Function at 0x42a822
Capabilities:
Contain obfuscated stackstrings
Move file

Disassembly:
push 0x1d4
mov eax, 0x46a7cb
call fcn.00442722
mov edi, ecx
cmp dword [ebp + 0x14], 0
mov eax, dword [ebp + 8]
mov ecx, dword [0x4a17d4]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], ecx
jne 0x42a877
cmp dword [ebp + 0x18], 0
jne 0x42a877
xor eax, eax
inc eax
jmp 0x42b675
xor esi, esi
mov ecx, edi
mov dword [eax], esi
call fcn.0040b6e4
mov dword [ebp - 0x1d4], eax
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x130], 0x47c4e4
mov dword [ebp - 0x108], 0x477350
call fcn.00402580
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x100], 0x47c4e4
mov dword [ebp - 0xd8], 0x477350
call fcn.00402580
mov byte [ebp - 4], 3
push ebx
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040c6e1
mov byte [ebp - 4], 4
push ebx
push ebx
lea eax, [ebp - 0x1e0]
push eax
push esi
lea eax, [ebp - 0x130]
push eax
push str.dotnetfx.exe
lea eax, [ebp - 0x70]
push eax
mov ecx, edi
call fcn.00424fef
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
inc bl
jne 0x42b655
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040c6e1
mov byte [ebp - 4], 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x130]
call fcn.0041d693
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
test bl, bl
je 0x42aa15
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040c6e1
mov byte [ebp - 4], 0xa
push esi
push esi
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x130]
call fcn.0040fa52
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.0041047d
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x70]
call fcn.00401580
cmp dword [ebp - 0x28], 8
lea ecx, [ebp - 0x3c]
cmovae ecx, dword [ebp - 0x3c]
cmp dword [ebp - 0x118], 8
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x42aa09
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.0040ca5e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp - 0x1e0], 1
jne 0x42ad7e
push esi
lea eax, [ebp - 0x1c1]
mov ebx, 0x47c4e4
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x48], 0x477350
call fcn.00402580
mov byte [ebp - 4], 0x13
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x138], 0x477350
call fcn.00402580
mov byte [ebp - 4], 0x15
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x42aad5
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetredist.exe
lea ecx, [ebp - 0x40]
call fcn.0040c6e1
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x1cc]
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00424cd6
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x160]
call fcn.0040ca5e
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
jmp 0x42abed
cmp byte [ebx + 0x45], 0
je 0x42abf4
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.1033
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x1a
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x1b
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.Startup
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov ecx, ebx
call fcn.00435f08
mov byte [ebp - 4], 0x1d
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42ab62
mov eax, dword [eax]
mov edx, 0x483e18
test eax, eax
mov ecx, edx
cmovne ecx, eax
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00405070
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c0]
call fcn.00401580
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x40]
call fcn.00401580
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa0]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x1c0]
call fcn.0040c6e1
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x160]
call fcn.004104eb
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c0]
call fcn.00401580
jmp 0x42ac0a
cmp byte [ebx + 0x46], 0
je 0x42ac0a
push str.dotnetfx20.exe
lea ecx, [ebp - 0x15c]
call fcn.00405070
push esi
push 1
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x160]
push eax
mov ecx, edi
call fcn.00425b72
test eax, eax
je 0x42ac97
cmp byte [ebx + 0x44], 0
je 0x42ac38
push dword [ebp - 0x1cc]
mov ecx, edi
call fcn.00423c3b
jmp 0x42ac93
cmp byte [ebx + 0x45], 0
je 0x42acb2
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x42ac77
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 1
call fcn.00423f38
test eax, eax
je 0x42ac97
mov eax, dword [ebp - 0x1c8]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42ac6b
mov eax, dword [eax]
push eax
mov ecx, edi
call fcn.00423ce8
test eax, eax
je 0x42ac97
push 0x477284
mov ecx, edi
call fcn.00423ce8
test eax, eax
je 0x42ac97
push str.1033
mov ecx, edi
call fcn.00423ce8
test eax, eax
jne 0x42acd2
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
jmp 0x42b650
cmp byte [ebx + 0x46], 0
je 0x42acd2
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x42acd2
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 2
call fcn.00423f38
jmp 0x42ac93
cmp dword [ebp + 0x18], 0
je 0x42ad63
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x47c4e4
mov dword [ebp - 0x18], 0x477350
call fcn.00402580
mov byte [ebp - 4], 0x41
cmp byte [ebx + 0x45], 0
je 0x42ae0f
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist.exe
lea ecx, [ebp - 0xa0]
call fcn.0040c6e1
mov byte [ebp - 4], 0x42
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00425b72
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa0]
call fcn.00401580
inc bl
jne 0x42ae56
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401580
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x42ae67
cmp dword [ebp - 0x1d0], 0
je 0x42adb3
push str.__q:a__c:_install__q_
call fcn.00442644
pop ecx
push eax
push str.__q:a__c:_install__q_
lea ecx, [ebp - 0xfc]
call fcn.0042bd08
push 1
push 0xa
