
push eax
call fcn.00416b30
lea ecx, [esp + 0x434]
mov byte [esp + 0xdd8], 0x65
call fcn.00424ea2
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Dot_Net_not_found___exiting_install._n
call fcn.0040d380
call esi
add esp, 4
mov eax, edi
call fcn.004090e0
lea ecx, [esp + 0x434]
push ecx
mov byte [esp + 0xddc], 0x64
call fcn.00408e30
lea ecx, [esp + 0x24]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x54]
jmp 0x407afb
lea ecx, [esp + 0x24]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x54]
mov byte [esp + 0xdd8], 0x5e
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea edx, [esp + 0x80]
push 0x569204
push edx
call fcn.0040e020
add esp, 8
test al, al
je 0x407c16
lea eax, [esp + 0x80]
push str.InstallDotNet
push eax
call fcn.0040de90
add esp, 8
test al, al
je 0x4085ab
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.CBootstrapApp::InitInstance_____Prerequisite_Action__Install_DotNet._n
call fcn.0040d380
call esi
add esp, 4
push 1
push ecx
lea edx, [edi + 0x118]
mov dword [esp + 0x1c], esp
mov ecx, esp
push edx
call fcn.00410900
call fcn.0040b190
test al, al
jne 0x4086b6
movzx eax, byte [edi + 0x10d]
push 0
push 0
push eax
lea ecx, [esp + 0x94]
call dword [sym.imp.BootstrapLibrary.dll_public:_bool___thiscall_ConditionChecker::IsServer2008R2OrLaterServer_void_]
mov edx, dword [esp + 0x70]
movzx ecx, al
mov eax, dword [esp + 0x68]
push ecx
push edx
sub esp, 0x58
mov ecx, esp
mov dword [esp + 0x108], esp
push eax
call sym.Autorun.exe_public:_void___thiscall_CBootstrapConfigItem::constructor_class_CBootstrapConfigItem_const__
movzx ecx, byte [edi + 0x110]
mov edx, dword [edi + 0x1f8]
push ecx
push edx
lea eax, [esp + 0x4a8]
push eax
call fcn.00414350
lea ecx, [esp + 0x434]
mov byte [esp + 0xdd8], 0x66
call fcn.00424ea2
lea ecx, [esp + 0x24]
mov ebx, eax
call fcn.0040d350
lea ecx, [esp + 0x68]
call fcn.0040d350
lea ecx, [esp + 0x54]
call fcn.0040d350
lea ecx, [esp + 0x64]
call fcn.0040d350
push 0x96
lea ecx, [esp + 0x28]
mov byte [esp + 0xddc], 0x6a
call fcn.0040dbe0
push 0x91
lea ecx, [esp + 0x6c]
call fcn.0040dbe0
push 0x93
lea ecx, [esp + 0x58]
call fcn.0040dbe0
push 0x94
lea ecx, [esp + 0x68]
call fcn.0040dbe0
lea ecx, [esp + 0x68]
push ecx
lea edx, [esp + 0x88]
push 0x569ab8
push edx
call fcn.0040ddb0
add esp, 0xc
push 0x56cd58
push eax
lea eax, [esp + 0xac]
push eax
mov byte [esp + 0xde4], 0x6b
call fcn.0040dcd0
add esp, 0xc
lea ecx, [esp + 0x54]
push ecx
push eax
lea edx, [esp + 0x64]
push edx
mov byte [esp + 0xde4], 0x6c
call fcn.0040dc10
add esp, 0xc
push 0x56cd50
mov byte [esp + 0xddc], 0x6d
push eax
lea eax, [esp + 0x74]
push eax
call fcn.0040dcd0
add esp, 0xc
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0xde4], 0x6e
call fcn.0040dc10
add esp, 0xc
lea ecx, [esp + 0x6c]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x5c]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0xa4]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x84]
mov byte [esp + 0xdd8], 0x73
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
push 0x92
lea ecx, [esp + 0x6c]
call fcn.0040dbe0
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x18]
push 0x569ab8
push ecx
call fcn.0040ddb0
add esp, 0xc
push 0x56cd58
push eax
lea edx, [esp + 0xa4]
push edx
mov byte [esp + 0xde4], 0x74
call fcn.0040dcd0
add esp, 0xc
lea ecx, [esp + 0x54]
push ecx
push eax
lea edx, [esp + 0xb0]
push edx
mov byte [esp + 0xde4], 0x75
call fcn.0040dc10
add esp, 0xc
push 0x56cd50
push eax
lea eax, [esp + 0xa8]
push eax
mov byte [esp + 0xde4], 0x76
call fcn.0040dcd0
add esp, 0xc
lea ecx, [esp + 0x64]
push ecx
push eax
lea edx, [esp + 0x58]
push edx
mov byte [esp + 0xde4], 0x77
call fcn.0040dc10
add esp, 0xc
lea ecx, [esp + 0xa0]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0xa8]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x9c]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x14]
mov byte [esp + 0xdd8], 0x7c
