Function at 0x4034c0
Capabilities:
Create process on windows
Get common file path
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46118d
mov eax, dword fs:[0]
push eax
sub esp, 0x4ec
mov eax, dword [0x4780c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
xorps xmm0, xmm0
movups xmmword [ebp - 0x278], xmm0
mov dword [ebp - 0x470], esi
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
mov dword [ebp - 4], 0
movups xmmword [ebp - 0x290], xmm0
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
push 0xb0
lea eax, [ebp - 0x3e8]
mov byte [ebp - 4], 2
push 0
push eax
call fcn.0043bf20
add esp, 8
lea ecx, [ebp - 0x3e8]
call fcn.00406170
mov eax, 1
mov byte [ebp - 4], 3
mov dword [ebp - 0x4b4], eax
cmp dword [ebp + 8], eax
jle 0x403a86
mov dword [ebp - 0x4d8], str._log
nop dword [eax]
mov edx, dword [esi + eax*4]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x250], 0
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x24c], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4035d6
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x260]
call fcn.004019e0
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 4
call fcn.0040c580
cmp dword [ebp - 0x24c], 0xf
lea ecx, [ebp - 0x260]
mov edi, dword [ebp - 0x260]
mov eax, dword [ebp - 0x250]
seta dl
cmova ecx, edi
mov byte [ebp - 0x4ad], dl
cmp eax, 4
jb 0x4037c8
mov esi, 4
mov edx, str._log
sub esi, esi
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40364b
add ecx, 4
add edx, 4
sub esi, 4
jae 0x403635
cmp esi, 0xfffffffc
je 0x40367f
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x403678
cmp esi, 0xfffffffd
je 0x40367f
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x403678
cmp esi, 0xfffffffe
je 0x40367f
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x403678
cmp esi, 0xffffffff
je 0x40367f
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40367f
sbb eax, eax
or eax, 1
jmp 0x403681
xor eax, eax
test eax, eax
sete al
test al, al
mov eax, dword [ebp - 0x250]
je 0x4037c2
mov dword [ebp - 0x4bc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x4b8], 0
movups xmmword [ebp - 0x4cc], xmm0
cmp eax, 5
jb 0x404fe1
add eax, 0xfffffffb
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x4ad], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 5
lea ecx, [ebp - 0x4cc]
push eax
call fcn.004019e0
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x403721
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403717
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fdc
push ecx
push edx
call fcn.0043a836
add esp, 8
movups xmm1, xmmword [ebp - 0x4cc]
cmp dword [ebp - 0x4b8], 0xf
lea ecx, [ebp - 0x2a8]
movq xmm0, qword [ebp - 0x4bc]
movd eax, xmm1
movups xmmword [ebp - 0x2a8], xmm1
cmova ecx, eax
movq qword [ebp - 0x298], xmm0
sub esp, 8
push ecx
lea ecx, [ebp - 0x3e4]
call fcn.00408630
test eax, eax
lea ecx, [ebp - 0x3e8]
mov eax, dword [ebp - 0x3e8]
je 0x403784
add ecx, dword [eax + 4]
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x403799
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.00402ab0
cmp dword [ebp - 0x398], 0
jne 0x403a2a
mov edx, str.Unable_to_open_log_file_n
mov ecx, 0x479408
call fcn.00408f60
jmp 0x403a2a
mov dl, byte [ebp - 0x4ad]
test dl, dl
lea ecx, [ebp - 0x260]
mov esi, 0xc
mov edx, str._utmContent
