Function at 0x4030a0
Capabilities:
Check os version
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x154e4
call fcn.0041cdb0
mov eax, dword [0x445504]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x1549c], ebx
mov dword [ebp - 0x154c4], eax
mov dword [0x454db0], edi
mov dword [ebp - 0x154e0], edi
mov byte [ebp - 0x154b4], 0
call fcn.0040578c
push str.IsWow64Process
push str.kernel32
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x154a8], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
cmp esi, edi
je 0x40311d
lea eax, [ebp - 0x154a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
cmp dword [ebp - 0x154a8], edi
lea eax, [ebp - 0x7c]
jne 0x40312c
push 0x20
jmp 0x40312e
push 0x40
push 0x43f2b8
push eax
call fcn.00418ca3
add esp, 0xc
call fcn.00408d2f
push ebx
mov dword [ebp - 0x154d0], eax
mov byte [ebp - 0x2e], 9
mov byte [ebp - 0x2d], 0x7a
mov byte [ebp - 0x2c], 0x3e
mov byte [ebp - 0x2b], 0x2f
mov byte [ebp - 0x2a], 0x2e
mov byte [ebp - 0x29], 0xfa
mov byte [ebp - 0x28], 0xff
mov byte [ebp - 0x27], 0x1d
mov byte [ebp - 0x26], 0xf0
mov byte [ebp - 0x25], 0x9b
mov byte [ebp - 0x24], 0x19
mov byte [ebp - 0x23], 0x7c
mov byte [ebp - 0x22], 0x15
mov byte [ebp - 0x21], 0xb8
mov byte [ebp - 0x20], 0x1e
mov byte [ebp - 0x1f], 0x6d
mov byte [ebp - 0x1e], 0xc6
mov byte [ebp - 0x1d], 0x10
mov byte [ebp - 0x1c], 0x41
mov byte [ebp - 0x1b], 0x7e
mov byte [ebp - 0x1a], 0x5c
mov byte [ebp - 0x19], 0xed
mov byte [ebp - 0x18], 0x51
mov byte [ebp - 0x17], 0xb1
mov byte [ebp - 0x16], 0x19
mov byte [ebp - 0x15], 0x1c
mov byte [ebp - 0x14], 0x3c
mov byte [ebp - 0x13], 0xe2
mov byte [ebp - 0x12], 0x94
mov byte [ebp - 0x11], 0xd8
mov byte [ebp - 0x50], 0x59
mov byte [ebp - 0x4f], 0xbd
mov byte [ebp - 0x4e], 0xc9
mov byte [ebp - 0x4d], 0x52
mov byte [ebp - 0x4c], 0xaa
mov byte [ebp - 0x4b], 0x35
mov byte [ebp - 0x4a], 0xad
mov byte [ebp - 0x49], 0xbb
mov byte [ebp - 0x48], 0x10
mov byte [ebp - 0x47], 0xef
mov byte [ebp - 0x46], 0xde
mov byte [ebp - 0x45], 0x67
mov byte [ebp - 0x44], 0x2c
mov byte [ebp - 0x43], 0x47
mov byte [ebp - 0x42], 0xe0
mov byte [ebp - 0x41], 0xb5
mov byte [ebp - 0x40], 0xd4
mov byte [ebp - 0x3f], 0x82
mov byte [ebp - 0x3e], 0x1f
mov byte [ebp - 0x3d], 0x81
mov byte [ebp - 0x3c], 0x52
mov byte [ebp - 0x3b], 0xa1
mov byte [ebp - 0x3a], 2
mov byte [ebp - 0x39], 0x44
mov byte [ebp - 0x38], 0x2a
mov byte [ebp - 0x37], 0xeb
mov byte [ebp - 0x36], 0xaa
mov byte [ebp - 0x35], 0x7b
mov byte [ebp - 0x34], 0x79
mov byte [ebp - 0x33], 0x3b
mov byte [ebp - 0x32], 0x93
mov byte [ebp - 0x31], 0x45
mov byte [ebp - 0x30], 0xae
mov byte [ebp - 0x2f], 0xd2
call fcn.00418340
cmp eax, 3
pop ecx
jb 0x403272
cmp byte [ebx], 0x5c
jne 0x40325e
cmp byte [ebx + 1], 0x5c
je 0x40326a
cmp byte [ebx + 1], 0x3a
jne 0x403272
cmp byte [ebx + 2], 0x5c
jne 0x403272
mov dword [ebp - 0x154c8], ebx
jmp 0x403298
mov edi, 0x400
push edi
call fcn.004181b0
pop ecx
mov esi, eax
push edi
push esi
call fcn.0041a875
push ebx
call fcn.00409439
add esp, 0xc
mov ebx, esi
mov dword [ebp - 0x154c8], esi
push ebx
push str._Extractor__The_absolute_wrapper_path_is__s_n
call fcn.00409516
push dword [ebp - 0x1549c]
push str._Extractor__The_executable_name_is__s_n
call fcn.00409516
push 0x800
call fcn.004181b0
add esp, 0x14
mov esi, eax
push ebx
push esi
mov byte [esi], 0
call fcn.004183e0
push esi
xor edi, edi
xor ebx, ebx
call fcn.00418340
add esp, 0xc
test eax, eax
jle 0x4032f1
cmp byte [ebx + esi], 0x5c
jne 0x4032e5
mov edi, ebx
push esi
inc ebx
call fcn.00418340
cmp ebx, eax
pop ecx
jl 0x4032dd
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x1549c]
mov byte [edi + esi], 0
call fcn.00402f88
push str._Extractor__Found_Params_marker._Extracting_now..._n
mov dword [ebp - 0x154ac], eax
call fcn.00409516
add esp, 0xc
mov esi, 0x30d40
push esi
call fcn.004181b0
pop ecx
push esi
xor ebx, ebx
push ebx
push eax
mov dword [ebp - 0x154bc], eax
call fcn.004195e0
add esp, 0xc
push dword [ebp - 0x154ac]
xor eax, eax
mov byte [ebp - 0x15489], bl
call fcn.00408281
