Function at 0x4031e0
Capabilities:
Create process on windows
Get common file path
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x460dad
mov eax, dword fs:[0]
push eax
sub esp, 0x4c0
mov eax, dword [0x4770c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x440], edi
movups xmmword [ebp - 0x498], xmm0
mov dword [ebp - 0x488], 0
mov edx, dword [edi]
mov ecx, edx
mov dword [ebp - 0x484], 0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403240
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x498]
call fcn.00401710
lea edx, [ebp - 0x498]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x290]
call fcn.0040c2d0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x484]
cmp ecx, 0xf
jbe 0x4032ac
mov edx, dword [ebp - 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4032a2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c46
push ecx
push edx
call fcn.0043a496
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x268], 0
movups xmmword [ebp - 0x278], xmm0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
push 0xb0
lea eax, [ebp - 0x3a0]
mov byte [ebp - 4], 4
push 0
push eax
call fcn.0043bb80
add esp, 8
lea ecx, [ebp - 0x3a0]
call fcn.00405de0
mov eax, 1
mov byte [ebp - 4], 5
mov byte [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], eax
cmp dword [ebp + 8], eax
jle 0x4038c6
mov dword [ebp - 0x4ac], str._log
mov edx, dword [edi + eax*4]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x250], 0
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x24c], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403367
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.00401710
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 6
call fcn.0040c0a0
cmp dword [ebp - 0x24c], 0xf
lea ecx, [ebp - 0x260]
mov edi, dword [ebp - 0x260]
mov eax, dword [ebp - 0x250]
seta dl
cmova ecx, edi
mov byte [ebp - 0x47d], dl
cmp eax, 5
jb 0x403560
mov esi, 5
mov edx, str._log
sub esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4033dd
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4033c7
cmp esi, 0xfffffffc
je 0x403411
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40340a
cmp esi, 0xfffffffd
je 0x403411
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40340a
cmp esi, 0xfffffffe
je 0x403411
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x40340a
cmp esi, 0xffffffff
je 0x403411
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x403411
sbb eax, eax
or eax, 1
jmp 0x403413
xor eax, eax
test eax, eax
sete al
test al, al
mov eax, dword [ebp - 0x250]
je 0x40355a
mov dword [ebp - 0x488], 0
xorps xmm0, xmm0
mov dword [ebp - 0x484], 0
movups xmmword [ebp - 0x498], xmm0
cmp eax, 5
jb 0x404c50
add eax, 0xfffffffb
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x47d], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 5
lea ecx, [ebp - 0x498]
push eax
call fcn.00401710
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x4034b3
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4034a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c46
push ecx
push edx
call fcn.0043a496
add esp, 8
movups xmm1, xmmword [ebp - 0x498]
cmp dword [ebp - 0x484], 0xf
lea ecx, [ebp - 0x2a8]
movq xmm0, qword [ebp - 0x488]
movd eax, xmm1
movups xmmword [ebp - 0x2a8], xmm1
cmova ecx, eax
movq qword [ebp - 0x298], xmm0
sub esp, 8
push ecx
lea ecx, [ebp - 0x39c]
call fcn.00408170
test eax, eax
lea ecx, [ebp - 0x3a0]
mov eax, dword [ebp - 0x3a0]
je 0x403516
add ecx, dword [eax + 4]
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x40352b
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.004027e0
cmp dword [ebp - 0x350], 0
jne 0x4037da
mov edx, str.Unable_to_open_log_file_n
mov ecx, 0x478408
call fcn.00408aa0
mov edi, dword [ebp - 0x260]
jmp 0x403870
mov dl, byte [ebp - 0x47d]
cmp dword [ebp - 0x280], 0
jne 0x4036a5
test dl, dl
lea ecx, [ebp - 0x260]
mov esi, 0xc
mov edx, str._utmContent
cmovne ecx, edi
cmp eax, esi
jb 0x4036a5
sub esi, 4
