Function at 0x10001f40
Capabilities:
Create process on windows
Get common file path
Get file size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x368
mov eax, dword [0x100760c0]
xor eax, esp
mov dword [esp + 0x364], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
push edi
mov edi, dword [ebp + 8]
test eax, eax
je 0x10002124
cmp dword [0x10076be8], 0
jne 0x100020fc
push 0x40
push 2
push eax
call fcn.10037d37
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100020fc
lea eax, [esp + 0x3c]
mov byte [0x10076be4], 1
push eax
lea eax, [esp + 0x3c]
mov byte [0x10076bd9], 0
push eax
lea eax, [esp + 0x3c]
mov dword [0x10076ba8], 0x10076ba0
push eax
push esi
mov dword [0x10076bac], 0x10076ba4
mov dword [0x10076bb8], 0x10076bb0
mov dword [0x10076bbc], 0x10076bb4
mov dword [0x10076bc8], 0x10076bc0
mov dword [0x10076bcc], 0x10076bc4
mov dword [0x10076ba4], 0
mov dword [0x10076bb4], 0
mov dword [0x10076bc4], 0
mov dword [0x10076ba0], 0
mov dword [0x10076bb0], 0
mov dword [0x10076bc0], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
call fcn.1003e244
mov eax, dword [esp + 0x44]
add esp, 0x10
mov ecx, dword [0x100787c4]
mov dword [0x10076ba8], eax
mov dword [0x10076bac], eax
mov eax, dword [esp + 0x38]
mov dword [0x10076bb8], eax
mov dword [0x10076bbc], eax
mov eax, dword [esp + 0x3c]
mov dword [0x10076bc8], eax
mov dword [0x10076bcc], eax
mov eax, dword [0x100787c0]
mov dword [0x10076bdc], eax
mov eax, dword [0x10076bd0]
mov dword [0x10076be8], esi
mov dword [0x10076be0], ecx
mov dword [0x10076bd4], 0
mov ecx, dword [eax + 4]
mov dword [esp + 0x10], ecx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [esp + 0xc]
push eax
call fcn.10006a50
add esp, 4
mov ecx, 0x10076b9c
push eax
call fcn.100051e0
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x100020df
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x100020df
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov eax, dword [0x10076b98]
xor edx, edx
mov ecx, dword [eax + 4]
mov eax, 4
add ecx, 0x10076b98
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x1000211c
mov eax, dword [0x10076b98]
mov ecx, dword [eax + 4]
xor eax, eax
add ecx, 0x10076b98
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.10009750
test edi, edi
je 0x10002182
push ecx
push edi
lea ecx, [esp + 0x24]
call fcn.10004420
mov edx, eax
lea ecx, [esp + 0x104]
call fcn.1000aaa0
mov ecx, dword [esp + 0x34]
add esp, 4
cmp ecx, 7
jbe 0x100021ab
mov edx, dword [esp + 0x1c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10002176
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034a7
push ecx
push edx
call fcn.10038e67
add esp, 8
jmp 0x100021ab
xorps xmm0, xmm0
mov dword [esp + 0x110], 0
movaps xmmword [esp + 0x100], xmm0
mov dword [esp + 0x114], 0xf
mov byte [esp + 0x100], 0
mov eax, dword [esp + 8]
test eax, eax
je 0x1000220d
push ecx
push eax
lea ecx, [esp + 0x24]
call fcn.10004420
mov edx, eax
lea ecx, [esp + 0xc4]
call fcn.1000aaa0
mov ecx, dword [esp + 0x34]
add esp, 4
cmp ecx, 7
jbe 0x10002236
mov edx, dword [esp + 0x1c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10002201
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034ac
push ecx
push edx
call fcn.10038e67
add esp, 8
jmp 0x10002236
xorps xmm0, xmm0
mov dword [esp + 0xd0], 0
movaps xmmword [esp + 0xc0], xmm0
mov dword [esp + 0xd4], 0xf
mov byte [esp + 0xc0], 0
mov edx, str.Start_Opera_installation_n
mov ecx, 0x10076b98
call fcn.10006510
mov edx, str.Using_UUID:
mov ecx, 0x10076b98
call fcn.10006510
cmp dword [esp + 0x114], 0xf
lea edx, [esp + 0x100]
push dword [esp + 0x110]
cmova edx, dword [esp + 0x104]
mov ecx, eax
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
mov edx, str.Using_UTM_content_ID:
mov ecx, 0x10076b98
call fcn.10006510
cmp dword [esp + 0xd4], 0xf
