Function at 0x4048ac
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe8c
push ebx
push esi
push edi
mov esi, eax
lea ebx, [ebp - 0xf8]
mov eax, 0x46124c
call fcn.004533cc
mov word [ebx + 0x10], 0x14
xor edx, edx
lea ecx, [ebp - 4]
mov dword [ebp - 4], edx
mov edx, 3
inc dword [ebx + 0x1c]
mov eax, dword [sym.AsusSetup.exe__ASInstallForm]
mov eax, dword [eax]
call fcn.0040a3b8
mov word [ebx + 0x10], 8
mov byte [ebp - 0xf9], 1
mov dword [ebp - 0x100], 0xb4
mov word [ebx + 0x10], 0x20
mov edx, 0x45f891
lea eax, [ebp - 8]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
lea eax, [esi + 0x32c]
call fcn.0045d54c
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0045d450
pop ecx
test cl, cl
je 0x404b37
mov word [ebx + 0x10], 0x38
mov edx, 0x45f892
lea eax, [ebp - 0xc]
call fcn.0045d380
inc dword [ebx + 0x1c]
mov ecx, dword [eax]
push ecx
mov eax, dword [esi + 0x32c]
push eax
call fcn.0040a5dc
add esp, 8
mov dword [ebp - 0x108], eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0x2c
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
call dword [edx + 0x14]
shl eax, 2
push eax
call fcn.00452828
pop ecx
mov dword [ebp - 0x10c], eax
xor ecx, ecx
mov dword [ebp - 0x110], ecx
jmp 0x404a7e
mov word [ebx + 0x10], 0x50
xor eax, eax
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x14]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x108]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x10], edx
lea edx, [ebp - 0x10]
inc dword [ebx + 0x1c]
call fcn.0045d728
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0x44
cmp dword [ebp - 0x10], 0
je 0x404a06
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax - 4]
jmp 0x404a08
xor ecx, ecx
inc ecx
push ecx
call fcn.00452828
pop ecx
mov edi, eax
mov eax, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x110]
mov dword [eax + edx*4], edi
mov ecx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x10], 0
je 0x404a38
mov edx, dword [ebp - 0x10]
jmp 0x404a3d
mov edx, 0x45f894
push esi
push edi
mov esi, edi
xor eax, eax
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 2
and ecx, 3
lea eax, [ebp - 0x10]
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
dec dword [ebx + 0x1c]
call fcn.0045d450
mov word [ebx + 0x10], 0x2c
inc dword [ebp - 0x110]
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x110]
jg 0x4049ad
push 6
push str.Static
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
call dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 0x10c]
push ecx
push str.32770
call fcn.0040a0e0
add esp, 0x14
mov eax, dword [ebp - 0x100]
push eax
call fcn.0040a1b8
pop ecx
mov dword [ebp - 0x104], eax
mov word [ebx + 0x10], 0x5c
xor edx, edx
mov dword [ebp - 0x18], edx
lea ecx, [ebp - 0x18]
inc dword [ebx + 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x108]
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x1c]
inc dword [ebx + 0x1c]
mov eax, str.Starting_to_skipping_WHQL_warning:
call fcn.0045d97c
lea edx, [ebp - 0x1c]
mov eax, esi
mov edx, dword [edx]
call fcn.00408c1c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 8
mov word [ebx + 0x10], 0x68
mov edx, 0x45f8c7
lea eax, [ebp - 0x20]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x20]
lea eax, [esi + 0x324]
call fcn.0045d534
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0045d450
pop ecx
test cl, cl
je 0x404d35
mov eax, dword [sym.AsusSetup.exe__ASInstallForm]
mov eax, dword [eax]
call fcn.00428808
mov edx, dword [sym.AsusSetup.exe__ASInstallForm]
mov eax, dword [edx]
mov edx, dword [eax]