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4035a6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x403590
cmp esi, 0xfffffffc
je 0x4035da
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4035d3
cmp esi, 0xfffffffd
je 0x4035da
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4035d3
cmp esi, 0xfffffffe
je 0x4035da
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4035d3
cmp esi, 0xffffffff
je 0x4035da
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4035da
sbb eax, eax
or eax, 1
jmp 0x4035dc
xor eax, eax
test eax, eax
sete al
test al, al
je 0x4036a5
mov eax, dword [ebp - 0x250]
xorps xmm0, xmm0
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0
movups xmmword [ebp - 0x498], xmm0
cmp eax, 0xc
jb 0x404c50
add eax, 0xfffffff4
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x47d], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 0xc
lea ecx, [ebp - 0x498]
push eax
call fcn.00401710
mov ecx, dword [ebp - 0x27c]
cmp ecx, 0xf
jbe 0x40367c
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403672
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c46
push ecx
push edx
call fcn.0043a496
add esp, 8
movups xmm0, xmmword [ebp - 0x498]
mov edi, dword [ebp - 0x260]
movups xmmword [ebp - 0x290], xmm0
movq xmm0, qword [ebp - 0x488]
movq qword [ebp - 0x280], xmm0
jmp 0x403870
cmp byte [ebp - 0x47d], 0
lea ecx, [ebp - 0x260]
mov eax, dword [ebp - 0x250]
mov esi, 6
cmovne ecx, edi
mov edx, str._uuid
cmp eax, esi
jb 0x4037e5
sub esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4036e6
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4036d0
cmp esi, 0xfffffffc
je 0x40371a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x403713
cmp esi, 0xfffffffd
je 0x40371a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x403713
cmp esi, 0xfffffffe
je 0x40371a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x403713
cmp esi, 0xffffffff
je 0x40371a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40371a
sbb eax, eax
or eax, 1
jmp 0x40371c
xor eax, eax
test eax, eax
sete al
test al, al
mov eax, dword [ebp - 0x250]
je 0x4037e5
mov dword [ebp - 0x488], 0
xorps xmm0, xmm0
mov dword [ebp - 0x484], 0
movups xmmword [ebp - 0x498], xmm0
cmp eax, 6
jb 0x404c50
add eax, 0xfffffffa
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x47d], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 6
lea ecx, [ebp - 0x498]
push eax
call fcn.00401710
mov ecx, dword [ebp - 0x264]
cmp ecx, 0xf
jbe 0x4037bc
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4037b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c46
push ecx
push edx
call fcn.0043a496
add esp, 8
movups xmm0, xmmword [ebp - 0x498]
movups xmmword [ebp - 0x278], xmm0
movq xmm0, qword [ebp - 0x488]
movq qword [ebp - 0x268], xmm0
mov edi, dword [ebp - 0x260]
jmp 0x403870
cmp byte [ebp - 0x47d], 0
lea ecx, [ebp - 0x260]
mov esi, 0x11
mov edx, str._enableStatistics
cmovne ecx, edi
cmp eax, esi
jb 0x403870
sub esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40381c
add ecx, 4
add edx, 4
sub esi, 4
jae 0x403806
cmp esi, 0xfffffffc
je 0x403850
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x403849
cmp esi, 0xfffffffd
je 0x403850
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x403849
cmp esi, 0xfffffffe
je 0x403850
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x403849
cmp esi, 0xffffffff
je 0x403850
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x403850
sbb eax, eax
or eax, 1
jmp 0x403852
xor eax, eax
mov ecx, dword [ebp - 0x4a0]
test eax, eax
movzx ecx, cl
sete al
test al, al
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x4a0], ecx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x24c]
cmp eax, 0xf
jbe 0x4038aa
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x4038a0
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c46
push ecx
push edi
call fcn.0043a496
add esp, 8
mov eax, dword [ebp - 0x49c]
mov edi, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x49c], eax
