Function at 0x427bdd
Capabilities:
Accept command line arguments
Check internet connectivity via wininet
Contain obfuscated stackstrings
Create thread
Get common file path

Disassembly:
push ebp
sub esp, 0x730
lea ebp, [esp - 4]
mov eax, dword [0x4c1c50]
xor eax, ebp
mov dword [ebp + 0x730], eax
push 0x1ac
mov eax, 0x49880e
call fcn.00470906
and dword [ebp - 0x38], 0
lea eax, [ebp - 0x1c]
push eax
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp + 0x71c]
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea ecx, [ebp - 0x14]
call fcn.0044e010
push dword [ebp + 0x726]
and dword [ebp - 4], 0
push dword [ebp + 0x724]
lea ecx, [ebp - 0x14]
push dword [ebp + 0x71c]
push dword [ebp + 0x722]
push dword [ebp + 0x71e]
push str.Now__UTC__:__02d__02d__04d__02d:_02d_n
call fcn.0041bcba
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0044e260
push dword [ebp - 0x1c]
lea eax, [esi + 0xfc]
push 0x4a08a8
push eax
call fcn.0044ee50
mov edi, 0x4c3b2c
add esp, 0xc
mov ecx, edi
call fcn.0040fb20
mov ecx, 0x4c3ee8
call fcn.0041e7ab
mov ebx, str.help
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._help
mov dword [ebp - 4], 1
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.Show_the_short_help._Use__help_long_to_show_the_long_help.
mov byte [ebp - 4], 2
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Show_this_help
mov byte [ebp - 4], 3
call fcn.0044e280
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 1
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.0044e260
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0044e280
mov byte [ebp - 4], 6
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
call fcn.0040fc25
lea ecx, [ebp - 0x1c]
mov ebx, eax
mov byte [ebp - 4], 5
call fcn.0044e260
test ebx, ebx
je 0x427d3c
push 0
mov ecx, 0x4c3d00
call fcn.004432c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x348]
call fcn.0040dba8
push str.help_long
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._help_long
mov dword [ebp - 4], 7
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
mov ebx, str.Show_the_long_help
push ebx
mov byte [ebp - 4], 8
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
mov byte [ebp - 4], 9
call fcn.0044e280
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 7
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call fcn.0044e260
push str.help_long
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.0040fc25
lea ecx, [ebp - 0x1c]
mov ebx, eax
mov byte [ebp - 4], 0xb
call fcn.0044e260
test ebx, ebx
je 0x427df2
push 1
mov ecx, 0x4c3d00
call fcn.004432c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x348]
call fcn.0040dba8
push str.help_reg
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._help_reg
mov dword [ebp - 4], 0xd
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
mov ebx, str.Show_short_help_for_reg_overrides
push ebx
mov byte [ebp - 4], 0xe
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
mov byte [ebp - 4], 0xf
call fcn.0044e280
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x6d4]
mov byte [ebp - 4], 0xd
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.0044e260
push str.help_reg
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x12
call fcn.0040fc25
lea ecx, [ebp - 0x1c]
mov ebx, eax
mov byte [ebp - 4], 0x11
call fcn.0044e260
test ebx, ebx
je 0x427ea8
push 0
mov ecx, 0x4c3848
call fcn.004432c0
push str.help_reg_long
lea ecx, [ebp - 0x1c]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._help_reg_long
mov byte [ebp - 4], 0x13
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
mov ebx, str.Show_long_help_for_reg_overrides
push ebx
mov byte [ebp - 4], 0x14
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
mov byte [ebp - 4], 0x15
call fcn.0044e280
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x13
call fcn.0040fd41
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x17
call fcn.0044e260
push str.help_reg_long
lea ecx, [ebp - 0x34]
call fcn.0044e280
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x18
call fcn.0040fc25
lea ecx, [ebp - 0x34]
mov ebx, eax
mov byte [ebp - 4], 0x17
call fcn.0044e260
test ebx, ebx
je 0x427f4c
push 1
mov ecx, 0x4c3848
call fcn.004432c0
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x11
call fcn.0040dba8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x6d4]
call fcn.0040dba8
mov ebx, str.uh_pre
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._uh_pre
mov dword [ebp - 4], 0x19
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.Used_when_invoking_stub_in_non_admin_mode_to_generate_an_install_prompt_and_then_optionally_restart_stub_in_admin_mode_if_the_user_chose_to_install
mov byte [ebp - 4], 0x1a
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Used_when_invoking_stub_in_non_admin_mode_to_prompt
mov byte [ebp - 4], 0x1b
call fcn.0044e280
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x698]
mov byte [ebp - 4], 0x19
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
call fcn.0044e260
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x1e
call fcn.0040fc25
lea ecx, [ebp - 0x1c]
mov dword [esi + 0x1dc], eax
mov byte [ebp - 4], 0x1d
call fcn.0044e260
push str.uh_post
lea ecx, [ebp - 0x1c]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._uh_post
mov byte [ebp - 4], 0x1f
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
mov ebx, str.Used_by_stub_when_called_with__uh_pre_to_re_call_itself_in_admin_mode.
push ebx
mov byte [ebp - 4], 0x20
call fcn.0044e280
mov byte [ebp - 4], 0x21
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
call fcn.0044e280
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x6d4]
mov byte [ebp - 4], 0x1f
call fcn.0040fd41
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x23
call fcn.0044e260
push str.uh_post
lea ecx, [ebp - 0x34]
call fcn.0044e280
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x24
call fcn.0040fc25
lea ecx, [ebp - 0x34]
mov dword [esi + 0x1e0], eax
mov byte [ebp - 4], 0x23
call fcn.0044e260
push str.pageflownum
lea ecx, [ebp - 0x34]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._pageflownum2
mov byte [ebp - 4], 0x25
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
mov ebx, str.This_specs_the_page_to_start_in_the_page_flow
push ebx
mov byte [ebp - 4], 0x26
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
mov byte [ebp - 4], 0x27
call fcn.0044e280
push 4
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x25
call fcn.0040fd41
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x29
call fcn.0044e260
push str.pageflownum
lea ecx, [ebp - 0x50]
call fcn.0044e280
lea eax, [esi + 0x1e4]
push eax
lea eax, [ebp - 0x50]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x2a
call fcn.0040fa0e
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x50]
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x23
call fcn.0040dba8
lea ecx, [ebp + 0x6d4]
mov byte [ebp - 4], 0x1d
call fcn.0040dba8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x698]
call fcn.0040dba8
mov ebx, str.silent
push ebx
lea ecx, [ebp - 0xc0]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._silent
mov dword [ebp - 4], 0x2b
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.Runs_the_stub_in_silent_mode
mov byte [ebp - 4], 0x2c
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Silent_mode
mov byte [ebp - 4], 0x2d
call fcn.0044e280
push 0
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x2b
call fcn.0040fd41
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x2f
call fcn.0044e260
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x30
call fcn.0040fc25
lea ecx, [ebp - 0x14]
mov dword [esi + 0x1ec], eax
mov byte [ebp - 4], 0x2f
call fcn.0044e260
mov ebx, str.orgexename
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._orgexename_blah_
mov byte [ebp - 4], 0x31
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
mov byte [ebp - 4], 0x32
push str.When_stub_first_runs__the_extractor_copies_the_stub_to_rnsetup.exe_in__temp__and_then_executes_it_there._The_extractor_will_pass_the_original_EXE_name_using_this_parameter._The_original_name_may_have_distcode_and_web_ID_imbedded_in_it.
