Function at 0x42c548
Capabilities:
Contain obfuscated stackstrings
Identify system language via api
Query environment variable

Disassembly:
push 0x28c
mov eax, 0x4668ad
call fcn.0043fcc0
mov ebx, ecx
mov esi, dword [ebp + 0x24]
mov dword [ebp - 0x288], esi
and dword [ebp - 4], 0
cmp byte [ebx + 0x43c], 0
mov edi, dword [sym.imp.OLEAUT32.dll_VariantInit]
je 0x42cef2
push dword [ebp + 0x18]
call edi
push 0
push str.operatingsystemcondition
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b5c5
test eax, eax
jne 0x42cbfa
cmp byte [ebx + 0x266], al
jne 0x42cbfa
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x471efc
mov edi, 0x46cf9c
push str.operatingsystemcondition
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.00425799
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00401500
push 1
push dword [ebx + 0x38]
mov ecx, ebx
push str.MajorVersion
push dword [ebp - 0x288]
mov byte [ebx + 0x265], 1
call fcn.00425962
test al, al
jne 0x42c641
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 2
push 1
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.00425799
lea ecx, [ebp - 0x40]
jmp 0x42dc4d
push 1
push dword [ebx + 0x3c]
mov ecx, ebx
push str.MinorVersion
push dword [ebp - 0x288]
call fcn.00425962
test al, al
jne 0x42c6a1
cmp dword [ebx + 0x44], 1
movzx eax, byte [ebx + 0x42]
jne 0x42c67f
push 1
push eax
push str.MinorVersion
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425962
test al, al
jne 0x42c6a1
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 3
jmp 0x42c62a
cmp dword [ebx + 0x44], 1
jne 0x42c6ec
cmp byte [ebx + 0x42], 0x5a
jne 0x42c6ec
push 1
push 0x5a
push str.MinorVersion
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425962
test al, al
jne 0x42c6ec
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 4
jmp 0x42c62a
movzx eax, word [ebx + 0x25c]
push 5
push eax
push str.ServicePackMajorMin
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425962
test al, al
jne 0x42c731
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 5
jmp 0x42c62a
movzx eax, word [ebx + 0x25c]
push 3
push eax
push str.ServicePackMajorMax
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.00425962
test al, al
jne 0x42c776
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 6
jmp 0x42c62a
push 5
push dword [ebx + 0x40]
mov ecx, ebx
push str.BuildNumber
push dword [ebp - 0x288]
call fcn.00425962
test al, al
jne 0x42c7b6
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 7
jmp 0x42c62a
push 1
push dword [ebx + 0x44]
mov ecx, ebx
push str.PlatformId
push dword [ebp - 0x288]
call fcn.00425962
test al, al
jne 0x42c7f6
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 8
jmp 0x42c62a
mov ecx, dword [ebp - 0x288]
push str.CSDVersion
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 9
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xb
call fcn.00412eb0
cmp dword [ebp - 0x8c], 0
je 0x42c955
push 1
push 0
lea eax, [ebp - 0xa0]
push eax
mov ecx, ebx
call fcn.00425799
push 1
lea eax, [ebp - 0x281]
push eax
push 0x46c754
lea ecx, [ebp - 0x100]
call fcn.00403400
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.0042dd8c
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xb
call fcn.00401500
push 1
lea eax, [ebp - 0x281]
push eax
lea eax, [ebx + 0x48]
push eax
lea ecx, [ebp - 0x160]
call fcn.00402330
push 1
lea eax, [ebp - 0x281]
push eax
push 0x46c754
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xd
call fcn.00403400
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xe
call fcn.0042dd8c
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0xd
call fcn.00401500
lea eax, [ebp - 0x15c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.004063e0
test eax, eax
jle 0x42c946
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf
call fcn.00425799
lea ecx, [ebp - 0x40]
call fcn.00401500
lea ecx, [ebp - 0x160]
jmp 0x42cbaa
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0xb
call fcn.00401500
movzx eax, byte [ebx + 0x262]
push 1
push eax
push str.ProductType
push dword [ebp - 0x288]
mov ecx, ebx
call fcn.004259fb
test al, al
jne 0x42c9ac
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 1
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x10
call fcn.00425799
lea ecx, [ebp - 0x40]
jmp 0x42cbaa
mov ecx, dword [ebp - 0x288]
push str.Language
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x11
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
call fcn.00412eb0
cmp dword [ebp - 0x5c], 0
je 0x42ca61
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
call fcn.00425799
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x70]
call fcn.0042dd33
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
cmp dword [ebp - 0x28c], eax
je 0x42ca61
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xa8], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x14
call fcn.00425799
lea ecx, [ebp - 0xd0]
jmp 0x42cba2
mov ecx, dword [ebp - 0x288]
push str.Bits
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x15
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x17
call fcn.00412eb0
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x130]
call fcn.0042dd33
mov eax, dword [ebp - 0x28c]
test al, 1
je 0x42caf2
call fcn.00435b59
test al, al
je 0x42cbba
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x18
jmp 0x42cb85