lea edx, [esp + 0xc0]
push dword [esp + 0xd0]
cmova edx, dword [esp + 0xc4]
mov ecx, eax
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
mov edx, str.Using_UTM_campaign:
mov ecx, 0x10076b98
call fcn.10006510
cmp dword [0x10076b94], 0xf
mov edx, str.1001
push dword [0x10076b90]
cmova edx, dword [str.1001]
mov ecx, eax
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
xorps xmm0, xmm0
mov dword [esp + 0xb0], 0
xor eax, eax
movaps xmmword [esp + 0xa0], xmm0
mov word [esp + 0xa0], ax
lea eax, [esp + 0x160]
push eax
push 0x104
mov dword [esp + 0xbc], 7
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, 0x104
jbe 0x1000239f
mov eax, dword [esp + 0xb4]
cmp eax, 8
jb 0x10002383
cmp eax, 7
mov dword [esp + 0xb0], 8
push 0x10
lea esi, [esp + 0xa4]
cmova esi, dword [esp + 0xa4]
push 0x10071548
push esi
call fcn.1003a5b0
add esp, 0xc
xor eax, eax
mov word [esi + 0x10], ax
jmp 0x1000242a
push 0x10071548
push dword [esp + 0xc]
lea ecx, [esp + 0xa8]
push 8
call fcn.1000a500
jmp 0x1000242a
test eax, eax
je 0x1000233f
lea ecx, [esp + 0x160]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100023b0
mov eax, dword [esp + 0xb4]
sub ecx, edx
sar ecx, 1
cmp ecx, eax
ja 0x10002400
cmp eax, 7
mov dword [esp + 0xb0], ecx
lea esi, [ecx + ecx]
push esi
lea eax, [esp + 0x164]
lea edi, [esp + 0xa4]
cmova edi, dword [esp + 0xa4]
push eax
push edi
call fcn.1003a5b0
add esp, 0xc
xor eax, eax
mov word [edi + esi], ax
jmp 0x10002419
lea eax, [esp + 0x160]
push eax
push dword [esp + 0xc]
push ecx
lea ecx, [esp + 0xac]
call fcn.1000a500
push str.OperaSetup.exe
lea ecx, [esp + 0xa4]
call fcn.1000ab80
cmp dword [esp + 0xb4], 7
lea eax, [esp + 0xa0]
push 0
cmova eax, dword [esp + 0xa4]
push 0x8000080
push 4
push 0
push 1
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0xc], eax
cmp eax, 0xffffffff
jne 0x10002611
mov edx, str.Failed_to_create_file
mov ecx, 0x10076b98
call fcn.10006510
push ecx
lea edx, [esp + 0xa4]
mov esi, eax
lea ecx, [esp + 0x84]
call fcn.1000aaa0
add esp, 4
lea edx, [esp + 0x80]
cmp dword [esp + 0x94], 0xf
mov ecx, esi
cmova edx, dword [esp + 0x80]
push dword [esp + 0x90]
call fcn.10007b90
add esp, 4
mov edx, str.__error_code
mov ecx, eax
call fcn.10006510
mov edi, eax
lea esi, [esp + 0x155]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov dword [esp + 0x38], ecx
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
add cl, al
mov eax, dword [esp + 0x38]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [esp + 0x38], eax
test eax, eax
jne 0x100024d8
push ecx
lea eax, [esp + 0x159]
push eax
push esi
lea ecx, [esp + 0xec]
call fcn.100097d0
cmp dword [esp + 0xf4], 0xf
lea edx, [esp + 0xe0]
push dword [esp + 0xf0]
cmova edx, dword [esp + 0xe4]
mov ecx, edi
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
mov ecx, dword [esp + 0xf4]
cmp ecx, 0xf
jbe 0x10002585
mov edx, dword [esp + 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000257b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034b1
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0x94]
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0xf
mov byte [esp + 0xe0], 0
cmp ecx, 0xf
jbe 0x100025df
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100025d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034b1
push ecx
push edx
call fcn.10038e67
add esp, 8
push dword [0x10078708]
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0xf
mov byte [esp + 0x84], 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
or esi, 0xffffffff
jmp 0x1000339d
call fcn.1000adb0
mov edi, eax
mov dword [esp + 0x14], edi
test edi, edi
jne 0x10002634
push dword [0x10078708]
call dword [sym.imp.KERNEL32.dll_SetEvent]
or esi, 0xffffffff
jmp 0x1000339d
xorps xmm0, xmm0
mov dword [esp + 0xf0], 0