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.This_is_the_original_EXE_name_before_the_Extractor_was_called
mov byte [ebp - 4], 0x33
call fcn.0044e280
push 4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x31
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x35
call fcn.0044e260
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea ebx, [esi + 0x1d4]
push ebx
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x36
call fcn.0040fa0e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x35
call fcn.0044e260
cmp dword [ebp - 0x20], 0
je 0x42846a
push ebx
lea ecx, [ebp - 0x24]
call fcn.0044e1c0
push 4
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x37
call fcn.0044e9d0
push str..exe
push eax
mov byte [ebp - 4], 0x38
call fcn.00401283
pop ecx
pop ecx
lea ecx, [ebp - 0x68]
mov bl, al
mov byte [ebp - 4], 0x37
call fcn.0044e260
test bl, bl
je 0x42831c
lea ecx, [ebp - 0x24]
call fcn.0044e020
sub eax, 4
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x24]
call fcn.0044ea30
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x39
call fcn.0044e310
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x37
call fcn.0044e260
push 2
push 0x5f
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x24]
call fcn.0044ebe0
push 3
push 0x5f
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3a
call fcn.0044ebe0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x3b
call fcn.00401219
test al, al
jne 0x428446
lea ecx, [ebp - 0x34]
call fcn.0044f0f0
lea ecx, [ebp - 0x34]
call fcn.0044e020
cmp byte [ebp - 0x2d], 0xff
lea eax, [ebp - 0x34]
jne 0x428370
mov eax, dword [ebp - 0x34]
cmp byte [eax], 0x72
jne 0x4283ed
lea ecx, [ebp - 0x34]
call fcn.0044e020
cmp eax, 5
jb 0x4283ed
lea ecx, [ebp - 0x34]
call fcn.0044e020
cmp eax, 0xa
ja 0x4283ed
lea eax, [ebp - 0x34]
lea ebx, [esi + 0x164]
push eax
mov ecx, ebx
call fcn.0044e310
push 0x4a4260
lea ecx, [ebp - 0x48]
call fcn.0044e280
push 0x4a1028
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x3c
call fcn.0044e280
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x3d
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x3c
call fcn.0044e260
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.0044e260
jmp 0x4283f9
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x50]
call fcn.0044e310
lea ecx, [ebp - 0x50]
call fcn.0044f0f0
lea ecx, [ebp - 0x50]
call fcn.00401219
test al, al
jne 0x428446
lea ecx, [ebp - 0x50]
call fcn.0044e020
cmp eax, 0x20
jne 0x428446
cmp byte [ebp - 0x49], 0xff
lea eax, [ebp - 0x50]
jne 0x428426
mov eax, dword [ebp - 0x50]
push 0x4a643c
push eax
call fcn.004183ac
pop ecx
pop ecx
test eax, eax
jne 0x428446
lea eax, [ebp - 0x50]
push eax
lea ecx, [esi + 0x174]
call fcn.0044e310
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x3a
call fcn.0044e260
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x37
call fcn.0044e260
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x35
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x2f
call fcn.0040dba8
mov ebx, 0x4a1774
push ebx
lea ecx, [ebp - 0xb8]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._log_blah_blah
mov byte [ebp - 4], 0x3e
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.An_ampersand_char_followed_by_the_rest_of_the_command_line_is_appended_________to_a_standard_log_line_and_written_to_the_http_log._The_program_________immediately_exits.
mov byte [ebp - 4], 0x3f
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Write_text_to_the_http_log_and_exit_the_program
mov byte [ebp - 4], 0x40
call fcn.0044e280
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x3e
call fcn.0040fd41
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x42
call fcn.0044e260
or dword [ebp - 0xa8], 0xffffffff
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x43
call fcn.0040fc3d
lea ecx, [ebp - 0x14]
mov ebx, eax
mov byte [ebp - 4], 0x42
call fcn.0044e260
test ebx, ebx
je 0x42857b
mov eax, dword [ebp - 0xa8]
inc eax
push eax
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
call fcn.0044ee00
push eax
lea eax, [ebp - 0x50]
push 0x4a0a8c
push eax
mov byte [ebp - 4], 0x44
call fcn.0044eb90
add esp, 0xc
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x46
call fcn.0044e260
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x50]
push ecx
mov ecx, esi
call dword [eax + 0x10]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x42
call fcn.0044e260
jmp 0x42a763
mov ebx, str.stubselfupdate
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._stubselfupdate__distcode_
mov byte [ebp - 4], 0x47
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.Specifies_that_this_stub_was_downloaded_and_called_by_an_older_stub._The_distcode_is_from_the_original_Stub_execution
mov byte [ebp - 4], 0x48
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.This_stub_was_downloaded_and_called_by_an_older_stub.
mov byte [ebp - 4], 0x49
call fcn.0044e280
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x47
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call fcn.0044e260
lea ecx, [esi + 0xdc]
push 0x4a099a
call fcn.0044e3b0
push ebx
lea ecx, [ebp - 0x34]
call fcn.0044e280
lea eax, [esi + 0xdc]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4c
call fcn.0040fa0e
lea ecx, [ebp - 0x34]
mov dword [esi + 0x158], eax
mov byte [ebp - 4], 0x4b
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x42
call fcn.0040dba8
lea ecx, [ebp - 0x1c]
call fcn.0044e010
push 0
lea eax, [ebp - 0x1c]
push eax
push str.OutputLog
push 3
mov byte [ebp - 4], 0x4d
call fcn.0040712d
add esp, 0x10
push str.output
lea ecx, [ebp - 0x50]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
mov byte [ebp - 4], 0x4e
push str._output
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
mov ebx, str.Keep_a_copy_of_the_log_in_c:logaction.txt._Obsolete_
push ebx
mov byte [ebp - 4], 0x4f
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
mov byte [ebp - 4], 0x50
call fcn.0044e280
push 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x4e
call fcn.0040fd41
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x52
call fcn.0044e260
push str.output
lea ecx, [ebp - 0x80]
call fcn.0044e280
lea eax, [ebp - 0x80]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x53
mov dword [ebp - 0x38], 1
call fcn.0040fc25
test eax, eax
jne 0x4286fb
lea ecx, [ebp - 0x1c]
call fcn.00401219
test al, al
je 0x4286fb
xor bl, bl
jmp 0x4286fd
mov bl, 1
lea ecx, [ebp - 0x80]
mov dword [ebp - 4], 0x52
call fcn.0044e260
test bl, bl
je 0x428724
push 0x4a1268
push str.c:logaction.txt
call fcn.0047136f
pop ecx
pop ecx
mov dword [esi + 0x2c], eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x4d
call fcn.0040dba8
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x42
call fcn.0044e260
mov ebx, str.datecheck
push ebx
lea ecx, [ebp - 0x80]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._datecheckTF
mov byte [ebp - 4], 0x54
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.Specifies_that_the_stub_caller_vouches_for_its_own_source__e.g._UpgradeHelper.exe_is_always_downloaded_from_RealN_and_will_pass__datecheckT._Stub_will_vouch_for_itself_if_its_own_digital_signature_timestamp_is_less_than_a_certain_age__currently_2_weeks__and_will_pass__datecheckTF_accordingly._Stubs_EXEs_that_are_too_old_to_even_have_this_code_will_not_pass_the__datecheck_param_at_all_indicating_that_our_source_is_unvouched._This_is_used_to_configure_the_Ask.com_DLP_offer.
mov byte [ebp - 4], 0x55
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Specifies_that_the_stub_caller_vouches_for_its_own_source.
