Function at 0x402b40
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x411dcc
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x338
mov eax, dword [0x41a040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov dword [ebp - 0x328], esi
mov dword [ebp - 0x334], ecx
xor edi, edi
xorps xmm0, xmm0
mov dword [ebp - 0x320], edi
xor eax, eax
movups xmmword [ebp - 0x318], xmm0
mov dword [ebp - 0x324], edi
mov dword [ebp - 0x308], edi
mov dword [ebp - 0x304], 7
mov word [ebp - 0x318], ax
lea edx, [ebp - 0x318]
mov dword [ebp - 4], eax
mov ecx, str.DOTNET_DISABLE_GUI_ERRORS
call fcn.0040b130
test al, al
je 0x402bfe
cmp dword [ebp - 0x304], 7
lea eax, [ebp - 0x318]
cmova eax, dword [ebp - 0x318]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
cmp eax, 1
je 0x403d6f
xor eax, eax
mov dword [ebp - 0x2a4], 7
xorps xmm0, xmm0
mov dword [ebp - 0x32c], eax
movups xmmword [ebp - 0x2b8], xmm0
mov dword [ebp - 0x2a8], eax
mov word [ebp - 0x2b8], ax
movups xmmword [ebp - 0x2e8], xmm0
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], 7
mov word [ebp - 0x2e8], ax
mov byte [ebp - 4], 2
cmp esi, 0x80008083
jne 0x402e16
lea ecx, [ebp - 0x2a0]
mov edi, str.You_must_install_.NET_Desktop_Runtime_to_run_this_application.
call fcn.00402710
mov esi, eax
lea eax, [ebp - 0x2b8]
cmp eax, esi
je 0x402cee
mov ecx, dword [ebp - 0x2a4]
cmp ecx, 7
jbe 0x402cad
mov edx, dword [ebp - 0x2b8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402ca3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402d20
push ecx
push edx
call fcn.0040e783
add esp, 8
mov dword [ebp - 0x2a8], 0
xor eax, eax
mov dword [ebp - 0x2a4], 7
mov word [ebp - 0x2b8], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x2b8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2a8], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x28c]
cmp ecx, 7
jbe 0x402d30
mov edx, dword [ebp - 0x2a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x402d26
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402d26
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040e783
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x2c0], 0
xor eax, eax
mov dword [ebp - 0x2bc], 7
movups xmmword [ebp - 0x2d0], xmm0
mov word [ebp - 0x2d0], ax
sub esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x130]
call fcn.00404b50
push ecx
lea edx, [ebp - 0x2d0]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x130]
call fcn.00406110
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x402dc3
nop dword [eax + eax]
lea edx, [ebp - 0x2e8]
lea ecx, [ebp - 0x2d0]
call fcn.00402540
test al, al
jne 0x402dc3
push ecx
lea edx, [ebp - 0x2d0]
lea ecx, [ebp - 0x130]
call fcn.00406110
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x402d90
lea ecx, [ebp - 0x130]
call fcn.00403de0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x2bc]
cmp ecx, 7
jbe 0x403545
mov edx, dword [ebp - 0x2d0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4039b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4039b6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp esi, 0x80008096
jne 0x4036d4
mov eax, str.You_must_install_or_update_.NET_to_run_this_application.
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x32c], eax
xor eax, eax
movups xmmword [ebp - 0x2a0], xmm0
mov dword [ebp - 0x28c], 7
mov word [ebp - 0x2a0], ax
sub esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x130]
call fcn.00404b50
xor al, al
mov byte [ebp - 4], 6
push ecx
lea edx, [ebp - 0x2a0]
mov byte [ebp - 0x319], al
lea ecx, [ebp - 0x130]
call fcn.00406110
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x4034c8
movups xmm0, xmmword [str.Framework:_]
movzx eax, word [0x415724]
mov esi, dword [ebp - 0x290]
mov word [ebp - 0x18], ax
movzx eax, word [0x415770]
mov word [ebp - 0x38], ax
movups xmmword [ebp - 0x30], xmm0
movq xmm0, qword [0x41571c]
movq qword [ebp - 0x20], xmm0
movups xmm0, xmmword [str.The_framework_]
movups xmmword [ebp - 0x60], xmm0
movups xmm0, xmmword [0x415738]
movups xmmword [ebp - 0x50], xmm0
movups xmm0, xmmword [str._was_not_found.]