cmp eax, dword [ebp + 8]
jl 0x403341
mov edx, str.Starting_OperaInstaller_n
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
push eax
call fcn.00408d50
mov edx, dword [edi]
add esp, 4
xorps xmm0, xmm0
test edx, edx
je 0x40397e
mov ecx, edx
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403903
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00401710
push ecx
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2c0]
call fcn.0040c1c0
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x403964
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40395a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c4b
push ecx
push edx
call fcn.0043a496
add esp, 8
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jmp 0x4039a3
mov eax, 7
mov dword [ebp - 0x2b0], 0
xor ecx, ecx
mov dword [ebp - 0x2ac], eax
movups xmmword [ebp - 0x2c0], xmm0
mov word [ebp - 0x2c0], cx
cmp eax, 7
mov byte [ebp - 4], 8
lea edx, [ebp - 0x2c0]
cmova edx, dword [ebp - 0x2c0]
lea ecx, [ebp - 0x3b8]
call fcn.00401360
mov byte [ebp - 4], 9
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x49c], eax
mov esi, dword [eax]
mov eax, dword [0x479228]
cmp eax, dword [esi + 4]
jle 0x403a0e
push 0x479228
call fcn.0043a548
add esp, 4
cmp dword [0x479228], 0xffffffff
jne 0x403a0e
push 0x461d50
call fcn.0043a7e8
push 0x479228
call fcn.0043a4f7
add esp, 8
mov eax, dword [0x479280]
cmp eax, dword [esi + 4]
jle 0x403a7f
push 0x479280
call fcn.0043a548
add esp, 4
cmp dword [0x479280], 0xffffffff
jne 0x403a7f
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
push 0x24
push str.00000000_0000_0000_0000_000000000000
mov ecx, 0x4792d4
mov dword [0x4792e4], 0
movups xmmword [0x4792d4], xmm0
mov dword [0x4792e8], 0
call fcn.00401710
push 0x461cf0
call fcn.0043a7e8
push 0x479280
mov byte [ebp - 4], 9
call fcn.0043a4f7
add esp, 8
mov eax, dword [0x4792a0]
cmp eax, dword [esi + 4]
jle 0x403ab9
push 0x4792a0
call fcn.0043a548
add esp, 4
cmp dword [0x4792a0], 0xffffffff
jne 0x403ab9
push 0x461c90
call fcn.0043a7e8
push 0x4792a0
call fcn.0043a4f7
add esp, 8
mov edx, str.Using_following_parameters:_n
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
mov edx, str.UTM_campaign_ID:__
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
cmp dword [0x477b9c], 0xf
mov edx, str.1001
push dword [0x477b98]
cmova edx, dword [str.1001]
mov ecx, eax
call fcn.0040ac40
mov edx, 0x4722ac
mov ecx, eax
call fcn.00408aa0
mov edx, str.UTM_content_ID:__
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
cmp dword [ebp - 0x27c], 0xf
lea edx, [ebp - 0x290]
push dword [ebp - 0x280]
cmova edx, dword [ebp - 0x290]
mov ecx, eax
call fcn.0040ac40
mov edx, 0x4722ac
mov ecx, eax
call fcn.00408aa0
mov edx, str.UUID:
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
cmp dword [ebp - 0x264], 0xf
lea edx, [ebp - 0x278]
push dword [ebp - 0x268]
cmova edx, dword [ebp - 0x278]
mov ecx, eax
call fcn.0040ac40
add esp, 0xc
mov edx, 0x4722ac
mov ecx, eax
call fcn.00408aa0
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
xor eax, eax
mov dword [ebp - 0x234], 7
movups xmmword [ebp - 0x248], xmm0
mov word [ebp - 0x248], ax
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0xb
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, 0x104
jbe 0x403c23
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x403c06
cmp eax, 7
mov dword [ebp - 0x238], 8
push 0x10
lea esi, [ebp - 0x248]
cmova esi, dword [ebp - 0x248]
push 0x472550
push esi
call fcn.0043bce0
add esp, 0xc
xor eax, eax
mov word [esi + 0x10], ax
jmp 0x403ca4
push 0x472550
push dword [ebp - 0x4a8]
lea ecx, [ebp - 0x248]
push 8
call fcn.0040bbb0
jmp 0x403ca4
test eax, eax
je 0x403bc6
lea ecx, [ebp - 0x230]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403c30
mov eax, dword [ebp - 0x234]
sub ecx, edx
sar ecx, 1
cmp ecx, eax
ja 0x403c7b
cmp eax, 7
mov dword [ebp - 0x238], ecx
lea esi, [ecx + ecx]
push esi
lea eax, [ebp - 0x230]
lea edi, [ebp - 0x248]
cmova edi, dword [ebp - 0x248]