test al, 2
je 0x42cb25
call fcn.00435b59
test al, al
jne 0x42cbba
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x19
jmp 0x42cb85
test al, 4
je 0x42cb58
call fcn.00435b8e
test al, al
jne 0x42cbba
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x1a
jmp 0x42cb85
test al, 8
je 0x42cbba
call fcn.00435b72
test al, al
jne 0x42cbba
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Failed_
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
mov byte [ebp - 4], 0x1b
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.00425799
lea ecx, [ebp - 0x40]
call fcn.00401500
lea ecx, [ebp - 0x130]
call fcn.00401500
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0xa0]
jmp 0x42dc4d
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x1c
call fcn.00425799
lea ecx, [ebp - 0x40]
call fcn.00401500
mov byte [ebx + 0x266], 1
jmp 0x42cb9c
cmp byte [ebx + 0x43c], 0
je 0x42cef2
push dword [ebp + 0x18]
call edi
push 0
push str.condition
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b5c5
test eax, eax
jne 0x42cef2
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x471efc
mov edi, 0x46cf9c
push str.condition
lea ecx, [ebp - 0x70]
mov byte [ebx + 0x267], 1
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x1d
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
mov ecx, dword [ebp - 0x288]
push str.Type
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x1e
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x20
call fcn.00412eb0
mov ecx, dword [ebp - 0x288]
push str.Comparison
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x21
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x23
call fcn.00412eb0
mov ecx, dword [ebp - 0x288]
push str.Path
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x24
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call fcn.00412eb0
mov ecx, dword [ebp - 0x288]
push str.FileName
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x27
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x29
call fcn.00412eb0
mov ecx, dword [ebp - 0x288]
push str.ReturnValue
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x2a
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.00412eb0
mov ecx, dword [ebp - 0x288]
push str.Bits
lea eax, [ebp - 0xbc]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x2d
call fcn.00402330
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x2f
call fcn.00412eb0
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, ebx
call fcn.004256a7
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x100]
push eax
mov ecx, ebx
call fcn.00425bef
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
push 0
lea ecx, [ebp - 0x70]
test al, al
lea eax, [ebp - 0x281]
push eax
jne 0x42ce8b
push str.____Failed_
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x30
call fcn.00425799
lea ecx, [ebp - 0x70]
call fcn.00401500
mov byte [ebx + 0x268], 0
jmp 0x42ceb0
push str.____Successful
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x31
call fcn.00425799
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x130]
call fcn.00401500
lea ecx, [ebp - 0xa0]
call fcn.00401500
lea ecx, [ebp - 0x190]
call fcn.00401500
lea ecx, [ebp - 0x1c0]
call fcn.00401500
lea ecx, [ebp - 0x1f0]
call fcn.00401500
lea ecx, [ebp - 0x100]
jmp 0x42dc4d
push dword [ebp + 0x18]
call edi
push 0
push str.file
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b5c5
test eax, eax
jne 0x42d13b
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x471efc
mov edi, 0x46cf9c
push str.file
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x32
call fcn.00425799
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x280]
call fcn.00424b73
mov ecx, dword [ebp - 0x288]
push str.CheckSum
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x33
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x34
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412eb0
mov ecx, dword [ebp - 0x288]
push str.LocalFile
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x35
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412eb0
mov ecx, dword [ebp - 0x288]
push 0x46ef14
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x36
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.00412eb0
push 0
lea eax, [ebp - 0x281]
push eax
push 0x4767e0
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], edi
call fcn.00403400
push 0
lea eax, [ebp - 0x281]
push eax
push 0x4767e0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x37
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x78], edi
call fcn.00403400
push 0
lea eax, [ebp - 0x281]
push eax
push 0x4767e0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x220]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x39
call fcn.004256a7
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0xa0]
call fcn.00401500
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x33
call fcn.00401500
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebx + 0x26c]
call fcn.00425610
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3a
call fcn.00425799
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x280]
call fcn.0042512a
jmp 0x42dc52
push dword [ebp + 0x18]
call edi
push 0
push str.properties
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b5c5
test eax, eax
jne 0x42d26a
push eax
lea eax, [ebp - 0x281]
