Function at 0x403b98
Capabilities:
Contain obfuscated stackstrings
Delete file
Query environment variable
Write file on windows

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x190c8
call fcn.00436460
sub rsp, rax
xor r12d, r12d
mov rdi, rcx
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x170], r12
mov byte [rsp + 0x84], r12b
mov byte [rsp + 0x90], r12b
call fcn.004011a0
lea esi, [r12 + 1]
cmp al, r12b
je 0x403c2a
lea rdx, [rsp + 0x190]
lea rcx, [0x0054b260]
xor r8d, r8d
mov dword [rsp + 0x190], esi
mov qword [rsp + 0x198], r12
mov dword [rsp + 0x1a0], r12d
mov dword [rsp + 0x1a4], r12d
call sub.gdiplus.dll_GdiplusStartup
lea rcx, str.kernel32
mov byte [rsp + 0x178], r12b
mov dword [rsp + 0x80], r12d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.IsWow64Process
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp rax, r12
mov rbx, rax
je 0x403c72
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rdx, [rsp + 0x80]
mov rcx, rax
call rbx
cmp dword [rsp + 0x80], r12d
mov r13d, 0x40
lea rdx, [0x0043b774]
lea r8d, [r13 - 0x20]
lea rcx, [rsp + 0x178]
je 0x403c98
mov r8d, r13d
call fcn.00416260
call fcn.0040979c
mov bl, 0x5c
mov rcx, rdi
mov byte [rsp + 0xb0], 0x59
mov byte [rsp + 0xb1], 0xbd
mov r15, rax
mov qword [rsp + 0xa0], rax
mov byte [rsp + 0xb2], 0xc9
mov byte [rsp + 0xb3], 0x52
mov byte [rsp + 0xb4], 0xaa
mov byte [rsp + 0xb5], 0x35
mov byte [rsp + 0xb6], 0xad
mov byte [rsp + 0xb7], 0xbb
mov byte [rsp + 0xb8], 0x10
mov byte [rsp + 0xb9], 0xef
mov byte [rsp + 0xba], 0xde
mov byte [rsp + 0xbb], 0x67
mov byte [rsp + 0xbc], 0x2c
mov byte [rsp + 0xbd], 0x47
mov byte [rsp + 0xbe], 0xe0
mov byte [rsp + 0xbf], 0xb5
mov byte [rsp + 0xc0], 0xd4
mov byte [rsp + 0xc1], 0x82
mov byte [rsp + 0xc2], 0x1f
mov byte [rsp + 0xc3], 0x81
mov byte [rsp + 0xc4], 0x52
mov byte [rsp + 0xc5], 0xa1
mov byte [rsp + 0xc6], 2
mov byte [rsp + 0xc7], 0x44
mov byte [rsp + 0xc8], 0x2a
mov byte [rsp + 0xc9], 0xeb
mov byte [rsp + 0xca], 0xaa
mov byte [rsp + 0xcb], 0x7b
mov byte [rsp + 0xcc], 0x79
mov byte [rsp + 0xcd], 0x3b
mov byte [rsp + 0xce], 0x93
mov byte [rsp + 0xcf], 0x45
mov byte [rsp + 0xd0], 0xae
mov byte [rsp + 0xd1], 0xd2
mov byte [rsp + 0xd2], 9
mov byte [rsp + 0xd3], 0x7a
mov byte [rsp + 0xd4], 0x3e
mov byte [rsp + 0xd5], 0x2f
mov byte [rsp + 0xd6], 0x2e
mov byte [rsp + 0xd7], 0xfa
mov byte [rsp + 0xd8], 0xff
mov byte [rsp + 0xd9], 0x1d
mov byte [rsp + 0xda], 0xf0
mov byte [rsp + 0xdb], 0x9b
mov byte [rsp + 0xdc], 0x19
mov byte [rsp + 0xdd], 0x7c
mov byte [rsp + 0xde], 0x15
mov byte [rsp + 0xdf], 0xb8
mov byte [rsp + 0xe0], 0x1e
mov byte [rsp + 0xe1], 0x6d
mov byte [rsp + 0xe2], 0xc6
mov byte [rsp + 0xe3], 0x10
mov byte [rsp + 0xe4], 0x41
mov byte [rsp + 0xe5], 0x7e
mov byte [rsp + 0xe6], bl
mov byte [rsp + 0xe7], 0xed
mov byte [rsp + 0xe8], 0x51
mov byte [rsp + 0xe9], 0xb1
mov byte [rsp + 0xea], 0x19
mov byte [rsp + 0xeb], 0x1c
mov byte [rsp + 0xec], 0x3c
mov byte [rsp + 0xed], 0xe2
mov byte [rsp + 0xee], 0x94
mov byte [rsp + 0xef], 0xd8
call fcn.004153e0
mov ebp, 0x400
cmp rax, 3
jb 0x403ee2
cmp byte [rdi], bl
jne 0x403eca
cmp byte [rdi + 1], bl
je 0x403ed5
cmp byte [rdi + 1], 0x3a
jne 0x403ee2
cmp byte [rdi + 2], bl
jne 0x403ee2
mov rbx, rdi
mov qword [rsp + 0x140], rdi
jmp 0x403f0a
mov rcx, rbp
call fcn.004151d0
mov edx, ebp
mov rcx, rax
mov rbx, rax
mov qword [rsp + 0x140], rax
call fcn.00418fe0
mov rdx, rdi
mov rcx, rbx
call fcn.00409fec
lea rcx, str._Extractor__The_absolute_wrapper_path_is__s_n
mov rdx, rbx
call fcn.0040a054
lea rcx, str._Extractor__The_executable_name_is__s_n
mov rdx, rdi
call fcn.0040a054
lea rdx, [0x0043b288]
mov rcx, rdi
call fcn.00416fa0
cmp rax, r12
mov rbp, rax
jne 0x403f56
lea rcx, str._Extractor___Failed_to_extract_wrapper_params___couldnt_open_file__s_n
mov rdx, rdi
call fcn.0040a054
mov ecx, esi
call fcn.00416780
int3
lea r9, str.Params
lea rdx, [rsp + 0xb0]
mov r8d, r13d
mov rcx, rax
call fcn.00409f28
cmp eax, 0xffffffff
jne 0x403f7d
mov ecx, esi
call fcn.00416780
int3
lea rcx, str._Extractor__Found_Params_marker._Extracting_now..._n
call fcn.0040a054
mov ecx, 0x30d40
call fcn.004151d0
xor edx, edx
mov r8d, 0x30d40
mov rcx, rax
mov qword [rsp + 0x128], rax
call fcn.004171b0
lea rdx, str.Params_Count
mov r8d, 0x28
mov rcx, rbp
mov r14b, r12b
call fcn.0040964c
mov rcx, rax
call fcn.00416c50
lea rcx, [0x0043cd20]
mov r13d, eax
call fcn.0040a054
lea rcx, [0x0043cd28]
call fcn.0040a054
lea rcx, str._Processing__d_dynamic_properties_n
mov edx, r13d
call fcn.0040a054
lea rcx, [0x0043cd28]
call fcn.0040a054
test r13d, r13d
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x98], rax
jle 0x404301
mov r15, qword [rsp + 0x128]
mov edi, dword [rsp + 0x90]
lea rdx, str.Param_Name
mov r8d, 0x400
mov rcx, rbp
call fcn.0040964c
lea rdx, str.Param_Value
mov r8d, 0x30d40
mov rcx, rbp
