Function at 0x40309e
Capabilities:
Check os version
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1686c
call fcn.0041cd60
mov eax, dword [0x445504]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x16824], ebx
mov dword [ebp - 0x16850], eax
mov dword [0x454db0], edi
mov dword [ebp - 0x16864], edi
mov byte [ebp - 0x16858], 0
call fcn.004057a9
push str.IsWow64Process
push str.kernel32
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x16830], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
cmp esi, edi
je 0x40311b
lea eax, [ebp - 0x16830]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
cmp dword [ebp - 0x16830], edi
lea eax, [ebp - 0x7c]
jne 0x40312a
push 0x20
jmp 0x40312c
push 0x40
push 0x43f2b8
push eax
call fcn.00418c53
add esp, 0xc
call fcn.00408d0d
push ebx
mov dword [ebp - 0x1684c], eax
mov byte [ebp - 0x2e], 9
mov byte [ebp - 0x2d], 0x7a
mov byte [ebp - 0x2c], 0x3e
mov byte [ebp - 0x2b], 0x2f
mov byte [ebp - 0x2a], 0x2e
mov byte [ebp - 0x29], 0xfa
mov byte [ebp - 0x28], 0xff
mov byte [ebp - 0x27], 0x1d
mov byte [ebp - 0x26], 0xf0
mov byte [ebp - 0x25], 0x9b
mov byte [ebp - 0x24], 0x19
mov byte [ebp - 0x23], 0x7c
mov byte [ebp - 0x22], 0x15
mov byte [ebp - 0x21], 0xb8
mov byte [ebp - 0x20], 0x1e
mov byte [ebp - 0x1f], 0x6d
mov byte [ebp - 0x1e], 0xc6
mov byte [ebp - 0x1d], 0x10
mov byte [ebp - 0x1c], 0x41
mov byte [ebp - 0x1b], 0x7e
mov byte [ebp - 0x1a], 0x5c
mov byte [ebp - 0x19], 0xed
mov byte [ebp - 0x18], 0x51
mov byte [ebp - 0x17], 0xb1
mov byte [ebp - 0x16], 0x19
mov byte [ebp - 0x15], 0x1c
mov byte [ebp - 0x14], 0x3c
mov byte [ebp - 0x13], 0xe2
mov byte [ebp - 0x12], 0x94
mov byte [ebp - 0x11], 0xd8
mov byte [ebp - 0x50], 0x59
mov byte [ebp - 0x4f], 0xbd
mov byte [ebp - 0x4e], 0xc9
mov byte [ebp - 0x4d], 0x52
mov byte [ebp - 0x4c], 0xaa
mov byte [ebp - 0x4b], 0x35
mov byte [ebp - 0x4a], 0xad
mov byte [ebp - 0x49], 0xbb
mov byte [ebp - 0x48], 0x10
mov byte [ebp - 0x47], 0xef
mov byte [ebp - 0x46], 0xde
mov byte [ebp - 0x45], 0x67
mov byte [ebp - 0x44], 0x2c
mov byte [ebp - 0x43], 0x47
mov byte [ebp - 0x42], 0xe0
mov byte [ebp - 0x41], 0xb5
mov byte [ebp - 0x40], 0xd4
mov byte [ebp - 0x3f], 0x82
mov byte [ebp - 0x3e], 0x1f
mov byte [ebp - 0x3d], 0x81
mov byte [ebp - 0x3c], 0x52
mov byte [ebp - 0x3b], 0xa1
mov byte [ebp - 0x3a], 2
mov byte [ebp - 0x39], 0x44
mov byte [ebp - 0x38], 0x2a
mov byte [ebp - 0x37], 0xeb
mov byte [ebp - 0x36], 0xaa
mov byte [ebp - 0x35], 0x7b
mov byte [ebp - 0x34], 0x79
mov byte [ebp - 0x33], 0x3b
mov byte [ebp - 0x32], 0x93
mov byte [ebp - 0x31], 0x45
mov byte [ebp - 0x30], 0xae
mov byte [ebp - 0x2f], 0xd2
call fcn.004182f0
cmp eax, 3
pop ecx
jb 0x403270
cmp byte [ebx], 0x5c
jne 0x40325c
cmp byte [ebx + 1], 0x5c
je 0x403268
cmp byte [ebx + 1], 0x3a
jne 0x403270
cmp byte [ebx + 2], 0x5c
jne 0x403270
mov dword [ebp - 0x16844], ebx
jmp 0x403296
mov esi, 0x400
push esi
call fcn.00418160
pop ecx
mov edi, eax
push esi
push edi
call fcn.0041a825
push ebx
mov esi, edi
call fcn.00409417
add esp, 0xc
mov dword [ebp - 0x16844], edi
push dword [ebp - 0x16844]
push str._Extractor__The_absolute_wrapper_path_is__s_n
call fcn.004094f4
push ebx
push str._Extractor__The_executable_name_is__s_n
call fcn.004094f4
push 0x800
call fcn.00418160
add esp, 0x14
push dword [ebp - 0x16844]
mov esi, eax
push esi
mov byte [esi], 0
call fcn.00418390
push esi
xor edi, edi
xor ebx, ebx
call fcn.004182f0
add esp, 0xc
test eax, eax
jle 0x4032f4
cmp byte [ebx + esi], 0x5c
jne 0x4032e8
mov edi, ebx
push esi
inc ebx
call fcn.004182f0
cmp ebx, eax
pop ecx
jl 0x4032e0
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x16824]
mov byte [edi + esi], 0
call fcn.00402f86
push str._Extractor__Found_Params_marker._Extracting_now..._n
mov dword [ebp - 0x16834], eax
call fcn.004094f4
add esp, 0xc
mov esi, 0x30d40
push esi
call fcn.00418160
pop ecx
push esi
push 0
push eax
mov dword [ebp - 0x16848], eax
call fcn.00419590
add esp, 0xc
push dword [ebp - 0x16834]
xor eax, eax
mov byte [ebp - 0x16811], 0
call fcn.0040825a