cmovne ecx, edi
cmp eax, esi
jb 0x4038f7
sub esi, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4037fe
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4037e8
cmp esi, 0xfffffffc
je 0x403832
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x40382b
cmp esi, 0xfffffffd
je 0x403832
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x40382b
cmp esi, 0xfffffffe
je 0x403832
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x40382b
cmp esi, 0xffffffff
je 0x403832
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x403832
sbb eax, eax
or eax, 1
jmp 0x403834
xor eax, eax
test eax, eax
sete al
test al, al
mov eax, dword [ebp - 0x250]
je 0x4038f7
mov dword [ebp - 0x4bc], 0
xorps xmm0, xmm0
mov dword [ebp - 0x4b8], 0
movups xmmword [ebp - 0x4cc], xmm0
cmp eax, 0xc
jb 0x404fe1
add eax, 0xfffffff4
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x4ad], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 0xc
lea ecx, [ebp - 0x4cc]
push eax
call fcn.004019e0
mov ecx, dword [ebp - 0x264]
cmp ecx, 0xf
jbe 0x4038d4
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4038ca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fdc
push ecx
push edx
call fcn.0043a836
add esp, 8
movups xmm0, xmmword [ebp - 0x4cc]
movups xmmword [ebp - 0x278], xmm0
movq xmm0, qword [ebp - 0x4bc]
movq qword [ebp - 0x268], xmm0
jmp 0x403a2a
cmp byte [ebp - 0x4ad], 0
lea ecx, [ebp - 0x260]
mov esi, 6
mov edx, str._uuid
cmovne ecx, edi
cmp eax, esi
jb 0x403a30
sub esi, 4
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x403936
add ecx, 4
add edx, 4
sub esi, 4
jae 0x403920
cmp esi, 0xfffffffc
je 0x40396a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x403963
cmp esi, 0xfffffffd
je 0x40396a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x403963
cmp esi, 0xfffffffe
je 0x40396a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x403963
cmp esi, 0xffffffff
je 0x40396a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x40396a
sbb eax, eax
or eax, 1
jmp 0x40396c
xor eax, eax
test eax, eax
sete al
test al, al
je 0x403a30
mov eax, dword [ebp - 0x250]
xorps xmm0, xmm0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 0
movups xmmword [ebp - 0x4cc], xmm0
cmp eax, 6
jb 0x404fe1
add eax, 0xfffffffa
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp byte [ebp - 0x4ad], 0
lea eax, [ebp - 0x260]
cmovne eax, edi
push ecx
add eax, 6
lea ecx, [ebp - 0x4cc]
push eax
call fcn.004019e0
mov ecx, dword [ebp - 0x27c]
cmp ecx, 0xf
jbe 0x403a0c
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403a02
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fdc
push ecx
push edx
call fcn.0043a836
add esp, 8
movups xmm0, xmmword [ebp - 0x4cc]
movups xmmword [ebp - 0x290], xmm0
movq xmm0, qword [ebp - 0x4bc]
movq qword [ebp - 0x280], xmm0
mov edi, dword [ebp - 0x260]
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x24c]
cmp eax, 0xf
jbe 0x403a6a
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x403a60
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fdc
push ecx
push edi
call fcn.0043a836
add esp, 8
mov eax, dword [ebp - 0x4b4]
mov esi, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x4b4], eax
cmp eax, dword [ebp + 8]
jl 0x4035b0
mov edx, str.Starting_OperaInstaller_n
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
push eax