call dword [edx + 0xb0]
xor ecx, ecx
mov dl, 1
mov eax, dword [0x463418]
call fcn.0040abd4
mov word [ebx + 0x10], 8
xor ecx, ecx
mov dword [ebp - 0x114], ecx
jmp 0x404d19
mov word [ebx + 0x10], 0x74
xor eax, eax
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x28]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x114]
mov eax, dword [esi + 0x318]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x28]
xor edx, edx
push eax
mov dword [ebp - 0x24], edx
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x24]
mov eax, dword [esi + 0x314]
mov edx, dword [ebp - 0x114]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x24]
xor edx, edx
mov dword [ebp - 0x2c], edx
lea ecx, [ebp - 0x2c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0045d4a8
lea edx, [ebp - 0x2c]
mov eax, esi
mov edx, dword [edx]
call fcn.004079c8
xor ecx, ecx
mov edx, 2
mov cl, al
cmp ecx, 1
sbb eax, eax
neg eax
push eax
lea eax, [ebp - 0x2c]
dec dword [ebx + 0x1c]
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0045d450
pop ecx
test cl, cl
je 0x404d13
mov byte [ebp - 0xf9], 0
mov word [ebx + 0x10], 0x80
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x30]
inc dword [ebx + 0x1c]
mov edx, dword [sym.AsusSetup.exe__ASInstallForm]
mov eax, dword [edx]
mov edx, 4
call fcn.0040a3b8
lea edx, [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x34]
inc dword [ebx + 0x1c]
mov eax, str.
call fcn.0045d97c
lea edx, [ebp - 0x34]
push edx
mov edx, str....
lea eax, [ebp - 0x38]
call fcn.0045d380
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x3c], eax
lea edx, [ebp - 0x38]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x3c]
pop eax
call fcn.0045d4a8
lea edx, [ebp - 0x3c]
lea eax, [ebp - 4]
call fcn.0045d480
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0045d450
jmp 0x40560c
inc dword [ebp - 0x114]
mov eax, dword [esi + 0x314]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x114]
jg 0x404bb2
jmp 0x40560c
mov dword [ebp - 0x118], 1
mov word [ebx + 0x10], 8
xor ecx, ecx
mov dword [ebp - 0x11c], ecx
jmp 0x405582
mov word [ebx + 0x10], 0x98
xor eax, eax
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x4c]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x11c]
mov eax, dword [esi + 0x318]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x4c]
xor edx, edx
push eax
mov dword [ebp - 0x48], edx
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x48]
mov eax, dword [esi + 0x314]
mov edx, dword [ebp - 0x11c]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x48]
xor edx, edx
mov dword [ebp - 0x40], edx
lea ecx, [ebp - 0x40]
inc dword [ebx + 0x1c]
pop edx
call fcn.0045d4a8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0x8c
mov word [ebx + 0x10], 0xa4
xor eax, eax
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov eax, esi
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x40]
call fcn.00408d28
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x40]
call fcn.0045d480
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0xb0
xor ecx, ecx
mov dword [ebp - 0x54], ecx
lea edx, [ebp - 0x54]
inc dword [ebx + 0x1c]
mov eax, dword [ebp - 0x40]
call fcn.00448924
lea eax, [ebp - 0x54]
xor edx, edx
mov dword [ebp - 0x44], edx
lea edx, [ebp - 0x44]
inc dword [ebx + 0x1c]
call fcn.0045d618
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0x8c
mov word [ebx + 0x10], 0xbc
mov edx, str..exe
lea eax, [ebp - 0x58]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x58]
lea eax, [ebp - 0x44]
call fcn.0045d534