mov rsi, rax
call fcn.0040964c
mov rcx, rax
mov rbx, rax
call fcn.004153e0
cmp rax, 0x64
jbe 0x40409b
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
mov r8d, 0x63
call fcn.00417030
mov byte [rsp + 0x113], 0
lea r9, [rsp + 0xb0]
lea rcx, str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x4040a5
mov r9, rbx
lea rcx, str._DynProps__Dynamic_Param__d:__s__s__n
mov r8, rsi
mov edx, r12d
call fcn.0040a054
lea rdx, str.jwdyna_
mov rcx, r15
call fcn.00409514
mov rdx, rsi
mov rcx, r15
call fcn.004095a4
mov rdx, rbx
mov rcx, r15
call fcn.00409514
lea rdx, str.update_url
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x4040ff
lea rcx, str._DynProps__Dynamic_Update_URL:__s_n
mov rdx, rbx
mov qword [rsp + 0x98], rbx
call fcn.0040a054
lea rdx, str.match_versions
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x40412b
lea rdx, str.true
mov rcx, rbx
call fcn.004176b0
test eax, eax
sete byte [rsp + 0x84]
lea rdx, str.wrapper_autotest
mov rcx, rsi
call fcn.004176b0
mov ecx, 1
movzx edi, dil
test eax, eax
lea rdx, str.show_no_ui
cmove edi, ecx
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x404179
lea rdx, str.true
mov rcx, rbx
call fcn.004176b0
movzx r14d, r14b
test eax, eax
mov eax, 1
cmove r14d, eax
lea rdx, str.force_spawn
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x4041a8
lea rdx, str.true
mov rcx, rbx
call fcn.004176b0
xor ecx, ecx
test eax, eax
sete cl
mov dword [0x0054b280], ecx
lea rdx, str.splash_buffer
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x4041d6
mov rcx, rbx
call fcn.004153e0
test rax, rax
je 0x4041d6
mov rcx, rbx
call fcn.00416c50
mov dword [0x0054b394], eax
lea rdx, str.splash_image
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x404271
mov rcx, rbx
call fcn.004153e0
mov rdx, rbx
cmp rax, 0x64
jae 0x404207
lea rcx, str._DynProps__Splash_Image_is__s_n
jmp 0x404231
lea rcx, [rsp + 0xb0]
mov r8d, 0x63
call fcn.00417030
mov byte [rsp + 0x113], 0
lea rdx, [rsp + 0xb0]
lea rcx, str._DynProps__Splash_Image_is__s..._n
call fcn.0040a054
lea rcx, str._DynProps__Base64_decoding_image..._n
call fcn.0040a054
mov rcx, rbx
call fcn.004153e0
lea r8, [rsp + 0x188]
mov rcx, rbx
mov rdx, rax
call fcn.004013d4
lea rcx, str._DynProps__Decode_complete_n
mov qword [rsp + 0x170], rax
call fcn.0040a054
lea rdx, str.jre_name
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x4042af
lea rcx, [rsp + 0x28d0]
mov rdx, rbx
mov byte [rsp + 0x28d0], al
call fcn.004154a0
lea rdx, [rsp + 0x28d0]
lea rcx, str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.0040a054
lea rdx, str.windows_app_id
mov rcx, rsi
call fcn.004176b0
test eax, eax
jne 0x4042d9
lea rcx, str._DynProps__Windows_APP_ID_is__s_n
mov rdx, rbx
call fcn.0040a054
mov rcx, rbx
call fcn.00403834
mov esi, 1
add r12d, esi
cmp r12d, r13d
jl 0x404029
mov r15, qword [rsp + 0xa0]
mov dword [rsp + 0x90], edi
mov rdi, qword [rsp + 0x19110]
lea rcx, str.Processing_dynamic_properties_n
call fcn.0040a258
cmp byte [rsp + 0x19138], 0
je 0x404323
lea rcx, str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.0040a054
lea rcx, [0x0043cd20]
call fcn.0040a054
lea rcx, str.Extracting_wrapper_tail_n
call fcn.0040a220
mov rcx, rbp
call fcn.00419a40
lea rdx, [0x0043b288]
mov rcx, rdi
call fcn.00416fa0
test rax, rax
mov rbx, rax
mov qword [rsp + 0x150], rax
jne 0x404379
lea rcx, str._Extractor___Failed_to_extract_wrapper_tail___couldnt_open_file__s_n
mov rdx, rdi
call fcn.0040a054
mov ecx, esi
call fcn.00416780
int3
lea r9, str.Tail
mov r8d, 0x80
mov rdx, r15
mov rcx, rax
call fcn.00409f28
cmp eax, 0xffffffff
jne 0x40439e
mov ecx, esi
call fcn.00416780
int3
lea rcx, str._Extractor__Found_tail_marker_n
call fcn.0040a054
mov edi, 0x400
lea rdx, str.App_Name
mov r8d, edi
mov rcx, rbx
call fcn.0040964c
lea rdx, str.App_Version
mov r8d, edi
mov rcx, rbx
mov r15, rax
call fcn.0040964c
lea rdx, str.JRE_Version
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x88], rax
call fcn.0040964c
lea rdx, str.GU_Version
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x158], rax
call fcn.0040964c
lea rdx, str.Min_Splash_MS
mov r8d, edi
mov rcx, rbx
mov r12, rax
call fcn.0040964c
lea rdx, str.Signature_Public_Key
mov r8d, 0x2000
mov rcx, rbx
mov qword [rsp + 0x148], rax
call fcn.0040964c
lea rdx, str.Can_Override_Splash
mov r8d, edi
mov rcx, rbx
mov rsi, rax
call fcn.0040964c
lea rdx, str.Install_Type
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x168], rax
call fcn.0040964c
lea rdx, str.Silent_Parameter
mov r8d, edi
mov rcx, rbx
mov qword [rsp + 0x138], rax
call fcn.0040964c
lea rdx, str.Required_Java_Version
mov r8d, edi
mov rcx, rbx
mov rbp, rax
call fcn.0040964c
lea rdx, str.Update_URL
mov r8d, 0x1388
mov rcx, rbx
mov r13, rax
mov qword [rsp + 0xa0], rax
call fcn.0040964c
test r13, r13
mov rbx, rax
mov qword [rsp + 0x130], rax
je 0x4044e6