push eax
push edi
call fcn.0043bce0
add esp, 0xc
xor eax, eax
mov word [edi + esi], ax
jmp 0x403c94
lea eax, [ebp - 0x230]
push eax
push dword [ebp - 0x4a8]
push ecx
lea ecx, [ebp - 0x248]
call fcn.0040bbb0
push str.OperaSetup.exe
lea ecx, [ebp - 0x248]
call fcn.0040c410
cmp dword [ebp - 0x234], 7
lea eax, [ebp - 0x248]
push 0
cmova eax, dword [ebp - 0x248]
push 0x8000080
push 4
push 0
push 1
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4b4], eax
cmp eax, 0xffffffff
jne 0x403daf
mov edx, str.Failed_to_create_file
mov ecx, 0x4784f0
call fcn.00408df0
cmp dword [ebp - 0x234], 7
lea edx, [ebp - 0x248]
push dword [ebp - 0x238]
cmova edx, dword [ebp - 0x248]
mov ecx, eax
call fcn.0040aea0
add esp, 4
mov edx, str.__error_code
mov ecx, eax
call fcn.00408df0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x498]
call fcn.00408750
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x498]
cmp dword [ebp - 0x484], 7
mov ecx, esi
push dword [ebp - 0x488]
cmova edx, dword [ebp - 0x498]
call fcn.0040aea0
add esp, 4
mov ecx, eax
call fcn.00409090
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x484]
cmp ecx, 7
jbe 0x403da7
mov edx, dword [ebp - 0x498]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403d9d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c55
push ecx
push edx
call fcn.0043a496
add esp, 8
or esi, 0xffffffff
jmp 0x4049d3
call fcn.0040c790
mov edi, eax
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x4b0], edi
call fcn.0040b1a0
mov eax, dword [ebp - 0x49c]
mov byte [ebp - 4], 0xd
mov ecx, dword [0x47921c]
mov esi, dword [eax]
cmp ecx, dword [esi + 4]
jle 0x403ebd
push 0x47921c
call fcn.0043a548
add esp, 4
cmp dword [0x47921c], 0xffffffff
jne 0x403ebd
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x498]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x488], 0
push 0x472131
movups xmmword [ebp - 0x498], xmm0
mov dword [ebp - 0x484], 0
call fcn.00401710
lea eax, [ebp - 0x498]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x2f0]
mov ecx, 0x479288
push eax
lea eax, [ebp - 0x278]
push 0x477bc0
push eax
lea edx, [ebp - 0x290]
call fcn.00402ab0
mov byte [ebp - 4], 0xe
add esp, 0x10
mov ecx, dword [ebp - 0x484]
cmp ecx, 0xf
jbe 0x403ea2
mov edx, dword [ebp - 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403e98
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
push 0x461c30
call fcn.0043a7e8
push 0x47921c
mov byte [ebp - 4], 0xd
call fcn.0043a4f7
add esp, 8
push 0
push 0x51
push edi
call fcn.0040f5c0
push 0
push 0x40
push edi
call fcn.0040f5c0
push 0
push 0x2751
push edi
call fcn.0040f5c0
push 1
push 0x34
push edi
call fcn.0040f5c0
push 5
push 0x44
push edi
call fcn.0040f5c0
push 7
push 0xa1
push edi
call fcn.0040f5c0
add esp, 0x48
push 0x402aa0
push 0x4e2b
push edi
call fcn.0040f5c0
add esp, 0xc
cmp byte [ebp - 0x4a0], 0
je 0x403f7d
cmp dword [0x47929c], 0xf
mov eax, 0x479288
cmova eax, dword [0x479288]
push eax
push 0x2712
push edi
call fcn.0040f5c0
mov edx, str.Sending_start_request:
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
cmp dword [0x47929c], 0xf
mov edx, 0x479288
push dword [0x479298]
cmova edx, dword [0x479288]
mov ecx, eax
call fcn.0040ac40
mov ecx, eax
call fcn.00409350
push edi
call fcn.0040c7d0
add esp, 0x14
mov eax, dword [0x4792cc]
cmp eax, dword [esi + 4]
jle 0x4041f3
push 0x4792cc
call fcn.0043a548
add esp, 4
cmp dword [0x4792cc], 0xffffffff
jne 0x4041f3
mov byte [ebp - 4], 0x10
mov eax, closesocket
mov ecx, dword [0x477b98]
sub eax, ecx
cmp eax, 0x52
jb 0x404c5a
cmp dword [0x477b9c], 0xf
mov eax, str.1001
push ecx
cmova eax, dword [str.1001]
push eax
push 0x52
push str.https:__net.geo.opera.com_opera_stable_utm_mediumapbutm_sourceOFTutm_campaign
push ecx
push dword [ebp - 0x4a8]
lea ecx, [ebp - 0x498]
call fcn.004063f0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x484]
mov eax, edx
mov ecx, dword [ebp - 0x488]
sub eax, ecx
push 0xd
push str.utm_content
cmp eax, 0xd
jb 0x404040