call fcn.00409210
mov edx, dword [esi]
add esp, 4
xorps xmm0, xmm0
test edx, edx
je 0x403b3e
mov ecx, edx
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403ac3
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.004019e0
push ecx
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c0]
call fcn.0040c6a0
mov byte [ebp - 4], 3
add esp, 4
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x403b24
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403b1a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fdc
push ecx
push edx
call fcn.0043a836
add esp, 8
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jmp 0x403b63
mov eax, 7
mov dword [ebp - 0x2b0], 0
xor ecx, ecx
mov dword [ebp - 0x2ac], eax
movups xmmword [ebp - 0x2c0], xmm0
mov word [ebp - 0x2c0], cx
cmp eax, 7
mov byte [ebp - 4], 6
lea edx, [ebp - 0x2c0]
cmova edx, dword [ebp - 0x2c0]
lea ecx, [ebp - 0x2f0]
call fcn.00401360
lea edx, [ebp - 0x2f0]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x320]
call fcn.004016b0
mov edx, str.ID_data_string:__
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [ebp - 0x2dc], 0xf
lea edx, [ebp - 0x2f0]
push dword [ebp - 0x2e0]
cmova edx, dword [ebp - 0x2f0]
mov ecx, eax
call fcn.0040b100
add esp, 4
mov edx, 0x473250
mov ecx, eax
call fcn.00408f60
cmp dword [ebp - 0x310], 0
je 0x403bed
cmp dword [ebp - 0x2f8], 0
jne 0x403bfd
mov edx, str.Failed_to_parse_certificate_data_n
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x4b4], eax
mov esi, dword [eax]
mov eax, dword [0x47a228]
cmp eax, dword [esi + 4]
jle 0x403c45
push 0x47a228
call fcn.0043a8e8
add esp, 4
cmp dword [0x47a228], 0xffffffff
jne 0x403c45
push 0x462120
call fcn.0043ab88
push 0x47a228
call fcn.0043a897
add esp, 8
mov eax, dword [0x47a254]
cmp eax, dword [esi + 4]
jle 0x403cb6
push 0x47a254
call fcn.0043a8e8
add esp, 4
cmp dword [0x47a254], 0xffffffff
jne 0x403cb6
mov byte [ebp - 4], 9
xorps xmm0, xmm0
push 0x24
push str.00000000_0000_0000_0000_000000000000
mov ecx, 0x47a2d4
mov dword [0x47a2e4], 0
movups xmmword [0x47a2d4], xmm0
mov dword [0x47a2e8], 0
call fcn.004019e0
push 0x4620c0
call fcn.0043ab88
push 0x47a254
mov byte [ebp - 4], 8
call fcn.0043a897
add esp, 8
cmp dword [ebp - 0x268], 0
jne 0x403d66
cmp dword [ebp - 0x310], 0
lea ecx, [ebp - 0x278]
jne 0x403d0c
cmp dword [0x478b84], 0xf
mov eax, str.0000000
push dword [0x478b80]
cmova eax, dword [str.0000000]
push eax
call fcn.00407de0
mov edx, str.No_content_ID_in_certificate_data__using_default_ID.
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
push eax
call fcn.00409210
add esp, 4
jmp 0x403d66
cmp dword [ebp - 0x30c], 0xf
lea eax, [ebp - 0x320]
push dword [ebp - 0x310]
cmova eax, dword [ebp - 0x320]
push eax
call fcn.00407de0
mov edx, str.Using_content_ID_from_certificate_data__
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [ebp - 0x30c], 0xf
lea edx, [ebp - 0x320]
push dword [ebp - 0x310]
cmova edx, dword [ebp - 0x320]
mov ecx, eax
call fcn.0040b100
push eax
call fcn.00409210
add esp, 8
cmp dword [ebp - 0x280], 0
jne 0x403e16
cmp dword [ebp - 0x2f8], 0
lea ecx, [ebp - 0x290]
jne 0x403dbc
cmp dword [0x47a2e8], 0xf
mov eax, 0x47a2d4
push dword [0x47a2e4]
cmova eax, dword [0x47a2d4]
push eax
call fcn.00407de0
mov edx, str.No_UUID_in_certificate_data__using_default_UUID.