movaps xmmword [esp + 0xe0], xmm0
lea ecx, [esp + 0x80]
mov dword [esp + 0xf4], 0xf
mov byte [esp + 0xe0], 0
call fcn.10009cd0
cmp dword [esp + 0x90], 0
jbe 0x100026d6
cmp dword [esp + 0x94], 7
lea edx, [esp + 0x80]
lea ecx, [esp + 0x1c]
cmova edx, dword [esp + 0x80]
call fcn.10009f30
push eax
lea ecx, [esp + 0xe4]
call fcn.100063d0
mov ecx, dword [esp + 0x30]
cmp ecx, 0xf
jbe 0x100026d6
mov edx, dword [esp + 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100026cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034b6
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0x94]
cmp ecx, 7
jbe 0x10002718
mov edx, dword [esp + 0x80]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000270e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034bb
push ecx
push edx
call fcn.10038e67
add esp, 8
mov eax, dword fs:[0x2c]
mov ecx, dword [0x10077f40]
mov dword [esp + 8], eax
mov esi, dword [eax + ecx*4]
mov eax, dword [0x10078750]
cmp eax, dword [esi + 4]
jle 0x10002811
push 0x10078750
call fcn.10038ef6
add esp, 4
cmp dword [0x10078750], 0xffffffff
jne 0x10002811
push 0
xorps xmm0, xmm0
mov dword [esp + 0x94], 0
push 0x100714de
lea ecx, [esp + 0x88]
movaps xmmword [esp + 0x88], xmm0
mov dword [esp + 0x9c], 0
call fcn.10009be0
lea eax, [esp + 0x80]
mov ecx, 0x10078754
push eax
lea eax, [esp + 0xe4]
push eax
lea eax, [esp + 0x108]
push 0x10076c48
push eax
lea edx, [esp + 0xd0]
call fcn.100017c0
mov ecx, dword [esp + 0xa4]
add esp, 0x10
cmp ecx, 0xf
jbe 0x100027f7
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100027ed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
push 0x1005ffd0
call fcn.10038e52
add esp, 4
push 0x10078750
call fcn.10038ea5
add esp, 4
push 0
push 0x51
push edi
call fcn.1000dbe0
add esp, 0xc
push 0
push 0x40
push edi
call fcn.1000dbe0
add esp, 0xc
push 0
push 0x2751
push edi
call fcn.1000dbe0
add esp, 0xc
push 1
push 0x34
push edi
call fcn.1000dbe0
add esp, 0xc
push 5
push 0x44
push edi
call fcn.1000dbe0
add esp, 0xc
push 7
push 0xa1
push edi
call fcn.1000dbe0
add esp, 0xc
push 0x100017b0
push 0x4e2b
push edi
call fcn.1000dbe0
add esp, 0xc
mov eax, 0x10078754
cmp dword [0x10078768], 0xf
cmova eax, dword [0x10078754]
push eax
push 0x2712
push edi
call fcn.1000dbe0
add esp, 0xc
mov edx, str.Sending_start_request:
mov ecx, 0x10076b98
call fcn.10006510
cmp dword [0x10078768], 0xf
mov edx, 0x10078754
push dword [0x10078764]
cmova edx, dword [0x10078754]
mov ecx, eax
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
push edi
call fcn.1000adf0
mov eax, dword [0x1007876c]
add esp, 4
cmp eax, dword [esi + 4]
jle 0x10002b83
push 0x1007876c
call fcn.10038ef6
add esp, 4
cmp dword [0x1007876c], 0xffffffff
jne 0x10002b83
mov ecx, dword [0x10076b90]
mov eax, bind
sub eax, ecx
cmp eax, 0x52
jb 0x100034c0
cmp dword [0x10076b94], 0xf
mov eax, str.1001
push ecx
cmova eax, dword [str.1001]
push eax
push 0x52
push str.https:__net.geo.opera.com_opera_stable_utm_mediumapbutm_sourceOFTutm_campaign
push ecx
push dword [esp + 0x1c]
lea ecx, [esp + 0x98]
call fcn.10004550
mov edx, dword [esp + 0x94]
mov eax, edx
mov ecx, dword [esp + 0x90]
sub eax, ecx
push 0xd
push str.utm_content
cmp eax, 0xd
jb 0x1000299c
cmp edx, 0xf
lea esi, [esp + 0x88]
lea eax, [ecx + 0xd]
cmova esi, dword [esp + 0x88]
add esi, ecx
mov dword [esp + 0x98], eax
push esi
call fcn.1003a5b0
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [esp + 0x80]
jmp 0x100029ae
push dword [esp + 0x10]
lea ecx, [esp + 0x8c]
push 0xd
call fcn.10008f50
mov dword [esp + 0x150], 0
lea edx, [esp + 0xc0]
mov dword [esp + 0x154], 0
xorps xmm0, xmm0
movaps xmmword [esp + 0x140], xmm0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x140], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x150], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [esp + 0xd4], 0xf
