Function at 0x4218d0
Capabilities:
Query environment variable

Disassembly:
mov eax, 0x462d37
call fcn.0043b5c0
sub esp, 0x294
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esi
xor ebx, ebx
cmp byte [esi + 0x2ec], bl
mov dword [ebp - 4], ebx
je 0x4224d7
push str.operatingsystemcondition
lea ecx, [ebp + 8]
call fcn.00425c63
test eax, eax
jne 0x422132
cmp byte [esi + 0x15e], bl
jne 0x422132
mov eax, str.operatingsystemcondition
mov edi, 0x4675b0
mov ecx, eax
mov esi, 0x4675a8
test ecx, ecx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x2c], esi
jne 0x421929
mov eax, 0x47d8e0
lea ecx, [ebp - 0x21]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push ebx
push eax
mov byte [ebp - 4], 1
call fcn.004217ba
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], bl
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push 1
push dword [ecx + 0x30]
mov byte [ecx + 0x15d], 1
push str.MajorVersion
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x4219b8
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x42198b
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 2
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
mov ecx, dword [ebp - 0x10]
push 1
push dword [ecx + 0x34]
push str.MinorVersion
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x421a3a
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx + 0x38]
shr eax, 0x10
cmp dword [ecx + 0x3c], 1
movzx eax, al
jne 0x4219f7
push 1
push eax
push str.MinorVersion
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x421a3a
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421a0d
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 3
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x3c], 1
jne 0x421aab
mov eax, dword [eax + 0x38]
shr eax, 0x10
movzx eax, al
cmp eax, 0x5a
jne 0x421aab
mov ecx, dword [ebp - 0x10]
push 1
push eax
push str.MinorVersion
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x421aab
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421a7e
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 4
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
mov ecx, dword [ebp - 0x10]
push 5
movzx eax, word [ecx + 0x154]
push eax
push str.ServicePackMajorMin
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x421b0c
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421adf
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 5
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
mov ecx, dword [ebp - 0x10]
push 3
movzx eax, word [ecx + 0x154]
push eax
push str.ServicePackMajorMax
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x421b6d
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421b40
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 6
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
mov ecx, dword [ebp - 0x10]
push 5
push dword [ecx + 0x38]
push str.BuildNumber
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x421bc9
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421b9c
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 7
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
mov ecx, dword [ebp - 0x10]
push 1
push dword [ecx + 0x3c]
push str.PlatformId
push dword [ebp + 0x24]
call fcn.00423359
test al, al
jne 0x421c25
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421bf8
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 8
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x228]
push str.CSDVersion
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 9
cmp eax, ebx
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0x7c], esi
jne 0x421c52
mov eax, 0x47d8e0
lea ecx, [ebp - 0x21]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.0040b3c8
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xb
call fcn.0041a3cb
cmp dword [ebp - 0x90], ebx
je 0x421d93
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x9c]
push ebx
push eax
call fcn.004217ba
lea eax, [ebp - 0x12]
push 1
push eax
push 0x477048
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0xc
call fcn.00425d3a
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xb
call fcn.00406320
lea eax, [ebp - 0x12]
push 1
push eax
mov eax, dword [ebp - 0x10]
add eax, 0x40
lea ecx, [ebp - 0x178]
push eax
call fcn.0040a6ae
lea eax, [ebp - 0x19]
push 1
push eax
push 0x477048
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xd
call fcn.0040b3c8
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x178]
push eax
mov byte [ebp - 4], 0xe
call fcn.00425d3a
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xd
call fcn.00406320
lea eax, [ebp - 0x178]
lea ecx, [ebp - 0x174]
neg eax
sbb eax, eax
and eax, ecx
lea ecx, [ebp - 0x98]
push eax
call fcn.0040cec9
test eax, eax
jle 0x421d84
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421d48
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 0xf
call fcn.004217ba
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xd
call fcn.00406320
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x178]
jmp 0x42211f
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0xb
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push 1
movzx eax, byte [ecx + 0x15a]
push eax
push str.ProductType
push dword [ebp + 0x24]
call fcn.00423417
test al, al
jne 0x421df5
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421dc7
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 0x10
call fcn.004217ba
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4c]
jmp 0x42211f
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x20c]
push str.Language
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x11
cmp eax, ebx
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xb4], esi
jne 0x421e25
mov eax, 0x47d8e0
lea ecx, [ebp - 0x19]
push ebx
push ecx
push eax
lea ecx, [ebp - 0xd4]
call fcn.0040b3c8
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 0x13
call fcn.0041a3cb
cmp dword [ebp - 0xc8], ebx
je 0x421f08
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0xd4]