mov rcx, r13
call fcn.004153e0
test rax, rax
je 0x4044e6
lea rcx, str._Extractor__Required_Java_version__s_n
mov rdx, r13
call fcn.0040a054
lea rdx, [0x0043b804]
mov rcx, rbx
call fcn.004176b0
test eax, eax
jne 0x404515
mov rdi, qword [rsp + 0x98]
lea rcx, str._Extractor__Will_use_Dynamic_Update_URL:__s_n
mov rdx, rdi
call fcn.0040a054
mov r13, rdi
jmp 0x404527
lea rcx, str._Extractor__Will_use_Static_Update_URL:__s_n
mov rdx, rbx
call fcn.0040a054
mov r13, rbx
test r14b, r14b
jne 0x40457d
test rbp, rbp
je 0x40457a
mov rcx, rbp
call fcn.004153e0
test rax, rax
je 0x40457a
movsxd rdi, dword [rsp + 0x19118]
xor ebx, ebx
test rdi, rdi
jle 0x404572
mov r14, qword [rsp + 0x19120]
mov rdx, qword [r14 + rbx*8]
mov rcx, rbp
call fcn.004176b0
test eax, eax
je 0x404767
add rbx, 1
cmp rbx, rdi
jl 0x404555
mov rbx, qword [rsp + 0x130]
xor r14b, r14b
lea rcx, str._Extractor__Is_silent_install_is__d_n
movzx edx, r14b
call fcn.0040a054
lea rcx, str.Extracting_tail_n
call fcn.0040a258
lea rcx, str._Extractor__Setting_up_static_properties_n
call fcn.0040a054
mov r8, rbx
mov rbx, qword [rsp + 0x128]
lea rdx, str.update_url
mov rcx, rbx
call fcn.00409610
mov r8, qword [rsp + 0x138]
lea rdx, str.install_type
mov rcx, rbx
call fcn.00409610
mov r8, qword [rsp + 0x148]
lea rdx, str.min_splash_ms
mov rcx, rbx
call fcn.00409610
lea rdx, str.jwsig_public_key
mov r8, rsi
mov rcx, rbx
call fcn.00409610
mov r8, qword [rsp + 0x168]
lea rdx, str.can_override_splash
mov rcx, rbx
call fcn.00409610
lea rdx, str.app_name
mov r8, r15
mov rcx, rbx
call fcn.00409610
mov r8, qword [rsp + 0x88]
lea rdx, str.wrapper_app_version
mov rcx, rbx
call fcn.00409610
lea rdx, str.wrapper_gu_version
mov r8, r12
mov rcx, rbx
call fcn.00409610
lea rdx, str.silent_parameter
mov r8, rbp
mov rcx, rbx
call fcn.00409610
mov r8, qword [rsp + 0xa0]
lea rdx, str.java_version
mov rcx, rbx
call fcn.00409610
xor ebp, ebp
cmp r14b, bpl
je 0x404697
lea r8, str.true
lea rdx, str.show_no_ui
mov rcx, rbx
call fcn.00409610
cmp rsi, rbp
je 0x404791
mov rcx, rsi
call fcn.004153e0
mov rcx, rsi
cmp rax, rbp
jbe 0x404777
call fcn.004153e0
mov rbx, rax
shr rbx, 1
add rbx, 2
mov rcx, rbx
call fcn.004151d0
mov r8, rbx
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.004171b0
mov r8, rsi
mov edx, ebx
mov rcx, rdi
call fcn.004099b0
lea rcx, str._Extractor__Processed_public_key_of_length__d_n
mov edx, eax
mov ebx, eax
call fcn.0040a054
lea rcx, [0x0054b3c0]
lea rdx, str.LibTomMath
mov r8d, 0x188
call fcn.00415d30
mov ecx, 0x48
call fcn.004151d0
mov edx, ebx
mov rcx, rdi
mov r8, rax
mov rsi, rax
mov qword [rsp + 0x120], rax
call fcn.0040cad0
cmp eax, ebp
je 0x404756
lea rcx, str.ERROR___unable_to_import_public_key._n
call fcn.004152a0
mov rcx, rsi
call fcn.00415190
mov rsi, rbp
mov qword [rsp + 0x120], rbp
lea rcx, str._Extractor__Public_Key:__08X_n
mov rdx, rsi
call fcn.0040a054
jmp 0x40479d
mov rbx, qword [rsp + 0x130]
mov r14b, 1
jmp 0x40457d
call fcn.004153e0
cmp rax, rbp
ja 0x40479d
lea rcx, str._Extractor__Public_key_length__d__no_public_key__n
xor edx, edx
call fcn.0040a054
jmp 0x40479d
lea rcx, str._Extractor__Public_key_empty__no_public_key__n
call fcn.0040a054
mov rcx, qword [rsp + 0x138]
call fcn.0040a428
lea rcx, str._Extractor__Shared_dir_is__s_n
mov rdx, rax
mov rbx, rax
call fcn.0040a054
lea rcx, str._Extractor__Update_URL_is_currently__s_n
mov rdx, r13
call fcn.0040a054
mov rcx, r13
call fcn.004153e0
cmp eax, ebp
jle 0x4047ec
movsxd rcx, eax
cmp byte [rcx + r13 - 1], 0x2f
je 0x4047ec
mov byte [rcx + r13], 0x2f
mov byte [rcx + r13 + 1], bpl
lea rcx, str._Extractor__Update_URL_is_now__s_n
mov rdx, r13
call fcn.0040a054
lea rcx, [rsp + 0x1b0]
mov rdx, rbx
mov byte [rsp + 0x1b0], bpl
call fcn.004154a0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0x1b0]
call fcn.00409fec
lea rcx, [rsp + 0x1b0]
mov rdx, r15
call fcn.004154a0
lea rdx, [rsp + 0x1b0]
lea rcx, str._Extractor__Master_folder_is__s_n
call fcn.0040a054
lea rcx, [rsp + 0x1b0]
call fcn.0040129c
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x15610]
mov byte [rsp + 0x15610], bpl
call fcn.004154a0
lea rdx, str.JWApps
lea rcx, [rsp + 0x15610]
call fcn.00409fec
lea rdx, [rsp + 0x15610]
lea rcx, [rsp + 0x169a0]
mov byte [rsp + 0x169a0], bpl
call fcn.004154a0
lea rdx, str.JreNameOverride
lea rcx, [rsp + 0x169a0]
call fcn.00409fec
lea rdx, [0x0043c748]
lea rcx, [rsp + 0x169a0]
call fcn.00416fa0
cmp rax, rbp
mov rdi, rax
je 0x404948
lea rcx, str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.0040a054
lea rdx, str.JRE_Override_App_Name
mov r8d, 0x1f4
mov rcx, rdi
call fcn.0040964c
cmp rax, rbp
mov rbx, rax
je 0x40491f
mov rcx, rax
call fcn.004153e0
mov ecx, 1
cmp rax, rcx
jne 0x40491f
cmp byte [rbx], 0x2d
jne 0x40491f
lea rcx, str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x40494f
lea rcx, [rsp + 0x28d0]
mov rdx, rbx
mov byte [rsp + 0x28d0], bpl
call fcn.004154a0
mov rcx, rdi
call fcn.00419a40
lea rcx, str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x40494f
lea rcx, str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
lea rdx, [rsp + 0x28d0]
call fcn.0040a054
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0xb990]
mov byte [rsp + 0xb990], bpl
call fcn.004154a0
lea rdx, str.JWAppsSharedConfig
lea rcx, [rsp + 0xb990]
call fcn.00409fec
lea rcx, [rsp + 0xb990]
call fcn.00409fa8
mov rcx, r12
mov bpl, 1
call fcn.004153e0
test rax, rax
jne 0x4049bb
lea rcx, str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.0040a054
xor bpl, bpl
jmp 0x4049ca
lea rcx, str._Extractor__GenericUpdater_version_is__s_n
mov rdx, r12
call fcn.0040a054
mov rbx, qword [rsp + 0x88]
mov rcx, rbx
call fcn.004153e0
test rax, rax
jne 0x4049ed
lea rcx, str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.0040a054
jmp 0x4049fc
lea rcx, str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
mov rdx, rbx
call fcn.0040a054
lea rcx, str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.0040a054
lea rdx, str.JWrapper
lea rcx, [rsp + 0x1b0]
call fcn.0040a290
lea rdx, [rsp + 0x28d0]
lea rcx, [rsp + 0x1b0]
mov rdi, rax
call fcn.0040a290
test rdi, rdi
mov rsi, rax
je 0x404bdb
test rax, rax
je 0x404bdb
lea rcx, str._Extractor__Latest_GU_version_exists:__s_n
mov rdx, rdi
call fcn.0040a054
lea rcx, str._Extractor__Existing_JRE_exists:__s_n
mov rdx, rsi
call fcn.0040a054
mov rcx, rdi
call fcn.0040a568
mov rcx, r12
mov ebx, eax
call fcn.00416c50
test bpl, bpl
je 0x404a9b
cmp eax, ebx
jle 0x404a9b
lea rcx, str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
call fcn.0040a054
mov rbx, qword [rsp + 0x88]
jmp 0x404be7
lea rcx, str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.0040a054
test bpl, bpl
je 0x404b0a
mov rbx, qword [rsp + 0x88]
mov rcx, rbx
call fcn.004153e0
test rax, rax
je 0x404b0a
lea rcx, [rsp + 0x1b0]
mov rdx, r15
call fcn.0040a290
test rax, rax
je 0x404bd2
mov rcx, rax
call fcn.0040a568
mov rcx, qword [rsp + 0x88]
mov ebx, eax
call fcn.00416c50
cmp eax, ebx
jle 0x404afe
lea rcx, str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x404a89
lea rcx, str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.0040a054
lea rcx, str._Extractor__Running_without_extraction_now_n
call fcn.0040a054
mov rcx, qword [rsp + 0x150]
call fcn.00419a40
xor ecx, ecx
cmp byte [rsp + 0x19138], cl
jne 0x404bca
mov r9, qword [rsp + 0x19120]
mov r8d, dword [rsp + 0x19118]
mov rdx, qword [rsp + 0x128]
lea rax, [rsp + 0x107d0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x140]
mov byte [rsp + 0x68], cl
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x58], rax
mov al, byte [rsp + 0x84]
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], ecx
lea rax, [rsp + 0x28d0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x98]
lea rcx, [rsp + 0x1b0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.00401cbc
xor ecx, ecx
call fcn.00416780
int3
lea rcx, str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x404be2
lea rcx, str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.0040a054
test rsi, rsi
lea rcx, str._Extractor__Note:_No_latest_JRE_version_exists_n
je 0x404bfa
lea rcx, str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.0040a054
test rdi, rdi
lea rcx, str._Extractor__Note:_No_latest_GU_version_exists_n
je 0x404c12
lea rcx, str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.0040a054
test bpl, bpl
jne 0x404c33
lea rcx, str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.0040a054
mov ecx, 1
call fcn.00416780
int3
lea rcx, [rsp + 0x1b0]
call fcn.00409fa8
lea r8, str.JWrapper
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0xf440]
mov r9, r12
call fcn.00401ae0
lea r8, str.JWrapper
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x4430]
mov r9, r12
call fcn.00401b48
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x17d30]
mov r9, rbx
mov r8, r15
call fcn.00401ae0
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x7ee0]
mov r9, rbx
mov r8, r15
call fcn.00401b48
lea rdx, [rsp + 0xf440]
lea rcx, str._Extractor__GU_folder_is__s_n
call fcn.0040a054
lea rdx, [rsp + 0x4430]
lea rcx, str._Extractor__GU_temp_is__s_n
call fcn.0040a054
lea rcx, [rsp + 0x4430]
call fcn.00409fa8
xor ebp, ebp
cmp eax, ebp
je 0x404d04
lea rcx, str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
call fcn.0040a054
lea ecx, [rbp + 1]
call fcn.00416780
int3
lea rdx, [rsp + 0x4430]
lea rcx, [rsp + 0x57c0]
mov byte [rsp + 0x57c0], bpl
call fcn.004154a0
lea rdx, str.lzma.exe
lea rcx, [rsp + 0x57c0]
call fcn.00409fec
lea rdx, [rsp + 0x57c0]
lea rcx, str._Extractor__LZMA_path_is__s_n
call fcn.0040a054
mov r12, qword [rsp + 0x120]
mov rsi, qword [rsp + 0x150]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x4430]
