Function at 0x42c593
Capabilities:
Contain obfuscated stackstrings
Identify system language via api
Query environment variable

Disassembly:
push 0x28c
mov eax, 0x4665b8
call fcn.0043fa79
mov ebx, ecx
mov esi, dword [ebp + 0x24]
mov dword [ebp - 0x288], esi
and dword [ebp - 4], 0
cmp byte [ebx + 0x43c], 0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantInit]
je 0x42cf3d
push dword [ebp + 0x18]
call edi
push 0
push str.operatingsystemcondition
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b2cc
test eax, eax
jne 0x42cc45
cmp byte [ebx + 0x266], al
jne 0x42cc45
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47686c
mov edi, 0x46d060
push str.operatingsystemcondition
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.004253c9
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00401500
push 1
push dword [ebx + 0x38]
mov ecx, ebx
push str.MajorVersion
push dword [ebp - 0x288]
mov byte [ebx + 0x265], 1
call fcn.00425592
test al, al
jne 0x42c68c
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 2
push 1
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.004253c9
lea ecx, [ebp - 0x40]
jmp 0x42dc98
push 1
push dword [ebx + 0x3c]
mov ecx, ebx
push str.MinorVersion
push dword [ebp - 0x288]
call fcn.00425592
test al, al
jne 0x42c6ec
cmp dword [ebx + 0x44], 1
movzx eax, byte [ebx + 0x42]
jne 0x42c6ca
push 1
push eax
push str.MinorVersion
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425592
test al, al
jne 0x42c6ec
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 3
jmp 0x42c675
cmp dword [ebx + 0x44], 1
jne 0x42c737
cmp byte [ebx + 0x42], 0x5a
jne 0x42c737
push 1
push 0x5a
push str.MinorVersion
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425592
test al, al
jne 0x42c737
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 4
jmp 0x42c675
movzx eax, word [ebx + 0x25c]
push 5
push eax
push str.ServicePackMajorMin
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425592
test al, al
jne 0x42c77c
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 5
jmp 0x42c675
movzx eax, word [ebx + 0x25c]
push 3
push eax
push str.ServicePackMajorMax
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425592
test al, al
jne 0x42c7c1
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 6
jmp 0x42c675
push 5
push dword [ebx + 0x40]
mov ecx, ebx
push str.BuildNumber
push dword [ebp - 0x288]
call fcn.00425592
test al, al
jne 0x42c801
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 7
jmp 0x42c675
push 1
push dword [ebx + 0x44]
mov ecx, ebx
push str.PlatformId
push dword [ebp - 0x288]
call fcn.00425592
test al, al
jne 0x42c841
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 8
jmp 0x42c675
mov ecx, dword [ebp - 0x288]
push str.CSDVersion
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 9
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xb
call fcn.00412cea
cmp dword [ebp - 0x8c], 0
je 0x42c9a0
push 1
push 0
lea eax, [ebp - 0xa0]
push eax
mov ecx, ebx
call fcn.004253c9
push 1
lea eax, [ebp - 0x281]
push eax
push 0x46c744
lea ecx, [ebp - 0x100]
call fcn.00403400
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.0042dd75
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xb
call fcn.00401500
push 1
lea eax, [ebp - 0x281]
push eax
lea eax, [ebx + 0x48]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402330
push 1
lea eax, [ebp - 0x281]
push eax
push 0x46c744
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xd
call fcn.00403400
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xe
call fcn.0042dd75
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xd
call fcn.00401500
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.004063e0
test eax, eax
jle 0x42c991
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf
call fcn.004253c9
lea ecx, [ebp - 0x40]
call fcn.00401500
lea ecx, [ebp - 0x160]
jmp 0x42cbf5
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xb
call fcn.00401500
movzx eax, byte [ebx + 0x262]
push 1
push eax
push str.ProductType
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.0042562b
test al, al
jne 0x42c9f7
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 1
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x10
call fcn.004253c9
lea ecx, [ebp - 0x40]
jmp 0x42cbf5
mov ecx, dword [ebp - 0x288]
push str.Language
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
call fcn.00412cea
cmp dword [ebp - 0x5c], 0
je 0x42caac
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
call fcn.004253c9
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x70]
call fcn.0042dd1c
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
cmp dword [ebp - 0x28c], eax
je 0x42caac
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xa8], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x14
call fcn.004253c9
lea ecx, [ebp - 0xd0]
jmp 0x42cbed
mov ecx, dword [ebp - 0x288]
push str.Bits
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x15
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x17
call fcn.00412cea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x130]