mov byte [ebp - 4], 0x56
call fcn.0044e280
push 2
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x54
call fcn.0040fd41
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x58
call fcn.0044e260
and dword [esi + 0x154], 0
lea ecx, [ebp - 0x1c]
call fcn.0044e010
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x59
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x5a
call fcn.0040fa0e
lea ecx, [ebp - 0x14]
mov ebx, eax
mov byte [ebp - 4], 0x59
call fcn.0044e260
test ebx, ebx
je 0x428815
lea eax, [ebp - 0x1c]
push 0x4a5fec
push eax
mov dword [esi + 0x154], 1
call fcn.00401283
pop ecx
pop ecx
xor ecx, ecx
test al, al
setne cl
mov dword [esi + 0x150], ecx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x58
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x42
call fcn.0040dba8
push edi
lea ecx, [ebp - 0x88]
call fcn.0044e1c0
push eax
lea eax, [ebp - 0x2c]
push str.Run____strCmdLine_
push eax
mov byte [ebp - 4], 0x5b
call fcn.0044eb90
push 0x4a2580
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x5c
call fcn.0044eb40
push eax
mov byte [ebp - 4], 0x5d
call fcn.00404620
add esp, 0x1c
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x5c
call fcn.0044e260
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x5b
call fcn.0044e260
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x42
call fcn.0044e260
lea eax, [esi + 0x190]
push eax
lea eax, [ebp - 0x70]
push str.Stamp_Data__Lang:
push eax
call fcn.0044eb90
mov ebx, 0x4a431c
push ebx
push eax
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x5e
call fcn.0044eb40
push str._r_n_____________Prod:
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x5f
call fcn.0044eb40
lea ecx, [esi + 0x17c]
push ecx
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x60
call fcn.0044eaf0
push ebx
push eax
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 0x61
call fcn.0044eb40
push str._r_n_____________Version:
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x62
call fcn.0044eb40
add esp, 0x48
lea ecx, [esi + 0x198]
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x63
call fcn.0044eaf0
push ebx
push eax
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x64
call fcn.0044eb40
push str._r_n_____________DistCode:
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0x65
call fcn.0044eb40
lea ecx, [esi + 0x164]
push ecx
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x66
call fcn.0044eaf0
push ebx
push eax
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x67
call fcn.0044eb40
push str._r_n_____________OEM:
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x68
call fcn.0044eb40
add esp, 0x48
lea ecx, [esi + 0x508]
push ecx
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x69
call fcn.0044eaf0
push eax
mov byte [ebp - 4], 0x6a
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x69
call fcn.0044e260
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x68
call fcn.0044e260
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x67
call fcn.0044e260
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x66
call fcn.0044e260
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x65
call fcn.0044e260
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x64
call fcn.0044e260
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x63
call fcn.0044e260
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x1c]
call fcn.0044e260
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x61
call fcn.0044e260
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x60
call fcn.0044e260
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x5f
call fcn.0044e260
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x5e
call fcn.0044e260
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x42
call fcn.0044e260
push 0xa
pop ebx
push ebx
lea eax, [ebp + 0x710]
push eax
push 9
call fcn.00492053
push ebx
lea eax, [ebp + 0x6b4]
push eax
push 8
call fcn.00492053
push ebx
lea eax, [ebp + 0x6f0]
push eax
push 0
call fcn.00492053
push ebx
lea eax, [ebp + 0x364]
push eax
push 0x1e
call fcn.00492053
add esp, 0x30
push str.NOLOG_complete_version_
lea ecx, [ebp - 0x58]
call fcn.0044e280
lea ecx, [ebp + 0x710]
push ecx
push eax
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x6b
call fcn.0044eb40
mov ebx, 0x4a0998
push ebx
push eax
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0x6c
call fcn.0044eb40
lea ecx, [ebp + 0x6b4]
push ecx
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x6d
call fcn.0044eb40
push ebx
push eax
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x6e
call fcn.0044eb40
lea ecx, [ebp + 0x6f0]
push ecx
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x6f
call fcn.0044eb40
push ebx
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x70
call fcn.0044eb40
add esp, 0x48
lea ecx, [ebp + 0x364]
push ecx
push eax
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x71
call fcn.0044eb40
push eax
mov byte [ebp - 4], 0x72
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x71
call fcn.0044e260
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x70
call fcn.0044e260
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x6f
call fcn.0044e260
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x6e
call fcn.0044e260
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x6d
call fcn.0044e260
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x6c
call fcn.0044e260
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x6b
call fcn.0044e260
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x42
call fcn.0044e260
mov ebx, str.forceinstall
push ebx
lea ecx, [ebp - 0x80]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._forceinstall
mov byte [ebp - 4], 0x73
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push str.Ignore_common_setup_errors_during_development_e.g._bad_MD5_checksum
mov byte [ebp - 4], 0x74
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Ignore_common_setup_errors_during_development
mov byte [ebp - 4], 0x75
call fcn.0044e280
push 0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp + 0x6d4]
mov byte [ebp - 4], 0x73
call fcn.0040fd41
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x77
call fcn.0044e260
push str.Debug_support._Skip_miscellaneous_requirements_like_bad_or_missing_MD5__etc._so_that_stub_will_run_on_a_dev_machine_without_a_lot_of_effort.
lea ecx, [ebp - 0x34]
call fcn.0044e280
push str.Debug_support._Skip_misc_requirements_like_bad_MD5
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x78
call fcn.0044e280
push str.ForceInstall
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x79
call fcn.0044e280
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x354]
mov byte [ebp - 4], 0x7a
call fcn.0040e532
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x7c
call fcn.0044e260
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x7d
call fcn.0044e260
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x7e
call fcn.0044e260
lea ecx, [ebp - 0x58]
call fcn.0044e010
push ebx
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x7f
call fcn.0044e280
lea eax, [ebp - 0xb0]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x38], 2
call fcn.0040fc25
test eax, eax
jne 0x428cfc
push str.ForceInstall
lea ecx, [ebp - 0x50]
call fcn.0044e280
lea eax, [ebp - 0x50]
mov ebx, 0x4c3ee8
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x81
mov dword [ebp - 0x38], 6
call fcn.0040df2e
mov ecx, eax
call fcn.0040d9ba
test eax, eax
jne 0x428d01
mov byte [ebp - 0x3d], al
jmp 0x428d05
mov ebx, 0x4c3ee8
mov byte [ebp - 0x3d], 1
test byte [ebp - 0x38], 4
mov dword [ebp - 4], 0x80
je 0x428d1e
and dword [ebp - 0x38], 0xfffffffb
lea ecx, [ebp - 0x50]
call fcn.0044e260
test byte [ebp - 0x38], 2
mov dword [ebp - 4], 0x7f
je 0x428d3a
and dword [ebp - 0x38], 0xfffffffd
lea ecx, [ebp - 0xb0]
call fcn.0044e260
cmp byte [ebp - 0x3d], 0
je 0x428d4a
mov dword [esi + 0xb50], 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x7e
call fcn.0044e260
lea ecx, [ebp + 0x354]
mov byte [ebp - 4], 0x77
call fcn.0040da55
lea ecx, [ebp + 0x6d4]
mov byte [ebp - 4], 0x42
call fcn.0040dba8
lea eax, [esi + 0xbc]
push eax
lea eax, [ebp - 0x70]
push str.Config_URL_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0x82
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x42
call fcn.0044e260
push str.Specify_the_config_URL__the_locaion_of_the_config_XML._This_must_be_a_fully_specified_URL_and_overrides_the_address_set_in_the_stub_stamp_info._Example:_n_________n____________http:__server_config_en_config.xml_n_______________or_n____________file:__yellow.d.p.com_stubinstaller5.9_stubxmlconfig.xml
lea ecx, [ebp - 0x94]
call fcn.0044e280
push str.Specify_the_config_URL__the_locaion_of_the_config_XML
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x83