mov ecx, dword [esp + 0xd0]
cmova edx, dword [esp + 0xc0]
mov esi, dword [esp + 0x150]
mov eax, dword [esp + 0x154]
sub eax, esi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x3c], esi
push ecx
push edx
cmp ecx, eax
ja 0x10002a7c
cmp dword [esp + 0x15c], 0xf
lea eax, [ecx + esi]
mov dword [esp + 0x158], eax
lea esi, [esp + 0x148]
cmova esi, dword [esp + 0x148]
mov eax, dword [esp + 0x44]
add eax, esi
push eax
call fcn.1003a5b0
mov eax, dword [esp + 0x40]
add esp, 0xc
mov ecx, dword [esp + 0x3c]
add eax, esi
mov byte [eax + ecx], 0
lea eax, [esp + 0x140]
jmp 0x10002a8d
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x150]
call fcn.10008f50
mov dword [0x10078780], 0
xorps xmm0, xmm0
movups xmmword [0x10078770], xmm0
mov dword [0x10078784], 0
movups xmm0, xmmword [eax]
movups xmmword [0x10078770], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [0x10078780], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [esp + 0x154]
cmp ecx, 0xf
jbe 0x10002b0f
mov edx, dword [esp + 0x140]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002b05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034c5
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x150], 0
mov dword [esp + 0x154], 0xf
mov byte [esp + 0x140], 0
cmp ecx, 0xf
jbe 0x10002b69
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002b5f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034c5
push ecx
push edx
call fcn.10038e67
add esp, 8
push 0x1005ff70
call fcn.10038e52
add esp, 4
push 0x1007876c
call fcn.10038ea5
add esp, 4
mov edx, str.Downloading_URL:
mov ecx, 0x10076b98
call fcn.10006510
cmp dword [0x10078784], 0xf
mov edx, 0x10078770
push dword [0x10078780]
cmova edx, dword [0x10078770]
mov ecx, eax
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
cmp dword [0x10078784], 0xf
mov eax, 0x10078770
cmova eax, dword [0x10078770]
push eax
push 0x2712
push edi
call fcn.1000dbe0
mov esi, dword [esp + 0x18]
add esp, 0xc
push esi
push 0x2711
push edi
call fcn.1000dbe0
add esp, 0xc
push 0x10001760
push 0x4e2b
push edi
call fcn.1000dbe0
add esp, 0xc
push edi
call fcn.1000adf0
add esp, 4
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
mov edx, str.Downloaded_Opera_file_size:
mov ecx, 0x10076b98
mov dword [esp + 0x34], esi
call fcn.10006510
mov ecx, esi
mov dword [esp + 0x3c], eax
lea edi, [esp + 0x155]
mov dword [esp + 0x38], ecx
nop dword [eax]
mov eax, 0xcccccccd
dec edi
mul ecx
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
add cl, al
mov eax, dword [esp + 0x38]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [esp + 0x38], eax
test eax, eax
jne 0x10002c40
push ecx
lea eax, [esp + 0x159]
push eax
push edi
lea ecx, [esp + 0x8c]
call fcn.100097d0
cmp dword [esp + 0x94], 0xf
lea edx, [esp + 0x80]
push dword [esp + 0x90]
cmova edx, dword [esp + 0x84]
mov ecx, dword [esp + 0x40]
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
mov ecx, dword [esp + 0x94]
mov edi, dword [esp + 0x14]
cmp ecx, 0xf
jbe 0x10002cf3
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002ce9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034ca
push ecx
push edx
call fcn.10038e67
add esp, 8
mov eax, dword [esp + 8]
mov ecx, dword [0x10077f40]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10078788]
cmp eax, dword [ecx + 4]
jle 0x10002e63
push 0x10078788
call fcn.10038ef6
add esp, 4
cmp dword [0x10078788], 0xffffffff
jne 0x10002e63
push 0
xorps xmm0, xmm0
mov dword [esp + 0x94], 0
push 0x100714de
lea ecx, [esp + 0x88]
movaps xmmword [esp + 0x88], xmm0
mov dword [esp + 0x9c], 0
call fcn.10009be0
lea edi, [esp + 0x155]
mov eax, 0xcccccccd
dec edi
mul esi
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
mov esi, edx
add cl, al
mov eax, dword [esp + 0x34]