push ebx
push eax
call fcn.004217ba
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, ebx
mov dword [ebp - 0x20], eax
je 0x421f08
push str.GetSystemDefaultUILanguage
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
mov dword [ebp - 0x100], eax
je 0x421eff
lea eax, [ebp - 0x18]
push 0xa
push eax
lea ecx, [ebp - 0xd4]
call fcn.004267de
call dword [ebp - 0x100]
movzx eax, ax
cmp dword [ebp - 0x18], eax
je 0x421eff
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421ec4
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 0x14
call fcn.004217ba
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x13
call fcn.00406320
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x422115
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x16c]
push str.Bits
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x15
cmp eax, ebx
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x130], esi
jne 0x421f38
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.0040b3c8
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x17
call fcn.0041a3cb
lea eax, [ebp - 0x18]
push 0xa
push eax
lea ecx, [ebp - 0x150]
call fcn.004267de
mov al, byte [ebp - 0x18]
test al, 1
je 0x421fc5
call fcn.0042e39c
test al, al
je 0x4220ba
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421f93
mov eax, 0x47d8e0
lea ecx, [ebp - 0x12]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 0x18
call fcn.004217ba
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
call fcn.00406320
jmp 0x422106
test al, 2
je 0x422016
call fcn.0042e39c
test al, al
jne 0x4220ba
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x421fec
mov eax, 0x47d8e0
lea ecx, [ebp - 0x12]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 0x19
call fcn.004217ba
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
jmp 0x421fbb
test al, 4
je 0x42206a
call fcn.0042e3d1
test al, al
jne 0x4220ba
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x42203d
mov eax, 0x47d8e0
lea ecx, [ebp - 0x12]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 0x1a
call fcn.004217ba
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
jmp 0x421fbb
test al, 8
je 0x4220ba
call fcn.0042e3b5
test al, al
jne 0x4220ba
mov eax, str.____Failed_
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x42208d
mov eax, 0x47d8e0
lea ecx, [ebp - 0x12]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x4c]
push 1
push eax
mov byte [ebp - 4], 0x1b
call fcn.004217ba
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
jmp 0x421fbb
mov eax, str.____Successful
mov dword [ebp - 0x4c], edi
mov ecx, eax
mov dword [ebp - 0x2c], esi
test ecx, ecx
jne 0x4220d0
mov eax, 0x47d8e0
lea ecx, [ebp - 0x12]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
mov esi, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x4c]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.004217ba
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x17
call fcn.00406320
mov byte [esi + 0x15e], 1
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x13
call fcn.00406320
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd4]
call fcn.00406320
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x9c]
jmp 0x4232a8
cmp byte [esi + 0x2ec], bl
je 0x4224d7
push str.condition
lea ecx, [ebp + 8]
call fcn.00425c63
test eax, eax
jne 0x4224d7
mov eax, dword [ebp - 0x10]
mov edi, 0x4675b0
mov esi, 0x4675a8
mov dword [ebp - 0x9c], edi
mov byte [eax + 0x15f], 1
mov eax, str.condition
mov ecx, eax
mov dword [ebp - 0x7c], esi
test ecx, ecx
jne 0x422180
mov eax, 0x47d8e0
lea ecx, [ebp - 0x19]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x9c]
push ebx
push eax
mov byte [ebp - 4], 0x1d
call fcn.004217ba
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], bl
call fcn.00406320
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x16c]
push str.Type
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x1e
cmp eax, ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x2c], esi
jne 0x4221df
mov eax, 0x47d8e0
lea ecx, [ebp - 0x19]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x20
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x20c]
push str.Comparison
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x21
cmp eax, ebx
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x108], esi
jne 0x42222c
mov eax, 0x47d8e0
lea ecx, [ebp - 0x12]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.0040b3c8
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 0x23
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x228]
push str.Path
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x24
cmp eax, ebx
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x1d0], esi
jne 0x42227c
mov eax, 0x47d8e0
lea ecx, [ebp - 0x21]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x1f0]
call fcn.0040b3c8
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x26
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0xf0]
push str.FileName
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x27
cmp eax, ebx
mov dword [ebp - 0x1c8], edi
mov dword [ebp - 0x1a8], esi
jne 0x4222cc
mov eax, 0x47d8e0
lea ecx, [ebp - 0x9d]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x1c8]
call fcn.0040b3c8
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x29
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0xc8]
push str.ReturnValue
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x2a
cmp eax, ebx
mov dword [ebp - 0x1a0], edi
mov dword [ebp - 0x180], esi
jne 0x42231f
mov eax, 0x47d8e0
lea ecx, [ebp - 0x13]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x1a0]
call fcn.0040b3c8
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x2c
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.Bits
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x2d
cmp eax, ebx
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x130], esi
jne 0x42236f
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.0040b3c8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2f