call fcn.0044e280
push 0x4a5c80
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x84
call fcn.0044e280
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x85
call fcn.0040e532
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x87
call fcn.0044e260
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x88
call fcn.0044e260
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x89
call fcn.0044e260
push 0x4a5c80
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x8a
call fcn.0040df2e
mov ecx, eax
call fcn.0040d9ba
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x89
call fcn.0044e260
cmp dword [ebp - 0x20], 0
je 0x428ec3
push 0x4a5c80
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x8b
call fcn.0040df2e
mov ecx, eax
call fcn.00413696
push eax
lea ecx, [esi + 0xbc]
call fcn.0044e3b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x89
call fcn.0044e260
lea eax, [esi + 0xbc]
push eax
lea eax, [ebp - 0x58]
push str.Config_URL_Override_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0x8c
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x89
call fcn.0044e260
lea eax, [esi + 0xc4]
push eax
lea eax, [ebp - 0x58]
push str.Backup_Config_URL_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0x8d
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x89
call fcn.0044e260
push str.Specify_the_backup_config_URL__the_locaion_of_the_backup_config_XML._This_must_be_a_fully_specified_URL_and_overrides_the_address_set_in_the_stub_stamp_info._Example:_n_________n____________http:__server_config_en_config.xml_n_______________or_n____________file:__yellow.d.p.com_stubinstaller5.9_stubxmlconfig.xml
lea ecx, [ebp - 0x88]
call fcn.0044e280
push str.Specify_the_backup_config_URL__the_locaion_of_the_backup_config_XML
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x8e
call fcn.0044e280
push str.BackupURL
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x8f
call fcn.0044e280
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x90
call fcn.0040e532
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x92
call fcn.0044e260
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x93
call fcn.0044e260
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x94
call fcn.0044e260
push str.BackupURL
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x95
call fcn.0040df2e
mov ecx, eax
call fcn.0040d9ba
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x94
call fcn.0044e260
cmp dword [ebp - 0x20], 0
je 0x429017
push str.BackupURL
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x96
call fcn.0040df2e
mov ecx, eax
call fcn.00413696
lea ebx, [esi + 0xc4]
push eax
mov ecx, ebx
call fcn.0044e3b0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x94
call fcn.0044e260
push ebx
lea eax, [ebp - 0x58]
push str.Backup_Config_URL_Override_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0x97
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x94
call fcn.0044e260
mov ebx, str.verifyxml
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str._verify__config_xml___detect_xml_
mov byte [ebp - 4], 0x98
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Dev_support_to_check_a_config_XML_detection_XML_pair_for_syntax_semantic_errors._It_may_be_useful_to_include__noshortcircuit_to_cause_a_more_complete_check
mov byte [ebp - 4], 0x99
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str.Check_config_XML_detection_XML_pair_syntax
mov byte [ebp - 4], 0x9a
call fcn.0044e280
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x98
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9c
call fcn.0044e260
and dword [ebp - 0x44], 0
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x9d
call fcn.0040fc3d
lea ecx, [ebp - 0x1c]
mov dword [esi + 0x14c], eax
mov byte [ebp - 4], 0x9c
call fcn.0044e260
cmp dword [esi + 0x14c], 0
je 0x42913d
lea eax, [ebp - 0x44]
push eax
lea ebx, [esi + 0xbc]
push ebx
mov ecx, edi
call fcn.0040f545
test eax, eax
je 0x429621
push 0x4a59a8
mov ecx, ebx
call fcn.0044e0f0
cmp eax, 0xffffffff
jne 0x429115
push ebx
lea eax, [ebp - 0x58]
push str.file:__
push eax
call fcn.0044eb90
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x9e
call fcn.0044e310
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x9c
call fcn.0044e260
push ebx
lea eax, [ebp - 0x58]
push str.Config_XML_URL_Cmdline_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0x9f
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x9c
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
push str.quiet
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._quiet
mov byte [ebp - 4], 0xa4
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
mov ebx, str.Turn_off_MessageBox_UI_for_INTERNAL_ASSERT_calls
push ebx
mov byte [ebp - 4], 0xa5
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0xa6
call fcn.0044e280
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xa4
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa8
call fcn.0044e260
push str.quiet
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa9
call fcn.0040fc25
neg eax
sbb eax, eax
inc eax
lea ecx, [ebp - 0x1c]
mov dword [0x4c000c], eax
mov byte [ebp - 4], 0xa8
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
cmp byte [0x4c3b33], 0xff
mov eax, edi
jne 0x429207
mov eax, dword [0x4c3b2c]
push str._add_log:
push eax
call fcn.0046f770
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x429266
mov al, byte [ebx + 9]
add ebx, 0xa
cmp al, 0x22
jne 0x429266
lea ecx, [ebp - 0x1c]
call fcn.0044e010
mov byte [ebp - 4], 0xaa
test ebx, ebx
je 0x42924b
movzx eax, byte [ebx]
test al, al
je 0x42924b
cmp al, 0x22
je 0x42924b
push eax
lea ecx, [ebp - 0x1c]
call fcn.0044e760
inc ebx
jne 0x429234
lea eax, [ebp - 0x1c]
push eax
lea ecx, [esi + 0x1a0]
call fcn.0044e310
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x94
call fcn.0044e260
push 0x4a1784
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._loc__2_char_country_code_
mov byte [ebp - 4], 0xab
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
mov ebx, str.Override_country_code
push ebx
mov byte [ebp - 4], 0xac
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0xad
call fcn.0044e280
push 4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x6d4]
mov byte [ebp - 4], 0xab
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xaf
call fcn.0044e260
push 0x4a5908
lea ecx, [ebp - 0x1c]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._region__region_code_
mov byte [ebp - 4], 0xb0
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
mov ebx, str.Override_region
push ebx
mov byte [ebp - 4], 0xb1
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0xb2
call fcn.0044e280
push 4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xb0
call fcn.0040fd41
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xb4
call fcn.0044e260
push 0x4a1784
lea ecx, [ebp - 0x48]
call fcn.0044e280
lea eax, [esi + 0x84]
push eax
lea eax, [ebp - 0x48]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb5
call fcn.0040fa0e
lea ecx, [ebp - 0x48]
mov ebx, eax
mov byte [ebp - 4], 0xb4
call fcn.0044e260
test ebx, ebx
je 0x42939e
push 0x4a5908
lea ecx, [ebp - 0x34]
call fcn.0044e280
lea eax, [esi + 0x8c]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb6
call fcn.0040fa0e
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xb4
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xaf
call fcn.0040dba8
lea ecx, [ebp + 0x6d4]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
mov ebx, str.home
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._home___org_path__
mov byte [ebp - 4], 0xb7
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Used_by_UpgradeHelper._This_specifies_the_path_where_the_stub_EXE_started_before_the_Extractor_is_called
mov byte [ebp - 4], 0xb8
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Used_by_UpgradeHelper._Specifies_path_where_the_stub_EXE_started
mov byte [ebp - 4], 0xb9
call fcn.0044e280
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xb7
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xbb
call fcn.0044e260
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea eax, [esi + 0x94]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xbc
call fcn.0040fa0e
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xbb
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
push str.location
lea ecx, [ebp - 0x48]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._location__c:_tempinstalldata_
mov byte [ebp - 4], 0xbd
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Specifies_a_flat_filespace_where_UpgradeHelper_has_placed_install_files__XML__CAB__etc._
mov byte [ebp - 4], 0xbe
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Specifies_a_flat_filespace_where_install_files_will_be_found.