call fcn.0042dd1c
mov eax, dword [ebp - 0x28c]
test al, 1
je 0x42cb3d
call fcn.00435b4f
test al, al
je 0x42cc05
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x18
jmp 0x42cbd0
test al, 2
je 0x42cb70
call fcn.00435b4f
test al, al
jne 0x42cc05
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x19
jmp 0x42cbd0
test al, 4
je 0x42cba3
call fcn.00435b84
test al, al
jne 0x42cc05
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x1a
jmp 0x42cbd0
test al, 8
je 0x42cc05
call fcn.00435b68
test al, al
jne 0x42cc05
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x1b
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.004253c9
lea ecx, [ebp - 0x40]
call fcn.00401500
lea ecx, [ebp - 0x130]
call fcn.00401500
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0xa0]
jmp 0x42dc98
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x1c
call fcn.004253c9
lea ecx, [ebp - 0x40]
call fcn.00401500
mov byte [ebx + 0x266], 1
jmp 0x42cbe7
cmp byte [ebx + 0x43c], 0
je 0x42cf3d
push dword [ebp + 0x18]
call edi
push 0
push str.condition
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b2cc
test eax, eax
jne 0x42cf3d
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47686c
mov edi, 0x46d060
push str.condition
lea ecx, [ebp - 0x70]
mov byte [ebx + 0x267], 1
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x1d
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
mov ecx, dword [ebp - 0x288]
push str.Type
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x1e
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x20
call fcn.00412cea
mov ecx, dword [ebp - 0x288]
push str.Comparison
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x21
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x23
call fcn.00412cea
mov ecx, dword [ebp - 0x288]
push str.Path
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x24
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call fcn.00412cea
mov ecx, dword [ebp - 0x288]
push str.FileName
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x27
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x29
call fcn.00412cea
mov ecx, dword [ebp - 0x288]
push str.ReturnValue
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x2a
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.00412cea
mov ecx, dword [ebp - 0x288]
push str.Bits
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x2d
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x2f
call fcn.00412cea
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, ebx
call fcn.004252d7
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, ebx
call fcn.0042581f
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
push 0
lea ecx, [ebp - 0x70]
test al, al
lea eax, [ebp - 0x281]
push eax
jne 0x42ced6
push str.____Failed_
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x30
call fcn.004253c9
lea ecx, [ebp - 0x70]
call fcn.00401500
mov byte [ebx + 0x268], 0
jmp 0x42cefb
push str.____Successful
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x31
call fcn.004253c9
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x130]
call fcn.00401500
lea ecx, [ebp - 0xa0]
call fcn.00401500
lea ecx, [ebp - 0x190]
call fcn.00401500
lea ecx, [ebp - 0x1c0]
call fcn.00401500
lea ecx, [ebp - 0x1f0]
call fcn.00401500
lea ecx, [ebp - 0x100]
jmp 0x42dc98
push dword [ebp + 0x18]
call edi
push 0
push str.file
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b2cc
test eax, eax
jne 0x42d186
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47686c
mov edi, 0x46d060
push str.file
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x32
call fcn.004253c9
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x280]
call fcn.004247e1
mov ecx, dword [ebp - 0x288]
push str.CheckSum
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x33
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x34
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412cea
mov ecx, dword [ebp - 0x288]
push str.LocalFile
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x35
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412cea
mov ecx, dword [ebp - 0x288]
push 0x46ee30
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x36
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412cea
push 0
lea eax, [ebp - 0x281]
push eax
push 0x476700
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
lea eax, [ebp - 0x281]
push eax
push 0x476700
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x37
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x78], edi
call fcn.00403400
push 0
lea eax, [ebp - 0x281]
push eax
push 0x476700
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x220]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x39
call fcn.004252d7
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0xa0]
call fcn.00401500
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x33
call fcn.00401500
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebx + 0x26c]
call fcn.00425240
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3a
call fcn.004253c9
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x280]