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea eax, [ebx - 2]
cmp eax, 0xc
ja case.0x40832c.3
movzx eax, byte [eax + 0x4089a8]
jmp dword [eax*4 + 0x40898c]
push ecx
mov ecx, esp
mov dword [esp + 0x88], esp
push str.CBootstrapApp::InitInstance_____The_user_canceled_the_installation._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0x7c]
push 0x569204
push ecx
call fcn.0040e020
add esp, 8
test al, al
je case.0x40832c.3
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov edx, dword [edi + 0x1f4]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [esp + 0x7c]
push 1
push 0
push 0
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp case.0x40832c.3
lea eax, [edi + 0x134]
push 0x56a0d8
push eax
call fcn.0040de90
add esp, 8
test al, al
jne 0x40854d
lea ecx, [esp + 0x7c]
push 0x569204
push ecx
call fcn.0040e020
add esp, 8
test al, al
je case.0x40832c.3
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov edx, dword [edi + 0x1f4]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [esp + 0x7c]
push 1
push 0
push 0
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push ecx
mov ecx, esp
mov dword [esp + 0x88], esp
push str.User_chose_not_to_install_.Net_n
call fcn.0040d380
call esi
add esp, 4
mov eax, edi
call fcn.004090e0
lea ecx, [esp + 0x50]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x34]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x64]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x54]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x68]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x24]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea eax, [esp + 0x434]
push eax
mov byte [esp + 0xddc], 0x5e
call fcn.00408d90
jmp 0x407b00
push ecx
lea edx, [esp + 0x78]
mov dword [esp + 0x88], esp
mov ecx, esp
push edx
call fcn.00410900
call fcn.0040d150
test al, al
je case.0x40832c.3
mov eax, dword [esp + 0x60]
push eax
mov ebx, edi
call fcn.00409160
jmp case.0x40832c.3
cmp byte [edi + 0x111], 1
jne 0x4084f4
push ecx
mov ecx, esp
mov dword [esp + 0x88], esp
push str..NET_installed_successfully_after_HWFirst._Set_RunOnce._n
call fcn.0040d380
call esi
add esp, 4
mov ecx, edi
call fcn.0040b040
push 1
push 1
call fcn.0040a610
jmp case.0x40832c.3
push ecx
mov ecx, esp
mov dword [esp + 0x88], esp
push str.CBootstrapApp::InitInstance_____Installation_of_Windows_Installer_3.1_failed._The_user_will_be_notified_in_a_message_box._n
call fcn.0040d380
call esi
mov eax, dword [esp + 0x38]
jmp 0x408535
push ecx
mov ecx, esp
mov dword [esp + 0x88], esp
push str.CBootstrapApp::InitInstance_____Installation_of_.NET_failed._The_user_will_be_notified_in_a_message_box._n
call fcn.0040d380
call esi
mov eax, dword [esp + 0x54]
mov ecx, dword [edi + 0x1f4]
mov edx, dword [esp + 0x28]
add esp, 4
push ecx
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, edi
call fcn.00409ee0
lea ecx, [esp + 0x50]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x34]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x64]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x54]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x68]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x24]
call sym.Autorun.exe_public:_void___thiscall_RebootNow::destructor_void_
lea ecx, [esp + 0x434]
push ecx
mov byte [esp + 0xddc], 0x5e
call fcn.00408d90
mov eax, edi
call fcn.004090e0
jmp 0x407b00
lea edx, [esp + 0x80]
push str.LaunchWebpage
push edx
call fcn.0040de90
add esp, 8
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
test al, al
je 0x408640
push str.CBootstrapApp::InitInstance_____Prerequisite_Action__Launch_Webpage._n
call fcn.0040d380
call esi
add esp, 4
lea ecx, [esp + 0x78]
call fcn.0040af60
push eax
lea ecx, [esp + 0x20]
call fcn.0040dbe0
mov eax, dword [edi + 0x1f4]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
push eax
push ecx
push edx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea eax, [esp + 0x7c]