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
push eax
call fcn.00409210
add esp, 4
jmp 0x403e16
cmp dword [ebp - 0x2f4], 0xf
lea eax, [ebp - 0x308]
push dword [ebp - 0x2f8]
cmova eax, dword [ebp - 0x308]
push eax
call fcn.00407de0
mov edx, str.Using_UUID_from_certificate_data__
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [ebp - 0x2f4], 0xf
lea edx, [ebp - 0x308]
push dword [ebp - 0x2f8]
cmova edx, dword [ebp - 0x308]
mov ecx, eax
call fcn.0040b100
push eax
call fcn.00409210
add esp, 8
mov eax, dword [0x47a2a0]
cmp eax, dword [esi + 4]
jle 0x403e50
push 0x47a2a0
call fcn.0043a8e8
add esp, 4
cmp dword [0x47a2a0], 0xffffffff
jne 0x403e50
push 0x462060
call fcn.0043ab88
push 0x47a2a0
call fcn.0043a897
add esp, 8
mov edx, str.Using_following_parameters:_n
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
mov edx, str.UTM_campaign_ID:__
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [0x478b9c], 0xf
mov edx, str.1001
push dword [0x478b98]
cmova edx, dword [str.1001]
mov ecx, eax
call fcn.0040b100
mov edx, 0x473250
mov ecx, eax
call fcn.00408f60
mov edx, str.UTM_content_ID:__
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [ebp - 0x264], 0xf
lea edx, [ebp - 0x278]
push dword [ebp - 0x268]
cmova edx, dword [ebp - 0x278]
mov ecx, eax
call fcn.0040b100
mov edx, 0x473250
mov ecx, eax
call fcn.00408f60
mov edx, str.UUID:
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [ebp - 0x27c], 0xf
lea edx, [ebp - 0x290]
push dword [ebp - 0x280]
cmova edx, dword [ebp - 0x290]
mov ecx, eax
call fcn.0040b100
add esp, 0xc
mov edx, 0x473250
mov ecx, eax
call fcn.00408f60
xorps xmm0, xmm0
mov dword [ebp - 0x238], 0
xor eax, eax
mov dword [ebp - 0x234], 7
movups xmmword [ebp - 0x248], xmm0
mov word [ebp - 0x248], ax
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0xa
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, 0x104
jbe 0x403fba
mov eax, dword [ebp - 0x234]
cmp eax, 8
jb 0x403f9d
cmp eax, 7
mov dword [ebp - 0x238], 8
push 0x10
lea esi, [ebp - 0x248]
cmova esi, dword [ebp - 0x248]
push 0x473630
push esi
call fcn.0043c080
add esp, 0xc
xor eax, eax
mov word [esi + 0x10], ax
jmp 0x40403b
push 0x473630
push dword [ebp - 0x4d4]
lea ecx, [ebp - 0x248]
push 8
call fcn.0040c070
jmp 0x40403b
test eax, eax
je 0x403f5d
lea ecx, [ebp - 0x230]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403fc7
mov eax, dword [ebp - 0x234]
sub ecx, edx
sar ecx, 1
cmp ecx, eax
ja 0x404012
cmp eax, 7
mov dword [ebp - 0x238], ecx
lea esi, [ecx + ecx]
push esi
lea eax, [ebp - 0x230]
lea edi, [ebp - 0x248]
cmova edi, dword [ebp - 0x248]
push eax
push edi
call fcn.0043c080
add esp, 0xc
xor eax, eax
mov word [esi + edi], ax
jmp 0x40402b
lea eax, [ebp - 0x230]
push eax
push dword [ebp - 0x4d4]
push ecx
lea ecx, [ebp - 0x248]
call fcn.0040c070
push str.OperaSetup.exe
lea ecx, [ebp - 0x248]
call fcn.0040c7b0
cmp dword [ebp - 0x234], 7
lea eax, [ebp - 0x248]
push 0
cmova eax, dword [ebp - 0x248]
push 0x8000080
push 4
push 0
push 1
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4dc], eax
cmp eax, 0xffffffff
jne 0x404146
mov edx, str.Failed_to_create_file
mov ecx, 0x4794f0
call fcn.004092b0
cmp dword [ebp - 0x234], 7
lea edx, [ebp - 0x248]
push dword [ebp - 0x238]
cmova edx, dword [ebp - 0x248]
mov ecx, eax
call fcn.0040b360
add esp, 4
mov edx, str.__error_code
mov ecx, eax
call fcn.004092b0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x4cc]
call fcn.00408c10
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x4cc]
cmp dword [ebp - 0x4b8], 7
mov ecx, esi
push dword [ebp - 0x4bc]
cmova edx, dword [ebp - 0x4cc]
call fcn.0040b360
add esp, 4
mov ecx, eax
call fcn.00409550
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 7
jbe 0x40413e
mov edx, dword [ebp - 0x4cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404134
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fe6