lea rcx, [rsp + 0x57c0]
mov ebx, 0xffffffff
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], ebx
call fcn.00402cc8
lea r15d, [rbx + 2]
lea rcx, [rsp + 0x57c0]
mov dl, r15b
call fcn.004016b8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x4430]
lea rcx, [rsp + 0x57c0]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x80], ebx
mov qword [rsp + 0x20], rax
call fcn.00402cc8
mov rax, qword [rsp + 0x168]
cmp rax, rbp
je 0x404ed0
lea rdx, [0x0043db50]
mov rcx, rax
call fcn.004176b0
cmp eax, ebp
jne 0x404ed0
lea rcx, str._Extractor__Authorised_to_override_the_splash_image._n
call fcn.0040a054
mov rbp, qword [rsp + 0x170]
test rbp, rbp
je 0x404ece
mov rdi, qword [rsp + 0x188]
test rdi, rdi
je 0x404ece
lea rdx, [rsp + 0x4430]
lea rcx, [rsp + 0x3c60]
mov byte [rsp + 0x3c60], 0
call fcn.004154a0
lea rdx, str.nativesplash.png
lea rcx, [rsp + 0x3c60]
call fcn.00409fec
lea r11, [rsp + 0x3c60]
movsx eax, byte [r11]
cmp eax, 0x2f
jne 0x404e7e
mov byte [r11], 0x5c
add r11, r15
test eax, eax
jne 0x404e71
lea rdx, [rsp + 0x3c60]
lea rcx, str._Extractor__Overwriting_splash_image_at__s_n
call fcn.0040a054
lea rdx, [0x0043b2e0]
lea rcx, [rsp + 0x3c60]
call fcn.00416fa0
mov r8, rdi
mov rdx, r15
mov r9, rax
mov rcx, rbp
mov rbx, rax
call fcn.00418d30
mov rcx, rbx
call fcn.00419a40
mov ebx, 0xffffffff
xor ebp, ebp
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x4430]
lea rcx, [rsp + 0x57c0]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x80], ebx
mov qword [rsp + 0x20], rax
call fcn.00402cc8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x4430]
lea rcx, [rsp + 0x57c0]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x80], ebx
mov qword [rsp + 0x20], rax
call fcn.00402cc8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x4430]
lea rcx, [rsp + 0x57c0]
mov r9, rsi
xor edx, edx
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], ebx
call fcn.00402cc8
lea rcx, str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.0040a054
lea rdx, [rsp + 0xf440]
lea rcx, str._Extractor__Renaming_GU_folder_to__s_n
call fcn.0040a054
lea rdx, [rsp + 0xf440]
lea rcx, [rsp + 0x4430]
call fcn.00401558
lea rcx, str._Extractor__Recreating_GU_location_n
call fcn.0040a054
lea rdx, [rsp + 0xf440]
lea rcx, [rsp + 0x4430]
mov byte [rsp + 0x4430], bpl
call fcn.004154a0
lea rdx, [rsp + 0xf440]
lea rcx, [rsp + 0x57c0]
mov byte [rsp + 0x57c0], bpl
call fcn.004154a0
lea rdx, str.lzma.exe
lea rcx, [rsp + 0x57c0]
call fcn.00409fec
lea rdx, [rsp + 0x57c0]
lea rcx, str._Extractor__LZMA_path_is__s_n
call fcn.0040a054
lea rdx, [rsp + 0xf440]
lea rcx, [rsp + 0xcd20]
mov byte [rsp + 0xcd20], bpl
call fcn.004154a0
lea rdx, str.cacerts
lea rcx, [rsp + 0xcd20]
call fcn.00409fec
lea rdx, [rsp + 0xcd20]
lea rcx, str._Extractor__CACerts_override_path_is__s_n
call fcn.0040a054
lea rdx, [rsp + 0x4430]
lea rcx, [rsp + 0x107d0]
mov byte [rsp + 0x107d0], bpl
call fcn.004154a0
lea rdx, str.verpatch.exe
lea rcx, [rsp + 0x107d0]
call fcn.00409fec
lea rdx, [rsp + 0xf440]
lea rcx, [rsp + 0x12ef0]
mov byte [rsp + 0x12ef0], bpl
call fcn.004154a0
lea rdx, str.nativesplash.png
lea rcx, [rsp + 0x12ef0]
call fcn.00409fec
lea rdx, [rsp + 0x12ef0]
lea rcx, str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.0040a054
lea rcx, str._Extractor__Configuring_splash_n
call fcn.0040a054
lea rcx, [rsp + 0x12ef0]
call fcn.00406fb0
lea rcx, str._Extractor__Showing_splash_n
call fcn.0040a054
cmp r14b, bpl
mov r15b, byte [rsp + 0x19138]
jne 0x405112
cmp r15b, bpl
jne 0x405112
call fcn.00407064
mov ecx, ebx
call fcn.00407168
lea rcx, str._Extractor__Setting_up_a_JRE_n
call fcn.0040a054
mov rbx, qword [rsp + 0x158]
mov rcx, rbx
call fcn.004153e0
cmp rax, rbp
jbe 0x4052d5
lea rcx, str.Extracting_Offline_JRE
call fcn.0040a220
lea rcx, str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.0040a054
lea r8, [rsp + 0x28d0]
lea rcx, [rsp + 0x4430]
mov rdx, r13
call fcn.00403740
lea r8, [rsp + 0x28d0]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x6b50]
mov r9, rbx
call fcn.00401b48
lea rcx, [rsp + 0x6b50]
call fcn.00409fa8
lea r8, [rsp + 0x28d0]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x14280]
mov r9, rbx
call fcn.00401ae0
lea rcx, str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.0040a054
lea rdx, [rsp + 0x6b50]
lea rcx, [rsp + 0x9270]
mov byte [rsp + 0x9270], bpl
call fcn.004154a0
lea rdx, str.JRE.p2
lea rcx, [rsp + 0x9270]
call fcn.00409fec
lea rcx, [rsp + 0x6b50]
call fcn.00401220
lea rcx, str._Extractor__UP200_path_is__s_n
mov rdx, rax
mov rbx, rax
call fcn.0040a054
lea rcx, str._Extractor__Extracting_JRE_archive..._n
call fcn.0040a054
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x6b50]
lea rcx, [rsp + 0x57c0]
mov r9, rsi
mov rdx, rbx
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x80], 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.00402cc8