movups xmmword [ebp - 0x80], xmm0
movups xmm0, xmmword [0x415758]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [0x415768]
movq qword [ebp - 0x40], xmm0
cmp esi, 0xc
jb 0x402f36
cmp dword [ebp - 0x28c], 7
lea ecx, [ebp - 0x30]
push 0xc
lea eax, [ebp - 0x2a0]
cmova eax, dword [ebp - 0x2a0]
push ecx
push eax
call fcn.00407260
test eax, eax
jne 0x402f30
mov byte [ebp - 0x31a], 1
jmp 0x402fa9
mov esi, dword [ebp - 0x290]
mov byte [ebp - 0x31a], 0
cmp esi, 0xf
jb 0x4032d1
cmp dword [ebp - 0x28c], 7
lea ecx, [ebp - 0x60]
push 0xf
lea eax, [ebp - 0x2a0]
cmova eax, dword [ebp - 0x2a0]
push ecx
push eax
call fcn.00407260
mov esi, dword [ebp - 0x290]
test eax, eax
jne 0x4032d1
cmp esi, 0xf
jb 0x4032d1
cmp dword [ebp - 0x28c], 7
lea eax, [ebp - 0x2a0]
lea ecx, [ebp - 0x80]
cmova eax, dword [ebp - 0x2a0]
push ecx
lea eax, [eax + esi*2]
add eax, 0xffffffe2
push eax
call fcn.00407210
test eax, eax
jne 0x4032d1
mov ecx, dword [ebp - 0x2a4]
mov eax, ecx
mov edi, dword [ebp - 0x2a8]
sub eax, edi
cmp eax, 0xa
jb 0x402ff3
cmp ecx, 7
lea esi, [ebp - 0x2b8]
lea eax, [edi + 0xa]
cmova esi, dword [ebp - 0x2b8]
push 0x14
mov dword [ebp - 0x2a8], eax
push str.Required:
lea eax, [esi + edi*2]
push eax
call fcn.0040fbd0
add esp, 0xc
xor eax, eax
mov word [esi + edi*2 + 0x14], ax
jmp 0x403014
push 0xa
push str.Required:
mov byte [ebp - 0x338], 0
lea ecx, [ebp - 0x2b8]
push dword [ebp - 0x338]
push 0xa
call fcn.00405bd0
cmp byte [ebp - 0x31a], 0
xorps xmm0, xmm0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0
movups xmmword [ebp - 0x2d0], xmm0
je 0x403127
cmp eax, 0xb
jb 0x403dcf
add eax, 0xfffffff5
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x28c], 7
lea eax, [ebp - 0x2a0]
cmova eax, dword [ebp - 0x2a0]
push ecx
add eax, 0x16
lea ecx, [ebp - 0x2d0]
push eax
call fcn.00405a90
or dword [ebp - 0x324], 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2d0]
cmp dword [ebp - 0x2bc], 7
mov edi, dword [ebp - 0x2d0]
mov esi, dword [ebp - 0x2a8]
cmova ecx, edi
mov eax, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x2c0]
sub eax, esi
mov dword [ebp - 0x330], ecx
mov dword [ebp - 0x320], esi
cmp edx, eax
ja 0x403113
cmp dword [ebp - 0x2a4], 7
lea eax, [edx + esi]
mov dword [ebp - 0x2a8], eax
lea esi, [ebp - 0x2b8]
cmova esi, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x320]
lea ecx, [esi + eax*2]
lea eax, [edx + edx]
push eax
push dword [ebp - 0x330]
push ecx
call fcn.0040fbd0
mov eax, dword [ebp - 0x2c0]
add esp, 0xc
add eax, dword [ebp - 0x320]
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x403212
push edx
mov byte [ebp - 0x33c], 0
push ecx
push dword [ebp - 0x33c]
jmp 0x403200
lea ecx, [eax - 0xe]
lea edx, [ecx - 0xf]
cmp eax, 0xe
jb 0x403dcf
cmp ecx, edx
lea eax, [ebp - 0x2a0]
cmovb edx, ecx
cmp dword [ebp - 0x28c], 7
push edx
cmova eax, dword [ebp - 0x2a0]
lea ecx, [ebp - 0x2d0]
add eax, 0x1c
push eax
call fcn.00405a90
or dword [ebp - 0x324], 2
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2d0]
cmp dword [ebp - 0x2bc], 7
mov edi, dword [ebp - 0x2d0]
mov esi, dword [ebp - 0x2a8]
cmova ecx, edi
mov eax, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x2c0]
sub eax, esi
mov dword [ebp - 0x330], ecx
mov dword [ebp - 0x320], esi
cmp edx, eax
ja 0x4031f1