push eax
mov edi, 0x471efc
push 0x46ef34
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x48], 0x46cf9c
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3b
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push 0x46ef34
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c9e4
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x4767e0
cmovne eax, ecx
lea esi, [ebx + 0x284]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x3c
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412eb0
push 1
push 0
push esi
mov ecx, ebx
call fcn.00425799
mov ecx, dword [ebp - 0x288]
push str.AltPrqURL
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov ecx, 0x4767e0
cmovne ecx, dword [eax + 0x10]
lea esi, [ebx + 0x3d4]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3d
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412eb0
push 1
push 0
push esi
mov ecx, ebx
call fcn.00425799
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x48], 0x46cf9c
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3e
call fcn.00425799
lea ecx, [ebp - 0x70]
jmp 0x42dc4d
push dword [ebp + 0x18]
call edi
push 0
push str.execute
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b5c5
test eax, eax
jne 0x42d695
push eax
lea eax, [ebp - 0x281]
push eax
push str.execute
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x471efc
mov dword [ebp - 0x48], 0x46cf9c
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x3f
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push str.file
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c9e4
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x4767e0
cmovne eax, ecx
push eax
lea ecx, [ebx + 0x2b4]
mov byte [ebp - 4], 0x40
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412eb0
cmp dword [ebx + 0x2f8], 0
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jne 0x42d414
push str.cmdline
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x41
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x43
call fcn.00412eb0
push 0x104
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebx + 0x2e4]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x44
mov byte [eax + 4], 1
call fcn.004034e0
cmp dword [ebp - 0x88], 8
push 0x104
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x43
call fcn.00403240
mov eax, dword [ebp - 0x28c]
cmp eax, 0x104
jbe 0x42d405
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebx + 0x2e4]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x45
mov byte [eax + 4], 1
call fcn.004034e0
mov edx, dword [ebp - 0x28c]
cmp dword [ebp - 0x88], 8
push edx
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x43
call fcn.00403240
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0
call fcn.00401500
cmp dword [ebx + 0x328], 0
jne 0x42d51e
push str.cmdlinesilent
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x46
call fcn.00402330
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.00412eb0
push 0x104
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebx + 0x314]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x49
mov byte [eax + 4], 1
call fcn.004034e0
cmp dword [ebp - 0x88], 8
push 0x104
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x48
call fcn.00403240
mov eax, dword [ebp - 0x28c]
cmp eax, 0x104
jbe 0x42d50f
push eax
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebx + 0x314]
call fcn.00402660
mov ecx, dword [eax]
mov byte [ebp - 4], 0x4a
mov byte [eax + 4], 1
call fcn.004034e0
mov edx, dword [ebp - 0x28c]
cmp dword [ebp - 0x88], 8
push edx
push dword [eax]
lea ecx, [ebp - 0x9c]
cmovae ecx, dword [ebp - 0x9c]
push ecx
call edi
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x48
call fcn.00403240
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0
call fcn.00401500
push str.returncodetoreboot
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0043c9e4
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x4767e0
cmovne eax, ecx
lea edi, [ebx + 0x344]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4b
call fcn.00403560
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.00412eb0
push str.forcesilent
lea eax, [ebp - 0xbc]
push eax
mov ecx, esi
call fcn.0043c9e4
mov ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, 0x4767e0
cmovne eax, ecx
lea esi, [ebx + 0x374]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x4c
call fcn.00403560
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0
call fcn.00412eb0
push 0
lea eax, [ebp - 0x281]
push eax
push 0x4767e0
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x471efc
mov dword [ebp - 0x48], 0x46cf9c
call fcn.00403400
lea eax, [ebp - 0x70]
push eax
push esi
push edi
lea eax, [ebx + 0x314]
push eax
lea eax, [ebx + 0x2e4]
push eax
lea eax, [ebx + 0x2b4]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x4d
call fcn.004256a7
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x471efc
mov dword [ebp - 0x48], 0x46cf9c
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x4e
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
push str.requiresmsiengine
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x8c]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x4f
call fcn.00402330
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x51
call fcn.00412eb0
push 0x46c73c
lea ecx, [ebp - 0xfc]
call fcn.0042b69e
