Function at 0x403433
Capabilities:
Check os version
Contain obfuscated stackstrings
Resolve function by parsing pe exports
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x17bd4
call fcn.0041c290
mov eax, dword [0x436504]
xor eax, esp
mov dword [esp + 0x17bd0], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, ecx
xor esi, esi
mov dword [esp + 0x28], edi
mov dword [esp + 0x50], eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x58], esi
mov byte [esp + 0x2f], 0
call fcn.0040121b
test al, al
je 0x4034ac
push esi
lea eax, [esp + 0xd8]
push eax
push 0x539fe0
mov dword [esp + 0xe0], 1
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe8], esi
mov dword [esp + 0xec], esi
call sub.gdiplus.dll_GdiplusStartup
push str.IsWow64Process
push str.kernel32
mov byte [esp + 0xec], 0
mov dword [esp + 0x40], esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
cmp ebx, esi
je 0x4034e3
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call ebx
cmp dword [esp + 0x38], esi
lea eax, [esp + 0xe4]
jne 0x4034f4
push 0x20
jmp 0x4034f6
push 0x40
push 0x42ff50
push eax
call fcn.004179e2
add esp, 0xc
call fcn.00407b0d
push edi
mov dword [esp + 0x58], eax
mov byte [esp + 0x6c], 0x59
mov byte [esp + 0x6d], 0xbd
mov byte [esp + 0x6e], 0xc9
mov byte [esp + 0x6f], 0x52
mov byte [esp + 0x70], 0xaa
mov byte [esp + 0x71], 0x35
mov byte [esp + 0x72], 0xad
mov byte [esp + 0x73], 0xbb
mov byte [esp + 0x74], 0x10
mov byte [esp + 0x75], 0xef
mov byte [esp + 0x76], 0xde
mov byte [esp + 0x77], 0x67
mov byte [esp + 0x78], 0x2c
mov byte [esp + 0x79], 0x47
mov byte [esp + 0x7a], pe_nt_image_headers32
mov byte [esp + 0x7b], 0xb5
mov byte [esp + 0x7c], 0xd4
mov byte [esp + 0x7d], 0x82
mov byte [esp + 0x7e], 0x1f
mov byte [esp + 0x7f], 0x81
mov byte [esp + 0x80], 0x52
mov byte [esp + 0x81], 0xa1
mov byte [esp + 0x82], 2
mov byte [esp + 0x83], 0x44
mov byte [esp + 0x84], 0x2a
mov byte [esp + 0x85], 0xeb
mov byte [esp + 0x86], 0xaa
mov byte [esp + 0x87], 0x7b
mov byte [esp + 0x88], 0x79
mov byte [esp + 0x89], 0x3b
mov byte [esp + 0x8a], 0x93
mov byte [esp + 0x8b], 0x45
mov byte [esp + 0x8c], 0xae
mov byte [esp + 0x8d], 0xd2
mov byte [esp + 0x8e], 9
mov byte [esp + 0x8f], 0x7a
mov byte [esp + 0x90], 0x3e
mov byte [esp + 0x91], 0x2f
mov byte [esp + 0x92], 0x2e
mov byte [esp + 0x93], 0xfa
mov byte [esp + 0x94], 0xff
mov byte [esp + 0x95], 0x1d
mov byte [esp + 0x96], 0xf0
mov byte [esp + 0x97], 0x9b
mov byte [esp + 0x98], 0x19
mov byte [esp + 0x99], 0x7c
mov byte [esp + 0x9a], 0x15
mov byte [esp + 0x9b], 0xb8
mov byte [esp + 0x9c], 0x1e
mov byte [esp + 0x9d], 0x6d
mov byte [esp + 0x9e], 0xc6
mov byte [esp + 0x9f], 0x10
mov byte [esp + 0xa0], 0x41
mov byte [esp + 0xa1], 0x7e
mov byte [esp + 0xa2], 0x5c
mov byte [esp + 0xa3], 0xed
mov byte [esp + 0xa4], 0x51
mov byte [esp + 0xa5], 0xb1
mov byte [esp + 0xa6], 0x19
mov byte [esp + 0xa7], 0x1c
mov byte [esp + 0xa8], 0x3c
mov byte [esp + 0xa9], 0xe2
mov byte [esp + 0xaa], 0x94
mov byte [esp + 0xab], 0xd8
call fcn.00416f40
cmp eax, 3
pop ecx
jb 0x4036fa
cmp byte [edi], 0x5c
jne 0x4036e8
cmp byte [edi + 1], 0x5c
je 0x4036f4
cmp byte [edi + 1], 0x3a
jne 0x4036fa
cmp byte [edi + 2], 0x5c
jne 0x4036fa
mov dword [esp + 0x40], edi
jmp 0x403720
mov esi, 0x400
push esi
call fcn.00416db0
pop ecx
mov ebx, eax
push esi
push ebx
call fcn.00419ee5
push edi
mov esi, ebx
call fcn.0040820f
add esp, 0xc
mov dword [esp + 0x40], ebx
xor esi, esi
push dword [esp + 0x40]
push str._Extractor__The_absolute_wrapper_path_is__s_n
call fcn.00408291
push edi
push str._Extractor__The_executable_name_is__s_n
call fcn.00408291
push 0x42fb1c
push edi
call fcn.00418939
add esp, 0x18
cmp eax, esi
mov dword [esp + 0x1c], eax
jne 0x403763
push edi
push str._Extractor___Failed_to_extract_wrapper_params___couldnt_open_file__s_n
call fcn.00408291
pop ecx
pop ecx
push 1
call fcn.00417d7d
xor edi, edi
push dword [esp + 0x1c]
call fcn.00418714
pop ecx
push dword [esp + 0x1c]
mov ebx, eax
inc edi
call fcn.0041af46
test eax, eax
pop ecx
jne 0x40386c
cmp bl, byte [esp + esi + 0x68]
jne 0x40378d
inc esi
jmp 0x40378f
xor esi, esi
cmp esi, 0x40
jne 0x403765
cmp edi, 0xffffffff
mov dword [0x53a088], edi
je 0x40375c
push str._Extractor__Found_Params_marker._Extracting_now..._n
call fcn.00408291
pop ecx
mov edi, 0x30d40
push edi
call fcn.00416db0
pop ecx
push edi
push 0