call fcn.00424d94
jmp 0x42dc9d
push dword [ebp + 0x18]
call edi
push 0
push str.properties
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b2cc
test eax, eax
jne 0x42d2b5
push eax
lea eax, [ebp - 0x281]
push eax
mov edi, 0x47686c
push 0x46ee50
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x48], 0x46d060
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3b
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push 0x46ee50
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c78b
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x476700
cmovne eax, ecx
lea esi, [ebx + 0x284]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x3c
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412cea
push 1
push 0
push esi
mov ecx, ebx
call fcn.004253c9
mov ecx, dword [ebp - 0x288]
push str.AltPrqURL
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov ecx, 0x476700
cmovne ecx, dword [eax + 0x10]
lea esi, [ebx + 0x3d4]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3d
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412cea
push 1
push 0
push esi
mov ecx, ebx
call fcn.004253c9
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x48], 0x46d060
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3e
call fcn.004253c9
lea ecx, [ebp - 0x70]
jmp 0x42dc98
push dword [ebp + 0x18]
call edi
push 0
push str.execute
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b2cc
test eax, eax
jne 0x42d6e0
push eax
lea eax, [ebp - 0x281]
push eax
push str.execute
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x47686c
mov dword [ebp - 0x48], 0x46d060
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3f
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push str.file
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c78b
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x476700
cmovne eax, ecx
push eax
lea ecx, [ebx + 0x2b4]
mov byte [ebp - 4], 0x40
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412cea
cmp dword [ebx + 0x2f8], 0
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jne 0x42d45f
push str.cmdline
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x41
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x43
call fcn.00412cea
push 0x104
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebx + 0x2e4]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x44
mov byte [eax + 4], 1
call fcn.004034e0
cmp dword [ebp - 0x88], 8
push 0x104
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x43
call fcn.00403240
mov eax, dword [ebp - 0x28c]
cmp eax, 0x104
jbe 0x42d450
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebx + 0x2e4]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x45
mov byte [eax + 4], 1
call fcn.004034e0
mov edx, dword [ebp - 0x28c]
cmp dword [ebp - 0x88], 8
push edx
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x43
call fcn.00403240
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0
call fcn.00401500
cmp dword [ebx + 0x328], 0
jne 0x42d569
push str.cmdlinesilent
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x46
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.00412cea
push 0x104
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebx + 0x314]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x49
mov byte [eax + 4], 1
call fcn.004034e0
cmp dword [ebp - 0x88], 8
push 0x104
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x48
call fcn.00403240
mov eax, dword [ebp - 0x28c]
cmp eax, 0x104
jbe 0x42d55a
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebx + 0x314]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x4a
mov byte [eax + 4], 1
call fcn.004034e0
mov edx, dword [ebp - 0x28c]
cmp dword [ebp - 0x88], 8
push edx
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x48
call fcn.00403240
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0
call fcn.00401500
push str.returncodetoreboot
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c78b
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x476700
cmovne eax, ecx
lea edi, [ebx + 0x344]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4b
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412cea
push str.forcesilent
lea eax, [ebp - 0xbc]
push eax
mov ecx, esi
call fcn.0043c78b
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x476700
cmovne eax, ecx
lea esi, [ebx + 0x374]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x4c
call fcn.00403560
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0
call fcn.00412cea
push 0
lea eax, [ebp - 0x281]
push eax
push 0x476700
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x47686c
mov dword [ebp - 0x48], 0x46d060
call fcn.00403400
lea eax, [ebp - 0x70]
push eax
push esi
push edi
lea eax, [ebx + 0x314]
push eax
lea eax, [ebx + 0x2e4]
push eax
lea eax, [ebx + 0x2b4]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x4d
call fcn.004252d7
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x47686c
mov dword [ebp - 0x48], 0x46d060
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x4e