cmp dword [ebp - 0x2a4], 7
lea eax, [edx + esi]
mov dword [ebp - 0x2a8], eax
lea esi, [ebp - 0x2b8]
cmova esi, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x320]
lea ecx, [esi + eax*2]
lea eax, [edx + edx]
push eax
push dword [ebp - 0x330]
push ecx
call fcn.0040fbd0
mov eax, dword [ebp - 0x2c0]
add esp, 0xc
add eax, dword [ebp - 0x320]
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x403212
push edx
mov byte [ebp - 0x340], 0
push ecx
push dword [ebp - 0x340]
push edx
lea ecx, [ebp - 0x2b8]
call fcn.00405bd0
mov edi, dword [ebp - 0x2d0]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x2bc]
cmp eax, 7
jbe 0x403250
lea ecx, [eax*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x403246
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402d20
push ecx
push edi
call fcn.0040e783
add esp, 8
mov edx, dword [ebp - 0x2a4]
mov eax, edx
mov ecx, dword [ebp - 0x2a8]
sub eax, ecx
cmp eax, 2
jb 0x40329e
mov edi, dword [ebp - 0x324]
lea eax, [ecx + 2]
mov dword [ebp - 0x2a8], eax
cmp edx, 7
lea eax, [ebp - 0x2b8]
mov byte [ebp - 0x319], 1
cmova eax, dword [ebp - 0x2b8]
xor edx, edx
mov dword [eax + ecx*2], 0xa000a
mov word [eax + ecx*2 + 4], dx
jmp 0x40349d
push 2
push 0x41578c
mov byte [ebp - 0x344], 0
lea ecx, [ebp - 0x2b8]
push dword [ebp - 0x344]
push 2
call fcn.00405bd0
mov edi, dword [ebp - 0x324]
mov byte [ebp - 0x319], 1
jmp 0x40349d
cmp esi, 4
jb 0x403488
cmp dword [ebp - 0x28c], 7
lea ecx, [ebp - 0x40]
push 4
lea eax, [ebp - 0x2a0]
cmova eax, dword [ebp - 0x2a0]
push ecx
push eax
call fcn.00407260
test eax, eax
jne 0x403488
cmp dword [ebp - 0x2a4], 7
xorps xmm0, xmm0
mov dword [ebp - 0x2a8], eax
lea eax, [ebp - 0x2b8]
cmova eax, dword [ebp - 0x2b8]
xor ecx, ecx
movups xmmword [ebp - 0x2d0], xmm0
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
mov word [eax], cx
mov eax, dword [ebp - 0x290]
cmp eax, 4
jb 0x403dcf
add eax, 0xfffffffc
or ecx, 0xffffffff
cmp eax, 0xffffffff
cmovb ecx, eax
cmp dword [ebp - 0x28c], 7
lea eax, [ebp - 0x2a0]
cmova eax, dword [ebp - 0x2a0]
push ecx
add eax, 8
lea ecx, [ebp - 0x2d0]
push eax
call fcn.00405a90
or edi, 8
mov dword [ebp - 0x324], edi
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2d0]
cmp dword [ebp - 0x2bc], 7
mov edi, dword [ebp - 0x2d0]
mov esi, dword [ebp - 0x2a8]
cmova ecx, edi
mov eax, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x2c0]
sub eax, esi
mov dword [ebp - 0x330], ecx
mov dword [ebp - 0x320], esi
cmp edx, eax
ja 0x40340a
cmp dword [ebp - 0x2a4], 7
lea eax, [edx + esi]
mov dword [ebp - 0x2a8], eax
lea esi, [ebp - 0x2b8]
cmova esi, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x320]
lea ecx, [esi + eax*2]
lea eax, [edx + edx]
push eax
push dword [ebp - 0x330]
push ecx
call fcn.0040fbd0
mov eax, dword [ebp - 0x2c0]
add esp, 0xc
add eax, dword [ebp - 0x320]
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x40342b
push edx
push ecx
mov byte [ebp - 0x348], 0
lea ecx, [ebp - 0x2b8]
push dword [ebp - 0x348]
push edx
call fcn.00405bd0
mov edi, dword [ebp - 0x2d0]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x2bc]
cmp eax, 7
jbe 0x403469
lea ecx, [eax*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x40345f
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402d20
push ecx
push edi