push eax
mov dword [esp + 0x48], eax
call fcn.00418c50
add esp, 0xc
push dword [esp + 0x1c]
mov byte [esp + 0x13], 0
call fcn.00407af8
pop ecx
mov ebx, 0x430f94
push ebx
mov dword [esp + 0x38], eax
call fcn.00408291
pop ecx
mov esi, 0x430f98
push esi
call fcn.00408291
pop ecx
push dword [esp + 0x34]
push str._Processing__d_dynamic_properties_n
call fcn.00408291
push esi
call fcn.00408291
and dword [esp + 0x30], 0
add esp, 0xc
cmp dword [esp + 0x34], 0
jle 0x403a76
push dword [esp + 0x1c]
call fcn.00407ae7
pop ecx
push edi
push dword [esp + 0x20]
mov dword [esp + 0x18], eax
call fcn.00407a7b
mov esi, eax
push esi
call fcn.00416f40
add esp, 0xc
cmp eax, 0x64
jbe 0x40387b
lea eax, [esp + 0x68]
push 0x63
push eax
push eax
call fcn.004189a0
add esp, 0xc
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x14]
mov byte [esp + 0xd3], 0
push dword [esp + 0x2c]
push str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x403889
push str.Params
push str.Could_not_find_marker:__s_n
jmp 0x403755
push esi
push dword [esp + 0x14]
push dword [esp + 0x2c]
push str._DynProps__Dynamic_Param__d:__s__s__n
call fcn.00408291
mov eax, dword [esp + 0x4c]
add esp, 0x10
push esi
push dword [esp + 0x14]
call fcn.00407a53
push str.update_url
push dword [esp + 0x1c]
call fcn.00418f50
add esp, 0x10
test eax, eax
jne 0x4038c5
push esi
push str._DynProps__Dynamic_Update_URL:__s_n
mov dword [esp + 0x50], esi
call fcn.00408291
pop ecx
pop ecx
push str.match_versions
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x4038e6
push str.true
push esi
call fcn.00418f50
pop ecx
pop ecx
push str.wrapper_autotest
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x4038ff
mov byte [esp + 0x2f], 1
push str.show_no_ui
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x403929
push str.true
push esi
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x403929
mov byte [esp + 0xf], 1
push str.force_spawn
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x403954
push str.true
push esi
call fcn.00418f50
neg eax
sbb eax, eax
pop ecx
inc eax
pop ecx
mov dword [0x539ff0], eax
push str.splash_buffer
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x40397f
push esi
call fcn.00416f40
test eax, eax
pop ecx
jbe 0x40397f
push esi
call fcn.0041870f
pop ecx
mov dword [0x53a084], eax
push str.splash_image
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x4039fe
push esi
call fcn.00416f40
cmp eax, 0x64
pop ecx
jae 0x4039a7
push esi
push str._DynProps__Splash_Image_is__s_n
jmp 0x4039c9
push 0x63
lea eax, [esp + 0x6c]
push esi
push eax
call fcn.004189a0
add esp, 0xc
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0xcf], 0
push str._DynProps__Splash_Image_is__s..._n
call fcn.00408291
pop ecx
pop ecx
push str._DynProps__Base64_decoding_image..._n
call fcn.00408291
pop ecx
push esi
call fcn.00416f40
pop ecx
push eax
push esi
lea eax, [esp + 0x68]
call fcn.004013e4
push str._DynProps__Decode_complete_n
mov dword [esp + 0x64], eax
call fcn.00408291
add esp, 0xc
push str.jre_name
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x403a3c
mov byte [esp + 0x2800], al
lea eax, [esp + 0x2800]
push esi
push eax
call fcn.00416fe0
lea eax, [esp + 0x2808]
push eax
push str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.00408291
add esp, 0x10
push str.windows_app_id
push dword [esp + 0x14]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x403a64
push esi
push str._DynProps__Windows_APP_ID_is__s_n
call fcn.00408291
pop ecx
pop ecx
mov eax, esi
call fcn.00403297
inc dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x34]
jl 0x403818
push str.Processing_dynamic_properties_n
call fcn.00408467
cmp byte [ebp + 0x10], 0
pop ecx
je 0x403a92
push str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.00408291
pop ecx
push ebx
call fcn.00408291
mov dword [esp], str.Extracting_wrapper_tail_n
call fcn.0040843f
pop ecx
push dword [esp + 0x1c]
call fcn.0041a6b5
mov dword [esp], 0x42fb1c
push dword [esp + 0x2c]
call fcn.00418939
mov ebx, eax
test ebx, ebx
pop ecx
pop ecx
mov dword [esp + 0x1c], ebx
jne 0x403ad8
push dword [esp + 0x28]
push str._Extractor___Failed_to_extract_wrapper_tail___couldnt_open_file__s_n
jmp 0x403755
xor edi, edi
xor esi, esi
push ebx
call fcn.00418714
pop ecx
push ebx
mov dword [esp + 0x50], eax
inc edi
call fcn.0041af46
test eax, eax
pop ecx
jne 0x403bef