mov dword [ebp - 0x154a8], eax
mov dword [esp], 0x43f348
call fcn.00409516
pop ecx
mov edi, 0x43f34c
push edi
call fcn.00409516
pop ecx
push dword [ebp - 0x154a8]
push str._Processing__d_dynamic_properties_n
call fcn.00409516
push edi
call fcn.00409516
add esp, 0xc
cmp dword [ebp - 0x154a8], ebx
mov dword [ebp - 0x154a0], ebx
jle 0x4035cf
push dword [ebp - 0x154ac]
call fcn.0040826e
pop ecx
push esi
push dword [ebp - 0x154ac]
mov ebx, eax
xor eax, eax
call fcn.00408224
mov edi, eax
push edi
call fcn.00418340
add esp, 0xc
cmp eax, 0x64
jbe 0x4033e4
lea eax, [ebp - 0x70]
push 0x63
push eax
push eax
call fcn.004194b0
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
push ebx
push dword [ebp - 0x154a0]
mov byte [ebp - 0xd], 0
push str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x4033f1
push edi
push ebx
push dword [ebp - 0x154a0]
push str._DynProps__Dynamic_Param__d:__s__s__n
call fcn.00409516
mov eax, dword [ebp - 0x154bc]
add esp, 0x10
push edi
push ebx
call fcn.00408128
push str.update_url
push ebx
call fcn.004198e0
add esp, 0x10
test eax, eax
jne 0x40342b
push edi
push str._DynProps__Dynamic_Update_URL:__s_n
mov dword [ebp - 0x154c0], edi
call fcn.00409516
pop ecx
pop ecx
push str.match_versions
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x403449
push str.true
push edi
call fcn.004198e0
pop ecx
pop ecx
push str.wrapper_autotest
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x403461
mov byte [ebp - 0x154b4], 1
push str.show_no_ui
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x40348a
push str.true
push edi
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x40348a
mov byte [ebp - 0x15489], 1
push str.force_spawn
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x4034b2
push str.true
push edi
call fcn.004198e0
neg eax
sbb eax, eax
pop ecx
inc eax
pop ecx
mov dword [0x454db8], eax
push str.splash_buffer
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x4034da
push edi
call fcn.00418340
test eax, eax
pop ecx
jbe 0x4034da
push edi
call fcn.00419353
pop ecx
mov dword [0x454e50], eax
push str.splash_image
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x40355a
push edi
call fcn.00418340
cmp eax, 0x64
pop ecx
jae 0x4034ff
push edi
push str._DynProps__Splash_Image_is__s_n
jmp 0x40351b
push 0x63
lea eax, [ebp - 0x70]
push edi
push eax
call fcn.004194b0
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 0xd], 0
push str._DynProps__Splash_Image_is__s..._n
call fcn.00409516
pop ecx
pop ecx
push str._DynProps__Base64_decoding_image..._n
call fcn.00409516
pop ecx
push edi
call fcn.00418340
pop ecx
push eax
push edi
lea eax, [ebp - 0x154d8]
call fcn.00401401
push dword [ebp - 0x154d8]
mov dword [ebp - 0x154e0], eax
push str._DynProps__Decode_complete__image_size_is__d__n
call fcn.00409516
add esp, 0x10
push str.jre_name
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x403592
mov byte [ebp - 0x2f90], al
lea eax, [ebp - 0x2f90]
push edi
push eax
call fcn.004183e0
lea eax, [ebp - 0x2f90]
push eax
push str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.00409516
add esp, 0x10
push str.windows_app_id
push ebx
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x4035b7
push edi
push str._DynProps__Windows_APP_ID_is__s_n
call fcn.00409516
pop ecx
pop ecx
mov eax, edi
call fcn.0040290c
inc dword [ebp - 0x154a0]
mov eax, dword [ebp - 0x154a0]
cmp eax, dword [ebp - 0x154a8]
jl 0x403393
mov esi, dword [ebp - 0x154ac]
call fcn.00406546
push str.Processing_dynamic_properties
call fcn.004096ec
cmp byte [ebp + 0x14], 0
pop ecx
je 0x4035f6
push str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.00409516
pop ecx
push 0x43f348
call fcn.00409516
mov dword [esp], str.Extracting_wrapper_tail
call fcn.004096c4
pop ecx
push dword [ebp - 0x154d0]
push dword [ebp - 0x1549c]
call fcn.0040300d
mov ebx, eax
push ebx
mov dword [ebp - 0x154d0], ebx
call fcn.0040826e
add esp, 0xc
push ebx
mov dword [ebp - 0x1549c], eax
call fcn.0040826e
pop ecx
push ebx
mov dword [ebp - 0x154b0], eax
call fcn.0040826e
pop ecx
push ebx