push ecx
push edx
call fcn.0043a836
add esp, 8
or esi, 0xffffffff
jmp 0x404d43
call fcn.0040cb40
mov edi, eax
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x4d4], edi
call fcn.0040b660
mov edx, dword [ebp - 0x4b4]
mov byte [ebp - 4], 0xc
mov ecx, dword [0x47a21c]
mov esi, dword [edx]
cmp ecx, dword [esi + 4]
jle 0x404254
push 0x47a21c
call fcn.0043a8e8
add esp, 4
cmp dword [0x47a21c], 0xffffffff
jne 0x404254
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x4cc]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4bc], 0
push 0x473131
movups xmmword [ebp - 0x4cc], xmm0
mov dword [ebp - 0x4b8], 0
call fcn.004019e0
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x338]
mov ecx, 0x47a270
push eax
lea eax, [ebp - 0x290]
push 0x478bc0
push eax
lea edx, [ebp - 0x278]
call fcn.00402d80
mov byte [ebp - 4], 0xd
add esp, 0x10
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0xf
jbe 0x404239
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40422f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fff
push ecx
push edx
call fcn.0043a836
add esp, 8
push 0x462000
call fcn.0043ab88
push 0x47a21c
mov byte [ebp - 4], 0xc
call fcn.0043a897
add esp, 8
push 0
push 0x51
push edi
call fcn.0040f970
push 0
push 0x40
push edi
call fcn.0040f970
push 0
push 0x2751
push edi
call fcn.0040f970
push 1
push 0x34
push edi
call fcn.0040f970
push 5
push 0x44
push edi
call fcn.0040f970
push 7
push 0xa1
push edi
call fcn.0040f970
add esp, 0x48
push 0x402d70
push 0x4e2b
push edi
call fcn.0040f970
cmp dword [0x47a284], 0xf
mov eax, 0x47a270
cmova eax, dword [0x47a270]
push eax
push 0x2712
push edi
call fcn.0040f970
mov edx, str.Sending_start_request:
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [0x47a284], 0xf
mov edx, 0x47a270
push dword [0x47a280]
cmova edx, dword [0x47a270]
mov ecx, eax
call fcn.0040b100
mov ecx, eax
call fcn.00409810
push edi
call fcn.0040cb80
mov eax, dword [0x47a2d0]
add esp, 0x20
cmp eax, dword [esi + 4]
jle 0x40457e
push 0x47a2d0
call fcn.0043a8e8
add esp, 4
cmp dword [0x47a2d0], 0xffffffff
jne 0x40457e
mov byte [ebp - 4], 0xf
mov eax, closesocket
mov ecx, dword [0x478b98]
sub eax, ecx
cmp eax, 0x52
jb 0x404feb
cmp dword [0x478b9c], 0xf
mov eax, str.1001
push ecx
cmova eax, dword [str.1001]
push eax
push 0x52
push str.https:__net.geo.opera.com_opera_stable_utm_mediumapbutm_sourceOFTutm_campaign
push ecx
push dword [ebp - 0x4d4]
lea ecx, [ebp - 0x4cc]
call fcn.00406780
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x4b8]
mov eax, edx
mov ecx, dword [ebp - 0x4bc]
sub eax, ecx
push 0xd
push str.utm_content
cmp eax, 0xd
jb 0x4043cb
cmp edx, 0xf
lea esi, [ebp - 0x4cc]
lea eax, [ecx + 0xd]
cmova esi, dword [ebp - 0x4cc]
add esi, ecx
mov dword [ebp - 0x4bc], eax
push esi
call fcn.0043c080
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x4cc]
jmp 0x4043de
push dword [ebp - 0x4d4]
lea ecx, [ebp - 0x4cc]
push 0xd
call fcn.0040a640
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
lea edx, [ebp - 0x278]
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x264], 0xf
mov ecx, dword [ebp - 0x268]
cmova edx, dword [ebp - 0x278]
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
sub eax, esi
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x470], esi
push ecx
push edx
cmp ecx, eax
ja 0x404486
cmp dword [ebp - 0x14], 0xf
lea eax, [ecx + esi]
mov dword [ebp - 0x18], eax
lea esi, [ebp - 0x28]
cmova esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x470]
add eax, esi
push eax
call fcn.0043c080
mov eax, dword [ebp - 0x4d0]
add esp, 0xc
mov ecx, dword [ebp - 0x470]
add eax, esi
mov byte [eax + ecx], 0
lea eax, [ebp - 0x28]
jmp 0x404495
push dword [ebp - 0x4d4]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0040a640
mov dword [0x47a248], 0
xorps xmm0, xmm0
movups xmmword [0x47a238], xmm0
mov dword [0x47a24c], 0