mov al, byte [esp + 0x4c]
mov ecx, dword [esp + 0x54]
cmp al, byte [esi + ecx]
jne 0x403b07
inc esi
jmp 0x403b09
xor esi, esi
cmp esi, 0x80
jne 0x403adc
cmp edi, 0xffffffff
mov dword [0x53a088], edi
je 0x40375c
push str._Extractor__Found_tail_marker_n
call fcn.00408291
pop ecx
push ebx
call fcn.00407ae7
pop ecx
push ebx
mov dword [esp + 0x2c], eax
call fcn.00407ae7
pop ecx
push ebx
mov dword [esp + 0x14], eax
call fcn.00407ae7
pop ecx
push ebx
mov dword [esp + 0x50], eax
call fcn.00407ae7
pop ecx
push ebx
mov dword [esp + 0x48], eax
call fcn.00407ae7
mov dword [esp], 0x2000
push ebx
mov dword [esp + 0x38], eax
call fcn.00407a7b
push ebx
mov dword [esp + 0x2c], eax
call fcn.00407ae7
add esp, 0xc
push ebx
mov dword [esp + 0x3c], eax
call fcn.00407ae7
pop ecx
push ebx
mov dword [esp + 0x58], eax
call fcn.00407ae7
pop ecx
push ebx
mov dword [esp + 0x60], eax
call fcn.00407ae7
mov esi, eax
mov dword [esp], 0x1388
push ebx
mov dword [esp + 0x6c], esi
call fcn.00407a7b
test esi, esi
pop ecx
mov edi, eax
pop ecx
mov dword [esp + 0x34], edi
je 0x403bd2
push esi
call fcn.00416f40
test eax, eax
pop ecx
jbe 0x403bd2
push esi
push str._Extractor__Required_Java_version__s_n
call fcn.00408291
pop ecx
pop ecx
push 0x42ffbc
push edi
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x403bf9
mov edi, dword [esp + 0x48]
push edi
push str._Extractor__Will_use_Dynamic_Update_URL:__s_n
jmp 0x403bff
push str.Tail
jmp 0x403871
push edi
push str._Extractor__Will_use_Static_Update_URL:__s_n
call fcn.00408291
cmp byte [esp + 0x17], 0
pop ecx
mov dword [esp + 0x28], edi
pop ecx
jne 0x403c28
push dword [esp + 0x50]
push dword [ebp + 8]
push dword [esp + 0x64]
call fcn.00403166
add esp, 0xc
mov byte [esp + 0xf], al
movzx eax, byte [esp + 0xf]
push eax
push str._Extractor__Is_silent_install_is__d_n
call fcn.00408291
push str.Extracting_tail_n
call fcn.00408467
add esp, 0xc
push str._Extractor__Setting_up_static_properties_n
call fcn.00408291
mov edi, dword [esp + 0x40]
pop ecx
push dword [esp + 0x34]
mov eax, edi
push str.update_url
call fcn.00407a2b
push dword [esp + 0x5c]
mov eax, edi
push str.install_type
call fcn.00407a2b
push dword [esp + 0x40]
mov eax, edi
push str.min_splash_ms
call fcn.00407a2b
push dword [esp + 0x38]
mov eax, edi
push str.jwsig_public_key
call fcn.00407a2b
push dword [esp + 0x58]
mov eax, edi
push str.can_override_splash
call fcn.00407a2b
push dword [esp + 0x50]
mov eax, edi
push str.app_name
call fcn.00407a2b
push dword [esp + 0x40]
mov eax, edi
push str.wrapper_app_version
call fcn.00407a2b
push dword [esp + 0x7c]
mov eax, edi
push str.wrapper_gu_version
call fcn.00407a2b
add esp, 0x40
push dword [esp + 0x5c]
mov eax, edi
push str.silent_parameter
call fcn.00407a2b
push esi
push str.java_version
mov eax, edi
call fcn.00407a2b
add esp, 0x10
cmp byte [esp + 0xf], 0
je 0x403d11
push str.true
push str.show_no_ui
mov eax, edi
call fcn.00407a2b
pop ecx
pop ecx
cmp dword [esp + 0x20], 0
je 0x403dd6
push dword [esp + 0x20]
call fcn.00416f40
test eax, eax
pop ecx
push dword [esp + 0x20]
jbe 0x403de2
call fcn.00416f40
mov esi, eax
shr esi, 1
inc esi
pop ecx
inc esi
push esi
call fcn.00416db0
pop ecx
push esi
push 0
push eax
mov dword [esp + 0x24], eax
call fcn.00418c50
add esp, 0xc
push dword [esp + 0x20]
push esi
push dword [esp + 0x20]
call fcn.00407d18
add esp, 0xc
push eax
push str._Extractor__Processed_public_key_of_length__d_n
mov dword [esp + 0x38], eax
call fcn.00408291
push 0x31
pop ecx
mov esi, 0x42c7a0
mov edi, 0x53a0a0
push 0x24
rep movsd dword es:[edi], dword [esi]
call fcn.00416db0
add esp, 0xc
mov esi, eax
push esi
push dword [esp + 0x34]
push dword [esp + 0x20]
call fcn.0040ad00
add esp, 0xc
test eax, eax
je 0x403dbe
push str.ERROR___unable_to_import_public_key._n
call fcn.00416e73
pop ecx
push esi
call fcn.00416cd3
and dword [esp + 0x1c], 0
pop ecx
jmp 0x403dc2
mov dword [esp + 0x18], esi
push dword [esp + 0x18]
push str._Extractor__Public_Key:__08X_n
call fcn.00408291
mov edi, dword [esp + 0x44]
jmp 0x403df8
push str._Extractor__Public_key_empty__no_public_key__n
call fcn.00408291
jmp 0x403df9
call fcn.00416f40
test eax, eax
pop ecx
ja 0x403dfa
push 0
push str._Extractor__Public_key_length__d__no_public_key__n
call fcn.00408291
pop ecx
pop ecx
mov ecx, dword [esp + 0x54]
call fcn.004085e2
push eax
push str._Extractor__Shared_dir_is__s_n