call fcn.0041a3cb
lea eax, [ebp - 0x1a0]
mov ecx, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004216b5
lea eax, [ebp - 0x1a0]
mov ecx, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00423523
test al, al
jne 0x42243e
mov eax, str.____Failed_
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x422407
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov esi, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x74]
push 1
push eax
mov ecx, esi
mov byte [ebp - 4], 0x30
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2f
call fcn.00406320
mov byte [esi + 0x160], bl
jmp 0x422481
mov eax, str.____Successful
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x422454
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x74]
push 1
push eax
mov byte [ebp - 4], 0x31
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x2f
call fcn.00406320
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x2c
call fcn.00406320
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x29
call fcn.00406320
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x26
call fcn.00406320
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x23
call fcn.00406320
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x20
call fcn.00406320
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
push str.file
lea ecx, [ebp + 8]
call fcn.00425c63
test eax, eax
jne 0x422720
mov eax, str.file
mov edi, 0x4675b0
mov ecx, eax
mov esi, 0x4675a8
test ecx, ecx
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x54], esi
jne 0x42250c
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x32
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.00406320
lea ecx, [ebp - 0x2a0]
call fcn.004232ca
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.CheckSum
push eax
mov byte [ebp - 4], 0x33
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x34
cmp eax, ebx
jne 0x42256b
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0x250]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x33
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.LocalFile
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x35
cmp eax, ebx
jne 0x4225aa
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0x2a0]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x33
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push 0x478fac
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x36
cmp eax, ebx
jne 0x4225e9
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0x278]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x33
call fcn.0041a3cb
lea eax, [ebp + 0x27]
push ebx
push eax
push 0x47d8e0
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x108], esi
call fcn.0040b3c8
lea eax, [ebp - 0x11]
push ebx
push eax
push 0x47d8e0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x2c], esi
call fcn.0040b3c8
lea eax, [ebp - 0x13]
push ebx
push eax
push 0x47d8e0
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x54], esi
call fcn.0040b3c8
lea eax, [ebp - 0x128]
mov ecx, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x250]
push eax
mov byte [ebp - 4], 0x39
call fcn.004216b5
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x38
call fcn.00406320
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x37
call fcn.00406320
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x33
call fcn.00406320
lea eax, [ebp - 0x2a0]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x164]
call fcn.00425eaf
mov eax, str.____Successful
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x4226df
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push 1
push eax
mov byte [ebp - 4], 0x3a
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x33
call fcn.00406320
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], bl
call fcn.0041ef55
jmp 0x4232ad
push str.properties
lea ecx, [ebp + 8]
call fcn.00425c63
test eax, eax
jne 0x42286d
mov eax, 0x478f8c
mov edi, 0x4675b0
mov ecx, eax
mov esi, 0x4675a8
test ecx, ecx
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x54], esi
jne 0x422755
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x3b
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.00406320
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push 0x478f8c
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x3c
cmp eax, ebx
jne 0x4227a5
mov eax, 0x47d8e0
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x17c]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], bl
call fcn.0041a3cb
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
push 1
add eax, 0x17c
push ebx
push eax
call fcn.004217ba
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.AltPrqURL
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x3d
cmp eax, ebx
jne 0x4227fa
mov eax, 0x47d8e0
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x294]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], bl
call fcn.0041a3cb
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
push 1
add eax, 0x294
push ebx
push eax
call fcn.004217ba
mov eax, str.____Successful
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x422841
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x74]
push 1
push eax
mov byte [ebp - 4], 0x3e
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x74]
jmp 0x4232a8
push str.execute
lea ecx, [ebp + 8]
call fcn.00425c63
test eax, eax
jne 0x422cdb
mov eax, str.execute
mov edi, 0x4675b0
mov ecx, eax
mov esi, 0x4675a8
test ecx, ecx
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x54], esi
jne 0x4228a2
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x3f
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.00406320
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.file
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x40
cmp eax, ebx
jne 0x4228f2
mov eax, 0x47d8e0
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x1a4]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], bl
call fcn.0041a3cb