mov byte [ebp - 4], 0xbf
call fcn.0044e280
push 3
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xbd
call fcn.0040fd41
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc1
call fcn.0044e260
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
mov dword [ebp - 0x20], eax
call fcn.0046ffad
pop ecx
xor eax, eax
push eax
push eax
mov ebx, 0x104
push ebx
lea ecx, [ebp + 0x240]
push ecx
push 0xffffffffffffffff
push dword [ebp - 0x20]
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp + 0x240]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0044e280
push str._location__
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc2
call fcn.0044e0f0
lea ecx, [ebp - 0x1c]
cmp eax, 0xffffffff
je 0x4296c6
add eax, 0xb
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0044ee00
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xc3
call fcn.0044e310
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xc2
call fcn.0044e260
push 0x4a0a88
lea ecx, [esi + 0xc]
call fcn.0044e0f0
cmp eax, 0xffffffff
je 0x429589
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0xc]
call fcn.0044ea30
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xc4
call fcn.0044e310
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xc2
call fcn.0044e260
lea ecx, [esi + 0xc]
call fcn.00401219
test al, al
jne 0x4295d6
push 1
push 0x5c
lea ecx, [ebp - 0x14]
call fcn.0044ed10
or dword [ebp - 0x38], 8
push 1
lea eax, [ebp - 0x58]
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xc5
call fcn.0044e9d0
or dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x14]
push ecx
push eax
mov dword [ebp - 4], 0xc6
call fcn.004012a1
pop ecx
pop ecx
mov byte [ebp - 0x3d], 1
test al, al
jne 0x4295da
mov byte [ebp - 0x3d], 0
test byte [ebp - 0x38], 0x10
mov dword [ebp - 4], 0xc5
je 0x4295f3
and dword [ebp - 0x38], 0xffffffef
lea ecx, [ebp - 0x58]
call fcn.0044e260
test byte [ebp - 0x38], 8
mov dword [ebp - 4], 0xc2
je 0x429608
lea ecx, [ebp - 0x14]
call fcn.0044e260
cmp byte [ebp - 0x3d], 0
je 0x429772
push 0x5c
lea ecx, [esi + 0xc]
call fcn.0044e760
jmp 0x429772
mov eax, str.LogDebug
cmp eax, str.NULL
je 0x4296bf
cmp eax, str.__noop
je 0x4296bf
push str.INTERNAL_ERROR:
lea ecx, [ebp - 0x2c]
call fcn.0044e280
push str._verifyxml_on_command_line_must_be_followed_by_full_config_XML_path_and_detect_XML_path
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0xa0
call fcn.0044eb40
push 0x4a0c2c
push eax
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0xa1
call fcn.0044eb40
push 0x4a099a
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0xa2
call fcn.0044eb40
push eax
mov byte [ebp - 4], 0xa3
call fcn.00404620
add esp, 0x28
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xa2
call fcn.0044e260
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa1
call fcn.0044e260
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xa0
call fcn.0044e260
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x9c
call fcn.0044e260
push 1
call fcn.0047741c
push str._location
call fcn.0044e0f0
cmp eax, 0xffffffff
je 0x429772
lea eax, [esi + 0x94]
cmp byte [eax + 7], 0xff
jne 0x4296e7
mov eax, dword [eax]
test eax, eax
je 0x4296fc
lea eax, [esi + 0x94]
push eax
lea ecx, [esi + 0xc]
call fcn.0044e310
jmp 0x429772
push ebx
lea eax, [ebp + 0x9c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp + 0x9c]
lea ebx, [esi + 0xc]
push eax
mov ecx, ebx
call fcn.0044e3b0
push ebx
lea eax, [ebp - 0x58]
push str.GetModuleFileName___
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0xc7
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xc2
call fcn.0044e260
push 0x5c
mov ecx, ebx
call fcn.0044e0c0
push eax
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
call fcn.0044ea30
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xc8
call fcn.0044e310
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xc2
call fcn.0044e260
lea ebx, [esi + 0xc]
push ebx
lea eax, [ebp - 0x58]
push str.m_strLocation_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0xc9
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xc2
call fcn.0044e260
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc1
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
mov ecx, ebx
call fcn.00401219
test al, al
jne 0x429870
push ebx
lea ebx, [esi + 0xbc]
lea eax, [ebp - 0x58]
push ebx
push eax
call fcn.004025e0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xca
call fcn.0044e310
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x94
call fcn.0044e260
push 0
lea eax, [ebp - 0x70]
push ebx
push eax
call fcn.0040bc40
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xcb
call fcn.0044e310
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea eax, [esi + 0xc]
push eax
lea ebx, [esi + 0xc4]
lea eax, [ebp - 0x68]
push ebx
push eax
call fcn.004025e0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xcc
call fcn.0044e310
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x94
call fcn.0044e260
push 0
lea eax, [ebp - 0x2c]
push ebx
push eax
call fcn.0040bc40
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xcd
call fcn.0044e310
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x94
call fcn.0044e260
push 0x4a145c
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._distcode___new_distcode__
mov byte [ebp - 4], 0xce
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
mov ebx, str.Manually_override_the_distcode
push ebx
mov byte [ebp - 4], 0xcf
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0xd0
call fcn.0044e280
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xce
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xd2
call fcn.0044e260
push 0x4a145c
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea ebx, [esi + 0x164]
push ebx
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd3
call fcn.0040fa0e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xd2
call fcn.0044e260
cmp dword [ebp - 0x20], 0
je 0x429919
mov ecx, ebx
call fcn.0044f0d0
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
mov ebx, str.dynamicdistcode
push ebx
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._dynamicdistcode___distcode__
mov byte [ebp - 4], 0xd4
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Force_override_of_the_randomly_selected_dynamic_distcode_for_test_automation
mov byte [ebp - 4], 0xd5
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push str.Force_override_of_dynamic_distcode_for_test_automation
mov byte [ebp - 4], 0xd6
call fcn.0044e280
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xd4
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xd8
call fcn.0044e260
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd9
call fcn.0040fc25
lea ebx, [esi + 0x500]
cmp byte [ebx + 7], 0xff
je 0x4299bf
mov dword [ebp - 0x44], ebx
jmp 0x4299c4
mov eax, dword [ebx]
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd8
call fcn.0044e260
cmp dword [ebp - 0x44], 0
je 0x4299dd
mov ecx, ebx
call fcn.0044f0d0
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
push 0x4a1700
lea ecx, [ebp - 0x14]
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._xml___filepath__
mov byte [ebp - 4], 0xda
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
mov ebx, str.Force_config_XML_to_be_read_from_a_local_filepath
push ebx
mov byte [ebp - 4], 0xdb
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0xdc
call fcn.0044e280
push 3
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0xda
call fcn.0040fd41
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xde
call fcn.0044e260
lea ecx, [ebp - 0x48]
call fcn.0044e010
push 0x4a1700
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xdf
call fcn.0044e280
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe0
call fcn.0040fa0e
lea ecx, [ebp - 0x1c]
mov ebx, eax
mov byte [ebp - 4], 0xdf
call fcn.0044e260
test ebx, ebx
je 0x429b1c
lea eax, [ebp - 0x48]
push eax
call fcn.00402860
lea ecx, [ebp - 0x48]
mov dword [esp], 0x4a59a8
call fcn.0044e0f0
cmp eax, 0xffffffff
jne 0x429ae3
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x58]
push str.file:__
push eax
call fcn.0044eb90
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xe1
call fcn.0044e310
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xdf
call fcn.0044e260
lea eax, [ebp - 0x48]
lea ebx, [esi + 0xbc]
push eax
mov ecx, ebx
call fcn.0044e310
push ebx
lea eax, [ebp - 0x58]
push str.Config_XML_URL_Cmdline_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0xe2
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xdf
call fcn.0044e260
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xde
call fcn.0044e260
lea ecx, [ebp + 0x348]
mov byte [ebp - 4], 0x94
call fcn.0040dba8
push str.before_GetProcessorID__
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xe3
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea eax, [ebp - 0x58]
push eax
call fcn.00402450
pop ecx
lea ecx, [esi + 0x134]
push eax
mov byte [ebp - 4], 0xe4
call fcn.0044e310
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea eax, [ebp - 0x70]
push eax
call fcn.00406752
pop ecx
lea ecx, [esi + 0x13c]
push eax
mov byte [ebp - 4], 0xe5
call fcn.0044e310
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x94
call fcn.0044e260
push 1
mov ebx, 0x4a099a
push ebx
push 0x4a0c2c
lea ecx, [esi + 0x134]
call fcn.0044f110
push 1
push ebx
push 0x4a0c2c
lea ecx, [esi + 0x13c]
call fcn.0044f110
push 1
push ebx
push 0x4a16cc
lea ecx, [esi + 0x13c]
call fcn.0044f110
lea eax, [ebp - 0x20]
push eax
call fcn.004069fd
pop ecx
mov eax, dword [eax]
lea ecx, [ebp + 0x2c8]
push 0
mov dword [ebp + 0x2c4], ecx
push eax
lea ecx, [ebp + 0x2c4]
mov byte [ebp - 4], 0xe6
call fcn.00413a8a
push dword [ebp + 0x2c4]
lea ecx, [esi + 0x1c8]
mov byte [ebp - 4], 0xe7
call fcn.0044e3b0
lea eax, [ebp + 0x2c8]
mov byte [ebp - 4], 0xe6
cmp dword [ebp + 0x2c4], eax
je 0x429c45
push dword [ebp + 0x2c4]
call fcn.004721a0
pop ecx
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x94
call fcn.004011bc
push str.Setup_GUID_stuff.