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0045d450
pop ecx
test cl, cl
je 0x405264
mov word [ebx + 0x10], 0xc8
xor eax, eax
mov dword [ebp - 0x68], eax
lea ecx, [ebp - 0x68]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x11c]
mov eax, dword [esi + 0x31c]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x68]
push eax
xor edx, edx
mov dword [ebp - 0x5c], edx
lea ecx, [ebp - 0x5c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x40]
mov eax, 0x45f8df
call fcn.0045d97c
lea ecx, [ebp - 0x5c]
push ecx
mov edx, 0x45f8e1
lea eax, [ebp - 0x60]
call fcn.0045d380
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x64], eax
lea edx, [ebp - 0x60]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x64]
pop eax
call fcn.0045d4a8
lea eax, [ebp - 0x64]
xor edx, edx
mov dword [ebp - 0x6c], edx
lea ecx, [ebp - 0x6c]
inc dword [ebx + 0x1c]
pop edx
call fcn.0045d4a8
lea edx, [ebp - 0x6c]
lea eax, [ebp - 0x40]
call fcn.0045d480
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0045d450
push 0x44
push 0
lea ecx, [ebp - 0x164]
push ecx
call fcn.0045300c
add esp, 0xc
lea eax, [ebp - 0x174]
mov dword [ebp - 0x164], 0x44
push 0x10
push 0
push eax
call fcn.0045300c
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x120], edx
mov word [ebx + 0x10], 0x8c
mov edi, 1
jmp 0x405027
mov word [ebx + 0x10], 0xd4
xor eax, eax
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], eax
mov eax, edi
inc dword [ebx + 0x1c]
call fcn.0044f454
lea eax, [ebp - 0x70]
xor edx, edx
mov dword [ebp - 0x74], edx
lea edx, [ebp - 0x74]
inc dword [ebx + 0x1c]
call fcn.0045d6a0
lea eax, [ebp - 0x74]
push eax
mov edx, 0x45f8e4
lea eax, [ebp - 0x78]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x78]
pop eax
call fcn.0045d894
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0045d450
pop ecx
test ecx, ecx
je 0x405026
mov dword [ebp - 0x120], 0x8000000
inc edi
call fcn.0044f3f4
cmp edi, eax
jle 0x404f9e
lea eax, [ebp - 0x174]
lea edx, [ebp - 0x164]
push eax
push edx
mov word [ebx + 0x10], 0xe0
xor ecx, ecx
mov dword [ebp - 0x7c], ecx
lea ecx, [ebp - 0x7c]
inc dword [ebx + 0x1c]
mov eax, dword [esi + 0x314]
mov edx, dword [ebp - 0x11c]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x7c], 0
je 0x40506f
mov eax, dword [ebp - 0x7c]
jmp 0x405074
mov eax, 0x45f8f1
push eax
push 0
mov edx, dword [ebp - 0x120]
push edx
push 0
push 0
push 0
cmp dword [ebp - 0x40], 0
je 0x40508f
mov ecx, dword [ebp - 0x40]
jmp 0x405094
mov ecx, 0x45f8f0
push ecx
push 0
call sub.KERNEL32.DLL_CreateProcessA
mov dword [ebp - 0x118], eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0045d450
cmp dword [ebp - 0x118], 0
jne 0x405556
mov word [ebx + 0x10], 0xec
call sub.KERNEL32.DLL_GetLastError
xor edx, edx
mov dword [ebp - 0x80], edx
lea edx, [ebp - 0x80]
inc dword [ebx + 0x1c]
call fcn.00405804
lea edx, [ebp - 0x80]
xor eax, eax
mov dword [ebp - 0x84], eax
lea ecx, [ebp - 0x84]
inc dword [ebx + 0x1c]
mov eax, str.Create_setup_program_error:
call fcn.0045d97c
lea edx, [ebp - 0x84]
mov eax, esi
mov edx, dword [edx]
call fcn.00408c1c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0xf8
xor ecx, ecx
mov dword [ebp - 0x90], ecx
lea ecx, [ebp - 0x90]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x11c]
mov eax, dword [esi + 0x314]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x90]
push eax
mov edx, 0x45f90f
lea eax, [ebp - 0x88]
call fcn.0045d380
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x8c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x40]
call fcn.0045d4a8