movups xmm0, xmmword [eax]
movups xmmword [0x47a238], xmm0
movq xmm0, qword [eax + 0x10]
mov byte [ebp - 4], 0x10
movq qword [0x47a248], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x404513
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404509
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ff0
push ecx
push edx
call fcn.0043a836
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, 0xf
jbe 0x404563
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404559
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ff0
push ecx
push edx
call fcn.0043a836
add esp, 8
push 0x461fa0
call fcn.0043ab88
push 0x47a2d0
mov byte [ebp - 4], 0xc
call fcn.0043a897
add esp, 8
mov edx, str.Downloading_URL:
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [0x47a24c], 0xf
mov edx, 0x47a238
push dword [0x47a248]
cmova edx, dword [0x47a238]
mov ecx, eax
call fcn.0040b100
mov ecx, eax
call fcn.00409810
cmp dword [0x47a24c], 0xf
mov eax, 0x47a238
cmova eax, dword [0x47a238]
push eax
push 0x2712
push edi
call fcn.0040f970
mov esi, dword [ebp - 0x4dc]
push esi
push 0x2711
push edi
call fcn.0040f970
push 0x402d20
push 0x4e2b
push edi
call fcn.0040f970
push edi
call fcn.0040cb80
add esp, 0x2c
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
lea ecx, [ebp - 0x3e8]
mov edx, str.Downloaded_Opera_file_size:
mov dword [ebp - 0x470], esi
call fcn.00408f60
mov ecx, esi
mov dword [ebp - 0x4e0], eax
lea edi, [ebp - 0x13]
mov dword [ebp - 0x4d0], ecx
mov eax, 0xcccccccd
dec edi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x4d0]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [ebp - 0x4d0], eax
test eax, eax
jne 0x404631
push ecx
lea eax, [ebp - 0x13]
push eax
push edi
lea ecx, [ebp - 0x4cc]
call fcn.0040afe0
mov ecx, dword [ebp - 0x4e0]
lea edx, [ebp - 0x4cc]
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x4b8], 0xf
push dword [ebp - 0x4bc]
cmova edx, dword [ebp - 0x4cc]
call fcn.0040b100
add esp, 4
mov ecx, eax
call fcn.00409810
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0xf
jbe 0x4046e2
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4046d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ff5
push ecx
push edx
call fcn.0043a836
add esp, 8
mov eax, dword [ebp - 0x4b4]
mov ecx, dword [eax]
mov eax, dword [0x47a250]
cmp eax, dword [ecx + 4]
jle 0x404858
push 0x47a250
call fcn.0043a8e8
add esp, 4
cmp dword [0x47a250], 0xffffffff
jne 0x404858
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x4cc]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4bc], 0
push 0x473131
movups xmmword [ebp - 0x4cc], xmm0
mov dword [ebp - 0x4b8], 0
call fcn.004019e0
mov byte [ebp - 4], 0x14
lea edi, [ebp - 0x13]
mov eax, 0xcccccccd
dec edi
mul esi
shr edx, 3
mov al, dl
mov esi, edx
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x470]
add cl, cl
sub al, cl
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [ebp - 0x470], eax
test eax, eax
jne 0x404750
push ecx
lea eax, [ebp - 0x13]
push eax
push edi
lea ecx, [ebp - 0x4f8]
call fcn.0040afe0
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x4f8]
mov ecx, 0x47a288
push eax
lea eax, [ebp - 0x290]
push 0x478bd8
push eax
lea edx, [ebp - 0x278]
call fcn.00402d80
mov byte [ebp - 4], 0x14
add esp, 0x10
mov ecx, dword [ebp - 0x4e4]
cmp ecx, 0xf
jbe 0x4047ff
mov edx, dword [ebp - 0x4f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4047f5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fff
push ecx
push edx
call fcn.0043a836
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0xf
jbe 0x40483d
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404833
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fff
push ecx
push edx
call fcn.0043a836
add esp, 8
push 0x461f40
call fcn.0043ab88
push 0x47a250
mov byte [ebp - 4], 0xc
call fcn.0043a897
add esp, 8
mov edi, dword [ebp - 0x4d4]
push 0x402d70
push 0x4e2b