pop ecx
mov ebx, 0x43f348
push ebx
mov dword [ebp - 0x16830], eax
call fcn.004094f4
pop ecx
mov edi, 0x43f34c
push edi
call fcn.004094f4
pop ecx
push dword [ebp - 0x16830]
push str._Processing__d_dynamic_properties_n
call fcn.004094f4
push edi
call fcn.004094f4
and dword [ebp - 0x16828], 0
add esp, 0xc
cmp dword [ebp - 0x16830], 0
jle 0x403614
push dword [ebp - 0x16834]
call fcn.00408247
pop ecx
push esi
push dword [ebp - 0x16834]
mov dword [ebp - 0x16818], eax
xor eax, eax
call fcn.004081fd
mov edi, eax
push edi
call fcn.004182f0
add esp, 0xc
cmp eax, 0x64
jbe 0x4033f2
lea eax, [ebp - 0x70]
push 0x63
push eax
push eax
call fcn.00419460
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
push dword [ebp - 0x16818]
mov byte [ebp - 0xd], 0
push dword [ebp - 0x16828]
push str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x403404
push edi
push dword [ebp - 0x16818]
push dword [ebp - 0x16828]
push str._DynProps__Dynamic_Param__d:__s__s__n
call fcn.004094f4
mov eax, dword [ebp - 0x16848]
add esp, 0x10
push edi
push dword [ebp - 0x16818]
call fcn.00408101
push str.update_url
push dword [ebp - 0x16818]
call fcn.00419890
add esp, 0x10
test eax, eax
jne 0x403448
push edi
push str._DynProps__Dynamic_Update_URL:__s_n
mov dword [ebp - 0x16854], edi
call fcn.004094f4
pop ecx
pop ecx
push str.match_versions
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x40346b
push str.true
push edi
call fcn.00419890
pop ecx
pop ecx
push str.wrapper_autotest
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x403488
mov byte [ebp - 0x16858], 1
push str.show_no_ui
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x4034b6
push str.true
push edi
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x4034b6
mov byte [ebp - 0x16811], 1
push str.force_spawn
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x4034e3
push str.true
push edi
call fcn.00419890
neg eax
sbb eax, eax
pop ecx
inc eax
pop ecx
mov dword [0x454db8], eax
push str.splash_buffer
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x403510
push edi
call fcn.004182f0
test eax, eax
pop ecx
jbe 0x403510
push edi
call fcn.00419303
pop ecx
mov dword [0x454e50], eax
push str.splash_image
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x403595
push edi
call fcn.004182f0
cmp eax, 0x64
pop ecx
jae 0x40353a
push edi
push str._DynProps__Splash_Image_is__s_n
jmp 0x403556
push 0x63
lea eax, [ebp - 0x70]
push edi
push eax
call fcn.00419460
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 0xd], 0
push str._DynProps__Splash_Image_is__s..._n
call fcn.004094f4
pop ecx
pop ecx
push str._DynProps__Base64_decoding_image..._n
call fcn.004094f4
pop ecx
push edi
call fcn.004182f0
pop ecx
push eax
push edi
lea eax, [ebp - 0x1685c]
call fcn.00401401
push dword [ebp - 0x1685c]
mov dword [ebp - 0x16864], eax
push str._DynProps__Decode_complete__image_size_is__d__n
call fcn.004094f4
add esp, 0x10
push str.jre_name
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x4035d2
mov byte [ebp - 0x4318], al
lea eax, [ebp - 0x4318]
push edi
push eax
call fcn.00418390
lea eax, [ebp - 0x4318]
push eax
push str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.004094f4
add esp, 0x10
push str.windows_app_id
push dword [ebp - 0x16818]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x4035fc
push edi
push str._DynProps__Windows_APP_ID_is__s_n
call fcn.004094f4
pop ecx
pop ecx
mov eax, edi
call fcn.0040290a
inc dword [ebp - 0x16828]
mov eax, dword [ebp - 0x16828]
cmp eax, dword [ebp - 0x16830]
jl 0x403398
mov esi, dword [ebp - 0x16834]
call fcn.0040653f
push str.Processing_dynamic_properties
call fcn.004096ca
cmp byte [ebp + 0x14], 0
pop ecx
je 0x40363b
push str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.004094f4
pop ecx
push ebx
call fcn.004094f4
mov dword [esp], str.Extracting_wrapper_tail
call fcn.004096a2
pop ecx
push dword [ebp - 0x1684c]
push dword [ebp - 0x16824]
call fcn.0040300b
mov ebx, eax
push ebx
mov dword [ebp - 0x16818], ebx
call fcn.00408247
add esp, 0xc
push ebx
mov dword [ebp - 0x16824], eax