mov dword [esp + 0x38], eax
call fcn.00408291
mov esi, dword [esp + 0x2c]
push esi
push str._Extractor__Update_URL_is_currently__s_n
call fcn.00408291
push esi
call fcn.00416f40
add esp, 0x14
test eax, eax
jle 0x403e3d
add eax, esi
cmp byte [eax - 1], 0x2f
je 0x403e3d
mov byte [eax], 0x2f
mov byte [eax + 1], 0
push esi
push str._Extractor__Update_URL_is_now__s_n
call fcn.00408291
push str.JWrapper_
push dword [esp + 0x3c]
lea eax, [esp + 0x100]
call fcn.00408255
push dword [esp + 0x38]
lea eax, [esp + 0x104]
push eax
call fcn.00416fe0
lea eax, [esp + 0x108]
push eax
push str._Extractor__Master_folder_is__s_n
call fcn.00408291
lea eax, [esp + 0x110]
push eax
call fcn.004012c1
add esp, 0x24
lea eax, [esp + 0xf0]
push str.JWApps
push eax
lea eax, [esp + 0xf328]
call fcn.00408255
lea eax, [esp + 0xf328]
push str.JreNameOverride
push eax
lea eax, [esp + 0x11a40]
call fcn.00408255
lea eax, [esp + 0x11a40]
push 0x430c8c
push eax
call fcn.00418939
mov esi, eax
add esp, 0x18
test esi, esi
je 0x403f53
push str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.00408291
mov dword [esp], 0x1f4
push esi
call fcn.00407a7b
test eax, eax
pop ecx
pop ecx
mov dword [esp + 0x20], eax
je 0x403f22
push eax
call fcn.00416f40
cmp eax, 1
pop ecx
jne 0x403f22
mov eax, dword [esp + 0x20]
cmp byte [eax], 0x2d
jne 0x403f22
lea eax, [esp + 0x2800]
push eax
push str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x403f60
push dword [esp + 0x20]
lea eax, [esp + 0x2804]
push eax
mov byte [esp + 0x2808], 0
call fcn.00416fe0
push esi
call fcn.0041a6b5
add esp, 0xc
lea eax, [esp + 0x2800]
push eax
push str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x403f60
lea eax, [esp + 0x2800]
push eax
push str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
call fcn.00408291
pop ecx
pop ecx
lea eax, [esp + 0xf0]
push str.JWAppsSharedConfig
push eax
lea eax, [esp + 0xdfa0]
call fcn.00408255
lea eax, [esp + 0xdfa0]
push eax
call fcn.004081f0
add esp, 0xc
push dword [esp + 0x44]
mov byte [esp + 0x1b], 1
call fcn.00416f40
test eax, eax
pop ecx
jne 0x403fb4
push str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.00408291
mov byte [esp + 0x1b], 0
jmp 0x403fc3
push dword [esp + 0x44]
push str._Extractor__GenericUpdater_version_is__s_n
call fcn.00408291
pop ecx
pop ecx
push dword [esp + 0x10]
call fcn.00416f40
test eax, eax
pop ecx
jne 0x403fde
push str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.00408291
jmp 0x403fed
push dword [esp + 0x10]
push str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
call fcn.00408291
pop ecx
pop ecx
push str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.00408291
lea eax, [esp + 0xf4]
mov dword [esp], str.JWrapper
push eax
call fcn.004084b4
mov esi, eax
lea eax, [esp + 0x2808]
push eax
lea eax, [esp + 0xfc]
push eax
call fcn.004084b4
add esp, 0x10
test esi, esi
mov dword [esp + 0x20], eax
je 0x40413a
test eax, eax
je 0x40413a
push esi
push str._Extractor__Latest_GU_version_exists:__s_n
call fcn.00408291
push dword [esp + 0x28]
push str._Extractor__Existing_JRE_exists:__s_n
call fcn.00408291
push esi
call fcn.00408721
add esp, 0x14
push dword [esp + 0x44]
mov dword [esp + 0x34], eax
call fcn.004186fe
cmp byte [esp + 0x1b], 0
pop ecx
je 0x404081
cmp eax, dword [esp + 0x30]
jle 0x404081
push str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x40413f
push str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00408291
cmp byte [esp + 0x1b], 0
pop ecx
je 0x4040e5
push dword [esp + 0x10]
call fcn.00416f40
test eax, eax
pop ecx
jbe 0x4040e5
push dword [esp + 0x28]
lea eax, [esp + 0xf4]
push eax
call fcn.004084b4
test eax, eax
pop ecx
pop ecx
je 0x404133
push eax
call fcn.00408721
pop ecx
push dword [esp + 0x10]
mov dword [esp + 0x34], eax
call fcn.004186fe
cmp eax, dword [esp + 0x34]
pop ecx
jle 0x4040da
push str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x40413f
push str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00408291
pop ecx
push str._Extractor__Running_without_extraction_now_n
call fcn.00408291
pop ecx
push ebx
call fcn.0041a6b5
cmp byte [ebp + 0x10], 0
pop ecx
jne 0x40412c
push dword [esp + 0x40]
lea eax, [esp + 0xf4]
push 0
push dword [esp + 0x50]
lea edx, [esp + 0x280c]
push dword [esp + 0x40]
mov ecx, esi
push dword [esp + 0x60]
push dword [ebp + 8]
push edi
push eax