add cl, cl
sub al, cl
add al, 0x30
mov byte [edi], al
mov eax, edx
mov dword [esp + 0x34], eax
test eax, eax
jne 0x10002d66
push ecx
lea eax, [esp + 0x159]
push eax
push edi
lea ecx, [esp + 0x28]
call fcn.100097d0
lea eax, [esp + 0x80]
mov ecx, 0x1007878c
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x108]
push 0x10076c60
push eax
lea edx, [esp + 0xd0]
call fcn.100017c0
mov ecx, dword [esp + 0x40]
add esp, 0x10
cmp ecx, 0xf
jbe 0x10002e09
mov edx, dword [esp + 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002dff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0x94]
cmp ecx, 0xf
jbe 0x10002e45
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002e3b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
push 0x1005ff10
call fcn.10038e52
add esp, 4
push 0x10078788
call fcn.10038ea5
mov edi, dword [esp + 0x18]
add esp, 4
push 0x100017b0
push 0x4e2b
push edi
call fcn.1000dbe0
add esp, 0xc
mov eax, 0x1007878c
cmp dword [0x100787a0], 0xf
cmova eax, dword [0x1007878c]
push eax
push 0x2712
push edi
call fcn.1000dbe0
add esp, 0xc
mov edx, str.Sending_downloaded_request:
mov ecx, 0x10076b98
call fcn.10006510
cmp dword [0x100787a0], 0xf
mov edx, 0x1007878c
push dword [0x1007879c]
cmova edx, dword [0x1007878c]
mov ecx, eax
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
push edi
call fcn.1000adf0
add esp, 4
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.__silent___allusers0
lea ecx, [esp + 0x12c]
call fcn.10004420
mov edx, str.Launch_parameters:
mov ecx, 0x10076b98
call fcn.10006510
push ecx
lea edx, [esp + 0x12c]
mov esi, eax
lea ecx, [esp + 0x84]
call fcn.1000aaa0
add esp, 4
lea edx, [esp + 0x80]
cmp dword [esp + 0x94], 0xf
mov ecx, esi
cmova edx, dword [esp + 0x80]
push dword [esp + 0x90]
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
mov ecx, dword [esp + 0x94]
cmp ecx, 0xf
jbe 0x10002f88
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002f7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034cf
push ecx
push edx
call fcn.10038e67
add esp, 8
cmp dword [esp + 0xb4], 7
lea eax, [esp + 0xa0]
xorps xmm0, xmm0
mov dword [esp + 0x44], 0x3c
cmova eax, dword [esp + 0xa0]
cmp dword [esp + 0x13c], 7
mov dword [esp + 0x54], eax
lea eax, [esp + 0x128]
cmova eax, dword [esp + 0x128]
push 6
push 0
movlpd qword [esp + 0x70], xmm0
movlpd qword [esp + 0x78], xmm0
movlpd qword [esp + 0x80], xmm0
mov dword [esp + 0x50], 0x40
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], str.open
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 5
mov dword [esp + 0x6c], 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov edx, str.Launching_Opera_installer
mov ecx, 0x10076b98
call fcn.10006510
mov esi, eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + esi + 0x30]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x18], ecx
mov edx, dword [ecx]
call dword [edx + 4]
lea eax, [esp + 0x14]
push eax
call fcn.10008640
add esp, 4
mov ecx, dword [eax]
push 0xa
mov edx, dword [ecx + 0x20]
mov ecx, eax
call edx
mov ecx, dword [esp + 0x18]
mov byte [esp + 0xc], al
test ecx, ecx
je 0x10003075
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test eax, eax
je 0x10003075
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
push dword [esp + 0xc]
mov ecx, esi
call fcn.100079d0
mov ecx, esi
call fcn.10006040
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov dword [esp + 0x40], 0xfffffffe
test eax, eax
je 0x100032e3
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x100032e3
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [esp + 0x40]
push eax
push dword [esp + 0x80]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ecx, 0x10076b98
test eax, eax
je 0x100030f0
mov edx, str.Exit_code:
call fcn.10006510
push dword [esp + 0x40]
mov ecx, eax