call fcn.00408247
pop ecx
push ebx
mov dword [ebp - 0x1683c], eax
call fcn.00408247
pop ecx
push ebx
mov dword [ebp - 0x1684c], eax
call fcn.00408247
pop ecx
push ebx
mov dword [ebp - 0x16834], eax
call fcn.00408247
mov dword [ebp - 0x16838], eax
mov dword [esp], 0x2000
push ebx
xor eax, eax
call fcn.004081fd
push ebx
mov dword [ebp - 0x16820], eax
call fcn.00408247
add esp, 0xc
push ebx
mov dword [ebp - 0x16860], eax
call fcn.00408247
pop ecx
push ebx
mov dword [ebp - 0x16840], eax
call fcn.00408247
pop ecx
push ebx
mov dword [ebp - 0x1682c], eax
call fcn.00408247
mov esi, eax
mov dword [esp], 0x1388
push ebx
xor eax, eax
mov dword [ebp - 0x16868], esi
call fcn.004081fd
test esi, esi
pop ecx
mov edi, eax
pop ecx
mov dword [ebp - 0x16830], edi
je 0x40372a
push esi
call fcn.004182f0
test eax, eax
pop ecx
jbe 0x40372a
push esi
push str._Extractor__Required_Java_version__s_n
call fcn.004094f4
pop ecx
pop ecx
push 0x43e324
push edi
call fcn.00419890
test eax, eax
pop ecx
pop ecx
jne 0x403749
mov edi, dword [ebp - 0x16854]
push edi
push str._Extractor__Will_use_Dynamic_Update_URL:__s_n
jmp 0x40374f
push edi
push str._Extractor__Will_use_Static_Update_URL:__s_n
call fcn.004094f4
cmp byte [ebp - 0x16811], 0
pop ecx
mov dword [ebp - 0x16828], edi
pop ecx
jne 0x4037b0
cmp dword [ebp - 0x1682c], 0
je 0x4037a9
push dword [ebp - 0x1682c]
call fcn.004182f0
test eax, eax
pop ecx
je 0x4037a9
xor edi, edi
cmp dword [ebp + 0xc], edi
jle 0x4037a9
mov eax, dword [ebp - 0x16850]
push dword [eax + edi*4]
push dword [ebp - 0x1682c]
call fcn.00419890
test eax, eax
pop ecx
pop ecx
je 0x403994
inc edi
cmp edi, dword [ebp + 0xc]
jl 0x403785
mov byte [ebp - 0x16811], 0
movzx eax, byte [ebp - 0x16811]
push eax
push str._Extractor__Is_silent_install_is__d_n
call fcn.004094f4
push str.Extracting_tail
call fcn.004096ca
add esp, 0xc
push str._Extractor__Setting_up_static_properties_n
call fcn.004094f4
mov edi, dword [ebp - 0x16848]
pop ecx
push dword [ebp - 0x16830]
mov eax, edi
push str.update_url
call fcn.004080d9
push dword [ebp - 0x16840]
mov eax, edi
push str.install_type
call fcn.004080d9
push dword [ebp - 0x16838]
mov eax, edi
push str.min_splash_ms
call fcn.004080d9
push dword [ebp - 0x16820]
mov eax, edi
push str.jwsig_public_key
call fcn.004080d9
push dword [ebp - 0x16860]
mov eax, edi
push str.can_override_splash
call fcn.004080d9
push dword [ebp - 0x16824]
mov eax, edi
push str.app_name
call fcn.004080d9
push dword [ebp - 0x1683c]
mov eax, edi
push str.wrapper_app_version
call fcn.004080d9
push dword [ebp - 0x16834]
mov eax, edi
push str.wrapper_gu_version
call fcn.004080d9
add esp, 0x40
push dword [ebp - 0x1682c]
mov eax, edi
push str.silent_parameter
call fcn.004080d9
push esi
push str.java_version
mov eax, edi
call fcn.004080d9
add esp, 0x10
cmp byte [ebp - 0x16811], 0
je 0x4038b1
push str.true
push str.show_no_ui
mov eax, edi
call fcn.004080d9
pop ecx
pop ecx
cmp dword [ebp - 0x16820], 0
je 0x4039a0
push dword [ebp - 0x16820]
call fcn.004182f0
test eax, eax
pop ecx
push dword [ebp - 0x16820]
jbe 0x4039ac
call fcn.004182f0
mov esi, eax
shr esi, 1
inc esi
pop ecx
inc esi
push esi
call fcn.00418160
pop ecx
push esi
push 0
push eax
mov dword [ebp - 0x16838], eax
call fcn.00419590
add esp, 0xc
push dword [ebp - 0x16820]
push esi
push dword [ebp - 0x16838]
call fcn.00408f18
add esp, 0xc
push eax
push str._Extractor__Processed_public_key_of_length__d_n
mov dword [ebp - 0x1682c], eax
call fcn.004094f4
push dword [ebp - 0x16820]
push str._Extractor__Hex:__s_n
call fcn.004094f4
push 0x31
pop ecx
mov esi, 0x4367b0
mov edi, 0x454e80
push 0x24
rep movsd dword es:[edi], dword [esi]
call fcn.00418160
add esp, 0x14
mov esi, eax
push esi
push dword [ebp - 0x1682c]
push dword [ebp - 0x16838]
call fcn.0040c0b0
add esp, 0xc
test eax, eax
je 0x40397b
push str.ERROR___unable_to_import_public_key._n
call fcn.00418223
pop ecx
push esi
call fcn.00418083
pop ecx
xor esi, esi
push esi
push str._Extractor__Public_Key:__08X_n
mov dword [0x454db0], esi
call fcn.004094f4
mov edi, dword [ebp - 0x16848]
jmp 0x4039c2
mov byte [ebp - 0x16811], 1
jmp 0x4037b0
push str._Extractor__Public_key_empty__no_public_key__n
call fcn.004094f4
jmp 0x4039c3
call fcn.004182f0
test eax, eax
pop ecx
ja 0x4039c4
push 0
push str._Extractor__Public_key_length__d__no_public_key__n
call fcn.004094f4
pop ecx
pop ecx
mov ecx, dword [ebp - 0x16840]
call fcn.00409975
push eax
push str._Extractor__Shared_dir_is__s_n
mov dword [ebp - 0x16840], eax
call fcn.004094f4
mov esi, dword [ebp - 0x16828]
push esi
push str._Extractor__Update_URL_is_currently__s_n
call fcn.004094f4
push esi
call fcn.004182f0
add esp, 0x14
test eax, eax
jle 0x403a0d
add eax, esi
cmp byte [eax - 1], 0x2f
je 0x403a0d
mov byte [eax], 0x2f
mov byte [eax + 1], 0
push esi
push str._Extractor__Update_URL_is_now__s_n
call fcn.004094f4
push str.JWrapper_
push dword [ebp - 0x16840]
lea eax, [ebp - 0x1408]
call fcn.00409496
push dword [ebp - 0x16824]
lea eax, [ebp - 0x1408]
push eax
call fcn.00418390
lea eax, [ebp - 0x1408]
push eax
push str._Extractor__Master_folder_is__s_n
call fcn.004094f4
lea eax, [ebp - 0x1408]
push eax
call fcn.004012de
add esp, 0x24
lea eax, [ebp - 0x1408]
push str.JWApps
push eax
lea eax, [ebp - 0x16810]
call fcn.00409496
lea eax, [ebp - 0x16810]
push str.JreNameOverride
push eax
lea eax, [ebp - 0xdf58]
call fcn.00409496
lea eax, [ebp - 0xdf58]
push 0x43e9b8
push eax
call fcn.004193f6
mov esi, eax
add esp, 0x18
test esi, esi
je 0x403b20
push str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.004094f4
mov dword [esp], 0x1f4
push esi
call fcn.00408129
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x16840], eax
je 0x403af0
push eax
call fcn.004182f0
cmp eax, 1
pop ecx
jne 0x403af0
mov eax, dword [ebp - 0x16840]
cmp byte [eax], 0x2d
jne 0x403af0
lea eax, [ebp - 0x4318]
push eax
push str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x403b2c
push dword [ebp - 0x16840]
lea eax, [ebp - 0x4318]
push eax
mov byte [ebp - 0x4318], 0
call fcn.00418390
push esi
call fcn.0041ae03
add esp, 0xc
lea eax, [ebp - 0x4318]
push eax
push str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x403b2c
lea eax, [ebp - 0x4318]
push eax
push str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
call fcn.004094f4
pop ecx
pop ecx
lea eax, [ebp - 0x1408]
push str.JWAppsSharedConfig
push eax
lea eax, [ebp - 0x14100]
call fcn.00409496
lea eax, [ebp - 0x14100]
push eax
call fcn.004093f8
add esp, 0xc
push dword [ebp - 0x16834]
mov byte [ebp - 0x16819], 1
call fcn.004182f0
test eax, eax
pop ecx
jne 0x403b83
push str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.004094f4
mov byte [ebp - 0x16819], 0
jmp 0x403b94
push dword [ebp - 0x16834]
push str._Extractor__GenericUpdater_version_is__s_n
call fcn.004094f4
pop ecx
pop ecx
push dword [ebp - 0x1683c]
call fcn.004182f0
test eax, eax
pop ecx
jne 0x403bb1
push str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.004094f4
jmp 0x403bc2
push dword [ebp - 0x1683c]
push str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
call fcn.004094f4
pop ecx
pop ecx
push str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.004094f4
lea eax, [ebp - 0x1408]
mov dword [esp], str.JWrapper
push eax
call fcn.00409847
mov dword [ebp - 0x1682c], eax
lea eax, [ebp - 0x4318]
push eax
lea eax, [ebp - 0x1408]
push eax
call fcn.00409847
add esp, 0x10
test eax, eax
mov dword [ebp - 0x16820], eax
je 0x403d18
push str.java.exe
push 0x43da84
push eax
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0x1c08]
call fcn.004094d2
lea esi, [ebp - 0x1c08]
call fcn.00409096
push str.javaw.exe
mov esi, eax
push 0x43da84
push dword [ebp - 0x16820]
neg esi
lea eax, [ebp - 0x1408]
sbb esi, esi
push eax
lea eax, [ebp - 0x1c08]
neg esi
call fcn.004094d2
add esp, 0x20
test esi, esi
je 0x403c7e
lea esi, [ebp - 0x1c08]
call fcn.00409096
test eax, eax
je 0x403c7e
mov dword [ebp - 0x16838], 1
jmp 0x403c85
and dword [ebp - 0x16838], 0
push str.rt.jar
push 0x43da6c
push dword [ebp - 0x16820]
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0x1c08]
call fcn.004094d2
add esp, 0x10
lea esi, [ebp - 0x1c08]
call fcn.00409096
test eax, eax
jne 0x403cfd
push 0x43da6c
push 0x43da68
push dword [ebp - 0x16820]
lea eax, [ebp - 0x1408]
push eax
mov eax, esi
call fcn.004094d2
push str.rt.jar
call fcn.00409417
add esp, 0x14
cmp dword [ebp - 0x16838], 0
je 0x403cf6
call fcn.00409096
test eax, eax
jne 0x403d18
and dword [ebp - 0x16838], 0
cmp dword [ebp - 0x16838], 0
jne 0x403d18
push str._Extractor__The_existing_JRE_is_broken._Instructing_the_wrapper_to_update._n
call fcn.004094f4
and dword [ebp - 0x16820], 0
pop ecx
cmp dword [ebp - 0x1682c], 0
je 0x403e54
cmp dword [ebp - 0x16820], 0
je 0x403e54
push dword [ebp - 0x1682c]
push str._Extractor__Latest_GU_version_exists:__s_n
call fcn.004094f4
push dword [ebp - 0x16820]
push str._Extractor__Existing_JRE_exists:__s_n
call fcn.004094f4
push dword [ebp - 0x1682c]
call fcn.00409ab4
add esp, 0x14
push dword [ebp - 0x16834]
mov esi, eax
call fcn.004192f2
cmp byte [ebp - 0x16819], 0
pop ecx
je 0x403d85
cmp eax, esi
jle 0x403d85
push str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403e59
push str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.004094f4
cmp byte [ebp - 0x16819], 0
pop ecx
je 0x403df0
push dword [ebp - 0x1683c]
call fcn.004182f0
test eax, eax
pop ecx
jbe 0x403df0
push dword [ebp - 0x16824]
lea eax, [ebp - 0x1408]
push eax
call fcn.00409847
test eax, eax
pop ecx
pop ecx
je 0x403e4d
push eax
call fcn.00409ab4
pop ecx
push dword [ebp - 0x1683c]
mov esi, eax
call fcn.004192f2
cmp eax, esi
pop ecx
jle 0x403de5
push str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403e59
push str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.004094f4
pop ecx
push str._Extractor__Running_without_extraction_now_n
call fcn.004094f4
pop ecx
call fcn.004057db
mov esi, ebx
call fcn.0040653f
cmp byte [ebp + 0x14], 0
jne 0x403e46
push dword [ebp - 0x16844]
mov ecx, dword [ebp - 0x1682c]
push 0
push dword [ebp - 0x16854]
lea eax, [ebp - 0x1408]
push dword [ebp - 0x16830]
lea edx, [ebp - 0x4318]
push dword [ebp - 0x16850]
push dword [ebp + 0xc]
push edi
push eax
call fcn.00401b5d
add esp, 0x20
push 0
call fcn.00418fce
push str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x403e59
push str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.004094f4
cmp dword [ebp - 0x16820], 0
pop ecx
jne 0x403e6f
push str._Extractor__Note:_No_latest_JRE_version_exists_n
jmp 0x403e74
push str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.004094f4
cmp dword [ebp - 0x1682c], 0
pop ecx
jne 0x403e8a
push str._Extractor__Note:_No_latest_GU_version_exists_n
jmp 0x403e8f
push str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.004094f4
cmp byte [ebp - 0x16819], 0
pop ecx
jne 0x403ead
push str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.004094f4
pop ecx
push 1
jmp 0x403e48
lea eax, [ebp - 0x1408]
push eax
call fcn.004093f8
pop ecx
push dword [ebp - 0x16834]
lea eax, [ebp - 0x1408]
push str.JWrapper
push eax
lea esi, [ebp - 0xb848]
call fcn.00401937
lea eax, [ebp - 0x1408]
add esp, 0xc
push eax
lea esi, [ebp - 0x56a0]
call fcn.00401977
pop ecx
push dword [ebp - 0x1683c]
lea eax, [ebp - 0x1408]
push dword [ebp - 0x16824]
lea esi, [ebp - 0x12d78]
push eax
call fcn.00401937
lea eax, [ebp - 0x1408]
add esp, 0xc
push eax
lea esi, [ebp - 0x9138]
call fcn.00401977
pop ecx
lea eax, [ebp - 0xb848]
push eax
push str._Extractor__GU_folder_is__s_n
call fcn.004094f4
lea eax, [ebp - 0x56a0]
push eax
push str._Extractor__GU_temp_is__s_n
call fcn.004094f4
lea eax, [ebp - 0x56a0]
push eax
call fcn.004093f8
add esp, 0x14
test eax, eax
je 0x403f60
push str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
jmp 0x403ea3
lea eax, [ebp - 0x56a0]
push str.lzma.exe
push eax
lea eax, [ebp - 0xa4c0]
call fcn.00409496
lea eax, [ebp - 0xa4c0]
push eax
mov ebx, str._Extractor__LZMA_path_is__s_n
push ebx
call fcn.004094f4
lea eax, [ebp - 0x56a0]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
lea eax, [ebp - 0xa4c0]
call fcn.00409717
lea eax, [ebp - 0x56a0]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
mov esi, str.nativesplash.png
lea eax, [ebp - 0x56a0]
push esi
push eax
lea eax, [ebp - 0x1bd8]
call fcn.00409496
add esp, 0x28
lea eax, [ebp - 0x1bd8]
movsx ecx, byte [eax]
cmp ecx, 0x2f
jne 0x403fe4
mov byte [eax], 0x5c
inc eax
test ecx, ecx
jne 0x403fd9
lea eax, [ebp - 0x1bd8]
push eax
push dword [ebp - 0x1685c]
push dword [ebp - 0x16864]
push dword [ebp - 0x16860]
call fcn.00402ad1
lea eax, [ebp - 0x56a0]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
lea eax, [ebp - 0x56a0]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
lea eax, [ebp - 0x56a0]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
push str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.004094f4
add esp, 0x2c
lea eax, [ebp - 0xb848]
push eax
push str._Extractor__Renaming_GU_folder_to__s_n
call fcn.004094f4
lea eax, [ebp - 0xb848]
lea edi, [ebp - 0x56a0]
call fcn.00401549
push str._Extractor__Recreating_GU_location_n
call fcn.004094f4
add esp, 0xc
lea eax, [ebp - 0xb848]
push eax
mov eax, edi
push eax
mov byte [ebp - 0x56a0], 0
call fcn.00418390
lea eax, [ebp - 0xb848]
push str.lzma.exe
push eax
lea eax, [ebp - 0xa4c0]
call fcn.00409496
lea eax, [ebp - 0xa4c0]
push eax
push ebx
call fcn.004094f4
lea eax, [ebp - 0xb848]
push str.cacerts
push eax
lea eax, [ebp - 0x119f0]
call fcn.00409496
lea eax, [ebp - 0x119f0]
push eax
push str._Extractor__CACerts_override_path_is__s_n
call fcn.004094f4
mov eax, edi
push str.verpatch.exe
push eax
lea eax, [ebp - 0x15488]
call fcn.00409496
lea eax, [ebp - 0xb848]
push esi
push eax
lea eax, [ebp - 0xf2e0]
call fcn.00409496
lea eax, [ebp - 0xf2e0]
push eax
push str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.004094f4
add esp, 0x40
push str._Extractor__Configuring_splash_n
call fcn.004094f4
pop ecx
call fcn.004011ed
test al, al
je 0x40413d
lea eax, [ebp - 0xf2e0]
push eax
call fcn.00404cd0
pop ecx
mov ecx, eax
call fcn.004071d0
push str._Extractor__Showing_splash_n
call fcn.004094f4
cmp byte [ebp - 0x16811], 0
pop ecx
jne 0x40415c
cmp byte [ebp + 0x14], 0
jne 0x40415c
call fcn.00405812
push 0xffffffffffffffff
call fcn.0040582a
mov dword [esp], str._Extractor__Setting_up_a_JRE_n
call fcn.004094f4
pop ecx
push dword [ebp - 0x1684c]
call fcn.004182f0
test eax, eax
pop ecx
jbe 0x4042b0
mov ebx, str.Extracting_Offline_JRE
push ebx
call fcn.004096a2
mov dword [esp], str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.004094f4
pop ecx
push dword [ebp - 0x16828]
lea eax, [ebp - 0x56a0]
push eax
lea ecx, [ebp - 0x4318]
call fcn.004027dd
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x6a28]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.004093f8
pop ecx
push dword [ebp - 0x1684c]
lea eax, [ebp - 0x4318]
push eax
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0xcbd0]
call fcn.00401937
add esp, 0xc
push str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.004094f4
lea eax, [ebp - 0x6a28]
mov dword [esp], str.JRE.p2
push eax
lea eax, [ebp - 0x2f90]
call fcn.00409496
lea eax, [ebp - 0x6a28]
push eax
call fcn.00401289
add esp, 0xc
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.004094f4
push str._Extractor__Extracting_JRE_archive..._n
call fcn.004094f4
add esp, 0xc
lea eax, [ebp - 0x6a28]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
lea eax, [ebp - 0x4318]
push eax
push str._Extractor__Extracted_JRE__s_n
call fcn.004094f4
push str._Extractor__Regenerating_jsa..._n
call fcn.004094f4
lea eax, [ebp - 0x6a28]
add esp, 0x14
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406d8a
mov edi, eax
push esi
push edi
call fcn.00406de3
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406db8
call fcn.00406e12
push edi
call fcn.00418083
add esp, 0xc
push ebx
jmp 0x4046b7
push str.Setting_up_online_JRE
call fcn.004096a2
mov byte [ebp - 0x70], 0
mov dword [esp], str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
call fcn.004094f4
pop ecx
push dword [ebp - 0x16844]
lea eax, [ebp - 0x6a28]
push dword [ebp - 0x16854]
push dword [ebp - 0x16830]