lea eax, [ebp - 0x8c]
xor edx, edx
mov dword [ebp - 0x94], edx
lea ecx, [ebp - 0x94]
inc dword [ebx + 0x1c]
pop edx
call fcn.0045d4a8
lea edx, [ebp - 0x94]
mov eax, esi
mov edx, dword [edx]
call fcn.00408c1c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0045d450
push 0
push 0x45f931
mov word [ebx + 0x10], 0x104
xor ecx, ecx
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x98]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x40]
mov eax, str.Creating_setup_program_error:
call fcn.0045d97c
cmp dword [ebp - 0x98], 0
je 0x40523f
mov eax, dword [ebp - 0x98]
jmp 0x405244
mov eax, 0x45f93b
push eax
push 0
call sub.USER32.DLL_MessageBoxA
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0045d450
jmp 0x405556
cmp dword [ebp - 0x40], 0
je 0x405272
mov ecx, dword [ebp - 0x40]
mov edi, dword [ecx - 4]
jmp 0x405274
xor edi, edi
push edi
lea eax, [ebp - 0x40]
push eax
call fcn.0045d2fc
add esp, 8
lea eax, [ebp - 0x40]
call fcn.0045d5bc
add edi, dword [ebp - 0x40]
dec edi
movsx edx, byte [edi]
cmp edx, 0x5c
jne 0x405319
push 1
push 0
mov word [ebx + 0x10], 0x110
xor ecx, ecx
mov dword [ebp - 0x9c], ecx
lea ecx, [ebp - 0x9c]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x11c]
mov eax, dword [esi + 0x31c]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0x9c], 0
je 0x4052d6
mov eax, dword [ebp - 0x9c]
jmp 0x4052db
mov eax, 0x45f945
push eax
cmp dword [ebp - 0x40], 0
je 0x4052e7
mov edx, dword [ebp - 0x40]
jmp 0x4052ec
mov edx, 0x45f944
push edx
push str.explore
mov eax, dword [esi + 0x14c]
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov dword [ebp - 0x118], eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0045d450
jmp 0x405394
push 1
push 0
mov word [ebx + 0x10], 0x11c
xor ecx, ecx
mov dword [ebp - 0xa0], ecx
lea ecx, [ebp - 0xa0]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x11c]
mov eax, dword [esi + 0x31c]
mov edi, dword [eax]
call dword [edi + 0xc]
cmp dword [ebp - 0xa0], 0
je 0x405356
mov eax, dword [ebp - 0xa0]
jmp 0x40535b
mov eax, 0x45f947
push eax
cmp dword [ebp - 0x40], 0
je 0x405367
mov edx, dword [ebp - 0x40]
jmp 0x40536c
mov edx, 0x45f946
push edx
push 0
mov eax, dword [esi + 0x14c]
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov dword [ebp - 0x118], eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0045d450
cmp dword [ebp - 0x118], 0x20
jg 0x405556
mov word [ebx + 0x10], 0x128
xor ecx, ecx
mov dword [ebp - 0xa4], ecx
lea edx, [ebp - 0xa4]
inc dword [ebx + 0x1c]
mov eax, dword [ebp - 0x118]
call fcn.004485bc
lea edx, [ebp - 0xa4]
xor eax, eax
mov dword [ebp - 0xa8], eax
lea ecx, [ebp - 0xa8]
inc dword [ebx + 0x1c]
mov eax, 0x45f948
call fcn.0045d97c
lea edx, [ebp - 0xa8]
mov eax, esi
mov edx, dword [edx]
call fcn.00408c1c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0x134
xor ecx, ecx
mov dword [ebp - 0xb4], ecx
lea ecx, [ebp - 0xb4]
inc dword [ebx + 0x1c]
mov edx, dword [ebp - 0x11c]
mov eax, dword [esi + 0x314]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0xb4]
push eax
mov edx, 0x45f95d
lea eax, [ebp - 0xac]
call fcn.0045d380
inc dword [ebx + 0x1c]
xor ecx, ecx
mov dword [ebp - 0xb0], ecx
lea ecx, [ebp - 0xb0]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xac]
lea eax, [ebp - 0x40]
call fcn.0045d4a8
lea eax, [ebp - 0xb0]
xor edx, edx
mov dword [ebp - 0xb8], edx
lea ecx, [ebp - 0xb8]
inc dword [ebx + 0x1c]
pop edx
call fcn.0045d4a8
lea edx, [ebp - 0xb8]
mov eax, esi
mov edx, dword [edx]
call fcn.00408c1c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0045d450