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push str.requiresmsiengine
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x8c]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x4f
call fcn.00402330
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x51
call fcn.00412cea
push 0x46c72c
lea ecx, [ebp - 0xfc]
call fcn.0042b3a5
neg eax
sbb al, al
inc al
mov byte [ebx + 0x43d], al
jmp 0x42cf32
push dword [ebp + 0x18]
call edi
push 0
push str.dependency
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b2cc
test eax, eax
jne 0x42d7ec
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47686c
mov edi, 0x46d060
push str.dependency
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x52
call fcn.004253c9
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x40]
call fcn.0042474e
mov ecx, dword [ebp - 0x288]
push str.File
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x53
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
cmovne edx, ecx
push edx
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x54
call fcn.004050d0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x53
call fcn.00412cea
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebx + 0x278]
call fcn.004251ca
push 1
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.004253c9
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x55
call fcn.004253c9
lea ecx, [ebp - 0x70]
call fcn.00401500
jmp 0x42c684
push dword [ebp + 0x18]
call edi
push 0
push str.behavior
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b2cc
test eax, eax
jne 0x42dc9d
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x47686c
mov edi, 0x46d060
push str.behavior
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x56
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
mov ecx, dword [ebp - 0x288]
push str.Optional
lea eax, [ebp - 0x8c]
push eax
call fcn.0043c78b
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x57
call fcn.00402330
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x59
call fcn.00412cea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd1c
cmp dword [ebp - 0x28c], 0
je 0x42d8b4
mov byte [ebx + 0x45c], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.Optional
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5a
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 1
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253c9
mov ecx, dword [ebp - 0x288]
push str.Reboot
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5b
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412cea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd1c
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x42d96b
mov dword [ebx + 0x454], eax
push 0
lea eax, [ebp - 0x281]
push eax
push str.Reboot
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5c
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 1
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253c9
mov ecx, dword [ebp - 0x288]
push str.Failure
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5d
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412cea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd1c
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x42da22
mov dword [ebx + 0x458], eax
push 0
lea eax, [ebp - 0x281]
push eax
push str.Failure
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5e
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253c9
mov ecx, dword [ebp - 0x288]
push 0x46ef4c
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5f
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412cea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd1c
cmp dword [ebp - 0x28c], 0
je 0x42dad9
mov byte [ebx + 0x45d], 1
push 0
lea eax, [ebp - 0x281]
push eax
push 0x46ef4c
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x60
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253c9
mov ecx, dword [ebp - 0x288]
push str.Hidden
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x61
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412cea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd1c
cmp dword [ebp - 0x28c], 0
je 0x42db90
mov byte [ebx + 0x269], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.Hidden
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x62
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253c9
mov ecx, dword [ebp - 0x288]
push str.MsiProgress
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c78b
cmp dword [eax + 0x10], 0
mov edx, 0x476700
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
cmovne edx, ecx
push edx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x63
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412cea
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd1c
cmp dword [ebp - 0x28c], 0
je 0x42dc45
mov byte [ebx + 0x26a], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.MsiProgress
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x64
call fcn.004253c9
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.004253c9
lea ecx, [ebp - 0xd0]
call fcn.00401500
lea ecx, [ebp + 8]
call fcn.00412cea
call fcn.0043fa28
ret 0x20