mov dword [ebp - 0x154dc], eax
call fcn.0040826e
pop ecx
push ebx
mov dword [ebp - 0x154b8], eax
call fcn.0040826e
mov dword [ebp - 0x15490], eax
mov dword [esp], 0x2000
push ebx
xor eax, eax
call fcn.00408224
push ebx
mov dword [ebp - 0x15498], eax
call fcn.0040826e
add esp, 0xc
push ebx
mov dword [ebp - 0x154d4], eax
call fcn.0040826e
pop ecx
push ebx
mov dword [ebp - 0x154cc], eax
call fcn.0040826e
pop ecx
push ebx
mov dword [ebp - 0x154a4], eax
call fcn.0040826e
mov esi, eax
mov dword [esp], 0x1388
push ebx
xor eax, eax
mov dword [ebp - 0x154e4], esi
call fcn.00408224
mov edi, eax
push 2
push ebx
xor eax, eax
mov dword [ebp - 0x154a8], edi
call fcn.00408224
add esp, 0x10
test esi, esi
mov dword [ebp - 0x154ac], eax
je 0x4036fa
push esi
call fcn.00418340
test eax, eax
pop ecx
jbe 0x4036fa
push esi
push str._Extractor__Required_Java_version__s_n
call fcn.00409516
pop ecx
pop ecx
cmp dword [ebp - 0x154ac], 0
je 0x40371e
push dword [ebp - 0x154ac]
call fcn.00418340
test eax, eax
pop ecx
jbe 0x40371e
push str._Extractor__Skipping_System_JRE_n
call fcn.00409516
pop ecx
push 0x43e324
push edi
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
jne 0x40373d
mov edi, dword [ebp - 0x154c0]
push edi
push str._Extractor__Will_use_Dynamic_Update_URL:__s_n
jmp 0x403743
push edi
push str._Extractor__Will_use_Static_Update_URL:__s_n
call fcn.00409516
cmp byte [ebp - 0x15489], 0
pop ecx
mov dword [ebp - 0x154a0], edi
pop ecx
jne 0x4037a4
cmp dword [ebp - 0x154a4], 0
je 0x40379d
push dword [ebp - 0x154a4]
call fcn.00418340
test eax, eax
pop ecx
je 0x40379d
xor edi, edi
cmp dword [ebp + 0xc], edi
jle 0x40379d
mov eax, dword [ebp - 0x154c4]
push dword [eax + edi*4]
push dword [ebp - 0x154a4]
call fcn.004198e0
test eax, eax
pop ecx
pop ecx
je 0x40399a
inc edi
cmp edi, dword [ebp + 0xc]
jl 0x403779
mov byte [ebp - 0x15489], 0
movzx eax, byte [ebp - 0x15489]
push eax
push str._Extractor__Is_silent_install_is__d_n
call fcn.00409516
push str.Extracting_tail
call fcn.004096ec
add esp, 0xc
push str._Extractor__Setting_up_static_properties_n
call fcn.00409516
mov edi, dword [ebp - 0x154bc]
pop ecx
push dword [ebp - 0x154a8]
mov eax, edi
push str.update_url
call fcn.00408100
push dword [ebp - 0x154cc]
mov eax, edi
push str.install_type
call fcn.00408100
push dword [ebp - 0x15490]
mov eax, edi
push str.min_splash_ms
call fcn.00408100
push dword [ebp - 0x15498]
mov eax, edi
push str.jwsig_public_key
call fcn.00408100
push dword [ebp - 0x154d4]
mov eax, edi
push str.can_override_splash
call fcn.00408100
push dword [ebp - 0x1549c]
mov eax, edi
push str.app_name
call fcn.00408100
push dword [ebp - 0x154b0]
mov eax, edi
push str.wrapper_app_version
call fcn.00408100
push dword [ebp - 0x154b8]
mov eax, edi
push str.wrapper_gu_version
call fcn.00408100
add esp, 0x40
push dword [ebp - 0x154a4]
mov eax, edi
push str.silent_parameter
call fcn.00408100
push esi
push str.java_version
mov eax, edi
call fcn.00408100
push dword [ebp - 0x154ac]
mov eax, edi
push str.skip_system_jre
call fcn.00408100
add esp, 0x18
cmp byte [ebp - 0x15489], 0
je 0x4038b7
push str.true
push str.show_no_ui
mov eax, edi
call fcn.00408100
pop ecx
pop ecx
cmp dword [ebp - 0x15498], 0
je 0x4039a6
push dword [ebp - 0x15498]
call fcn.00418340
test eax, eax
pop ecx
push dword [ebp - 0x15498]
jbe 0x4039b2
call fcn.00418340
mov esi, eax
shr esi, 1
inc esi
pop ecx
inc esi
push esi
call fcn.004181b0
pop ecx
push esi
push 0
push eax
mov dword [ebp - 0x15490], eax
call fcn.004195e0
add esp, 0xc
push dword [ebp - 0x15498]
push esi
push dword [ebp - 0x15490]
call fcn.00408f3a
add esp, 0xc
push eax
push str._Extractor__Processed_public_key_of_length__d_n
mov dword [ebp - 0x154a4], eax
call fcn.00409516
push dword [ebp - 0x15498]
push str._Extractor__Hex:__s_n
call fcn.00409516
push 0x31
pop ecx
mov esi, 0x4367b0
mov edi, 0x454e80
push 0x24
rep movsd dword es:[edi], dword [esi]
call fcn.004181b0
add esp, 0x14
mov esi, eax
push esi
push dword [ebp - 0x154a4]
push dword [ebp - 0x15490]
call fcn.0040c100