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xe8
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea ecx, [esi + 0xf4]
push ebx
call fcn.0044e3b0
lea ecx, [esi + 0xec]
push ebx
call fcn.0044e3b0
xor eax, eax
push 0x208
mov word [ebp + 0x384], ax
xor ebx, ebx
lea eax, [ebp + 0x386]
push ebx
push eax
call fcn.00470280
push 0x104
lea eax, [ebp + 0x591]
push ebx
push eax
mov byte [ebp + 0x590], bl
call fcn.00470280
add esp, 0x18
lea eax, [ebp + 0x384]
push eax
push ebx
push ebx
push 0x23
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push ebx
push ebx
push 0x105
lea eax, [ebp + 0x590]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0x384]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp + 0x590]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044e280
push str.RealRealPlayer_
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xe9
call fcn.0044e6e0
cmp byte [ebp - 0x59], 0xff
lea eax, [ebp - 0x60]
jne 0x429d28
mov eax, dword [ebp - 0x60]
push 0
push eax
call fcn.00401fd6
pop ecx
pop ecx
push str.setup_machine_GUID
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xea
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push 0
lea ebx, [esi + 0xf4]
push ebx
push ecx
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
push str.S_1_5_18
lea ecx, [ebp - 0x60]
push ecx
push eax
call fcn.0044eb40
add esp, 0xc
mov ecx, esi
call fcn.0042b178
mov dword [ebp - 0x20], eax
test eax, eax
jns 0x429de6
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x58]
push str.Failed_creating_or_reading_machine_UUID__directory_
push eax
call fcn.0044eb90
push eax
mov byte [ebp - 4], 0xeb
call fcn.00404620
add esp, 0x10
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x89
call fcn.0040da55
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x42
call fcn.0040da55
mov esi, dword [ebp - 0x20]
jmp 0x42af82
push str.systemguid
lea ecx, [ebp - 0x1c]
call fcn.0044e280
push 0x4a1028
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xec
call fcn.0044e280
push ebx
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xed
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xec
call fcn.0044e260
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push str.setup_user_GUID
lea ecx, [ebp - 0x34]
call fcn.0044e280
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xee
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
lea ecx, [ebp - 0x1c]
call fcn.0044e010
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xef
call fcn.00407360
mov ebx, eax
pop ecx
test ebx, ebx
jns 0x429ed8
push str.Failed_to_get_logged_in_users_SID.
lea ecx, [ebp - 0x14]
call fcn.0044e280
mov byte [ebp - 4], 0xf0
lea eax, [ebp - 0x14]
push eax
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xef
call fcn.0044e260
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x89
call fcn.0040da55
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x42
call fcn.0040da55
mov esi, ebx
jmp 0x42af82
push 1
lea eax, [esi + 0xec]
push eax
push ecx
push ecx
mov eax, esp
mov dword [ebp - 0x30], esp
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x60]
push ecx
push eax
call fcn.0044eaf0
add esp, 0xc
mov ecx, esi
call fcn.0042b178
mov ebx, eax
test ebx, ebx
jns 0x429f1c
push str.Failed_creating_or_reading_user_UUID.
lea ecx, [ebp - 0x14]
call fcn.0044e280
mov byte [ebp - 4], 0xf1
jmp 0x429e85
push str.userguid
lea ecx, [ebp - 0x34]
call fcn.0044e280
push 0x4a1028
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf2
call fcn.0044e280
lea eax, [esi + 0xec]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xf3
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf2
call fcn.0044e260
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xef
call fcn.0044e260
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push str.exit_GUID_code
lea ecx, [ebp - 0x50]
call fcn.0044e280
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 0xf4
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push 0
lea eax, [esi + 0x7c]
push eax
push 0x4a4260
mov ebx, 0x4a1080
push ebx
push SysReAllocString
call fcn.00403c6f
push 0
lea eax, [esi + 0x74]
push eax
push str.OrigCode
push ebx
push SysReAllocString
call fcn.00403c6f
add esp, 0x28
push str.ext_country
lea ecx, [ebp - 0x24]
call fcn.0044e280
mov ebx, str.uh_settings
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf5
call fcn.0044e280
lea eax, [esi + 0x1a8]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xf6
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf5
call fcn.0044e260
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push str.ext_stamp_country
lea ecx, [ebp - 0x48]
call fcn.0044e280
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf7
call fcn.0044e280
lea eax, [esi + 0x1a8]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xf8
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf7
call fcn.0044e260
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push str.ext_language
lea ecx, [ebp - 0x3c]
call fcn.0044e280
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf9
call fcn.0044e280
lea eax, [esi + 0x190]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xfa
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf9
call fcn.0044e260
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push str.ext_distcode
lea ecx, [ebp - 0x2c]
call fcn.0044e280
push ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xfb
call fcn.0044e280
lea ebx, [esi + 0x164]
push ebx
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xfc
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xfb
call fcn.0044e260
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
push ebx
lea ecx, [esi + 0x188]
call fcn.0044e310
and dword [esi + 0x30], 0
lea eax, [ebp + 0x6e0]
push eax
call fcn.00457600
pop ecx
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x78]
push ecx
mov ecx, eax
call fcn.004572c0
lea ecx, [ebp + 0x6e0]
mov byte [ebp - 4], 0xff
call fcn.004572b0
cmp byte [ebp - 0x71], 0xff
lea eax, [ebp - 0x78]
jne 0x42a154
mov eax, dword [ebp - 0x78]
xor ebx, ebx
push ebx
push eax
call fcn.00404320
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
call fcn.0044e010
push ebx
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], 0x100
call fcn.0044ec10
push ebx
push eax
lea eax, [ebp - 0x34]
push str._srninst_d_
push eax
call fcn.0044ee50
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x354]
mov dword [ebp - 0x38], 1
call fcn.004573e0
jmp 0x42a1f1
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xff
call fcn.0044e260
lea ecx, [ebp - 0x34]
call fcn.0044e010
push 0
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], 0x100
call fcn.0044ec10
push dword [ebp - 0x38]
push eax
lea eax, [ebp - 0x34]
push str._srninst_d_
push eax
call fcn.0044ee50
add esp, 0x10
inc dword [ebp - 0x38]
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x354]
call fcn.004573e0
lea eax, [ebp + 0x354]
push eax
mov byte [ebp - 4], 1
call fcn.00457560
mov ebx, eax
pop ecx
neg ebx
lea ecx, [ebp + 0x354]
sbb bl, bl
mov byte [ebp - 4], 0
call fcn.004572b0
inc bl
je 0x42a1a2
lea eax, [ebp - 0x34]
lea ebx, [esi + 0x54]
push eax
mov ecx, ebx
call fcn.0044e310
push str.basepath
lea ecx, [ebp - 0x14]
call fcn.0044e280
push 0x4a1028
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.0044e280
push ebx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 3
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.0044e260
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.0044e260
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xff
call fcn.0044e260
lea eax, [ebp - 0x58]
push eax
mov ecx, esi
call fcn.004184e8
cmp byte [eax + 7], 0xff
mov dword [ebp - 4], 0x104
jne 0x42a29d
mov eax, dword [eax]
push 5
push eax
call fcn.00404320
pop ecx
pop ecx
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 0xff
call fcn.0044e260
lea eax, [ebp - 0x70]
push eax
mov ecx, esi
call fcn.004112d2
cmp byte [eax + 7], 0xff
mov dword [ebp - 4], 0x105
jne 0x42a2d0
mov eax, dword [eax]
push 5
push eax
call fcn.00404320
pop ecx
pop ecx
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xff
call fcn.0044e260
xor ebx, ebx
mov dword [esi + 0x28], 1
lea ecx, [ebp - 0x2c]