push dword [ebp - 0x16850]
push dword [ebp + 0xc]
push dword [ebp - 0x16848]
push eax
lea eax, [ebp - 0x1408]
push eax
push dword [ebp - 0x16868]
lea eax, [ebp - 0x70]
push dword [ebp - 0x16858]
push eax
call fcn.00402b55
lea eax, [ebp - 0x70]
add esp, 0x2c
push eax
call fcn.004182f0
test eax, eax
pop ecx
jbe 0x404349
push str._Extractor__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.004094f4
pop ecx
push dword [ebp - 0x16828]
lea eax, [ebp - 0x56a0]
push eax
lea ecx, [ebp - 0x4318]
call fcn.004027dd
pop ecx
jmp 0x404666
push str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.004094f4
pop ecx
call fcn.004027b5
mov ebx, eax
mov edi, str.JWrapper_
lea eax, [ebp - 0x56a0]
push edi
push eax
lea eax, [ebp - 0x7db0]
call fcn.00409496
lea eax, [ebp - 0x4318]
push eax
lea eax, [ebp - 0x7db0]
push eax
call fcn.00418390
mov esi, str._version.txt
lea eax, [ebp - 0x7db0]
push esi
push eax
call fcn.00418390
push dword [ebp - 0x16828]
lea eax, [ebp - 0x2f90]
push eax
mov byte [ebp - 0x2f90], 0
call fcn.00418390
lea eax, [ebp - 0x2f90]
push edi
push eax
call fcn.00418390
lea eax, [ebp - 0x4318]
push eax
lea eax, [ebp - 0x2f90]
push eax
call fcn.00418390
lea eax, [ebp - 0x2f90]
push esi
push eax
call fcn.00418390
lea eax, [ebp - 0x2f90]
push str._time
push eax
call fcn.00418390
add esp, 0x40
lea eax, [ebp - 0x2f90]
push ebx
push eax
call fcn.00418390
push ebx
call fcn.00418083
add esp, 0xc
cmp byte [ebp - 0x16811], 0
jne 0x40441c
cmp byte [ebp + 0x14], 0
jne 0x40441c
call fcn.00405812
lea eax, [ebp - 0x2f90]
push eax
push str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.004094f4
lea eax, [ebp - 0x7db0]
push eax
push str._JREDownload__Saving_into__s_n
call fcn.004094f4
lea eax, [ebp - 0x7db0]
push eax
lea eax, [ebp - 0x2f90]
push eax
call fcn.00407d95
add esp, 0x18
test eax, eax
je 0x4048d1
push 0xffffffffffffffff
call fcn.0040582a
pop ecx
lea eax, [ebp - 0x7db0]
push eax
push str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.004094f4
lea eax, [ebp - 0x7db0]
push 0x43e9b8
push eax
call fcn.004193f6
add esp, 0x10
test eax, eax
mov dword [ebp - 0x16824], eax
jne 0x4044a6
call fcn.00418589
push dword [eax]
push str._JREDownload___Unable_to_open_version_file____d__n
call fcn.004094f4
pop ecx
pop ecx
push str._JREDownload__Extracting_version:
xor esi, esi
call fcn.004094f4
pop ecx
jmp 0x4044db
push ebx
push 0x440478
call fcn.004094f4
cmp ebx, 0xd
pop ecx
pop ecx
je 0x4044fa
cmp ebx, 0xa
je 0x4044fa
cmp ebx, 0x20
je 0x4044fa
cmp esi, 0x32
mov byte [ebp + esi - 0x70], bl
jge 0x4044f0
inc esi
push dword [ebp - 0x16824]
call fcn.0041ae7f
mov ebx, eax
cmp ebx, 0xffffffff
pop ecx
jne 0x4044b5
jmp 0x404505
push str._n_JREDownload__Version_invalid__too_long__n
jmp 0x403ea3
push str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.004094f4
pop ecx
push 0x43f348
call fcn.004094f4
cmp dword [ebp - 0x16824], 0
pop ecx
je 0x404525
push dword [ebp - 0x16824]
call fcn.0041ae03
pop ecx
lea eax, [ebp - 0x70]
push eax
push str._JREDownload__JRE_Version_is__s_n
mov byte [ebp + esi - 0x70], 0
call fcn.004094f4
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x6a28]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.004093f8
pop ecx
push dword [ebp - 0x16828]
lea eax, [ebp - 0x2f90]
push eax
mov byte [ebp - 0x2f90], 0
call fcn.00418390
lea eax, [ebp - 0x2f90]
push edi
push eax
call fcn.00418390
lea eax, [ebp - 0x4318]
push eax
lea eax, [ebp - 0x2f90]
push eax
call fcn.00418390
lea eax, [ebp - 0x2f90]
push 0x43e0fc
push eax
call fcn.00418390
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x2f90]
push eax
call fcn.00418390
lea eax, [ebp - 0x2f90]
push str._archive.p2.l2
push eax
call fcn.00418390
mov eax, esi
push eax
call fcn.00401289
add esp, 0x34
cmp byte [ebp - 0x16811], 0
mov dword [0x454db4], eax
jne 0x4045e5
cmp byte [ebp + 0x14], 0
jne 0x4045e5
call fcn.00405812
lea eax, [ebp - 0x6a28]
push eax
push str._JREDownload__Extracting_JRE_archive_to__s_n
call fcn.004094f4
lea eax, [ebp - 0x6a28]
push eax
lea eax, [ebp - 0x2f90]