add esp, 0xc
test eax, eax
je 0x403981
push str.ERROR___unable_to_import_public_key._n
call fcn.00418273
pop ecx
push esi
call fcn.004180d3
pop ecx
xor esi, esi
push esi
push str._Extractor__Public_Key:__08X_n
mov dword [0x454db0], esi
call fcn.00409516
mov edi, dword [ebp - 0x154bc]
jmp 0x4039c8
mov byte [ebp - 0x15489], 1
jmp 0x4037a4
push str._Extractor__Public_key_empty__no_public_key__n
call fcn.00409516
jmp 0x4039c9
call fcn.00418340
test eax, eax
pop ecx
ja 0x4039ca
push 0
push str._Extractor__Public_key_length__d__no_public_key__n
call fcn.00409516
pop ecx
pop ecx
mov ecx, dword [ebp - 0x154cc]
call fcn.0040994d
push eax
push str._Extractor__Shared_dir_is__s_n
mov dword [ebp - 0x154cc], eax
call fcn.00409516
mov esi, dword [ebp - 0x154a0]
push esi
push str._Extractor__Update_URL_is_currently__s_n
call fcn.00409516
push esi
call fcn.00418340
add esp, 0x14
test eax, eax
jle 0x403a13
add eax, esi
cmp byte [eax - 1], 0x2f
je 0x403a13
mov byte [eax], 0x2f
mov byte [eax + 1], 0
push esi
push str._Extractor__Update_URL_is_now__s_n
call fcn.00409516
push str.JWrapper_
push dword [ebp - 0x154cc]
lea eax, [ebp - 0x1408]
call fcn.004094b8
push dword [ebp - 0x1549c]
lea eax, [ebp - 0x1408]
push eax
call fcn.004183e0
lea eax, [ebp - 0x1408]
push eax
push str._Extractor__Master_folder_is__s_n
call fcn.00409516
lea eax, [ebp - 0x1408]
push eax
call fcn.004012de
add esp, 0x24
lea eax, [ebp - 0x1408]
push str.JWApps
push eax
lea eax, [ebp - 0x15488]
call fcn.004094b8
lea eax, [ebp - 0x15488]
push str.JreNameOverride
push eax
lea eax, [ebp - 0x119f0]
call fcn.004094b8
lea eax, [ebp - 0x119f0]
push 0x43e9b8
push eax
call fcn.00419446
mov esi, eax
add esp, 0x18
test esi, esi
je 0x403b48
push str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.00409516
mov dword [esp], 0x1f4
push esi
call fcn.00408150
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x15490], eax
je 0x403b18
push eax
call fcn.00418340
cmp eax, 1
pop ecx
jne 0x403afa
mov eax, dword [ebp - 0x15490]
cmp byte [eax], 0x2d
jne 0x403afa
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x403b54
push dword [ebp - 0x15490]
call fcn.00418340
test eax, eax
pop ecx
jne 0x403b18
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__Ignoring_empty_JRE_name__keeping__s_n
jmp 0x403b54
push dword [ebp - 0x15490]
lea eax, [ebp - 0x2f90]
push eax
mov byte [ebp - 0x2f90], 0
call fcn.004183e0
push esi
call fcn.0041ae53
add esp, 0xc
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x403b54
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
call fcn.00409516
pop ecx
pop ecx
lea eax, [ebp - 0x1408]
push str.JWAppsSharedConfig
push eax
lea eax, [ebp - 0x12d78]
call fcn.004094b8
lea eax, [ebp - 0x12d78]
push eax
call fcn.0040941a
add esp, 0xc
push dword [ebp - 0x154b8]
mov byte [ebp - 0x15491], 1
call fcn.00418340
test eax, eax
pop ecx
jne 0x403bab
push str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.00409516
mov byte [ebp - 0x15491], 0
jmp 0x403bbc
push dword [ebp - 0x154b8]
push str._Extractor__GenericUpdater_version_is__s_n
call fcn.00409516
pop ecx
pop ecx
push dword [ebp - 0x154b0]
call fcn.00418340
test eax, eax
pop ecx
jne 0x403bd9
push str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.00409516
jmp 0x403bea
push dword [ebp - 0x154b0]
push str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
call fcn.00409516
pop ecx
pop ecx
push str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.00409516
lea eax, [ebp - 0x1408]
mov dword [esp], str.JWrapper
push eax
call fcn.0040986d
mov dword [ebp - 0x154a4], eax
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x1408]
push eax
call fcn.0040986d
add esp, 0x10
test eax, eax
mov dword [ebp - 0x15498], eax
je 0x403d40
push str.java.exe
push 0x43da84
push eax
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0x1c08]
call fcn.004094f4
lea esi, [ebp - 0x1c08]
call fcn.004090b8
push str.javaw.exe
mov esi, eax
push 0x43da84
push dword [ebp - 0x15498]
neg esi
lea eax, [ebp - 0x1408]
sbb esi, esi
push eax
lea eax, [ebp - 0x1c08]
neg esi
call fcn.004094f4
add esp, 0x20
test esi, esi
je 0x403ca6
lea esi, [ebp - 0x1c08]
call fcn.004090b8
test eax, eax
je 0x403ca6
mov dword [ebp - 0x15490], 1
jmp 0x403cad
and dword [ebp - 0x15490], 0
push str.rt.jar
push 0x43da6c
push dword [ebp - 0x15498]
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0x1c08]
call fcn.004094f4
add esp, 0x10
lea esi, [ebp - 0x1c08]
call fcn.004090b8
test eax, eax
jne 0x403d25
push 0x43da6c
push 0x43da68
push dword [ebp - 0x15498]
lea eax, [ebp - 0x1408]
push eax
mov eax, esi
call fcn.004094f4
push str.rt.jar
call fcn.00409439
add esp, 0x14
cmp dword [ebp - 0x15490], 0
je 0x403d1e
call fcn.004090b8
test eax, eax
jne 0x403d40
and dword [ebp - 0x15490], 0
cmp dword [ebp - 0x15490], 0
jne 0x403d40
push str._Extractor__The_existing_JRE_is_broken._Instructing_the_wrapper_to_update._n
call fcn.00409516
and dword [ebp - 0x15498], 0
pop ecx
cmp dword [ebp - 0x154a4], 0
je 0x403e7c
cmp dword [ebp - 0x15498], 0
je 0x403e7c
push dword [ebp - 0x154a4]
push str._Extractor__Latest_GU_version_exists:__s_n
call fcn.00409516
push dword [ebp - 0x15498]
push str._Extractor__Existing_JRE_exists:__s_n
call fcn.00409516
push dword [ebp - 0x154a4]
call fcn.00409b08
add esp, 0x14
push dword [ebp - 0x154b8]
mov esi, eax
call fcn.00419342
cmp byte [ebp - 0x15491], 0
pop ecx
je 0x403dad
cmp eax, esi
jle 0x403dad
push str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403e81
push str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00409516
cmp byte [ebp - 0x15491], 0
pop ecx
je 0x403e18
push dword [ebp - 0x154b0]
call fcn.00418340
test eax, eax
pop ecx
jbe 0x403e18
push dword [ebp - 0x1549c]
lea eax, [ebp - 0x1408]
push eax
call fcn.0040986d
test eax, eax
pop ecx
pop ecx
je 0x403e75
push eax
call fcn.00409b08
pop ecx
push dword [ebp - 0x154b0]
mov esi, eax
call fcn.00419342
cmp eax, esi
pop ecx
jle 0x403e0d
push str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403e81
push str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00409516
pop ecx
push str._Extractor__Running_without_extraction_now_n
call fcn.00409516
pop ecx
call fcn.004057be
mov esi, ebx
call fcn.00406546
cmp byte [ebp + 0x14], 0
jne 0x403e6e
push dword [ebp - 0x154c8]
mov ecx, dword [ebp - 0x154a4]
push 0
push dword [ebp - 0x154c0]
lea eax, [ebp - 0x1408]
push dword [ebp - 0x154a8]
lea edx, [ebp - 0x2f90]
push dword [ebp - 0x154c4]
push dword [ebp + 0xc]
push edi
push eax
call fcn.00401b5d
add esp, 0x20
push 0
call fcn.0041901e
push str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x403e81
push str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.00409516
cmp dword [ebp - 0x15498], 0
pop ecx
jne 0x403e97
push str._Extractor__Note:_No_latest_JRE_version_exists_n
jmp 0x403e9c
push str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.00409516
cmp dword [ebp - 0x154a4], 0
pop ecx
jne 0x403eb2
push str._Extractor__Note:_No_latest_GU_version_exists_n
jmp 0x403eb7
push str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.00409516
cmp byte [ebp - 0x15491], 0
pop ecx
jne 0x403ed5
push str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.00409516
pop ecx
push 1
jmp 0x403e70
lea eax, [ebp - 0x1408]
push eax
call fcn.0040941a
pop ecx
push dword [ebp - 0x154b8]
lea eax, [ebp - 0x1408]
push str.JWrapper
push eax
lea esi, [ebp - 0x9138]
call fcn.00401937
lea eax, [ebp - 0x1408]
add esp, 0xc
push eax
lea esi, [ebp - 0x4318]
call fcn.00401977
pop ecx
push dword [ebp - 0x154b0]
lea eax, [ebp - 0x1408]
push dword [ebp - 0x1549c]
lea esi, [ebp - 0x10668]
push eax
call fcn.00401937
lea eax, [ebp - 0x1408]
add esp, 0xc
push eax
lea esi, [ebp - 0x7db0]
call fcn.00401977
pop ecx
lea eax, [ebp - 0x9138]
push eax
push str._Extractor__GU_folder_is__s_n
call fcn.00409516
lea eax, [ebp - 0x4318]
push eax
push str._Extractor__GU_temp_is__s_n
call fcn.00409516
lea eax, [ebp - 0x4318]
push eax
call fcn.0040941a
add esp, 0x14
test eax, eax
je 0x403f88
push str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
jmp 0x403ecb
lea eax, [ebp - 0x4318]