call fcn.0040e783
add esp, 8
push 0x41578c
lea ecx, [ebp - 0x2b8]
call fcn.00404e00
mov edi, dword [ebp - 0x324]
mov byte [ebp - 0x319], 1
jmp 0x40349d
lea edx, [ebp - 0x2e8]
lea ecx, [ebp - 0x2a0]
call fcn.00402540
test al, al
jne 0x4034bf
push ecx
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0x130]
call fcn.00406110
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x402e91
cmp byte [ebp - 0x319], 0
jne 0x4034ee
lea ecx, [ebp - 0x2d0]
call fcn.00402710
push eax
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0xa
call fcn.00404e80
lea ecx, [ebp - 0x2d0]
call fcn.00401220
lea ecx, [ebp - 0x130]
call fcn.00403de0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28c]
cmp ecx, 7
jbe 0x40353f
mov edx, dword [ebp - 0x2a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403535
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403535
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040e783
add esp, 8
mov edi, dword [ebp - 0x32c]
push str.guitrue
lea ecx, [ebp - 0x2e8]
call fcn.00404e00
cmp dword [ebp - 0x2a4], 7
lea ecx, [ebp - 0x2b8]
mov esi, dword [ebp - 0x334]
lea eax, [ebp - 0x2e8]
cmova ecx, dword [ebp - 0x2b8]
cmp dword [ebp - 0x2d4], 7
push ecx
cmova eax, dword [ebp - 0x2e8]
push eax
push dword [ebp - 0x328]
push esi
push str.Showing_error_dialog_for_application:__s___error_code:_0x_x___url:__s___details:__s
call fcn.00406dd0
add esp, 0x14
lea eax, [ebp - 0x288]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x403ab4
cmp eax, 0x104
jae 0x403ab4
xorps xmm0, xmm0
mov dword [ebp - 0x290], 0
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x28c], 0
movups xmmword [ebp - 0x2a0], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4035e5
sub ecx, edx
lea eax, [ebp - 0x288]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2a0]
call fcn.00405a90
mov edx, str.WindowsShell.Manifest
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2a0]
call fcn.00407350
cmp dword [ebp - 0x28c], 7
lea eax, [ebp - 0x2a0]
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0x20
cmova eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateActCtxW]
cmp eax, 0xffffffff
jne 0x4039c5
cmp dword [ebp - 0x28c], 7
lea esi, [ebp - 0x2a0]
cmova esi, dword [ebp - 0x2a0]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push str.CreateActCtxW_failed_using_manifest__s._Error_code:__d
call fcn.00406dd0
mov byte [ebp - 4], 2
add esp, 0xc
mov ecx, dword [ebp - 0x28c]
cmp ecx, 7
jbe 0x403ac8
mov edx, dword [ebp - 0x2a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4036c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403a67
push ecx
push edx
call fcn.0040e783
jmp 0x403ac5
cmp esi, 0x8000809f
jne 0x403cb9
xor eax, eax
mov dword [ebp - 0x290], 0
movups xmmword [ebp - 0x2a0], xmm0
mov dword [ebp - 0x28c], 7
mov word [ebp - 0x2a0], ax
sub esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x130]
call fcn.00404b50
push ecx
lea edx, [ebp - 0x2a0]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x130]
call fcn.00406110
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x403c6c
nop dword [eax]
cmp dword [ebp - 0x290], 0x31
jb 0x40393d
cmp dword [ebp - 0x28c], 7
lea eax, [ebp - 0x2a0]
push 0x31
cmova eax, dword [ebp - 0x2a0]
push str.Bundle_header_version_compatibility_check_failed.