cmp dword [esi + 0x1dc], ebx
je 0x42a310
push str.stubstarted_pre
call fcn.0044e280
mov dword [ebp - 4], 0x106
jmp 0x42a357
cmp dword [esi + 0x1e0], ebx
je 0x42a32b
push str.stubstarted_post
call fcn.0044e280
mov dword [ebp - 4], 0x107
jmp 0x42a357
cmp dword [esi + 0x1ec], ebx
je 0x42a346
push str.stubstarted_silent
call fcn.0044e280
mov dword [ebp - 4], 0x108
jmp 0x42a357
push str.stubstarted_standalone
call fcn.0044e280
mov dword [ebp - 4], 0x109
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043e829
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xff
call fcn.0044e260
lea eax, [ebp - 0x8c]
push eax
push 0x20219
push ebx
push str.CLSIDf414c260_6ac0_11cf_b6d1_00aa00bbbb58
push SysReAllocString
mov dword [ebp - 0x8c], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x42a51e
push dword [ebp - 0x8c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x8c], ebx
cmp dword [esi + 0x1dc], ebx
jne 0x42a66d
cmp dword [esi + 0x1ec], ebx
jne 0x42a66d
push 0x4c186c
lea ecx, [ebp - 0x38]
call fcn.00404a10
push str._progfiles_
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0x10c
call fcn.0044e280
push ebx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0xd
call fcn.0040bc40
add esp, 0xc
cmp byte [eax + 7], 0xff
mov byte [ebp - 4], 0xe
jne 0x42a408
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x38]
call fcn.00411cb6
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.0044e260
push 3
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x38]
call fcn.0041dff7
mov eax, dword [eax]
push 0x3e8
push eax
mov byte [ebp - 4], 0xf
call fcn.00408ccb
pop ecx
pop ecx
mov ecx, dword [ebp - 0x20]
test eax, eax
sets byte [ebp - 0x3d]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xd
call fcn.004011bc
cmp byte [ebp - 0x3d], 0
je 0x42a64f
lea ecx, [esi + 0x108]
push str.1000
call fcn.00406290
push 2
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x38]
call fcn.0041dff7
lea ecx, [esi + 0x104]
push eax
mov byte [ebp - 4], 0x10
call fcn.00406170
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xd
call fcn.004011bc
push esi
lea ecx, [ebp + 0x1a4]
call fcn.00411d43
push 2
push 0x463
lea ecx, [ebp + 0x1a4]
mov byte [ebp - 4], 0x11
call fcn.0041355f
push str.actionerrorvaluelow_disk_space
lea ecx, [ebp - 0x2c]
mov dword [esi + 0x14], 1
call fcn.0044e280
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x12
call dword [eax + 0x10]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.0044e260
lea ecx, [ebp + 0x1a4]
mov byte [ebp - 4], 0xd
call fcn.00411be3
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call fcn.0044e260
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
mov dword [ebp - 4], 0xff
call fcn.004011bc
jmp 0x42a60f
cmp dword [esi + 0x1ec], ebx
jne 0x42a3ae
push str.actionwarningvaluejscript_disabled
lea ecx, [ebp - 0x2c]
call fcn.0044e280
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
mov dword [ebp - 4], 0x10a
call dword [eax + 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xff
call fcn.0044e260
push str.jscript.dll
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x44], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esi + 0x50], eax
cmp eax, ebx
je 0x42a5c0
push str.DllRegisterServer
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x20], eax
cmp eax, ebx
je 0x42a5ae
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [ebp - 0x20]
test eax, eax
js 0x42a59c
mov dword [ebp - 0x44], 1
jmp 0x42a5a5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x38], eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x42a5b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x44], ebx
jne 0x42a3ae
lea ecx, [ebp - 0x34]
call fcn.0044e010
push dword [ebp - 0x38]
lea eax, [ebp - 0x34]
push str.actionerrorvaluejavascriptreturn_value_d
push eax
mov dword [ebp - 4], 0x10b
call fcn.0044ee50
mov eax, dword [esi]
add esp, 0xc
push ebx
lea ecx, [ebp - 0x34]
push ecx
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi + 0x50]
cmp eax, ebx
je 0x42a600
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esi + 0x50], ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xff
call fcn.0044e260
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x89
call fcn.0040da55
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x42
call fcn.0040da55
mov esi, 0x80004005
jmp 0x42af82
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call fcn.0044e260
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
mov dword [ebp - 4], 0xff
call fcn.004011bc
lea ecx, [esi + 0xc]
call fcn.00401219
push ebx
test al, al
jne 0x42a6cd
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x20], ebx
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
jne 0x42a692
mov dword [esi + 0x4c], 1
lea ecx, [esi + 0xbc]
call fcn.00401219
lea ecx, [ebp - 0x2c]
test al, al
je 0x42a7d1
push str.actionerrorvaluemissing_xml_url
call fcn.0044e280
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
mov dword [ebp - 4], 0x115
call dword [eax + 0x10]
lea ecx, [ebp - 0x2c]
jmp 0x42a603
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x38], ebx
jmp 0x42a71a
cmp dword [esi + 0x1ec], ebx
jne 0x42a72d
push esi
lea ecx, [ebp]
call fcn.00411d43
push 3
push 0xab
lea ecx, [ebp]
mov dword [ebp - 4], 0x113
call fcn.0041355f
cmp eax, 6
jne 0x42a76a
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 3
jge 0x42a76a
lea ecx, [ebp]
mov dword [ebp - 4], 0xff
call fcn.00411be3
push ebx
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x42a6d5
jmp 0x42a692
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xe9
call fcn.0044e260
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x89
call fcn.0040da55
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x42
call fcn.0040da55
xor esi, esi
jmp 0x42af82
cmp dword [ebp - 0x38], 3
mov dword [esi + 0x14], 1
jl 0x42a7bd
push str.actionerrorvaluestub_update_failure
lea ecx, [ebp - 0x2c]
call fcn.0044e280
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x14
call dword [eax + 0x10]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
call fcn.0044e260
push 1
mov ecx, esi
call fcn.0041e925
lea ecx, [ebp]
mov dword [ebp - 4], 0xff
call fcn.00411be3
jmp 0x42a60f
lea ecx, [ebp]
mov dword [ebp - 4], 0xff
call fcn.00411be3
jmp 0x42a72d
push str.testexit1
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push str._testexit1
mov dword [ebp - 4], 0x116
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
mov ebx, str.Used_by_the_unit_tests_to_have_CMaster_exit_early
push ebx
mov byte [ebp - 4], 0x17
call fcn.0044e280
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20], esp
push ebx
mov byte [ebp - 4], 0x18
call fcn.0044e280
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0x698]
mov byte [ebp - 4], 0x16
call fcn.0040fd41
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1a
call fcn.0044e260
push str.testexit1
lea ecx, [ebp - 0x3c]
call fcn.0044e280
lea eax, [ebp - 0x3c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x1b
call fcn.0040fc25
lea ecx, [ebp - 0x3c]
mov ebx, eax
mov byte [ebp - 4], 0x1a
call fcn.0044e260
lea ecx, [ebp + 0x698]
mov dword [ebp - 4], 0xff
call fcn.0040dba8
test ebx, ebx
jne 0x42a72d
lea ecx, [esi + 0xdc]
call fcn.00401219
test al, al
je 0x42abf6
push 0x4a099a
lea ecx, [ebp - 0x50]
call fcn.0044e280
push str.2.0.50727
lea ecx, [ebp + 0x35c]
mov dword [ebp - 4], 0x11c
call fcn.0044e280
push 0x4a528c
lea ecx, [ebp + 0x364]
mov byte [ebp - 4], 0x1d
call fcn.0044e280
push 0x4a5288
lea ecx, [ebp + 0x36c]
mov byte [ebp - 4], 0x1e
call fcn.0044e280
push 0x4a0b44
lea ecx, [ebp + 0x374]
mov byte [ebp - 4], 0x1f
call fcn.0044e280
push 0x4a5284
lea ecx, [ebp + 0x37c]
mov byte [ebp - 4], 0x20
call fcn.0044e280
lea eax, [ebp + 0x35c]
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], 5
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push dword [ebp - 0x38]
call fcn.0044e1c0
call fcn.00403fe4
pop ecx
pop ecx
cmp eax, ebx
je 0x42a958
lea ecx, [ebp - 0x50]
call fcn.00401219
test al, al
jne 0x42a94d
push 0x4a31b0
lea ecx, [ebp - 0x50]
call fcn.0044e6e0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x50]
call fcn.0044e7c0
add dword [ebp - 0x38], 8
dec dword [ebp - 0x20]