call fcn.00401b72
add esp, 0x20
push 0
jmp 0x40375e
push str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x40413f
push str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.00408291
cmp dword [esp + 0x24], 0
pop ecx
jne 0x404153
push str._Extractor__Note:_No_latest_JRE_version_exists_n
jmp 0x404158
push str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.00408291
test esi, esi
pop ecx
jne 0x404169
push str._Extractor__Note:_No_latest_GU_version_exists_n
jmp 0x40416e
push str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.00408291
cmp byte [esp + 0x1b], 0
pop ecx
jne 0x40418a
push str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.00408291
jmp 0x40375b
lea eax, [esp + 0xf0]
push eax
call fcn.004081f0
pop ecx
push dword [esp + 0x44]
lea eax, [esp + 0xf4]
push str.JWrapper
push eax
lea esi, [esp + 0xa50c]
call fcn.00401a0e
lea eax, [esp + 0xfc]
add esp, 0xc
push eax
lea esi, [esp + 0x3b8c]
call fcn.00401a4e
pop ecx
push dword [esp + 0x10]
lea eax, [esp + 0xf4]
push dword [esp + 0x2c]
lea esi, [esp + 0x12dc0]
push eax
call fcn.00401a0e
lea eax, [esp + 0xfc]
add esp, 0xc
push eax
lea esi, [esp + 0x917c]
call fcn.00401a4e
pop ecx
lea eax, [esp + 0xa500]
push eax
push str._Extractor__GU_folder_is__s_n
call fcn.00408291
lea eax, [esp + 0x3b90]
push eax
push str._Extractor__GU_temp_is__s_n
call fcn.00408291
lea eax, [esp + 0x3b98]
push eax
call fcn.004081f0
add esp, 0x14
test eax, eax
je 0x404243
push str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
jmp 0x404180
lea eax, [esp + 0x3b88]
push str.lzma.exe
push eax
lea eax, [esp + 0x62a0]
call fcn.00408255
lea eax, [esp + 0x62a0]
push eax
mov ebx, str._Extractor__LZMA_path_is__s_n
push ebx
call fcn.00408291
push dword [esp + 0x28]
mov edx, dword [esp + 0x30]
xor esi, esi
lea eax, [esp + 0x62ac]
push esi
push eax
lea ecx, [esp + 0x3ba4]
call fcn.004027ce
add esp, 0x1c
lea eax, [esp + 0x6298]
call fcn.00401626
push dword [esp + 0x18]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x629c]
push esi
push eax
lea ecx, [esp + 0x3b94]
call fcn.004027ce
add esp, 0xc
cmp dword [esp + 0x38], esi
je 0x404356
push 0x431c28
push dword [esp + 0x3c]
call fcn.00418f50
test eax, eax
pop ecx
pop ecx
jne 0x404356
push str._Extractor__Authorised_to_override_the_splash_image._n
call fcn.00408291
cmp dword [esp + 0x5c], esi
pop ecx
je 0x404356
cmp dword [esp + 0x60], esi
jbe 0x404356
lea eax, [esp + 0x3b88]
push str.nativesplash.png
push eax
lea eax, [esp + 0x7628]
call fcn.00408255
lea eax, [esp + 0x7628]
call fcn.00408244
lea eax, [esp + 0x7628]
push eax
push str._Extractor__Overwriting_splash_image_at__s_n
call fcn.00408291
lea eax, [esp + 0x7630]
push 0x42fb70
push eax
call fcn.00418939
mov esi, eax
push esi
push dword [esp + 0x7c]
push 1
push dword [esp + 0x7c]
call fcn.00419cec
push esi
call fcn.0041a6b5
add esp, 0x2c
push dword [esp + 0x18]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x629c]
push 0
push eax
lea ecx, [esp + 0x3b94]
call fcn.004027ce
mov edx, dword [esp + 0x28]
add esp, 0xc
push dword [esp + 0x18]
lea eax, [esp + 0x629c]
push 0
push eax
lea ecx, [esp + 0x3b94]
call fcn.004027ce
add esp, 0xc
push str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.00408291
pop ecx
lea eax, [esp + 0xa500]
push eax
push str._Extractor__Renaming_GU_folder_to__s_n
call fcn.00408291
lea esi, [esp + 0xa508]
lea edi, [esp + 0x3b90]
call fcn.00401512
push str._Extractor__Recreating_GU_location_n
call fcn.00408291
add esp, 0xc
mov eax, esi
push eax
mov eax, edi
push eax
mov byte [esp + 0x3b90], 0
call fcn.00416fe0
mov eax, esi
push str.lzma.exe
push eax
lea eax, [esp + 0x62a8]
call fcn.00408255
lea eax, [esp + 0x62a8]
push eax
push ebx
call fcn.00408291
mov eax, edi
push str.verpatch.exe
push eax
lea eax, [esp + 0x16870]
call fcn.00408255
mov eax, esi
push str.nativesplash.png
push eax
lea eax, [esp + 0xcc38]
call fcn.00408255
lea eax, [esp + 0xcc38]
push eax
push str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.00408291
push str._Extractor__Configuring_splash_n
call fcn.00408291
add esp, 0x34
call fcn.0040121b
test al, al
je 0x40446f
lea eax, [esp + 0xcc10]
push eax
call fcn.004052e1
pop ecx
mov ecx, eax
call fcn.00406f04
push str._Extractor__Showing_splash_n
call fcn.00408291
cmp byte [esp + 0x13], 0
pop ecx
jne 0x40448c
cmp byte [ebp + 0x10], 0
jne 0x40448c
call fcn.00405d27