push 0
push 0x45f975
mov word [ebx + 0x10], 0x140
xor ecx, ecx
mov dword [ebp - 0xbc], ecx
lea ecx, [ebp - 0xbc]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x40]
mov eax, str.ShellExecute_error:
call fcn.0045d97c
cmp dword [ebp - 0xbc], 0
je 0x40552e
mov eax, dword [ebp - 0xbc]
jmp 0x405533
mov eax, 0x45f97f
push eax
push 0
call sub.USER32.DLL_MessageBoxA
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0045d450
xor ecx, ecx
mov dword [ebp - 0x118], ecx
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0045d450
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 8
inc dword [ebp - 0x11c]
mov eax, dword [esi + 0x318]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x11c]
jg 0x404d52
cmp dword [ebp - 0x118], 0
je 0x40560c
mov word [ebx + 0x10], 0x14c
mov edx, 0x45f980
lea eax, [ebp - 0xc0]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xc0]
lea eax, [esi + 0x32c]
call fcn.0045d54c
test al, al
lea eax, [ebp - 0xc0]
setne cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebx + 0x1c]
call fcn.0045d450
pop ecx
test ecx, ecx
je 0x40560c
mov eax, dword [ebp - 0x100]
shl eax, 3
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
push eax
mov edx, dword [ebp - 0x104]
push edx
call sub.KERNEL32.DLL_WaitForSingleObject
mov word [ebx + 0x10], 0x158
mov edx, 0x45f981
lea eax, [ebp - 0xc4]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xc4]
lea eax, [esi + 0x32c]
call fcn.0045d54c
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0045d450
pop ecx
test cl, cl
je 0x405654
call fcn.0040a1fc
mov word [ebx + 0x10], 0x164
mov edx, str.Terminating...
lea eax, [ebp - 0xc8]
call fcn.0045d380
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00408c1c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 0x170
mov edx, 0x45f991
lea eax, [ebp - 0xcc]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xcc]
lea eax, [esi + 0x324]
call fcn.0045d534
test al, al
je 0x4056fc
mov edx, 0x45f993
lea eax, [ebp - 0xd0]
call fcn.0045d380
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xd0]
lea eax, [esi + 0x320]
call fcn.0045d894
test eax, eax
lea eax, [ebp - 0xd0]
sete cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebx + 0x1c]
call fcn.0045d450
pop ecx
test ecx, ecx
jne 0x405700
xor eax, eax
jmp 0x405705
mov eax, 1
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0045d450
pop ecx
test cl, cl
je 0x4057e3
cmp byte [ebp - 0xf9], 0
je 0x405734
cmp byte [esi + 0x329], 0
jne 0x40575c
push 0
mov ecx, 0x45f996
cmp dword [ebp - 4], 0
je 0x405746
mov edx, dword [ebp - 4]
jmp 0x40574b
mov edx, 0x45f9a0
mov eax, dword [0x467788]
mov eax, dword [eax]
call fcn.0045d2b8
jmp 0x4057e3
mov word [ebx + 0x10], 0x188
xor edx, edx
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0xd4], edx
mov edx, 5
inc dword [ebx + 0x1c]
mov eax, dword [sym.AsusSetup.exe__ASInstallForm]
mov eax, dword [eax]
call fcn.0040a3b8
mov word [ebx + 0x10], 0x17c
push 1
push 0x45f9a1
cmp dword [ebp - 0xd4], 0
je 0x4057a2
mov ecx, dword [ebp - 0xd4]
jmp 0x4057a7
mov ecx, 0x45f9ab
push ecx
mov eax, dword [sym.AsusSetup.exe__ASInstallForm]
mov eax, dword [eax]
call fcn.00438e14
push eax
call sub.USER32.DLL_MessageBoxA
dec eax
jne 0x4057ca
mov edx, dword [esi + 0x308]
push edx
call fcn.0040a98c
pop ecx
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0045d450
mov word [ebx + 0x10], 8
dec dword [ebx + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0045d450
mov ecx, dword [ebx]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret