Function at 0x42b1cc
Capabilities:
Contain obfuscated stackstrings
Move file

Disassembly:
push 0x1d4
mov eax, 0x46bc2f
call fcn.00443729
mov edi, ecx
cmp dword [ebp + 0x14], 0
mov eax, dword [ebp + 8]
mov ecx, dword [0x4a2794]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], ecx
jne 0x42b221
cmp dword [ebp + 0x18], 0
jne 0x42b221
xor eax, eax
inc eax
jmp 0x42c01f
xor esi, esi
mov ecx, edi
mov dword [eax], esi
call fcn.0040bc7e
mov dword [ebp - 0x1d4], eax
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x130], 0x477ab0
mov dword [ebp - 0x108], 0x478490
call fcn.00402580
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x100], 0x477ab0
mov dword [ebp - 0xd8], 0x478490
call fcn.00402580
mov byte [ebp - 4], 3
push ebx
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040ca90
mov byte [ebp - 4], 4
push ebx
push ebx
lea eax, [ebp - 0x1e0]
push eax
push esi
lea eax, [ebp - 0x130]
push eax
push str.dotnetfx.exe
lea eax, [ebp - 0x70]
push eax
mov ecx, edi
call fcn.00425999
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
inc bl
jne 0x42bfff
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040ca90
mov byte [ebp - 4], 8
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x130]
call fcn.0041e050
mov bl, al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
test bl, bl
je 0x42b3bf
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.isnetfx.exe
lea ecx, [ebp - 0x70]
call fcn.0040ca90
mov byte [ebp - 4], 0xa
push esi
push esi
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x130]
call fcn.0040f7be
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.00417192
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x70]
call fcn.00401580
cmp dword [ebp - 0x28], 8
lea ecx, [ebp - 0x3c]
cmovae ecx, dword [ebp - 0x3c]
cmp dword [ebp - 0x118], 8
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x42b3b3
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x130]
call fcn.0040cdaa
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp - 0x1e0], 1
jne 0x42b728
push esi
lea eax, [ebp - 0x1c1]
mov ebx, 0x477ab0
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x48], 0x478490
call fcn.00402580
mov byte [ebp - 4], 0x13
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x138], 0x478490
call fcn.00402580
mov byte [ebp - 4], 0x15
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x42b47f
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetredist.exe
lea ecx, [ebp - 0x40]
call fcn.0040ca90
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x1cc]
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.00425680
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x160]
call fcn.0040cdaa
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
jmp 0x42b597
cmp byte [ebx + 0x45], 0
je 0x42b59e
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.1033
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x1a
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x1b
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.Startup
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov ecx, ebx
call fcn.00436c07
mov byte [ebp - 4], 0x1d
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42b50c
mov eax, dword [eax]
mov edx, 0x485198
test eax, eax
mov ecx, edx
cmovne ecx, eax
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00405190
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1c0]
call fcn.00401580
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x40]
call fcn.00401580
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa0]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.dotnetfx.exe
lea ecx, [ebp - 0x1c0]
call fcn.0040ca90
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x160]
call fcn.00410807
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c0]
call fcn.00401580
jmp 0x42b5b4
cmp byte [ebx + 0x46], 0
je 0x42b5b4
push str.dotnetfx20.exe
lea ecx, [ebp - 0x15c]
call fcn.00405190
push esi
push 1
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x160]
push eax
mov ecx, edi
call fcn.0042651c
test eax, eax
je 0x42b641
cmp byte [ebx + 0x44], 0
je 0x42b5e2
push dword [ebp - 0x1cc]
mov ecx, edi
call fcn.004245e5
jmp 0x42b63d
cmp byte [ebx + 0x45], 0
je 0x42b65c
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x42b621
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 1
call fcn.004248e2
test eax, eax
je 0x42b641
mov eax, dword [ebp - 0x1c8]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42b615
mov eax, dword [eax]
push eax
mov ecx, edi
call fcn.00424692
test eax, eax
je 0x42b641
push 0x4783d4
mov ecx, edi
call fcn.00424692
test eax, eax
je 0x42b641
push str.1033
mov ecx, edi
call fcn.00424692
test eax, eax
jne 0x42b67c
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
jmp 0x42bffa
cmp byte [ebx + 0x46], 0
je 0x42b67c
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + 0x14], esi
je 0x42b67c
push dword [ebp + 0x18]
mov ecx, edi
push eax
push 2
call fcn.004248e2
jmp 0x42b63d
cmp dword [ebp + 0x18], 0
je 0x42b70d
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0x477ab0
mov dword [ebp - 0x18], 0x478490
call fcn.00402580
mov byte [ebp - 4], 0x41
cmp byte [ebx + 0x45], 0
je 0x42b7b9
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist.exe
lea ecx, [ebp - 0xa0]
call fcn.0040ca90
mov byte [ebp - 4], 0x42
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.0042651c
mov ebx, eax
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa0]
call fcn.00401580
inc bl
jne 0x42b800
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401580
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x160]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
call fcn.00401580
mov ebx, dword [ebp - 0x1d4]
cmp byte [ebx + 0x44], 0
je 0x42b811
cmp dword [ebp - 0x1d0], 0
je 0x42b75d
push str.__q:a__c:_install__q_
call fcn.00416f8b
pop ecx
push eax
push str.__q:a__c:_install__q_
lea ecx, [ebp - 0xfc]
call fcn.0042c777
push 1
push 0xa
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xa0]
call fcn.0041fe7a
mov byte [ebp - 4], 0x53
push eax
lea eax, [ebp - 0x1c0]
push 0x47b368
push eax
call fcn.0041f7a5
add esp, 0xc