call fcn.10004250
mov ecx, eax
call fcn.100067b0
jmp 0x100030fa
mov edx, str.Error._Process_has_finished__but_its_impossible_to_retreive_exit_code._n
call fcn.10006510
push dword [esp + 0x7c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [esp + 8]
mov esi, dword [0x10077f40]
mov eax, dword [0x100787a4]
mov ecx, dword [edx + esi*4]
cmp eax, dword [ecx + 4]
jle 0x1000327d
push 0x100787a4
call fcn.10038ef6
add esp, 4
cmp dword [0x100787a4], 0xffffffff
jne 0x1000327d
mov ecx, dword [esp + 0x40]
lea esi, [esp + 0x155]
mov dword [esp + 0x34], ecx
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
add cl, al
mov eax, dword [esp + 0x34]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [esp + 0x34], eax
test eax, eax
jne 0x10003150
push ecx
lea eax, [esp + 0x159]
push eax
push esi
lea ecx, [esp + 0x28]
call fcn.100097d0
push 0
xorps xmm0, xmm0
mov dword [esp + 0x94], 0
push 0x100714de
lea ecx, [esp + 0x88]
movaps xmmword [esp + 0x88], xmm0
mov dword [esp + 0x9c], 0
call fcn.10009be0
lea eax, [esp + 0x1c]
mov ecx, 0x100787a8
push eax
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x108]
push 0x10076c78
push eax
lea edx, [esp + 0xd0]
call fcn.100017c0
mov ecx, dword [esp + 0xa4]
add esp, 0x10
cmp ecx, 0xf
jbe 0x1000322d
mov edx, dword [esp + 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003223
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0x30]
cmp ecx, 0xf
jbe 0x10003263
mov edx, dword [esp + 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003259
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
push 0x1005feb0
call fcn.10038e52
add esp, 4
push 0x100787a4
call fcn.10038ea5
add esp, 4
cmp dword [0x100787bc], 0xf
mov eax, 0x100787a8
cmova eax, dword [0x100787a8]
push eax
push 0x2712
push edi
call fcn.1000dbe0
add esp, 0xc
mov edx, str.Sending_installed_request:
mov ecx, 0x10076b98
call fcn.10006510
cmp dword [0x100787bc], 0xf
mov edx, 0x100787a8
push dword [0x100787b8]
cmova edx, dword [0x100787a8]
mov ecx, eax
call fcn.10007b90
add esp, 4
mov ecx, eax
call fcn.100067b0
push edi
call fcn.1000adf0
add esp, 4
jmp 0x100032f2
mov edx, str.Error._Unable_to_launch_process._n
mov ecx, 0x10076b98
call fcn.10006510
push edi
call fcn.1000ad90
mov ecx, dword [esp + 0x140]
add esp, 4
mov esi, dword [esp + 0x40]
cmp ecx, 7
jbe 0x10003341
mov edx, dword [esp + 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10003337
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0xf4]
xor eax, eax
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 7
mov word [esp + 0x128], ax
cmp ecx, 0xf
jbe 0x1000339d
mov edx, dword [esp + 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003393
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0xb4]
cmp ecx, 7
jbe 0x100033df
mov edx, dword [esp + 0xa0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100033d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0xd4]
xor eax, eax
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 7
mov word [esp + 0xa0], ax
cmp ecx, 0xf
jbe 0x1000343b
mov edx, dword [esp + 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003431
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0x114]
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0xf
mov byte [esp + 0xc0], 0
cmp ecx, 0xf
jbe 0x10003491
mov edx, dword [esp + 0x100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003487
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100034d4
push ecx
push edx
call fcn.10038e67
add esp, 8
mov ecx, dword [esp + 0x36c]
mov eax, esi
pop edi
pop esi
xor ecx, esp
call fcn.10038aec
mov esp, ebp
pop ebp
ret
call fcn.1003e0cf
call fcn.1003e0cf
call fcn.1003e0cf
call fcn.1003e0cf
call fcn.1003e0cf
call fcn.10009ad0
call fcn.1003e0cf
call fcn.1003e0cf
call fcn.1003e0cf
call fcn.1003e0cf
int3