push eax
call fcn.00407260
test eax, eax
jne 0x40393d
mov dword [ebp - 0x32c], str.You_must_install_.NET_Desktop_Runtime_to_run_this_application.
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2d0]
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x2c0], eax
push str.Architecture:
movups xmmword [ebp - 0x2d0], xmm0
mov dword [ebp - 0x2bc], eax
call fcn.00405a90
or edi, 4
lea ecx, [ebp - 0x2d0]
push 0x415bfc
mov dword [ebp - 0x320], edi
call fcn.00404e00
push str._nApp_host_version:_8.0.8_n_n
lea ecx, [ebp - 0x2d0]
call fcn.00404e00
mov ecx, dword [ebp - 0x2a4]
cmp ecx, 7
jbe 0x403815
mov edx, dword [ebp - 0x2b8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40380b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402d20
push ecx
push edx
call fcn.0040e783
add esp, 8
movups xmm0, xmmword [ebp - 0x2d0]
push ecx
and edi, 0xfffffffb
lea ecx, [ebp - 0x2d0]
movups xmmword [ebp - 0x2b8], xmm0
mov dword [ebp - 0x320], edi
movq xmm0, qword [ebp - 0x2c0]
movq qword [ebp - 0x2a8], xmm0
mov byte [ebp - 4], 0xc
call fcn.00407cc0
mov esi, eax
lea eax, [ebp - 0x2e8]
cmp eax, esi
je 0x4038dd
mov ecx, dword [ebp - 0x2d4]
cmp ecx, 7
jbe 0x40389c
mov edx, dword [ebp - 0x2e8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403892
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402d20
push ecx
push edx
call fcn.0040e783
add esp, 8
mov dword [ebp - 0x2d8], 0
xor eax, eax
mov dword [ebp - 0x2d4], 7
mov word [ebp - 0x2e8], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x2e8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2d8], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x2bc]
cmp ecx, 7
jbe 0x40391d
mov edx, dword [ebp - 0x2d0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403913
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x402d20
push ecx
push edx
call fcn.0040e783
add esp, 8
push str.apphost_version
lea ecx, [ebp - 0x2e8]
call fcn.00404e00
push str.8.0.8
lea ecx, [ebp - 0x2e8]
call fcn.00404e00
push ecx
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0x130]
call fcn.00406110
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x403740
mov edi, dword [ebp - 0x32c]
test edi, edi
je 0x403c6c
lea ecx, [ebp - 0x130]
call fcn.00403de0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28c]
cmp ecx, 7
jbe 0x403545
mov edx, dword [ebp - 0x2a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4039b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403ca9
push ecx
push edx
call fcn.0040e783
add esp, 8
jmp 0x403545
lea ecx, [ebp - 0x328]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ActivateActCtx]
test eax, eax
jne 0x403a31
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ActivateActCtx_failed._Error_code:__d
call fcn.00406dd0
mov byte [ebp - 4], 2
add esp, 8
mov ecx, dword [ebp - 0x28c]
cmp ecx, 7
jbe 0x403ac8
mov edx, dword [ebp - 0x2a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403a25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403a67
push ecx
push edx
call fcn.0040e783
jmp 0x403ac5
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28c]
cmp ecx, 7
jbe 0x403a77
mov edx, dword [ebp - 0x2a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403a6d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403a6d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040e783
add esp, 8
cmp dword [ebp - 0x2d4], 7
lea ecx, [ebp - 0x2e8]
lea eax, [ebp - 0x2b8]
mov edx, edi
cmova ecx, dword [ebp - 0x2e8]
cmp dword [ebp - 0x2a4], 7