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x1d8]
cmp eax, ebx
jne 0x422a1e
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push 0x4771b0
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x41
cmp eax, ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x2c], esi
jne 0x42294a
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x43
call fcn.0041a3cb
mov eax, dword [ebp - 0x10]
push 0x104
lea ecx, [eax + 0x1cc]
lea eax, [ebp - 0xac]
push eax
call fcn.0040b853
mov dword [ebp - 0x18], eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x44
call fcn.0040bc78
mov ecx, dword [ebp - 0x18]
push 0x104
push eax
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x4c]
call fcn.0040bc78
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x43
call fcn.0040bcc0
cmp dword [ebp - 0x20], 0x104
jbe 0x422a13
push dword [ebp - 0x20]
lea eax, [ebp - 0xac]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x1cc]
call fcn.0040b853
mov dword [ebp - 0x18], eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x45
call fcn.0040bc78
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x20]
mov dword [ecx + 8], eax
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040bc78
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x43
call fcn.0040bcc0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], bl
call fcn.00406320
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x200], ebx
jne 0x422b2b
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.cmdlinesilent
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x46
cmp eax, ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x2c], esi
jne 0x422a57
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b3c8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x48
call fcn.0041a3cb
mov eax, dword [ebp - 0x10]
push 0x104
lea ecx, [eax + 0x1f4]
lea eax, [ebp - 0xac]
push eax
call fcn.0040b853
mov dword [ebp - 0x18], eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x49
call fcn.0040bc78
mov ecx, dword [ebp - 0x18]
push 0x104
push eax
mov dword [ecx + 8], eax
lea ecx, [ebp - 0x4c]
call fcn.0040bc78
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x48
call fcn.0040bcc0
cmp dword [ebp - 0x20], 0x104
jbe 0x422b20
push dword [ebp - 0x20]
lea eax, [ebp - 0xac]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x1f4]
call fcn.0040b853
mov dword [ebp - 0x18], eax
mov ecx, dword [eax]
mov byte [ebp - 4], 0x4a
call fcn.0040bc78
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x20]
mov dword [ecx + 8], eax
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040bc78
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x48
call fcn.0040bcc0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], bl
call fcn.00406320
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.returncodetoreboot
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x4b
cmp eax, ebx
jne 0x422b4f
mov eax, 0x47d8e0
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x21c]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], bl
call fcn.0041a3cb
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.forcesilent
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x4c
cmp eax, ebx
jne 0x422b90
mov eax, 0x47d8e0
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x244]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], bl
call fcn.0041a3cb
lea eax, [ebp - 0x11]
push ebx
push eax
push 0x47d8e0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x54], esi
call fcn.0040b3c8
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x4d
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x244]
add eax, 0x21c
push ecx
mov ecx, dword [ebp - 0x10]
push eax
lea eax, [ecx + 0x1f4]
push eax
lea eax, [ecx + 0x1cc]
push eax
lea eax, [ecx + 0x1a4]
push eax
call fcn.004216b5
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.00406320
mov eax, str.____Successful
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x422c1b
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x74]
push 1
push eax
mov byte [ebp - 4], 0x4e
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.00406320
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.requiresmsiengine
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x4f
cmp eax, ebx
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x108], esi
jne 0x422c77
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.0040b3c8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x51
call fcn.0041a3cb
mov esi, 0x477914
push esi
call fcn.0043ba72
pop ecx
push eax
push esi
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x124]
push ebx
call fcn.0040ceeb
cmp eax, ebx
mov eax, dword [ebp - 0x10]
jne 0x422cc7
mov byte [eax + 0x2ed], 1
jmp 0x422ccd
mov byte [eax + 0x2ed], bl
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x128]
jmp 0x4232a8
push str.dependency
lea ecx, [ebp + 8]
call fcn.00425c63
test eax, eax
jne 0x422df3
mov eax, str.dependency
mov edi, 0x4675b0
mov ecx, eax
mov esi, 0x4675a8
test ecx, ecx
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x54], esi
jne 0x422d10
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x52
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.00406320
lea ecx, [ebp - 0x4c]
call fcn.00423337
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.File
push eax
mov byte [ebp - 4], 0x53
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x54
cmp eax, ebx
jne 0x422d6c
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040be97
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x53
call fcn.0041a3cb
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x170]
call fcn.00425f46
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x4c]
push ebx
push eax
call fcn.004217ba
mov eax, str.____Successful
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x422dbb
mov eax, 0x47d8e0
lea ecx, [ebp + 0x27]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0x74]
push 1
push eax
mov byte [ebp - 4], 0x55
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x53