push eax
push ebx
call fcn.0040833c
mov esi, str.nativesplash.png
lea eax, [ebp - 0x4318]
push esi
push eax
lea eax, [ebp - 0x1bd8]
call fcn.004094b8
add esp, 0x10
lea eax, [ebp - 0x1bd8]
movsx ecx, byte [eax]
cmp ecx, 0x2f
jne 0x403fc1
mov byte [eax], 0x5c
inc eax
test ecx, ecx
jne 0x403fb6
lea eax, [ebp - 0x1bd8]
push eax
push dword [ebp - 0x154d8]
push dword [ebp - 0x154e0]
push dword [ebp - 0x154d4]
call fcn.00402ad3
lea eax, [ebp - 0x4318]
push eax
push ebx
call fcn.0040833c
lea eax, [ebp - 0x4318]
push eax
push ebx
call fcn.0040833c
lea eax, [ebp - 0x4318]
push eax
push ebx
call fcn.0040833c
push str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.00409516
add esp, 0x2c
lea eax, [ebp - 0x9138]
push eax
push str._Extractor__Renaming_GU_folder_to__s_n
call fcn.00409516
lea eax, [ebp - 0x9138]
lea edi, [ebp - 0x4318]
call fcn.00401549
push str._Extractor__Recreating_GU_location_n
call fcn.00409516
add esp, 0xc
lea eax, [ebp - 0x9138]
push eax
mov eax, edi
push eax
mov byte [ebp - 0x4318], 0
call fcn.004183e0
lea eax, [ebp - 0x9138]
push str.cacerts
push eax
lea eax, [ebp - 0xf2e0]
call fcn.004094b8
lea eax, [ebp - 0xf2e0]
push eax
push str._Extractor__CACerts_override_path_is__s_n
call fcn.00409516
mov eax, edi
push str.verpatch.exe
push eax
lea eax, [ebp - 0x14100]
call fcn.004094b8
lea eax, [ebp - 0x9138]
push esi
push eax
lea eax, [ebp - 0xdf58]
call fcn.004094b8
lea eax, [ebp - 0xdf58]
push eax
push str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.00409516
push str._Extractor__Configuring_splash_n
call fcn.00409516
add esp, 0x34
call fcn.004011ed
test al, al
je 0x4040e6
lea eax, [ebp - 0xdf58]
push eax
call fcn.00404cb3
pop ecx
mov ecx, eax
call fcn.004071f7
push str._Extractor__Showing_splash_n
call fcn.00409516
cmp byte [ebp - 0x15489], 0
pop ecx
jne 0x404105
cmp byte [ebp + 0x14], 0
jne 0x404105
call fcn.004057e5
push 0xffffffffffffffff
call fcn.00405810
mov dword [esp], str._Extractor__Setting_up_a_JRE_n
call fcn.00409516
pop ecx
push dword [ebp - 0x154dc]
call fcn.00418340
test eax, eax
pop ecx
jbe 0x404264
mov ebx, str.Extracting_Offline_JRE
push ebx
call fcn.004096c4
mov dword [esp], str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00409516
pop ecx
push dword [ebp - 0x154a0]
lea eax, [ebp - 0x4318]
push eax
lea ecx, [ebp - 0x2f90]
call fcn.004027df
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x6a28]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.0040941a
pop ecx
push dword [ebp - 0x154dc]
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0xa4c0]
call fcn.00401937
add esp, 0xc
push str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.00409516
lea eax, [ebp - 0x6a28]
mov dword [esp], str.JRE.p2
push eax
lea eax, [ebp - 0x56a0]
call fcn.004094b8
lea eax, [ebp - 0x6a28]
push eax
call fcn.00401289
add esp, 0xc
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.00409516
push str._Extractor__Extracting_JRE_archive..._n
call fcn.00409516
add esp, 0xc
lea eax, [ebp - 0x6a28]
push eax
push dword [ebp - 0x154d0]
call fcn.0040833c
lea eax, [ebp - 0x2f90]
push eax
push str._Extractor__Extracted_JRE__s_n
call fcn.00409516
push str._Extractor__Regenerating_jsa..._n
call fcn.00409516
lea eax, [ebp - 0x6a28]
add esp, 0x14
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406db1
mov edi, eax
push esi
push edi
call fcn.00406e0a
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406ddf
call fcn.00406e39
push edi
call fcn.004180d3
add esp, 0xc
push ebx
call fcn.004096ec
mov ebx, dword [ebp - 0x154d0]
jmp 0x4046b6
push str.Setting_up_online_JRE
call fcn.004096c4
cmp dword [ebp - 0x154ac], 0
pop ecx
mov byte [ebp - 0x70], 0
je 0x404299
push dword [ebp - 0x154ac]
call fcn.00418340
test eax, eax
pop ecx
jbe 0x404299
push str._Extractor__Online_installer___no_stored_JRE._Skipping_system_JRE._n
call fcn.00409516
pop ecx
jmp 0x4042eb
push str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
call fcn.00409516
pop ecx
push dword [ebp - 0x154c8]
lea eax, [ebp - 0x6a28]
push dword [ebp - 0x154c0]
push dword [ebp - 0x154a8]
push dword [ebp - 0x154c4]
push dword [ebp + 0xc]
push dword [ebp - 0x154bc]
push eax
lea eax, [ebp - 0x1408]
push eax
push dword [ebp - 0x154e4]
lea eax, [ebp - 0x70]
push dword [ebp - 0x154b4]
push eax
call fcn.00402b57
add esp, 0x2c
lea eax, [ebp - 0x70]
push eax
call fcn.00418340
test eax, eax
pop ecx
jbe 0x404322
push str._Extractor__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00409516
pop ecx
push dword [ebp - 0x154a0]
lea eax, [ebp - 0x4318]
push eax
lea ecx, [ebp - 0x2f90]
call fcn.004027df
pop ecx
jmp 0x404660
push str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.00409516
pop ecx
call fcn.004027b7
mov dword [ebp - 0x154b4], eax
mov edi, str.JWrapper_
lea eax, [ebp - 0x4318]
push edi
push eax
lea eax, [ebp - 0xb848]
call fcn.004094b8
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0xb848]
push eax
call fcn.004183e0
mov esi, str._version.txt
lea eax, [ebp - 0xb848]
push esi
push eax
call fcn.004183e0
push dword [ebp - 0x154a0]
lea eax, [ebp - 0x56a0]
push eax
mov byte [ebp - 0x56a0], 0
call fcn.004183e0
lea eax, [ebp - 0x56a0]
push edi
push eax
call fcn.004183e0
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x56a0]
push eax
call fcn.004183e0
lea eax, [ebp - 0x56a0]
push esi
push eax
call fcn.004183e0
lea eax, [ebp - 0x56a0]
push str._time
push eax
call fcn.004183e0
add esp, 0x40
push dword [ebp - 0x154b4]
lea eax, [ebp - 0x56a0]
push eax
call fcn.004183e0
push dword [ebp - 0x154b4]
call fcn.004180d3
add esp, 0xc
cmp byte [ebp - 0x15489], 0
jne 0x404403
cmp byte [ebp + 0x14], 0
jne 0x404403
call fcn.004057e5
lea eax, [ebp - 0x56a0]
push eax
push str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.00409516
lea eax, [ebp - 0xb848]
push eax
push str._JREDownload__Saving_into__s_n
call fcn.00409516
lea eax, [ebp - 0xb848]
push eax
lea eax, [ebp - 0x56a0]
push eax
call fcn.00407dbc
add esp, 0x18
test eax, eax
je 0x4048b4
push 0xffffffffffffffff
call fcn.00405810
pop ecx
lea eax, [ebp - 0xb848]
push eax
push str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.00409516
lea eax, [ebp - 0xb848]
push 0x43e9b8
push eax
call fcn.00419446
add esp, 0x10
test eax, eax
mov dword [ebp - 0x15490], eax
jne 0x40448d
call fcn.004185d9
push dword [eax]
push str._JREDownload___Unable_to_open_version_file____d__n
call fcn.00409516
pop ecx
pop ecx
push str._JREDownload__Extracting_version:
xor esi, esi
call fcn.00409516
pop ecx
jmp 0x4044d1
push dword [ebp - 0x1549c]
push 0x440500
call fcn.00409516
cmp dword [ebp - 0x1549c], 0xd
pop ecx
pop ecx
je 0x4044f4
mov eax, dword [ebp - 0x1549c]
cmp eax, 0xa
je 0x4044f4
cmp eax, 0x20
je 0x4044f4
cmp esi, 0x32
mov byte [ebp + esi - 0x70], al
jge 0x4044ea
inc esi
push dword [ebp - 0x15490]
call fcn.0041aecf
cmp eax, 0xffffffff
mov dword [ebp - 0x1549c], eax
pop ecx
jne 0x40449c
jmp 0x4044ff
push str._n_JREDownload__Version_invalid__too_long__n
jmp 0x403ecb
push str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.00409516
pop ecx
push 0x43f348
call fcn.00409516
cmp dword [ebp - 0x15490], 0
pop ecx
je 0x40451f
push dword [ebp - 0x15490]
call fcn.0041ae53
pop ecx
lea eax, [ebp - 0x70]
push eax
push str._JREDownload__JRE_Version_is__s_n
mov byte [ebp + esi - 0x70], 0
call fcn.00409516
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x6a28]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.0040941a
pop ecx
push dword [ebp - 0x154a0]
lea eax, [ebp - 0x56a0]
push eax
mov byte [ebp - 0x56a0], 0
call fcn.004183e0
lea eax, [ebp - 0x56a0]
push edi
push eax
call fcn.004183e0
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x56a0]
push eax
call fcn.004183e0
lea eax, [ebp - 0x56a0]
push 0x43e0fc
push eax
call fcn.004183e0
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x56a0]
push eax
call fcn.004183e0
lea eax, [ebp - 0x56a0]
push str._archive.p2.l2
push eax
call fcn.004183e0
mov eax, esi
push eax
call fcn.00401289
add esp, 0x34
cmp byte [ebp - 0x15489], 0
mov dword [0x454db4], eax
jne 0x4045df
cmp byte [ebp + 0x14], 0
jne 0x4045df