push ecx
cmova eax, dword [ebp - 0x2b8]
mov ecx, esi
push eax
call fcn.004028b0
test al, al
jne 0x403cb9
jmp 0x403ac8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetWindowsDirectory_failed._Error_code:__d
call fcn.00406dd0
add esp, 8
mov ecx, edi
mov dword [ebp - 0x2f0], 0
xorps xmm0, xmm0
mov dword [ebp - 0x2ec], 0
movups xmmword [ebp - 0x300], xmm0
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403af0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x300]
call fcn.00405a90
push 0x41578c
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0xf
call fcn.00404e00
cmp dword [ebp - 0x2a4], 7
lea ecx, [ebp - 0x2b8]
mov edx, dword [ebp - 0x2f0]
cmova ecx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x2ec]
mov edi, dword [ebp - 0x2a8]
sub eax, edx
mov dword [ebp - 0x328], edx
cmp edi, eax
ja 0x403b90
cmp dword [ebp - 0x2ec], 7
lea eax, [edi + edx]
mov dword [ebp - 0x2f0], eax
lea esi, [ebp - 0x300]
cmova esi, dword [ebp - 0x300]
lea eax, [edi + edi]
push eax
push ecx
lea eax, [esi + edx*2]
push eax
call fcn.0040fbd0
mov eax, dword [ebp - 0x328]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x403bab
push edi
push ecx
mov byte [ebp - 0x328], 0
lea ecx, [ebp - 0x300]
push dword [ebp - 0x328]
push edi
call fcn.00405bd0
push str.Learn_more:_nhttps:__aka.ms_dotnet_app_launch_failed_n_nWould_you_like_to_download_it_now_
lea ecx, [ebp - 0x300]
call fcn.00404e00
cmp dword [ebp - 0x2ec], 7
lea eax, [ebp - 0x300]
push 0x14
push dword [ebp - 0x334]
cmova eax, dword [ebp - 0x300]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x403c0d
cmp dword [ebp - 0x2d4], 7
lea eax, [ebp - 0x2e8]
push 1
cmova eax, dword [ebp - 0x2e8]
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0x2ec]
cmp ecx, 7
jbe 0x403c4d
mov edx, dword [ebp - 0x300]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403c43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403da1
push ecx
push edx
call fcn.0040e783
add esp, 8
xor eax, eax
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 7
mov word [ebp - 0x300], ax
jmp 0x403cb9
lea ecx, [ebp - 0x130]
call fcn.00403de0
mov ecx, dword [ebp - 0x28c]
cmp ecx, 7
jbe 0x403cb9
mov edx, dword [ebp - 0x2a0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403caf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403caf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040e783
add esp, 8
mov ecx, dword [ebp - 0x2d4]
cmp ecx, 7
jbe 0x403cf9
mov edx, dword [ebp - 0x2e8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403cef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403da1
push ecx
push edx
call fcn.0040e783
add esp, 8
mov ecx, dword [ebp - 0x2a4]
xor eax, eax
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 7
mov word [ebp - 0x2e8], ax
cmp ecx, 7
jbe 0x403d52
mov edx, dword [ebp - 0x2b8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403d48
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403da1
push ecx
push edx
call fcn.0040e783
add esp, 8
xor eax, eax
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 7
mov word [ebp - 0x2b8], ax
mov ecx, dword [ebp - 0x304]
cmp ecx, 7
jbe 0x403db1
mov edx, dword [ebp - 0x318]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x403da7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x403da7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0040e783
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040e775
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004058b0
int3