cmp edx, 0xf
lea esi, [ebp - 0x498]
lea eax, [ecx + 0xd]
cmova esi, dword [ebp - 0x498]
add esi, ecx
mov dword [ebp - 0x488], eax
push esi
call fcn.0043bce0
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x498]
jmp 0x404053
push dword [ebp - 0x4a8]
lea ecx, [ebp - 0x498]
push 0xd
call fcn.0040a180
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
lea edx, [ebp - 0x290]
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x27c], 0xf
mov ecx, dword [ebp - 0x280]
cmova edx, dword [ebp - 0x290]
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
sub eax, esi
mov dword [ebp - 0x4a4], ecx
mov dword [ebp - 0x440], esi
push ecx
push edx
cmp ecx, eax
ja 0x4040fb
cmp dword [ebp - 0x14], 0xf
lea eax, [esi + ecx]
mov dword [ebp - 0x18], eax
lea esi, [ebp - 0x28]
cmova esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x440]
add eax, esi
push eax
call fcn.0043bce0
mov eax, dword [ebp - 0x4a4]
add esp, 0xc
mov ecx, dword [ebp - 0x440]
add eax, esi
mov byte [eax + ecx], 0
lea eax, [ebp - 0x28]
jmp 0x40410a
push dword [ebp - 0x4a8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040a180
mov dword [0x479278], 0
xorps xmm0, xmm0
movups xmmword [0x479268], xmm0
mov dword [0x47927c], 0
movups xmm0, xmmword [eax]
movups xmmword [0x479268], xmm0
movq xmm0, qword [eax + 0x10]
mov byte [ebp - 4], 0x11
movq qword [0x479278], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x404188
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40417e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c5f
push ecx
push edx
call fcn.0043a496
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, 0xf
jbe 0x4041d8
mov edx, dword [ebp - 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4041ce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c5f
push ecx
push edx
call fcn.0043a496
add esp, 8
push 0x461bd0
call fcn.0043a7e8
push 0x4792cc
mov byte [ebp - 4], 0xd
call fcn.0043a4f7
add esp, 8
mov edx, str.Downloading_URL:
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
cmp dword [0x47927c], 0xf
mov edx, 0x479268
push dword [0x479278]
cmova edx, dword [0x479268]
mov ecx, eax
call fcn.0040ac40
mov ecx, eax
call fcn.00409350
cmp dword [0x47927c], 0xf
mov eax, 0x479268
cmova eax, dword [0x479268]
push eax
push 0x2712
push edi
call fcn.0040f5c0
mov esi, dword [ebp - 0x4b4]
push esi
push 0x2711
push edi
call fcn.0040f5c0
push 0x402a50
push 0x4e2b
push edi
call fcn.0040f5c0
push edi
call fcn.0040c7d0
add esp, 0x2c
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
lea ecx, [ebp - 0x3a0]
mov edx, str.Downloaded_Opera_file_size:
mov dword [ebp - 0x440], esi
call fcn.00408aa0
mov ecx, esi
mov dword [ebp - 0x4a8], eax
lea edi, [ebp - 0x13]
mov dword [ebp - 0x4a4], ecx
mov eax, 0xcccccccd
dec edi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x4a4]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [ebp - 0x4a4], eax
test eax, eax
jne 0x4042a6
push ecx
lea eax, [ebp - 0x13]
push eax
push edi
lea ecx, [ebp - 0x498]
call fcn.0040ab20
mov ecx, dword [ebp - 0x4a8]
lea edx, [ebp - 0x498]
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x484], 0xf
push dword [ebp - 0x488]
cmova edx, dword [ebp - 0x498]
call fcn.0040ac40
add esp, 4
mov ecx, eax
call fcn.00409350
mov edi, dword [ebp - 0x4b0]
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x484]
cmp ecx, 0xf
jbe 0x40435d
mov edx, dword [ebp - 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404353
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c64
push ecx
push edx
call fcn.0043a496
add esp, 8
cmp byte [ebp - 0x4a0], 0
je 0x404555
mov eax, dword [ebp - 0x49c]
mov ecx, dword [eax]
mov eax, dword [0x479284]
cmp eax, dword [ecx + 4]
jle 0x4044e6
push 0x479284
call fcn.0043a548
add esp, 4
cmp dword [0x479284], 0xffffffff
jne 0x4044e6
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x498]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x488], 0
push 0x472131
movups xmmword [ebp - 0x498], xmm0
mov dword [ebp - 0x484], 0