call fcn.00405d52
push str._Extractor__Setting_up_a_JRE_n
call fcn.00408291
pop ecx
push dword [esp + 0x4c]
call fcn.00416f40
test eax, eax
pop ecx
jbe 0x4045ed
mov ebx, str.Extracting_Offline_JRE
push ebx
call fcn.0040843f
mov dword [esp], str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00408291
pop ecx
push dword [esp + 0x24]
lea eax, [esp + 0x3b8c]
push eax
lea ecx, [esp + 0x2808]
call fcn.004031a6
lea eax, [esp + 0xf8]
push eax
lea esi, [esp + 0x4f1c]
call fcn.00401a4e
mov eax, esi
add esp, 0xc
push eax
call fcn.004081f0
pop ecx
push dword [esp + 0x4c]
lea eax, [esp + 0x2804]
push eax
lea eax, [esp + 0xf8]
push eax
lea esi, [esp + 0xb894]
call fcn.00401a0e
add esp, 0xc
push str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.00408291
lea eax, [esp + 0x4f14]
mov dword [esp], str.JRE.p2
push eax
lea eax, [esp + 0x154d0]
call fcn.00408255
lea eax, [esp + 0x4f18]
push eax
call fcn.0040126c
add esp, 0xc
mov esi, eax
push esi
push str._Extractor__UP200_path_is__s_n
call fcn.00408291
push str._Extractor__Extracting_JRE_archive..._n
call fcn.00408291
mov edx, dword [esp + 0x28]
add esp, 0xc
push dword [esp + 0x18]
lea eax, [esp + 0x629c]
push esi
push eax
lea ecx, [esp + 0x4f1c]
call fcn.004027ce
add esp, 0xc
lea eax, [esp + 0x2800]
push eax
push str._Extractor__Extracted_JRE__s_n
call fcn.00408291
push str._Extractor__Regenerating_jsa..._n
call fcn.00408291
lea eax, [esp + 0x4f1c]
add esp, 0xc
push eax
call fcn.00401237
pop ecx
mov esi, eax
call fcn.00406abe
mov edi, eax
push esi
push edi
call fcn.00406b17
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406aec
call fcn.00406b46
push edi
call fcn.00416cd3
add esp, 0xc
push ebx
jmp 0x404c70
push str.Setting_up_online_JRE
call fcn.0040843f
mov byte [esp + 0x6c], 0
mov dword [esp], str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
call fcn.00408291
pop ecx
push 0x14
pop ebx
push 0xa
lea eax, [esp + 0xd8]
push eax
push ebx
call fcn.00417a9d
add esp, 0xc
push ebx
push str._JRESearch__Checking_for_JRE__d_n
call fcn.00408291
push str.PROGRAMFILES
mov byte [esp + 0x1484], 0
call fcn.0041a4d9
add esp, 0xc
push eax
lea eax, [esp + 0x147c]
push eax
call fcn.00416fe0
cmp byte [esp + 0x37], 0
pop ecx
pop ecx
lea esi, [esp + 0x1478]
je 0x404664
push str.Java_JWAutoTest
jmp 0x404669
push str.Java
call fcn.0040820f
pop ecx
push 0x431fc8
lea esi, [esp + 0x147c]
call fcn.0040820f
pop ecx
lea eax, [esp + 0xd4]
push eax
mov eax, esi
push eax
call fcn.00416fe0
mov eax, esi
push eax
call fcn.0040126c
mov edi, eax
mov eax, esi
add esp, 0xc
push eax
call fcn.00401237
pop ecx
mov esi, eax
push esi
push str._JRESearch__Looking_at_JRE__s_n
call fcn.00408291
push esi
call fcn.00407e96
add esp, 0xc
test eax, eax
je 0x404738
push edi
call fcn.00407e96
test eax, eax
pop ecx
je 0x404738
mov edi, dword [esp + 0x64]
mov ecx, esi
call fcn.0040332d
test eax, eax
je 0x404738
push esi
push str._JRESearch__JRE_unpack200_exists__s_n
call fcn.00408291
lea eax, [esp + 0xf8]
push str.JWrapper
push eax
call fcn.004084b4
add esp, 0x10
test eax, eax
je 0x404752
push dword [esp + 0x40]
lea ecx, [esp + 0xf4]
push 1
push dword [esp + 0x50]
mov edx, esi
push dword [esp + 0x40]
push dword [esp + 0x60]
push dword [ebp + 8]
push dword [esp + 0x54]
push ecx
mov ecx, eax
call fcn.00401b72
add esp, 0x20
cmp eax, 0x48
je 0x40475c
push str._JRESearch__JRE_failed_compatibility_test_n
jmp 0x40473d
push str._JRESearch__JRE_does_not_exist_or_does_not_have_unpack200_n
call fcn.00408291
dec ebx
cmp ebx, 5
pop ecx
jge 0x40460c
jmp 0x404800
push str._JRESearch___No_latest_App_version_even_after_download__n
jmp 0x404180
push str._JRESearch__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00408291
pop ecx
push dword [esp + 0x24]
lea eax, [esp + 0x3b8c]
push eax
lea ecx, [esp + 0x2808]
call fcn.004031a6
push str._JRESearch__JRE_is_valid__copying..._n
call fcn.00408291
lea eax, [esp + 0xfc]
add esp, 0xc
push eax
lea esi, [esp + 0x4f14]
call fcn.00401a4e
pop ecx
mov eax, esi
push eax
call fcn.004081f0
pop ecx
mov eax, esi
push eax
lea eax, [esp + 0x147c]
push eax
call fcn.004017cc
test eax, eax
pop ecx
pop ecx
jne 0x4047f5
mov eax, esi
push eax
push str._JRESearch__JRE_copied_to__s_OK_n
call fcn.00408291
lea eax, [esp + 0x70]
push str.00000000000
push eax
mov byte [esp + 0x78], 0
call fcn.00416fe0
lea eax, [esp + 0x78]