jne 0x42a91a
lea ecx, [ebp - 0x50]
call fcn.00401219
test al, al
je 0x42a97a
push str.none
lea ecx, [ebp - 0x50]
call fcn.0044e3b0
push str.normal
lea ecx, [ebp - 0x34]
call fcn.0044e280
push str.uh_pre
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x22
call fcn.0044e280
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x23
call fcn.0040fc25
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x22
call fcn.0044e260
cmp dword [ebp - 0x20], ebx
je 0x42a9c2
push str.prestub
jmp 0x42aa2c
push str.pageflownum
lea ecx, [ebp - 0x2c]
call fcn.0044e280
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x24
call fcn.0040fc25
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x22
call fcn.0044e260
cmp dword [ebp - 0x20], ebx
je 0x42a9f9
push str.poststub
jmp 0x42aa2c
push str.silent
lea ecx, [ebp - 0x2c]
call fcn.0044e280
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x25
call fcn.0040fc25
lea ecx, [ebp - 0x2c]
mov edi, eax
mov byte [ebp - 4], 0x22
call fcn.0044e260
cmp edi, ebx
je 0x42aa34
push str.silent
lea ecx, [ebp - 0x34]
call fcn.0044e3b0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x724]
push str.actioninstallerstartedvalue
push eax
call fcn.0044eb90
push str.procid
push eax
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x26
call fcn.0044eb40
lea ecx, [esi + 0x134]
push ecx
push eax
lea eax, [ebp - 0x130]
push eax
mov byte [ebp - 4], 0x27
call fcn.0044eaf0
push str.gpuid
push eax
lea eax, [ebp - 0x140]
push eax
mov byte [ebp - 4], 0x28
call fcn.0044eb40
lea ecx, [esi + 0x13c]
push ecx
push eax
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 0x29
call fcn.0044eaf0
push str.dotnetver
push eax
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x2a
call fcn.0044eb40
add esp, 0x48
lea ecx, [ebp - 0x50]
push ecx
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x2b
call fcn.0044eaf0
push str.exename
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x2c
call fcn.0044eb40
lea ecx, [esi + 0x1d4]
push ecx
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x2d
call fcn.0044eaf0
push str.webuserid
push eax
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x2e
call fcn.0044eb40
lea ecx, [esi + 0x174]
push ecx
push eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x2f
push eax
call fcn.0044eaf0
add esp, 0x3c
mov edx, dword [esi]
push ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x30
call dword [edx + 0x10]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2f
call fcn.0044e260
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2e
call fcn.0044e260
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x2d
call fcn.0044e260
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.0044e260
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x2b
call fcn.0044e260
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x2a
call fcn.0044e260
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x29
call fcn.0044e260
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x28
call fcn.0044e260
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x27
call fcn.0044e260
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x26
call fcn.0044e260
lea ecx, [ebp + 0x724]
mov byte [ebp - 4], 0x22
call fcn.0044e260
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x21
call fcn.0044e260
push fcn.0044e260
push 5
push 8
lea eax, [ebp + 0x35c]
push eax
mov byte [ebp - 4], 0x1c
call fcn.004729ec
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0xff
call fcn.0044e260
jmp 0x42abf8
xor ebx, ebx
mov ecx, esi
call fcn.0041ece4
mov edi, eax
cmp dword [esi + 0x14c], ebx
je 0x42ac76
cmp edi, ebx
jl 0x42ac51
cmp dword [0x4c000c], ebx
je 0x42ac40
lea ecx, [ebp - 0x2c]
call fcn.0044e010
push str.Verify_XMLs
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0x131
call fcn.0044e3b0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xff
call fcn.0044e260
push str.No_XML_errors_detected
call fcn.004755ad
pop ecx
push ebx
jmp 0x4296c1
push str.An_XML_error_was_detected
call fcn.004755ad
cmp byte [0x4c3217], 0xff
pop ecx
mov eax, 0x4c3210
jne 0x42ac6f
mov eax, dword [0x4c3210]
push eax
call fcn.004755ad
pop ecx
cmp edi, ebx
jl 0x42a60f
cmp dword [esi + 0x14c], ebx
jne 0x42af3c
cmp dword [esi + 0x1ec], ebx
je 0x42ae45
lea eax, [esi + 0x190]
push eax
push 0x4a51f8
call fcn.00418410
pop ecx
pop ecx
test al, al
je 0x42ad91
call fcn.004044f3
cmp eax, 0x40
jne 0x42ad91
lea edi, [esi + 0x1a8]
push edi
push 0x4a51f4
call fcn.00418410
pop ecx
pop ecx
test al, al
jne 0x42ad35
push edi
push 0x4a51f0
call fcn.00418410
pop ecx
pop ecx
test al, al
jne 0x42ad35
push edi
push 0x4a51ec
call fcn.00418410
pop ecx
pop ecx
test al, al
jne 0x42ad35
push edi
push 0x4a51e8
call fcn.00418410
pop ecx
pop ecx
test al, al
je 0x42ad91
lea edi, [esi + 0x1c0]
push edi
push str.illinois
call fcn.0041842e
pop ecx
pop ecx
test al, al
je 0x42ad91
push edi
push 0x4a51d8
call fcn.0041842e
pop ecx
pop ecx
test al, al
je 0x42ad91
push str.People_Search__safrscan.spc__SAFRSCAN__TRUE
lea ecx, [ebp - 0x1c]
call fcn.0044e280
push str.Option1_Win32
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0x132
call fcn.0044e280
push 0x4a1028
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x34
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.0044e260
mov byte [ebp - 4], 0x32
jmp 0x42adeb
push str.People_Search__safrscan.spc__SAFRSCAN__FALSE
lea ecx, [ebp - 0x1c]
call fcn.0044e280
push str.Option1_Win32
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0x135
call fcn.0044e280
push 0x4a1028
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.0044e280
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x37
call fcn.0040b6b0
add esp, 0xc
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.0044e260
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x14]
call fcn.0044e260
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xff
call fcn.0044e260
push str.actionpreEula
lea ecx, [ebp - 0x2c]
call fcn.0044e280
mov eax, dword [esi]
push 8
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
mov dword [ebp - 4], 0x138
call dword [eax + 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xff
call fcn.0044e260
mov ecx, esi
call fcn.0041f5fc
mov ecx, esi
call fcn.00425616
jmp 0x42af3c
cmp dword [esi + 0x1dc], ebx
jne 0x42ae71
lea eax, [ebp - 0x20]
push eax
push ebx
push esi
push 0x4208bc
push ebx
push ebx
mov dword [ebp - 0x20], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x700], eax
cmp eax, ebx
je 0x42a60f
cmp dword [esi + 0x1e0], ebx
je 0x42aea1
lea edi, [esi + 0x1e4]
mov ecx, edi
call fcn.00401219
test al, al
jne 0x42aea1
cmp byte [edi + 7], 0xff
jne 0x42ae92
mov edi, dword [edi]
push edi
call fcn.004727e5
pop ecx
mov dword [esi + 0x67c], eax
jmp 0x42aeab
mov dword [esi + 0x67c], 1
push str.actionpreEula
lea ecx, [ebp - 0x2c]
call fcn.0044e280
mov eax, dword [esi]
push 8
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
mov dword [ebp - 4], 0x139
call dword [eax + 0x10]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xff
call fcn.0044e260
push str.NOLOG:_about_to_call_ShowCurrentPage__
lea ecx, [ebp - 0x14]
call fcn.0044e280
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 4], 0x13a
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0xff
call fcn.0044e260
mov ecx, esi
call fcn.004278d1
push str.NOLOG:_after_ShowCurrentPage__
lea ecx, [ebp - 0x68]
call fcn.0044e280
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 4], 0x13b
call fcn.00404620
pop ecx
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0xff
call fcn.0044e260
mov esi, dword [esi + 0x6b4]
neg esi
sbb esi, esi
lea ecx, [ebp - 0x78]
and esi, 0x8880
mov byte [ebp - 4], 0xe9
call fcn.0044e260
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x94
call fcn.0044e260
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x89
call fcn.0040da55
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x42
call fcn.0040da55
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x2f
call fcn.0040dba8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.0040dba8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x730]
xor ecx, ebp
call fcn.00470483
add ebp, 0x734
leave
ret