push 0x569204
push eax
call fcn.0040e020
add esp, 8
test al, al
je 0x407c16
mov ecx, dword [esp + 0x7c]
push 1
push ebx
push ebx
push ecx
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, edi
call fcn.004090e0
jmp 0x407b00
push str.CBootstrapApp::InitInstance_____Prerequisite_Action_Not_defined._n
call fcn.0040d380
call esi
add esp, 4
mov eax, edi
call fcn.004090e0
jmp 0x407b00
push 1
push ecx
lea edx, [edi + 0x118]
mov dword [esp + 0x1c], esp
mov ecx, esp
push edx
call fcn.00410900
call fcn.0040b190
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
test al, al
jne 0x4086a7
push str.CBootstrapApp::InitInstance_____The_.NET_prereq_has_been_met._Proceed_to_launch_the_installer._n
call fcn.0040d380
call esi
mov eax, dword [esp + 0x64]
add esp, 4
push eax
mov ebx, edi
call fcn.00409160
mov eax, edi
call fcn.004090e0
jmp 0x407b00
push str.CBootstrapApp::InitInstance_____The_.NET_prereq_has_been_met._The_user_chose_to_install_driver_only_previously.__Exiting._n
call fcn.0040d380
call esi
add esp, 4
mov ecx, edi
call fcn.0040cb20
mov eax, edi
call fcn.004090e0
jmp 0x407b00
push str._n_silent_t_tLaunches_installer_silently_when_used_with_driveronly._Otherwise__suppresses_splash_screen.
lea ecx, [esp + 0x28]
call fcn.0040d440
mov esi, eax
push str._ndriveronly_tLaunches_minimum_driver_install._If_used__uninstall_parameter_will_be_ignored.
lea ecx, [esp + 0x64]
mov byte [esp + 0xddc], 0x24
call fcn.0040d440
mov dword [esp + 0xa8], eax
push str._nuninstall_t_tLaunches_uninstall.
lea ecx, [esp + 0x54]
mov byte [esp + 0xddc], 0x25
call fcn.0040d440
mov dword [esp + 0x9c], eax
push str._n__t_tDisplays_usage_information.
lea ecx, [esp + 0x38]
mov byte [esp + 0xddc], 0x26
call fcn.0040d440
mov dword [esp + 0x14], eax
push str.usage:_nhelp_t_tDisplays_usage_information.
lea ecx, [esp + 0x70]
mov byte [esp + 0xddc], 0x27
call fcn.0040d440
mov byte [esp + 0xdd8], 0x28
mov ecx, dword [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0xac]
push edx
call fcn.0040dc10
add esp, 0xc
mov byte [esp + 0xdd8], 0x29
mov ecx, dword [esp + 0x9c]
push ecx
push eax
lea edx, [esp + 0x8c]
push edx
call fcn.0040dc10
add esp, 0xc
mov byte [esp + 0xdd8], 0x2a
mov ecx, dword [esp + 0xa8]
push ecx
push eax
lea edx, [esp + 0xa8]
push edx
call fcn.0040dc10
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0xde4], 0x2b
call fcn.0040dc10
add esp, 0xc
mov byte [esp + 0xdd8], 0x2d
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4087e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x2e
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408810
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x2f
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40883b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x30
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408863
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x31
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40888b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x32
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4088b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x33
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4088db
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xdd8], 0x34
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408903
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x5c]
push 0
push 0x56a0d8
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, edi
call fcn.004090e0
mov byte [esp + 0xdd8], 0x1f
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x408946
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add ebx, 0xfffffff0
mov byte [esp + 0xdd8], 0x1d
lea ecx, [ebx + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40896a
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
mov byte [esp + 0xdd8], 0x1c
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x406729