push edi
call fcn.0040f970
cmp dword [0x47a29c], 0xf
mov eax, 0x47a288
cmova eax, dword [0x47a288]
push eax
push 0x2712
push edi
call fcn.0040f970
mov edx, str.Sending_downloaded_request:
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [0x47a29c], 0xf
mov edx, 0x47a288
push dword [0x47a298]
cmova edx, dword [0x47a288]
mov ecx, eax
call fcn.0040b100
mov ecx, eax
call fcn.00409810
push edi
call fcn.0040cb80
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x20
push dword [ebp - 0x4dc]
call esi
push str.__silent___allusers0
lea ecx, [ebp - 0x2d8]
call fcn.00406650
push 0x84
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 0x16
push 0
push eax
call fcn.0043bf20
add esp, 0xc
lea eax, [ebp - 0x2d8]
cmp dword [ebp - 0x2c4], 7
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x46c], ecx
lea ecx, [ebp - 0x46c]
cmova eax, dword [ebp - 0x2d8]
push 3
push eax
call fcn.004077e0
mov edx, str.Launch_parameters:
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
mov edx, dword [ebp - 0x46c]
mov ecx, eax
call fcn.00408f60
mov ecx, eax
call fcn.00409810
cmp dword [ebp - 0x234], 7
lea eax, [ebp - 0x248]
xorps xmm0, xmm0
mov dword [ebp - 0x4ac], 0x3c
cmova eax, dword [ebp - 0x248]
cmp dword [ebp - 0x2c4], 7
mov dword [ebp - 0x49c], eax
lea eax, [ebp - 0x2d8]
cmova eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x498], eax
lea eax, [ebp - 0x4ac]
push eax
movlpd qword [ebp - 0x488], xmm0
movlpd qword [ebp - 0x480], xmm0
movlpd qword [ebp - 0x478], xmm0
mov dword [ebp - 0x4a8], 0x40
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], str.open
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x490], 5
mov dword [ebp - 0x48c], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x404c5d
mov eax, dword [ebp - 0x474]
test eax, eax
je 0x404c5d
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x470]
mov dword [ebp - 0x470], 0xfffe1dc0
push eax
push dword [ebp - 0x474]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
lea ecx, [ebp - 0x3e8]
test eax, eax
je 0x404a63
mov edx, str.Exit_code:
call fcn.00408f60
push dword [ebp - 0x470]
mov ecx, eax
call fcn.004063a0
mov ecx, eax
call fcn.00409810
jmp 0x404a6d
mov edx, str.Error._Process_has_finished__but_its_impossible_to_retreive_exit_code._n
call fcn.00408f60
push dword [ebp - 0x474]
call esi
mov edx, dword [ebp - 0x4b4]
mov eax, dword [0x47a2c8]
mov ecx, dword [edx]
cmp eax, dword [ecx + 4]
jle 0x404bfc
push 0x47a2c8
call fcn.0043a8e8
add esp, 4
cmp dword [0x47a2c8], 0xffffffff
jne 0x404bfc
mov byte [ebp - 4], 0x18
lea esi, [ebp - 0x13]
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x4b4], ecx
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
mov eax, dword [ebp - 0x4b4]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0x4b4], eax
test eax, eax
jne 0x404ac0
push ecx
lea eax, [ebp - 0x13]
push eax
push esi
lea ecx, [ebp - 0x4f8]
call fcn.0040afe0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x4cc]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4bc], 0
push 0x473131
movups xmmword [ebp - 0x4cc], xmm0
mov dword [ebp - 0x4b8], 0
call fcn.004019e0
lea eax, [ebp - 0x4f8]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x4cc]
mov ecx, 0x47a258
push eax
lea eax, [ebp - 0x290]
push 0x478bf0
push eax
lea edx, [ebp - 0x278]
call fcn.00402d80
mov byte [ebp - 4], 0x19
add esp, 0x10
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0xf
jbe 0x404ba3
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404b99
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ffa
push ecx
push edx
call fcn.0043a836
add esp, 8
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x4e4]
cmp ecx, 0xf
jbe 0x404be1
mov edx, dword [ebp - 0x4f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404bd7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404ffa
push ecx
push edx
call fcn.0043a836
add esp, 8