lea rdx, [rsp + 0x28d0]
lea rcx, str._Extractor__Extracted_JRE__s_n
call fcn.0040a054
lea rcx, str._Extractor__Regenerating_jsa..._n
call fcn.0040a054
lea rcx, [rsp + 0x6b50]
call fcn.004011d0
mov rbx, rax
call fcn.00408148
mov rdx, rbx
mov rcx, rax
mov rdi, rax
call fcn.004081b8
lea rdx, str._Xshare:dump
mov rcx, rdi
call fcn.00408180
xor edx, edx
mov rcx, rdi
call fcn.004081f0
mov rcx, rdi
call fcn.00415190
lea rcx, str.Extracting_Offline_JRE
call fcn.0040a258
jmp 0x405c0a
lea rcx, str.Setting_up_online_JRE
call fcn.0040a220
lea rcx, str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
mov byte [rsp + 0xb0], bpl
call fcn.0040a054
mov ebx, 0x14
lea rdx, [rsp + 0x158]
mov r8d, 0xa
mov ecx, ebx
call fcn.00416310
lea rcx, str._JRESearch__Checking_for_JRE__d_n
mov edx, ebx
call fcn.0040a054
lea rcx, str.PROGRAMFILES
mov byte [rsp + 0x1540], bpl
call fcn.004198c0
lea rcx, [rsp + 0x1540]
mov rdx, rax
call fcn.004154a0
cmp byte [rsp + 0x90], bpl
lea rcx, [rsp + 0x1540]
lea rdx, str.Java_JWAutoTest
jne 0x405361
lea rdx, str.Java
call fcn.00409fec
lea rdx, [0x0043df48]
lea rcx, [rsp + 0x1540]
call fcn.00409fec
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x1540]
call fcn.004154a0
lea rcx, [rsp + 0x1540]
call fcn.00401220
lea rcx, [rsp + 0x1540]
mov rbp, rax
call fcn.004011d0
mov ecx, 0x1388
mov rsi, rax
call fcn.004151d0
lea rdx, [rsp + 0x1540]
mov rcx, rax
mov rdi, rax
mov byte [rax], 0
call fcn.004154a0
lea rdx, [0x0043ade4]
mov rcx, rdi
call fcn.00409fec
lea rdx, str.java.exe
mov rcx, rdi
call fcn.00409fec
lea rcx, str._JRESearch__Looking_at_JRE__s_n
mov rdx, rsi
call fcn.0040a054
mov rcx, rsi
call fcn.00409b64
lea rcx, str._JRESearch__JRE_binary_exists_n
test eax, eax
mov r12d, eax
jne 0x405419
lea rcx, str._JRESearch__JRE_binary_does_NOT_exist_n
call fcn.0040a054
mov rcx, rbp
call fcn.00409b64
lea rcx, str._JRESearch__JRE_up200_exists_n
test eax, eax
mov ebp, eax
jne 0x40543a
lea rcx, str._JRESearch__JRE_up200_does_NOT_exist_n
call fcn.0040a054
mov rdx, qword [rsp + 0xa0]
mov rcx, rdi
call fcn.004038f8
lea rcx, str._JRESearch__JRE_version_is_OK_n
test eax, eax
mov edi, eax
jne 0x405463
lea rcx, str._JRESearch__JRE_version_is_NOT_OK_n
call fcn.0040a054
test r12d, r12d
je 0x405545
test ebp, ebp
je 0x405545
xor ebp, ebp
cmp edi, ebp
je 0x405547
lea rcx, str._JRESearch__JRE_unpack200_exists__s_n
mov rdx, rsi
call fcn.0040a054
lea rdx, str.JWrapper
lea rcx, [rsp + 0x1b0]
call fcn.0040a290
cmp rax, rbp
je 0x4057b3
mov rcx, qword [rsp + 0x140]
mov r9, qword [rsp + 0x19120]
mov r8d, dword [rsp + 0x19118]
mov rdx, qword [rsp + 0x128]
mov qword [rsp + 0x70], rbp
mov byte [rsp + 0x68], bpl
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0x98]
lea rdi, [0x0043b544]
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x50], bpl
mov qword [rsp + 0x48], rdi
lea r12d, [rbp + 1]
mov dword [rsp + 0x40], r12d
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
call fcn.00401cbc
cmp eax, 0x48
je 0x4056de
lea rcx, str._JRESearch__JRE_failed_compatibility_test_n
call fcn.0040a054
jmp 0x405559
xor ebp, ebp
lea rcx, str._JRESearch__JRE_does_not_exist_or_does_not_have_unpack200_n
call fcn.0040a054
mov r12d, 1
sub ebx, r12d
cmp ebx, 5
jge 0x4052fa
lea rcx, [rsp + 0xb0]
call fcn.004153e0
cmp rax, rbp
jne 0x405b8c
lea rcx, str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.0040a054
lea rdx, [rsp + 0x4430]
lea rcx, [rsp + 0xa600]
mov byte [rsp + 0xa600], bpl
call fcn.004154a0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0xa600]
call fcn.00409fec
lea rdx, [rsp + 0x28d0]
lea rcx, [rsp + 0xa600]
call fcn.004154a0
lea rdx, str._version.txt
lea rcx, [rsp + 0xa600]
call fcn.004154a0
lea rcx, [rsp + 0x1540]
mov rdx, r13
mov byte [rsp + 0x1540], bpl
call fcn.004154a0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0x1540]
call fcn.004154a0
lea rdx, [rsp + 0x28d0]
lea rcx, [rsp + 0x1540]
call fcn.004154a0
lea rdx, str._version.txt
lea rcx, [rsp + 0x1540]
call fcn.004154a0
cmp r14b, bpl
jne 0x405645
cmp r15b, bpl
jne 0x405645
call fcn.00407064
lea rdx, [rsp + 0x1540]
lea rcx, str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.0040a054
lea rdx, [rsp + 0xa600]
lea rcx, [rsp + 0x1540]
call fcn.004075c4
cmp eax, ebp
je 0x405b49
mov ecx, 0xffffffff
call fcn.00407168
lea rdx, [rsp + 0xa600]
lea rcx, str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.0040a054
lea rdx, [0x0043c748]
lea rcx, [rsp + 0xa600]
call fcn.00416fa0
cmp rax, rbp
mov rdi, rax
jne 0x4056c3
call fcn.00415680
lea rcx, str._JREDownload___Unable_to_open_version_file____d_
mov edx, dword [rax]
call fcn.0040a054
lea rcx, str._JREDownload__Extracting_version:
call fcn.0040a054
mov rcx, rdi
call fcn.00416c60
xor esi, esi
jmp 0x405802
lea rcx, str._JRESearch__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.0040a054