neg eax
sbb al, al
inc al
mov byte [ebx + 0x43d], al
jmp 0x42cee7
push dword [ebp + 0x18]
call edi
push 0
push str.dependency
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b5c5
test eax, eax
jne 0x42d7a1
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x471efc
mov edi, 0x46cf9c
push str.dependency
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x52
call fcn.00425799
lea ecx, [ebp - 0x70]
call fcn.00401500
lea ecx, [ebp - 0x40]
call fcn.00424fcc
mov ecx, dword [ebp - 0x288]
push str.File
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x53
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
cmovne edx, ecx
push edx
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x54
call fcn.004050d0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x53
call fcn.00412eb0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebx + 0x278]
call fcn.0042559a
push 1
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, ebx
call fcn.00425799
push 0
lea eax, [ebp - 0x281]
push eax
push str.____Successful
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 0
push 1
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x55
call fcn.00425799
lea ecx, [ebp - 0x70]
call fcn.00401500
jmp 0x42c639
push dword [ebp + 0x18]
call edi
push 0
push str.behavior
push eax
push 0
lea ecx, [ebp + 8]
call fcn.0042b5c5
test eax, eax
jne 0x42dc52
push eax
lea eax, [ebp - 0x281]
push eax
mov esi, 0x471efc
mov edi, 0x46cf9c
push str.behavior
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x56
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0
call fcn.00401500
mov ecx, dword [ebp - 0x288]
push str.Optional
lea eax, [ebp - 0x8c]
push eax
call fcn.0043c9e4
push 1
lea ecx, [ebp - 0x281]
push ecx
push dword [eax + 0x10]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x57
call fcn.00402330
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x59
call fcn.00412eb0
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd33
cmp dword [ebp - 0x28c], 0
je 0x42d869
mov byte [ebx + 0x45c], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.Optional
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5a
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 1
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.00425799
mov ecx, dword [ebp - 0x288]
push str.Reboot
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5b
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412eb0
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd33
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x42d920
mov dword [ebx + 0x454], eax
push 0
lea eax, [ebp - 0x281]
push eax
push str.Reboot
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5c
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 1
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.00425799
mov ecx, dword [ebp - 0x288]
push str.Failure
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5d
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412eb0
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd33
mov eax, dword [ebp - 0x28c]
test eax, eax
je 0x42d9d7
mov dword [ebx + 0x458], eax
push 0
lea eax, [ebp - 0x281]
push eax
push str.Failure
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x5e
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.00425799
mov ecx, dword [ebp - 0x288]
push 0x46f030
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x5f
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412eb0
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd33
cmp dword [ebp - 0x28c], 0
je 0x42da8e
mov byte [ebx + 0x45d], 1
push 0
lea eax, [ebp - 0x281]
push eax
push 0x46f030
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x60
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.00425799
mov ecx, dword [ebp - 0x288]
push str.Hidden
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
mov eax, edx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x61
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412eb0
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd33
cmp dword [ebp - 0x28c], 0
je 0x42db45
mov byte [ebx + 0x269], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.Hidden
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x62
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.00425799
mov ecx, dword [ebp - 0x288]
push str.MsiProgress
lea eax, [ebp - 0x2c]
push eax
call fcn.0043c9e4
cmp dword [eax + 0x10], 0
mov edx, 0x4767e0
mov ecx, edx
cmovne ecx, dword [eax + 0x10]
test ecx, ecx
cmovne edx, ecx
push edx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x63
call fcn.004050d0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x59
call fcn.00412eb0
push 0xa
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0042dd33
cmp dword [ebp - 0x28c], 0
je 0x42dbfa
mov byte [ebx + 0x26a], 1
push 0
lea eax, [ebp - 0x281]
push eax
push str.MsiProgress
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x48], edi
call fcn.00403400
push 1
push 0
lea eax, [ebp - 0x70]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x64
call fcn.00425799
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x59
call fcn.00401500
push 0
push 1
lea eax, [ebp - 0xd0]
push eax
mov ecx, ebx
call fcn.00425799
lea ecx, [ebp - 0xd0]
call fcn.00401500
lea ecx, [ebp + 8]
call fcn.00412eb0
call fcn.0043fc6f
ret 0x20