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xa0]
call fcn.0041f4d8
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x1c0]
push 0x479fd8
push eax
call fcn.0041ed86
add esp, 0xc
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x100]
call fcn.004047c0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x1c0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa0]
jmp 0x42b528
cmp byte [ebx + 0x46], 0
je 0x42ad57
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist20.exe
lea ecx, [ebp - 0xa0]
call fcn.0040c6e1
mov byte [ebp - 4], 0x49
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00425b72
mov ebx, eax
neg ebx
sbb bl, bl
jmp 0x42ad40
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401580
jmp 0x42ac97
cmp dword [ebp + 0x14], 0
je 0x42b107
push str.__q:a
call fcn.00442644
pop ecx
push eax
push str.__q:a
lea ecx, [ebp - 0xfc]
call fcn.0042bd08
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x57
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x476bf0
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x58
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__ver:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x59
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x477288
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp - 0x1d0], 0
mov ecx, str._redistui:F
mov eax, str._redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0042bce1
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__c:_
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x5f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47a038
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x60
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x61
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetFxCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x67
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47a058
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x68
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x69
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
jmp 0x42b111
cmp dword [ebp + 0x18], 0
je 0x42b52d
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x6f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x70
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__coreui:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x71
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x77
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x78
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langs:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x79
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPacks
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp + 0x18], 0
je 0x42b52d
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x7f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x80
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jsharpver:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x81
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JVersion
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp + 0x14], 0
jne 0x42b465
cmp dword [ebp - 0x1d0], 0
mov ecx, str.__redistui:F
mov eax, str.__redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0042bce1
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x483e18
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x87
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47a058
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x88
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x89
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__q:a__c:_
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x8f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47a174
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x90
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jscmd:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x91
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JCmdLine
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x92
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.0041fb02
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], 0x47c4e4
mov dword [ebp - 0x168], 0x477350
call fcn.00402580
mov byte [ebp - 4], 0x98
push 0x452
lea eax, [ebp - 0x1c0]
push eax
mov ecx, edi
call fcn.0040b6e4
mov ecx, dword [eax + 0x260]
call fcn.00417912
mov byte [ebp - 4], 0x99
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42b585
mov eax, dword [eax]
push str.Microsoft_R__.NET_Framework
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.0041803a
add esp, 0xc
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1c0]
call fcn.00401580
cmp dword [ebp - 0x178], 8
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
push eax
mov ecx, ebx
call fcn.0043813e
mov eax, dword [ebx + 0x260]
cmp byte [eax + 1], 0
jne 0x42b5dc
cmp byte [eax + 2], 0
jne 0x42b5dc
xor eax, eax
inc eax
jmp 0x42b5de
mov eax, esi
push 2
push dword [ebp - 0x1d8]
xor ebx, ebx
test al, al
setne bl
call dword [sym.imp.USER32.dll_GetDlgItem]
push esi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
mov edi, eax
push edi
call esi
cmp dword [ebp - 0xe8], 8
mov edx, dword [ebp - 0x1d4]
push edx
lea ecx, [ebp - 0xfc]
cmovae ecx, dword [ebp - 0xfc]
cmp dword [ebp - 0x118], 8
push ebx
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.00440659
mov ecx, dword [ebp - 0x1dc]
push 1
push edi
mov dword [ecx], eax
call esi
xor esi, esi
inc esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x190]
call fcn.00401580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x100]
call fcn.00401580
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.00401580
mov eax, esi
call fcn.004426d1
ret 0x18