push eax
push str._JRESearch__Copied_JRE_version_is__s_n
call fcn.00408291
add esp, 0x18
jmp 0x404800
push str._JRESearch__JRE_copy_failed__cannot_pick_up_existing_JRE_n
call fcn.00408291
pop ecx
lea eax, [esp + 0x68]
push eax
call fcn.00416f40
test eax, eax
pop ecx
jne 0x404be7
push str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.00408291
pop ecx
mov edi, str.JWrapper_
lea eax, [esp + 0x3b88]
push edi
push eax
lea eax, [esp + 0x7df8]
call fcn.00408255
lea eax, [esp + 0x2808]
push eax
lea eax, [esp + 0x7dfc]
push eax
call fcn.00416fe0
mov esi, str._version.txt
lea eax, [esp + 0x7e00]
push esi
push eax
call fcn.00416fe0
push dword [esp + 0x3c]
lea eax, [esp + 0x1494]
push eax
mov byte [esp + 0x1498], 0
call fcn.00416fe0
lea eax, [esp + 0x1498]
push edi
push eax
call fcn.00416fe0
lea eax, [esp + 0x2828]
push eax
lea eax, [esp + 0x14a4]
push eax
call fcn.00416fe0
lea eax, [esp + 0x14a8]
push esi
push eax
call fcn.00416fe0
add esp, 0x38
cmp byte [esp + 0xf], 0
jne 0x4048bf
cmp byte [ebp + 0x10], 0
jne 0x4048bf
call fcn.00405d27
lea eax, [esp + 0x1478]
push eax
push str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.00408291
lea eax, [esp + 0x7df8]
push eax
lea eax, [esp + 0x1484]
push eax
call fcn.0040605e
add esp, 0x10
test eax, eax
je 0x404c1c
call fcn.00405d52
lea eax, [esp + 0x7df0]
push eax
push str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.00408291
lea eax, [esp + 0x7df8]
push 0x430c8c
push eax
call fcn.00418939
add esp, 0x10
test eax, eax
mov dword [esp + 0x28], eax
jne 0x404938
call fcn.004171d9
push dword [eax]
push str._JREDownload___Unable_to_open_version_file____d_
call fcn.00408291
pop ecx
pop ecx
push str._JREDownload__Extracting_version:
xor esi, esi
call fcn.00408291
pop ecx
jmp 0x40496d
push ebx
push 0x432308
call fcn.00408291
cmp ebx, 0xd
pop ecx
pop ecx
je 0x40498a
cmp ebx, 0xa
je 0x40498a
cmp ebx, 0x20
je 0x40498a
cmp esi, 0x32
mov byte [esp + esi + 0x68], bl
jge 0x404980
inc esi
push dword [esp + 0x28]
call fcn.00418714
mov ebx, eax
cmp ebx, 0xffffffff
pop ecx
jne 0x404947
jmp 0x404995
push str._n_JREDownload__Version_invalid__too_long__n
jmp 0x404180
push str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.00408291
pop ecx
push 0x430f94
call fcn.00408291
cmp dword [esp + 0x2c], 0
pop ecx
je 0x4049b1
push dword [esp + 0x28]
call fcn.0041a6b5
pop ecx
lea eax, [esp + 0x68]
push eax
push str._JREDownload__JRE_Version_is__s_n
mov byte [esp + esi + 0x70], 0
call fcn.00408291
lea eax, [esp + 0xf8]
push eax
lea esi, [esp + 0x4f1c]
call fcn.00401a4e
mov eax, esi
add esp, 0xc
push eax
call fcn.004081f0
mov eax, esi
mov dword [esp], str.JREArchive.p2.l2
push eax
lea eax, [esp + 0x106b0]
call fcn.00408255
push dword [esp + 0x2c]
lea eax, [esp + 0x1484]
push eax
mov byte [esp + 0x1488], 0
call fcn.00416fe0
lea eax, [esp + 0x1488]
push edi
push eax
call fcn.00416fe0
lea eax, [esp + 0x2818]
push eax
lea eax, [esp + 0x1494]
push eax
call fcn.00416fe0
lea eax, [esp + 0x1498]
push 0x42fdac
push eax
call fcn.00416fe0
lea eax, [esp + 0x90]
push eax
lea eax, [esp + 0x14a4]
push eax
call fcn.00416fe0
lea eax, [esp + 0x14a8]
push str._archive.p2.l2
push eax
call fcn.00416fe0
add esp, 0x38
cmp byte [esp + 0xf], 0
jne 0x404a84
cmp byte [ebp + 0x10], 0
jne 0x404a84
call fcn.00405d27
push str._JREDownload__Downloading_JRE_n
call fcn.00408291
pop ecx
lea eax, [esp + 0x106a8]
push eax
lea eax, [esp + 0x147c]
push eax
call fcn.0040605e
test eax, eax
pop ecx
pop ecx
je 0x404c00
call fcn.00405d52
push str._JREDownload__JRE_Downloaded_OK__will_extract_n
call fcn.00408291
lea eax, [esp + 0x4f14]
mov dword [esp], str.JREArchive.p2
push eax
lea eax, [esp + 0x154d0]
call fcn.00408255
call fcn.00406abe
mov edi, eax
lea eax, [esp + 0x62a0]
push eax
push edi
call fcn.00406b17
mov edx, 0x43072c
mov ecx, edi
call fcn.00406aec
lea edx, [esp + 0x106b8]
mov ecx, edi
call fcn.00406aec
lea edx, [esp + 0x154d8]
mov ecx, edi
call fcn.00406aec
push str._JREDownload__Decompressing_JRE_archive_n
call fcn.00408291
add esp, 0x14
call fcn.00406b46
test eax, eax
je 0x404b3a
push str._JREDownload__Failed_to_decompress_JRE_archive_n
call fcn.00408342
jmp 0x40375b
push edi
call fcn.00416cd3
pop ecx
lea eax, [esp + 0x4f10]
push eax
call fcn.0040126c
pop ecx
mov esi, eax
lea eax, [esp + 0x4f10]
push eax
push str._JREDownload__Extracting_JRE_archive_to__s_n