lea r8, [rsp + 0x28d0]
lea rcx, [rsp + 0x4430]
mov rdx, r13
call fcn.00403740
lea rcx, str._JRESearch__JRE_is_valid__copying..._n
call fcn.0040a054
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x28d0]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x6b50]
call fcn.00401b48
lea rcx, [rsp + 0x6b50]
call fcn.00409fa8
lea rdx, [rsp + 0x6b50]
lea rcx, [rsp + 0x1540]
call fcn.00401880
cmp eax, ebp
jne 0x4057a2
lea rdx, [rsp + 0x6b50]
lea rcx, str._JRESearch__JRE_copied_to__s_OK_n
call fcn.0040a054
lea rdx, str.00000000000
lea rcx, [rsp + 0xb0]
mov byte [rsp + 0xb0], bpl
call fcn.004154a0
lea rdx, [rsp + 0xb0]
lea rcx, str._JRESearch__Copied_JRE_version_is__s_n
call fcn.0040a054
jmp 0x405565
lea rcx, str._JRESearch__JRE_copy_failed__cannot_pick_up_existing_JRE_n
call fcn.0040a054
jmp 0x405565
lea rcx, str._JRESearch___No_latest_App_version_even_after_download__n
call fcn.0040a054
mov ecx, 1
call fcn.00416780
int3
lea rcx, [0x0043e384]
mov edx, ebx
call fcn.0040a054
cmp ebx, 0xd
je 0x405820
cmp ebx, 0xa
je 0x405820
cmp ebx, 0x20
je 0x405820
cmp rsi, 0x32
mov byte [rsp + rsi + 0xb0], bl
jge 0x40580b
mov rcx, rdi
add ebp, r12d
add rsi, r12
call fcn.00416c60
cmp eax, 0xffffffff
mov ebx, eax
jne 0x4057ca
jmp 0x40582c
lea rcx, str._n_JREDownload__Version_invalid__too_long__n
call fcn.0040a054
mov ecx, r12d
call fcn.00416780
int3
lea rcx, str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.0040a054
lea rcx, [0x0043cd20]
call fcn.0040a054
test rdi, rdi
je 0x405845
mov rcx, rdi
call fcn.00419a40
movsxd rax, ebp
lea rdx, [rsp + 0xb0]
lea rcx, str._JREDownload__JRE_Version_is__s_n
xor ebp, ebp
mov byte [rsp + rax + 0xb0], bpl
call fcn.0040a054
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x28d0]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x6b50]
call fcn.00401b48
lea rcx, [rsp + 0x6b50]
call fcn.00409fa8
lea rdx, [rsp + 0x6b50]
lea rcx, [rsp + 0x11b60]
mov byte [rsp + 0x11b60], bpl
call fcn.004154a0
lea rdx, str.JREArchive.p2.l2
lea rcx, [rsp + 0x11b60]
call fcn.00409fec
lea rcx, [rsp + 0x1540]
mov rdx, r13
mov byte [rsp + 0x1540], bpl
call fcn.004154a0
lea rdx, str.JWrapper_
lea rcx, [rsp + 0x1540]
call fcn.004154a0
lea rdx, [rsp + 0x28d0]
lea rcx, [rsp + 0x1540]
call fcn.004154a0
lea rdx, [0x0043b544]
lea rcx, [rsp + 0x1540]
call fcn.004154a0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x1540]
call fcn.004154a0
lea rdx, str._archive.p2.l2
lea rcx, [rsp + 0x1540]
call fcn.004154a0
cmp r14b, bpl
jne 0x405956
cmp r15b, bpl
jne 0x405956
call fcn.00407064
lea rcx, str._JREDownload__Downloading_JRE_n
call fcn.0040a054
lea rdx, [rsp + 0x11b60]
lea rcx, [rsp + 0x1540]
call fcn.004075c4
cmp eax, ebp
je 0x405b06
mov ecx, 0xffffffff
call fcn.00407168
lea rcx, str._JREDownload__JRE_Downloaded_OK__will_extract_n
call fcn.0040a054
lea rdx, [rsp + 0x6b50]
lea rcx, [rsp + 0x9270]
mov byte [rsp + 0x9270], bpl
call fcn.004154a0
lea rdx, str.JREArchive.p2
lea rcx, [rsp + 0x9270]
call fcn.00409fec
call fcn.00408148
lea rdx, [rsp + 0x57c0]
mov rcx, rax
mov rbx, rax
call fcn.004081b8
lea rdx, [0x0043c148]
mov rcx, rbx
call fcn.00408180
lea rdx, [rsp + 0x11b60]
mov rcx, rbx
call fcn.00408180
lea rdx, [rsp + 0x9270]
mov rcx, rbx
call fcn.00408180
lea rcx, str._JREDownload__Decompressing_JRE_archive_n
call fcn.0040a054
xor edx, edx
mov rcx, rbx
call fcn.004081f0
cmp rax, rbp
je 0x405a3d
lea rcx, str._JREDownload__Failed_to_decompress_JRE_archive_n
call fcn.0040a120
mov ecx, r12d
call fcn.00416780
int3
mov rcx, rbx
call fcn.00415190
lea rcx, [rsp + 0x6b50]
call fcn.00401220
lea rdx, [rsp + 0x6b50]
lea rcx, str._JREDownload__Extracting_JRE_archive_to__s_n
mov rbx, rax
call fcn.0040a054
mov r12, qword [rsp + 0x120]
lea r8, [rsp + 0x6b50]
lea rdx, [rsp + 0x9270]
mov rcx, rbx
mov r9, r12
call fcn.00403274
lea rcx, [rsp + 0x11b60]
call fcn.00416e10
lea rcx, str._JREDownload__Done_extracting_JRE_archive_n
call fcn.0040a054
lea rcx, str._JREDownload__Regenerating_jsa..._n
call fcn.0040a054
lea rcx, [rsp + 0x6b50]
call fcn.004011d0
mov rbx, rax
call fcn.00408148
mov rdx, rbx
mov rcx, rax
mov rdi, rax
call fcn.004081b8
lea rdx, str._Xshare:dump
mov rcx, rdi
call fcn.00408180
xor edx, edx
mov rcx, rdi
call fcn.004081f0
mov rcx, rdi
call fcn.00415190
lea rcx, str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.0040a054
jmp 0x405b94
cmp r14b, bpl
jne 0x405b34
cmp r15b, bpl
jne 0x405b34
call fcn.004011a0
cmp al, bpl
je 0x405b28
lea rcx, [0x004481b0]
call fcn.00408628
jmp 0x405b34
lea rcx, [0x00448230]
call fcn.00405ff4
lea rcx, str._JREDownload__Failed_to_download_JRE_n
call fcn.0040a120
mov ecx, r12d
call fcn.00416780
int3
cmp r14b, bpl
jne 0x405b77
cmp r15b, bpl
jne 0x405b77
call fcn.004011a0
cmp al, bpl
je 0x405b6b
lea rcx, [0x004481b0]
call fcn.00408628
jmp 0x405b77
lea rcx, [0x00448230]
call fcn.00405ff4