call fcn.00401710
mov byte [ebp - 4], 0x15
lea edi, [ebp - 0x13]
mov eax, 0xcccccccd
dec edi
mul esi
shr edx, 3
mov al, dl
mov esi, edx
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x440]
add cl, cl
sub al, cl
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [ebp - 0x440], eax
test eax, eax
jne 0x4043d8
push ecx
lea eax, [ebp - 0x13]
push eax
push edi
lea ecx, [ebp - 0x4cc]
call fcn.0040ab20
lea eax, [ebp - 0x498]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x4cc]
mov ecx, 0x479250
push eax
lea eax, [ebp - 0x278]
push 0x477bd8
push eax
lea edx, [ebp - 0x290]
call fcn.00402ab0
mov edi, dword [ebp - 0x4b0]
add esp, 0x10
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0xf
jbe 0x40448d
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404483
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x484]
cmp ecx, 0xf
jbe 0x4044cb
mov edx, dword [ebp - 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4044c1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
push 0x461b70
call fcn.0043a7e8
push 0x479284
mov byte [ebp - 4], 0xd
call fcn.0043a4f7
add esp, 8
push 0x402aa0
push 0x4e2b
push edi
call fcn.0040f5c0
cmp dword [0x479264], 0xf
mov eax, 0x479250
cmova eax, dword [0x479250]
push eax
push 0x2712
push edi
call fcn.0040f5c0
mov edx, str.Sending_downloaded_request:
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
cmp dword [0x479264], 0xf
mov edx, 0x479250
push dword [0x479260]
cmova edx, dword [0x479250]
mov ecx, eax
call fcn.0040ac40
mov ecx, eax
call fcn.00409350
push edi
call fcn.0040c7d0
add esp, 0x20
push dword [ebp - 0x4b4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push str.__silent___allusers0
lea ecx, [ebp - 0x2d8]
call fcn.004062c0
push 0x84
lea eax, [ebp - 0x43c]
mov byte [ebp - 4], 0x17
push 0
push eax
call fcn.0043bb80
add esp, 0xc
lea eax, [ebp - 0x2d8]
cmp dword [ebp - 0x2c4], 7
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x43c], ecx
lea ecx, [ebp - 0x43c]
cmova eax, dword [ebp - 0x2d8]
push 3
push eax
call fcn.00407450
mov edx, str.Launch_parameters:
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
mov edx, dword [ebp - 0x43c]
mov ecx, eax
call fcn.00408aa0
mov ecx, eax
call fcn.00409350
cmp dword [ebp - 0x234], 7
lea eax, [ebp - 0x248]
xorps xmm0, xmm0
mov dword [ebp - 0x47c], 0x3c
cmova eax, dword [ebp - 0x248]
cmp dword [ebp - 0x2c4], 7
mov dword [ebp - 0x46c], eax
lea eax, [ebp - 0x2d8]
cmova eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x468], eax
lea eax, [ebp - 0x47c]
push eax
movlpd qword [ebp - 0x458], xmm0
movlpd qword [ebp - 0x450], xmm0
movlpd qword [ebp - 0x448], xmm0
mov dword [ebp - 0x478], 0x40
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], str.open
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 5
mov dword [ebp - 0x45c], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x4048ed
mov eax, dword [ebp - 0x444]
test eax, eax
je 0x4048ed
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x440]
mov dword [ebp - 0x440], 0xfffe1dc0
push eax
push dword [ebp - 0x444]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea ecx, [ebp - 0x3a0]
test eax, eax
je 0x4046eb
mov edx, str.Exit_code:
call fcn.00408aa0
push dword [ebp - 0x440]
mov ecx, eax
call fcn.00406010
mov ecx, eax
call fcn.00409350
jmp 0x4046f5
mov edx, str.Error._Process_has_finished__but_its_impossible_to_retreive_exit_code._n
call fcn.00408aa0
push dword [ebp - 0x444]
call esi
cmp byte [ebp - 0x4a0], 0
je 0x4048fd
mov eax, dword [ebp - 0x49c]
mov ecx, dword [eax]
mov eax, dword [0x4792d0]
cmp eax, dword [ecx + 4]
jle 0x40488c
push 0x4792d0
call fcn.0043a548
add esp, 4
cmp dword [0x4792d0], 0xffffffff
jne 0x40488c
mov byte [ebp - 4], 0x19
lea esi, [ebp - 0x13]
mov ecx, dword [ebp - 0x440]
mov dword [ebp - 0x49c], ecx
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x49c]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x49c], eax
test eax, eax
jne 0x404750
push ecx
lea eax, [ebp - 0x13]
push eax