push 0x461ee0
call fcn.0043ab88
push 0x47a2c8
mov byte [ebp - 4], 0x17
call fcn.0043a897
add esp, 8
cmp dword [0x47a26c], 0xf
mov eax, 0x47a258
cmova eax, dword [0x47a258]
push eax
push 0x2712
push edi
call fcn.0040f970
mov edx, str.Sending_installed_request:
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
cmp dword [0x47a26c], 0xf
mov edx, 0x47a258
push dword [0x47a268]
cmova edx, dword [0x47a258]
mov ecx, eax
call fcn.0040b100
mov ecx, eax
call fcn.00409810
push edi
call fcn.0040cb80
add esp, 0x14
jmp 0x404c6d
mov edx, str.Error._Unable_to_launch_process._n
lea ecx, [ebp - 0x3e8]
call fcn.00408f60
push edi
call fcn.0040cb20
mov eax, dword [ebp - 0x46c]
lea ecx, [ebp - 0x468]
add esp, 4
xor esi, esi
cmp eax, ecx
je 0x404c91
push eax
call fcn.00442cf9
add esp, 4
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x2c4]
cmp ecx, 7
jbe 0x404cd5
mov edx, dword [ebp - 0x2d8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404ccb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fff
push ecx
push edx
call fcn.0043a836
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
cmp ecx, 0xf
jbe 0x404d2c
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404d22
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fff
push ecx
push edx
call fcn.0043a836
add esp, 8
mov dword [ebp - 0x328], esi
mov dword [ebp - 0x324], 0xf
mov byte [ebp - 0x338], 0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x234]
cmp ecx, 7
jbe 0x404d87
mov edx, dword [ebp - 0x248]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404d7d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404fff
push ecx
push edx
call fcn.0043a836
add esp, 8
xor eax, eax
mov dword [ebp - 0x238], 0
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.004018f0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2dc]
cmp ecx, 0xf
jbe 0x404ded
mov edx, dword [ebp - 0x2f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404de3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405004
push ecx
push edx
call fcn.0043a836
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
cmp ecx, 7
jbe 0x404e4c
mov edx, dword [ebp - 0x2c0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404e42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405004
push ecx
push edx
call fcn.0043a836
add esp, 8
xor eax, eax
mov dword [ebp - 0x2b0], 0
mov word [ebp - 0x2c0], ax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x2ac], 7
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x3e8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x3ec], eax
lea ecx, [ebp - 0x3e4]
call fcn.00405d50
mov eax, dword [ebp - 0x3e8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x3e8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x3ec], eax
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 0x1b
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.00439b48
mov ecx, dword [ebp - 0x294]
add esp, 4
cmp ecx, 0xf
jbe 0x404f19
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404f0f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405004
push ecx
push edx
call fcn.0043a836
add esp, 8
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
cmp ecx, 0xf
jbe 0x404f6e
mov edx, dword [ebp - 0x290]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404f64
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405004
push ecx
push edx
call fcn.0043a836
add esp, 8
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
cmp ecx, 0xf
jbe 0x404fbf
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404fb5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405004
push ecx
push edx
call fcn.0043a836
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043a7f3
mov esp, ebp
pop ebp
ret
call fcn.0043fb2f
call fcn.004019d0
call fcn.0043fb2f
call fcn.00401350
call fcn.0043fb2f
call fcn.0043fb2f
call fcn.0043fb2f
call fcn.0043fb2f
call fcn.0043fb2f
int3