lea rcx, str._JREDownload__Failed_to_download_JRE_version_file_n
call fcn.0040a120
mov ecx, r12d
call fcn.00416780
int3
mov r12, qword [rsp + 0x120]
lea rcx, [rsp + 0xb0]
call fcn.004153e0
cmp rax, rbp
jne 0x405bbd
lea rcx, str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
call fcn.0040a120
mov ecx, 1
call fcn.00416780
int3
lea rdx, [rsp + 0xb0]
lea rcx, str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.0040a054
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x28d0]
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x14280]
call fcn.00401ae0
lea rcx, str.Setting_up_online_JRE
call fcn.0040a258
mov rsi, qword [rsp + 0x150]
lea rdx, [rsp + 0x14280]
lea rcx, [rsp + 0x6b50]
call fcn.00401558
lea rdx, [rsp + 0x14280]
lea rcx, str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.0040a054
lea rcx, str._Extractor__JRE_setup._Overriding_cacerts._n
call fcn.0040a054
lea rcx, [rsp + 0xcd20]
call fcn.00409b64
cmp eax, ebp
je 0x405c67
lea rdx, [rsp + 0x14280]
lea rcx, [rsp + 0xcd20]
call fcn.00403aa4
jmp 0x405c73
lea rcx, str._Extractor__Override_CACerts_does_not_exist._n
call fcn.0040a054
lea rdx, [rsp + 0xb990]
lea rcx, [rsp + 0xe0b0]
mov byte [rsp + 0xe0b0], bpl
call fcn.004154a0
lea rdx, str.DetectedProxy
lea rcx, [rsp + 0xe0b0]
call fcn.00409fec
lea rcx, str._Extractor__Saving_proxy_configuration_n
call fcn.0040a054
cmp qword [0x0054b268], rbp
je 0x405d4c
lea rcx, str._Proxy__Saving_proxy_settings_now.
call fcn.0040a054
mov rbx, qword [0x0054b268]
lea rcx, [rsp + 0xe0b0]
cmp qword [rbx], rbp
jne 0x405ce5
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x405d58
lea rdx, [0x0043b2e0]
call fcn.00416fa0
cmp rax, rbp
mov rdi, rax
je 0x405d58
cmp qword [rbx], rbp
je 0x405d42
lea rcx, str._Proxy__Saved_proxy_list_n
call fcn.0040a054
mov rcx, qword [rbx]
mov rdx, rdi
call fcn.0041a640
cmp qword [rbx + 8], rbp
je 0x405d42
lea rcx, str._Proxy__Saved_proxy_bypass_list_n
call fcn.0040a054
lea rcx, [0x0043fc5c]
mov rdx, rdi
call fcn.0041a640
mov rcx, qword [rbx + 8]
mov rdx, rdi
call fcn.0041a640
mov rcx, rdi
call fcn.00419a40
jmp 0x405d58
lea rcx, str._Proxy__No_working_proxy_was_found__so_no_proxy_to_be_saved.
call fcn.0040a054
lea rcx, [rsp + 0x14280]
call fcn.00401220
lea rcx, str._Extractor__UP200_path_is__s_n
mov rdx, rax
mov rbx, rax
call fcn.0040a054
mov rdi, qword [rsp + 0x88]
mov rcx, rdi
call fcn.004153e0
cmp rax, rbp
jbe 0x405e77
lea rcx, str._Extractor__Offline_installer___app_to_extract.
call fcn.0040a054
lea rdx, [rsp + 0x17d30]
lea rcx, str._Extractor__APP_folder_is__s_n
call fcn.0040a054
lea rdx, [rsp + 0x7ee0]
lea rcx, str._Extractor__APP_temp_is__s_n
call fcn.0040a054
lea rcx, [rsp + 0x7ee0]
call fcn.00409fa8
cmp eax, ebp
je 0x405dec
lea rcx, str.Unable_to_create_App_Temp_folder_n
call fcn.0040a120
mov ecx, 1
call fcn.00416780
int3
lea rcx, str._Extractor__Extracting_App..._n
mov rdx, rbx
call fcn.0040a054
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x7ee0]
lea rcx, [rsp + 0x57c0]
mov r9, rsi
mov rdx, rbx
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x80], 0xffffffff
mov qword [rsp + 0x20], rax
call fcn.00402cc8
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x7ee0]
lea rcx, [rsp + 0x57c0]
mov r9, rsi
mov rdx, rbx
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], 0xffffffff
call fcn.00402cc8
jmp 0x405e83
lea rcx, str._Extractor__Online_installer___no_app_to_extract_n
call fcn.0040a054
mov rcx, rdi
call fcn.004153e0
cmp rax, rbp
jbe 0x405eb9
lea rdx, [rsp + 0x17d30]
lea rcx, [rsp + 0x7ee0]
call fcn.00401558
lea rdx, [rsp + 0x17d30]
lea rcx, str._Extractor__Renaming_App_folder_to__s_n
call fcn.0040a054
lea rdx, str.JWrapper
lea rcx, [rsp + 0x1b0]
call fcn.0040a290
cmp rax, rbp
mov rbx, rax
jne 0x405eec
lea rcx, str.No_latest_App_version_even_after_download__n
call fcn.0040a120
mov ecx, 1
call fcn.00416780
int3
call fcn.004011a0
cmp al, bpl
je 0x405f04
lea rcx, [0x004481b0]
call fcn.00408628
jmp 0x405f10
lea rcx, [0x00448230]
call fcn.00405ff4
lea rcx, str._HttpDownloader__Cleaning_up..._n
call fcn.0040a054
call fcn.004011a0
cmp al, bpl
je 0x405f32
mov rcx, qword [0x0054b260]
call sub.gdiplus.dll_GdiplusShutdown
lea rcx, str._Extractor__Will_now_run_latest_GU__s_n
mov rdx, rbx
call fcn.0040a054
mov rcx, rsi
call fcn.00419a40
cmp r15b, bpl
jne 0x405feb
mov r9, qword [rsp + 0x19120]
mov r8d, dword [rsp + 0x19118]
mov rdx, qword [rsp + 0x128]
lea rax, [rsp + 0x107d0]
lea rcx, [rsp + 0x1b0]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x140]
mov byte [rsp + 0x68], bpl
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x58], rax
mov al, byte [rsp + 0x84]
mov byte [rsp + 0x50], al
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x40], ebp
lea rax, [rsp + 0x28d0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
call fcn.00401cbc
xor ecx, ecx
call fcn.00416780
int3