call fcn.004057e5
lea eax, [ebp - 0x6a28]
push eax
push str._JREDownload__Extracting_JRE_archive_to__s_n
call fcn.00409516
lea eax, [ebp - 0x6a28]
push eax
lea eax, [ebp - 0x56a0]
push eax
call fcn.00407ea3
add esp, 0x10
test eax, eax
jne 0x404614
push str._JREDownload__Failed_to_download_and_extract_JRE_archive._n
jmp 0x403ecb
push str._JREDownload__Regenerating_jsa..._n
call fcn.00409516
pop ecx
lea eax, [ebp - 0x6a28]
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406db1
mov edi, eax
push esi
push edi
call fcn.00406e0a
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406ddf
call fcn.00406e39
push edi
call fcn.004180d3
add esp, 0xc
push str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.00409516
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.00418340
test eax, eax
pop ecx
jne 0x40467e
push str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
call fcn.004095c7
jmp 0x403ed0
lea eax, [ebp - 0x70]
push eax
push str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.00409516
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0xa4c0]
call fcn.00401937
add esp, 0x14
push str.Setting_up_online_JRE
call fcn.004096ec
pop ecx
lea eax, [ebp - 0xa4c0]
lea edi, [ebp - 0x6a28]
call fcn.00401549
lea eax, [ebp - 0xa4c0]
push eax
push str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.00409516
push str._Extractor__JRE_setup._Overriding_cacerts._n
call fcn.00409516
lea eax, [ebp - 0xa4c0]
add esp, 0xc
push eax
lea edi, [ebp - 0xf2e0]
call fcn.00402e9a
lea eax, [ebp - 0x12d78]
mov dword [esp], str.DetectedProxy
push eax
lea eax, [ebp - 0xcbd0]
call fcn.004094b8
push str._Extractor__Saving_proxy_configuration_n
call fcn.00409516
add esp, 0xc
cmp dword [0x454da4], 0
je 0x404740
push str._Proxy__Saving_proxy_settings_now._n
call fcn.00409516
pop ecx
lea eax, [ebp - 0xcbd0]
push eax
call fcn.0040627c
jmp 0x40474a
push str._Proxy__No_working_proxy_was_found__so_no_proxy_to_be_saved._n
call fcn.00409516
pop ecx
lea eax, [ebp - 0xa4c0]
push eax
call fcn.00401289
pop ecx
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.00409516
push dword [ebp - 0x154b0]
call fcn.00418340
add esp, 0xc
test eax, eax
jbe 0x4047f8
push str._Extractor__Offline_installer___app_to_extract._n
call fcn.00409516
pop ecx
lea eax, [ebp - 0x10668]
push eax
push str._Extractor__APP_folder_is__s_n
call fcn.00409516
lea eax, [ebp - 0x7db0]
push eax
push str._Extractor__APP_temp_is__s_n
call fcn.00409516
lea eax, [ebp - 0x7db0]
push eax
call fcn.0040941a
add esp, 0x14
test eax, eax
je 0x4047c4
push str.Unable_to_create_App_Temp_folder_n
jmp 0x404674
push str._Extractor__Extracting_App..._n
call fcn.00409516
pop ecx
lea eax, [ebp - 0x7db0]
push eax
push ebx
call fcn.0040833c
lea eax, [ebp - 0x7db0]
push eax
push ebx
call fcn.0040833c
push str._Extractor__Setting_permissions..._n
call fcn.00409516
add esp, 0x14
jmp 0x404803
push str._Extractor__Online_installer___no_app_to_extract_n
call fcn.00409516
pop ecx
push dword [ebp - 0x154b0]
call fcn.00418340
test eax, eax
pop ecx
jbe 0x404837
lea eax, [ebp - 0x10668]
lea edi, [ebp - 0x7db0]
call fcn.00401549
lea eax, [ebp - 0x10668]
push eax
push str._Extractor__Renaming_App_folder_to__s_n
call fcn.00409516
pop ecx
pop ecx
lea eax, [ebp - 0x1408]
push str.JWrapper
push eax
call fcn.0040986d
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x40485a
push str.No_latest_App_version_even_after_download__n
jmp 0x404674
call fcn.004057be
push edi
push str._Extractor__Will_now_run_latest_GU__s_n
call fcn.00409516
pop ecx
pop ecx
mov esi, ebx
call fcn.00406546
cmp byte [ebp + 0x14], 0
jne 0x403e6e
push dword [ebp - 0x154c8]
lea eax, [ebp - 0x1408]
push 0
push dword [ebp - 0x154c0]
lea edx, [ebp - 0x2f90]
push dword [ebp - 0x154a8]
mov ecx, edi
push dword [ebp - 0x154c4]
push dword [ebp + 0xc]
push dword [ebp - 0x154bc]
push eax
jmp 0x403e66
cmp byte [ebp - 0x15489], 0
jne 0x4048c8
cmp byte [ebp + 0x14], 0
jne 0x4048c8
call fcn.004057be
push str._JREDownload__Failed_to_download_JRE_version_file_n
jmp 0x404674