call fcn.00406320
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x4c]
jmp 0x4232a8
push str.behavior
lea ecx, [ebp + 8]
call fcn.00425c63
test eax, eax
jne 0x4232ad
mov eax, str.behavior
mov edi, 0x4675b0
mov ecx, eax
mov esi, 0x4675a8
test ecx, ecx
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x54], esi
jne 0x422e28
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x56
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.00406320
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
push str.Optional
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x57
cmp eax, ebx
mov dword [ebp - 0xfc], edi
mov dword [ebp - 0xdc], esi
jne 0x422e84
mov eax, 0x47d8e0
lea ecx, [ebp - 0x11]
push ebx
push ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0040b3c8
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x59
call fcn.0041a3cb
lea eax, [ebp - 0x18]
push 0xa
push eax
lea ecx, [ebp - 0xfc]
call fcn.004267de
cmp dword [ebp - 0x18], ebx
je 0x422ec4
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x30c], 1
mov eax, str.Optional
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x422eda
mov eax, 0x47d8e0
lea ecx, [ebp - 0x13]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x5a
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x59
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0xfc]
push ebx
push eax
call fcn.004217ba
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0xc8]
push str.Reboot
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x5b
cmp eax, ebx
jne 0x422f3d
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0xfc]
call fcn.0040be97
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x59
call fcn.0041a3cb
lea eax, [ebp - 0x18]
push 0xa
push eax
lea ecx, [ebp - 0xfc]
call fcn.004267de
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x422f79
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x304], eax
mov eax, str.Reboot
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x422f8f
mov eax, 0x47d8e0
lea ecx, [ebp - 0x13]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x5c
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x59
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0xfc]
push ebx
push eax
call fcn.004217ba
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0xc8]
push str.Failure
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x5d
cmp eax, ebx
jne 0x422ff2
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0xfc]
call fcn.0040be97
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x59
call fcn.0041a3cb
lea eax, [ebp - 0x18]
push 0xa
push eax
lea ecx, [ebp - 0xfc]
call fcn.004267de
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x42302e
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x308], eax
mov eax, str.Failure
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x423044
mov eax, 0x47d8e0
lea ecx, [ebp - 0x13]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x5e
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x59
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0xfc]
push 1
push eax
call fcn.004217ba
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0xc8]
push 0x478e80
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x5f
cmp eax, ebx
jne 0x4230a7
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0xfc]
call fcn.0040be97
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x59
call fcn.0041a3cb
lea eax, [ebp - 0x18]
push 0xa
push eax
lea ecx, [ebp - 0xfc]
call fcn.004267de
cmp dword [ebp - 0x18], ebx
je 0x4230e2
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x30d], 1
mov eax, 0x478e80
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x4230f8
mov eax, 0x47d8e0
lea ecx, [ebp - 0x13]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x60
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x59
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0xfc]
push 1
push eax
call fcn.004217ba
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0xc8]
push str.Hidden
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x61
cmp eax, ebx
jne 0x42315b
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0xfc]
call fcn.0040be97
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x59
call fcn.0041a3cb
lea eax, [ebp - 0x18]
push 0xa
push eax
lea ecx, [ebp - 0xfc]
call fcn.004267de
cmp dword [ebp - 0x18], ebx
je 0x423196
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x161], 1
mov eax, str.Hidden
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x4231ac
mov eax, 0x47d8e0
lea ecx, [ebp - 0x13]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x62
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x59
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0xfc]
push 1
push eax
call fcn.004217ba
mov ecx, dword [ebp + 0x24]
lea eax, [ebp - 0xc8]
push str.MsiProgress
push eax
call fcn.0043946b
mov eax, dword [eax + 0x10]
mov byte [ebp - 4], 0x63
cmp eax, ebx
jne 0x42320f
mov eax, 0x47d8e0
push eax
lea ecx, [ebp - 0xfc]
call fcn.0040be97
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x59
call fcn.0041a3cb
lea eax, [ebp + 0x24]
push 0xa
push eax
lea ecx, [ebp - 0xfc]
call fcn.004267de
cmp dword [ebp + 0x24], ebx
je 0x42324a
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x162], 1
mov eax, str.MsiProgress
mov dword [ebp - 0x74], edi
mov ecx, eax
mov dword [ebp - 0x54], esi
test ecx, ecx
jne 0x423260
mov eax, 0x47d8e0
lea ecx, [ebp - 0x13]
push ebx
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b3c8
mov ecx, dword [ebp - 0x10]
push 1
lea eax, [ebp - 0x74]
push ebx
push eax
mov byte [ebp - 4], 0x64
call fcn.004217ba
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x59
call fcn.00406320
mov ecx, dword [ebp - 0x10]
push ebx
lea eax, [ebp - 0xfc]
push 1
push eax
call fcn.004217ba
mov byte [ebp - 4], bl
lea ecx, [ebp - 0xfc]
call fcn.00406320
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0041a3cb
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x20