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x100]
call fcn.004047c0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x1c0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa0]
jmp 0x42bed2
cmp byte [ebx + 0x46], 0
je 0x42b701
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.vjredist20.exe
lea ecx, [ebp - 0xa0]
call fcn.0040ca90
mov byte [ebp - 4], 0x49
push esi
push 1
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, edi
call fcn.0042651c
mov ebx, eax
neg ebx
sbb bl, bl
jmp 0x42b6ea
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x40]
call fcn.00401580
jmp 0x42b641
cmp dword [ebp + 0x14], 0
je 0x42bab1
push str.__q:a
call fcn.00416f8b
pop ecx
push eax
push str.__q:a
lea ecx, [ebp - 0xfc]
call fcn.0042c777
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x57
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x477c9c
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x58
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__ver:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x59
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4783d8
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp - 0x1d0], 0
mov ecx, str._redistui:F
mov eax, str._redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0042c750
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__c:_
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x5f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b3c8
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x60
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x61
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetFxCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x67
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b3e8
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x68
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x69
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
jmp 0x42babb
cmp dword [ebp + 0x18], 0
je 0x42bed7
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x6f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x70
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__coreui:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x71
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetCoreSetupUILang
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x77
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x78
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langs:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x79
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPacks
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp + 0x18], 0
je 0x42bed7
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x7f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x80
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jsharpver:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x81
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JVersion
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
cmp dword [ebp + 0x14], 0
jne 0x42be0f
cmp dword [ebp - 0x1d0], 0
mov ecx, str.__redistui:F
mov eax, str.__redistui:S
cmove eax, ecx
push eax
lea ecx, [ebp - 0xfc]
call fcn.0042c750
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x485198
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x87
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b3e8
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x88
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__langcmd:__q:a__c:_
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x89
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.DotNetLangPackCmd
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.__q:a__c:_
lea ecx, [ebp - 0x40]
call fcn.004025e0
mov byte [ebp - 4], 0x8f
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x47b504
lea ecx, [ebp - 0x70]
call fcn.004025e0
mov byte [ebp - 4], 0x90
push 1
lea eax, [ebp - 0x1c1]
push eax
push str._jscmd:
lea ecx, [ebp - 0xd0]
call fcn.004025e0
mov byte [ebp - 4], 0x91
push 1
lea eax, [ebp - 0x1c1]
push eax
push str.JCmdLine
lea ecx, [ebp - 0xa0]
call fcn.004025e0
mov byte [ebp - 4], 0x92
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, edi
call fcn.004204a1
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xa0]
call fcn.00401580
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xd0]
call fcn.00401580
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x70]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401580
push esi
lea eax, [ebp - 0x1c1]
push eax
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], 0x477ab0
mov dword [ebp - 0x168], 0x478490
call fcn.00402580
mov byte [ebp - 4], 0x98
push 0x452
lea eax, [ebp - 0x1c0]
push eax
mov ecx, edi
call fcn.0040bc7e
mov ecx, dword [eax + 0x260]
call fcn.004179aa
mov byte [ebp - 4], 0x99
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x42bf2f
mov eax, dword [eax]
push str.Microsoft_R__.NET_Framework
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.00418008
add esp, 0xc
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1c0]
call fcn.00401580
cmp dword [ebp - 0x178], 8
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
push eax
mov ecx, ebx
call fcn.00438e44
mov eax, dword [ebx + 0x260]
cmp byte [eax + 1], 0
jne 0x42bf86
cmp byte [eax + 2], 0
jne 0x42bf86
xor eax, eax
inc eax
jmp 0x42bf88
mov eax, esi
push 2
push dword [ebp - 0x1d8]
xor ebx, ebx
test al, al
setne bl
call dword [sym.imp.USER32.dll_GetDlgItem]
push esi
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
mov edi, eax
push edi
call esi
cmp dword [ebp - 0xe8], 8
mov edx, dword [ebp - 0x1d4]
push edx
lea ecx, [ebp - 0xfc]
cmovae ecx, dword [ebp - 0xfc]
cmp dword [ebp - 0x118], 8
push ebx
lea eax, [ebp - 0x12c]
cmovae eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.00441679
mov ecx, dword [ebp - 0x1dc]
push 1
push edi
mov dword [ecx], eax
call esi
xor esi, esi
inc esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x190]
call fcn.00401580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x100]
call fcn.00401580
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.00401580
mov eax, esi
call fcn.004436d8
ret 0x18