push esi
lea ecx, [ebp - 0x4cc]
call fcn.0040ab20
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x498]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x488], 0
push 0x472131
movups xmmword [ebp - 0x498], xmm0
mov dword [ebp - 0x484], 0
call fcn.00401710
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x498]
mov ecx, 0x479238
push eax
lea eax, [ebp - 0x278]
push 0x477bf0
push eax
lea edx, [ebp - 0x290]
call fcn.00402ab0
mov byte [ebp - 4], 0x1a
add esp, 0x10
mov ecx, dword [ebp - 0x484]
cmp ecx, 0xf
jbe 0x404833
mov edx, dword [ebp - 0x498]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404829
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c69
push ecx
push edx
call fcn.0043a496
add esp, 8
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0xf
jbe 0x404871
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404867
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c69
push ecx
push edx
call fcn.0043a496
add esp, 8
push 0x461b10
call fcn.0043a7e8
push 0x4792d0
mov byte [ebp - 4], 0x18
call fcn.0043a4f7
add esp, 8
cmp dword [0x47924c], 0xf
mov eax, 0x479238
cmova eax, dword [0x479238]
push eax
push 0x2712
push edi
call fcn.0040f5c0
mov edx, str.Sending_installed_request:
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
cmp dword [0x47924c], 0xf
mov edx, 0x479238
push dword [0x479248]
cmova edx, dword [0x479238]
mov ecx, eax
call fcn.0040ac40
mov ecx, eax
call fcn.00409350
push edi
call fcn.0040c7d0
add esp, 0x14
jmp 0x4048fd
mov edx, str.Error._Unable_to_launch_process._n
lea ecx, [ebp - 0x3a0]
call fcn.00408aa0
push edi
call fcn.0040c770
mov eax, dword [ebp - 0x43c]
lea ecx, [ebp - 0x438]
add esp, 4
xor esi, esi
cmp eax, ecx
je 0x404921
push eax
call fcn.00442959
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x2c4]
cmp ecx, 7
jbe 0x404965
mov edx, dword [ebp - 0x2d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40495b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
cmp ecx, 0xf
jbe 0x4049bc
mov edx, dword [ebp - 0x2f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4049b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
mov dword [ebp - 0x2e0], esi
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x234]
cmp ecx, 7
jbe 0x404a17
mov edx, dword [ebp - 0x248]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404a0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
xor eax, eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
cmp ecx, 0xf
jbe 0x404a72
mov edx, dword [ebp - 0x3b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404a68
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x2ac]
cmp ecx, 7
jbe 0x404ab6
mov edx, dword [ebp - 0x2c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404aac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
xor eax, eax
mov dword [ebp - 0x2b0], 0
mov word [ebp - 0x2c0], ax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x2ac], 7
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x3a4], eax
lea ecx, [ebp - 0x39c]
call fcn.004059c0
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x3a4], eax
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 0x1c
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.004397a8
mov ecx, dword [ebp - 0x294]
add esp, 4
cmp ecx, 0xf
jbe 0x404b83
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404b79
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
cmp ecx, 0xf
jbe 0x404bd8
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404bce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
cmp ecx, 0xf
jbe 0x404c29
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404c1f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404c6e
push ecx
push edx
call fcn.0043a496
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043a453
mov esp, ebp
pop ebp
ret
call fcn.0043f78f
call fcn.0043f78f
call fcn.00401700
call fcn.0043f78f
call fcn.00401350
call fcn.0043f78f
call fcn.0043f78f
call fcn.0043f78f
call fcn.0043f78f
int3