call fcn.00408291
push dword [esp + 0x20]
lea eax, [esp + 0x4f1c]
push eax
lea eax, [esp + 0x154d8]
push eax
push esi
call fcn.00402d47
lea eax, [esp + 0x106c0]
push eax
call fcn.0041884b
add esp, 0x1c
push str._JREDownload__Done_extracting_JRE_archive_n
call fcn.00408291
mov dword [esp], str._JREDownload__Regenerating_jsa..._n
call fcn.00408291
pop ecx
lea eax, [esp + 0x4f10]
push eax
call fcn.00401237
pop ecx
mov esi, eax
call fcn.00406abe
mov edi, eax
push esi
push edi
call fcn.00406b17
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406aec
call fcn.00406b46
push edi
call fcn.00416cd3
add esp, 0xc
push str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.00408291
pop ecx
lea eax, [esp + 0x68]
push eax
call fcn.00416f40
test eax, eax
pop ecx
jne 0x404c38
push str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
jmp 0x404b30
cmp byte [esp + 0xf], 0
jne 0x404c12
cmp byte [ebp + 0x10], 0
jne 0x404c12
call fcn.00405d3f
push str._JREDownload__Failed_to_download_JRE_n
jmp 0x404b30
cmp byte [esp + 0xf], 0
jne 0x404c2e
cmp byte [ebp + 0x10], 0
jne 0x404c2e
call fcn.00405d3f
push str._JREDownload__Failed_to_download_JRE_version_file_n
jmp 0x404b30
lea eax, [esp + 0x68]
push eax
push str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.00408291
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x280c]
push eax
lea eax, [esp + 0x100]
push eax
lea esi, [esp + 0xb89c]
call fcn.00401a0e
add esp, 0x14
push str.Setting_up_online_JRE
call fcn.00408467
pop ecx
lea esi, [esp + 0xb888]
lea edi, [esp + 0x4f10]
call fcn.00401512
mov eax, esi
push eax
push str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.00408291
lea eax, [esp + 0xdfa0]
push str.DetectedProxy
push eax
lea eax, [esp + 0x14150]
call fcn.00408255
push str._Extractor__Saving_proxy_configuration_n
call fcn.00408291
xor ebx, ebx
add esp, 0x14
cmp dword [0x539fe4], ebx
je 0x404ce0
push str._Proxy__Saving_proxy_settings_now.
call fcn.00408291
pop ecx
lea eax, [esp + 0x14140]
push eax
call fcn.004066e1
jmp 0x404cea
push str._Proxy__No_working_proxy_was_found__so_no_proxy_to_be_saved.
call fcn.00408291
pop ecx
lea eax, [esp + 0xb888]
push eax
call fcn.0040126c
pop ecx
mov esi, eax
push esi
push str._Extractor__UP200_path_is__s_n
call fcn.00408291
push dword [esp + 0x18]
call fcn.00416f40
add esp, 0xc
test eax, eax
jbe 0x404db4
push str._Extractor__Offline_installer___app_to_extract.
call fcn.00408291
pop ecx
lea eax, [esp + 0x12db8]
push eax
push str._Extractor__APP_folder_is__s_n
call fcn.00408291
lea eax, [esp + 0x9180]
push eax
push str._Extractor__APP_temp_is__s_n
call fcn.00408291
lea eax, [esp + 0x9188]
push eax
call fcn.004081f0
add esp, 0x14
test eax, eax
je 0x404d67
push str.Unable_to_create_App_Temp_folder_n
jmp 0x404b30
push esi
push str._Extractor__Extracting_App..._n
call fcn.00408291
push dword [esp + 0x20]
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x62a4]
push esi
push eax
lea ecx, [esp + 0x918c]
call fcn.004027ce
mov edx, dword [esp + 0x30]
add esp, 0x14
push dword [esp + 0x18]
lea eax, [esp + 0x629c]
push esi
push eax
lea ecx, [esp + 0x9184]
call fcn.004027ce
add esp, 0xc
jmp 0x404dbf
push str._Extractor__Online_installer___no_app_to_extract_n
call fcn.00408291
pop ecx
push dword [esp + 0x10]
call fcn.00416f40
test eax, eax
pop ecx
jbe 0x404def
lea esi, [esp + 0x12db8]
lea edi, [esp + 0x9178]
call fcn.00401512
mov eax, esi
push eax
push str._Extractor__Renaming_App_folder_to__s_n
call fcn.00408291
pop ecx
pop ecx
lea eax, [esp + 0xf0]
push str.JWrapper
push eax
call fcn.004084b4
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
jne 0x404e13
push str.No_latest_App_version_even_after_download__n
jmp 0x404b30
call fcn.00405d3f
push str._HttpDownloader__Cleaning_up..._n
call fcn.00408291
pop ecx
call fcn.0040121b
test al, al
je 0x404e37
push dword [0x539fe0]
call sub.gdiplus.dll_GdiplusShutdown
push esi
push str._Extractor__Will_now_run_latest_GU__s_n
call fcn.00408291
push dword [esp + 0x24]
call fcn.0041a6b5
add esp, 0xc
cmp byte [ebp + 0x10], 0
jne 0x404e85
push dword [esp + 0x40]
lea eax, [esp + 0xf4]
push ebx
push dword [esp + 0x50]
lea edx, [esp + 0x280c]
push dword [esp + 0x40]
mov ecx, esi
push dword [esp + 0x60]
push dword [ebp + 8]
push dword [esp + 0x54]
push eax
call fcn.00401b72
add esp, 0x20
push ebx
jmp 0x40375e