push eax
call fcn.00407e7c
add esp, 0x10
test eax, eax
jne 0x40461a
push str._JREDownload__Failed_to_download_and_extract_JRE_archive._n
jmp 0x403ea3
push str._JREDownload__Regenerating_jsa..._n
call fcn.004094f4
pop ecx
lea eax, [ebp - 0x6a28]
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406d8a
mov edi, eax
push esi
push edi
call fcn.00406de3
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406db8
call fcn.00406e12
push edi
call fcn.00418083
add esp, 0xc
push str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.004094f4
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.004182f0
test eax, eax
pop ecx
jne 0x404684
push str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
call fcn.004095a5
jmp 0x403ea8
lea eax, [ebp - 0x70]
push eax
push str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.004094f4
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x4318]
push eax
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0xcbd0]
call fcn.00401937
add esp, 0x14
push str.Setting_up_online_JRE
call fcn.004096ca
pop ecx
lea eax, [ebp - 0xcbd0]
lea edi, [ebp - 0x6a28]
call fcn.00401549
lea eax, [ebp - 0xcbd0]
push eax
push str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.004094f4
push str._Extractor__JRE_setup._Overriding_cacerts._n
call fcn.004094f4
lea eax, [ebp - 0xcbd0]
add esp, 0xc
push eax
lea edi, [ebp - 0x119f0]
call fcn.00402e98
lea eax, [ebp - 0x14100]
mov dword [esp], str.DetectedProxy
push eax
lea eax, [ebp - 0x10668]
call fcn.00409496
push str._Extractor__Saving_proxy_configuration_n
call fcn.004094f4
xor ebx, ebx
add esp, 0xc
cmp dword [0x454da4], ebx
je 0x404747
push str._Proxy__Saving_proxy_settings_now._n
call fcn.004094f4
pop ecx
lea eax, [ebp - 0x10668]
push eax
call fcn.00406275
jmp 0x404751
push str._Proxy__No_working_proxy_was_found__so_no_proxy_to_be_saved._n
call fcn.004094f4
pop ecx
lea eax, [ebp - 0xcbd0]
push eax
call fcn.00401289
pop ecx
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.004094f4
push dword [ebp - 0x1683c]
call fcn.004182f0
add esp, 0xc
test eax, eax
jbe 0x40480d
push str._Extractor__Offline_installer___app_to_extract._n
call fcn.004094f4
pop ecx
lea eax, [ebp - 0x12d78]
push eax
push str._Extractor__APP_folder_is__s_n
call fcn.004094f4
lea eax, [ebp - 0x9138]
push eax
push str._Extractor__APP_temp_is__s_n
call fcn.004094f4
lea eax, [ebp - 0x9138]
push eax
call fcn.004093f8
add esp, 0x14
test eax, eax
je 0x4047cf
push str.Unable_to_create_App_Temp_folder_n
jmp 0x40467a
push str._Extractor__Extracting_App..._n
call fcn.004094f4
pop ecx
lea eax, [ebp - 0x9138]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
lea eax, [ebp - 0x9138]
push eax
push dword [ebp - 0x16818]
call fcn.00408315
push str._Extractor__Setting_permissions..._n
call fcn.004094f4
add esp, 0x14
jmp 0x404818
push str._Extractor__Online_installer___no_app_to_extract_n
call fcn.004094f4
pop ecx
push dword [ebp - 0x1683c]
call fcn.004182f0
test eax, eax
pop ecx
jbe 0x40484c
lea eax, [ebp - 0x12d78]
lea edi, [ebp - 0x9138]
call fcn.00401549
lea eax, [ebp - 0x12d78]
push eax
push str._Extractor__Renaming_App_folder_to__s_n
call fcn.004094f4
pop ecx
pop ecx
lea eax, [ebp - 0x1408]
push str.JWrapper
push eax
call fcn.00409847
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
jne 0x40486f
push str.No_latest_App_version_even_after_download__n
jmp 0x40467a
call fcn.004057db
push edi
push str._Extractor__Will_now_run_latest_GU__s_n
call fcn.004094f4
mov esi, dword [ebp - 0x16818]
pop ecx
pop ecx
call fcn.0040653f
cmp byte [ebp + 0x14], 0
jne 0x4048cb
push dword [ebp - 0x16844]
lea eax, [ebp - 0x1408]
push ebx
push dword [ebp - 0x16854]
lea edx, [ebp - 0x4318]
push dword [ebp - 0x16830]
mov ecx, edi
push dword [ebp - 0x16850]
push dword [ebp + 0xc]
push dword [ebp - 0x16848]
push eax
call fcn.00401b5d
add esp, 0x20
push ebx
jmp 0x403e48
cmp byte [ebp - 0x16811], 0
jne 0x4048e5
cmp byte [ebp + 0x14], 0
jne 0x4048e5
call fcn.004057db
push str._JREDownload__Failed_to_download_JRE_version_file_n
jmp 0x40467a