Function at 0x41b250
Capabilities:
Accept command line arguments
Check if file exists
Get common file path
Get file attributes
Identify system language via api
Parse pe header
Query environment variable

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4df419
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x12f8
call fcn.004a1180
mov eax, dword [0x51c100]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
xor edi, edi
mov dword [ebp - 0x1208], edi
xorps xmm0, xmm0
mov dword [ebp - 0x1258], eax
xor eax, eax
movups xmmword [ebp - 0xbd8], xmm0
mov dword [ebp - 0x1204], edi
mov dword [ebp - 0x120c], edi
mov dword [ebp - 0xbc8], edi
mov dword [ebp - 0xbc4], 7
mov word [ebp - 0xbd8], ax
mov dword [ebp - 4], eax
movups xmmword [ebp - 0xb48], xmm0
mov dword [ebp - 0xb38], eax
mov dword [ebp - 0xb34], 7
mov word [ebp - 0xb48], ax
movups xmmword [ebp - 0xae0], xmm0
mov dword [ebp - 0xad0], eax
mov dword [ebp - 0xacc], 7
mov word [ebp - 0xae0], ax
movups xmmword [ebp - 0xe7c], xmm0
mov dword [ebp - 0xe6c], eax
mov dword [ebp - 0xe68], 7
mov word [ebp - 0xe7c], ax
movups xmmword [ebp - 0xe4c], xmm0
mov dword [ebp - 0xe3c], eax
mov dword [ebp - 0xe38], 7
mov word [ebp - 0xe4c], ax
movups xmmword [ebp - 0xe64], xmm0
mov dword [ebp - 0xe54], eax
mov dword [ebp - 0xe50], 7
mov word [ebp - 0xe64], ax
movups xmmword [ebp - 0xc24], xmm0
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc10], 7
mov word [ebp - 0xc24], ax
push 0x34
push eax
lea eax, [ebp - 0xc0c]
push eax
call fcn.004a3580
xorps xmm0, xmm0
mov byte [ebp - 0xbf4], 0
add esp, 0xc
mov dword [ebp - 0xbe0], edi
movups xmmword [ebp - 0xbf0], xmm0
mov dword [ebp - 0xbdc], edi
push 0xc0
lea eax, [ebp - 0xf40]
push edi
push eax
call fcn.004a3580
add esp, 0xc
lea ecx, [ebp - 0xf40]
call fcn.00410250
push 0x74
lea eax, [ebp - 0xe1c]
mov dword [ebp - method.ProgressAnimator.virtual_0], 0x4fecc0
push edi
push eax
call fcn.004a3580
add esp, 0xc
mov dword [ebp - fcn.0040eeb0], vtable.ProgressCallback.0
mov dword [ebp - 0xdfc], edi
mov dword [ebp - 0xdf8], edi
mov dword [ebp - 0xdf4], edi
xorps xmm0, xmm0
mov dword [ebp - 0xdd8], edi
movups xmmword [ebp - 0xde8], xmm0
mov dword [ebp - 0xdd4], 7
xor eax, eax
mov word [ebp - 0xde8], ax
movups xmmword [ebp - 0xdd0], xmm0
mov dword [ebp - 0xdc0], eax
mov dword [ebp - 0xdbc], 7
mov word [ebp - 0xdd0], ax
mov byte [ebp - 4], 0xb
push 0x38
mov dword [ebp - 0xdb8], eax
mov dword [ebp - 0xdb0], eax
mov dword [ebp - 0xdac], eax
call fcn.004a05c1
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0xdb0], eax
lea eax, [ebp - 0xe18]
mov byte [ebp - 4], 0xc
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
sub esp, 0xc
call fcn.00470840
add esp, 0xc
mov dword [ebp - 0xe00], eax
lea ecx, [ebp - 0xdfc]
call fcn.0040fa50
push edi
lea ecx, [ebp - 0xdb8]
mov byte [ebp - 0xdb4], 0
call fcn.0040fa60
lea eax, [ebp - 0x1254]
mov byte [ebp - 0xdec], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1240], 0x64
push eax
lea ecx, [ebp - 0xdb0]
movlpd qword [ebp - 0x1238], xmm0
mov dword [ebp - 0x123c], edi
mov byte [ebp - 0x1248], 1
mov dword [ebp - 0x1230], edi
mov dword [ebp - 0x1254], edi
call fcn.0040f930
movups xmm0, xmmword [ebp - 0x1248]
lea ecx, [ebp - 0xdb0]
mov dword [ebp - 0xae4], 1
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x1238]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0xae4]
push eax
call fcn.0040f930
movups xmm0, xmmword [ebp - 0x1248]
push ecx
lea ecx, [ebp - 0xe1c]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0x1238]
movups xmmword [eax + 0x10], xmm0
call fcn.0040ee80
lea ecx, [ebp - 0xe34]
mov dword [ebp - 0x11ec], 0xffffffff
call fcn.0040a2d0
xor eax, eax
mov dword [ebp - 0xc40], edi
xorps xmm0, xmm0
mov byte [ebp - 0x11e4], 0
movq qword [ebp - 0xc48], xmm0
mov dword [ebp - 0x121c], edi
mov dword [ebp - 0x125c], eax
mov dword [ebp - 0xc48], eax
mov dword [ebp - 0xae4], eax
mov dword [ebp - 0xc44], eax
mov dword [ebp - 0x1254], eax
mov dword [ebp - 0xc40], eax
lea ecx, [ebp - 0x11e0]
call fcn.0041f8c0
push 0x80
lea eax, [ebp - 0x98]
push edi
push eax
call fcn.004a3580
xorps xmm0, xmm0
mov dword [ebp - 0xc2c], edi
xor eax, eax
mov dword [ebp - 0xc28], 7
movups xmmword [ebp - 0xc3c], xmm0
add esp, 0xc
mov word [ebp - 0xc3c], ax
movups xmmword [ebp - 0xc60], xmm0
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0xc4c], 7
mov word [ebp - 0xc60], ax
movups xmmword [ebp - 0xcc4], xmm0
mov dword [ebp - 0xcb4], eax
mov dword [ebp - 0xcb0], 7
mov word [ebp - 0xcc4], ax
push 0x820
push eax
lea eax, [ebp - 0xac0]
mov byte [ebp - 4], 0x13
push eax
call fcn.004a3580
add esp, 0xc
mov dword [ebp - 0x124c], 0xffffffff
xorps xmm0, xmm0
mov byte [ebp - 0x1224], 0
lea ecx, [ebp - 0xcac]
mov dword [ebp - 0xc9c], edi
movups xmmword [ebp - 0xcac], xmm0
push edi
push 0x4fbcd4
mov dword [ebp - 0xc98], edi
call fcn.0040a4a0
mov esi, 1
mov byte [ebp - 4], 0x14
mov ecx, esi
call fcn.004685a0
sub esp, 8
mov ecx, esi
call fcn.004784c0
add esp, 8
call fcn.00478710
xor ecx, ecx
call fcn.00468750
call fcn.00479140
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522e78]
movq qword [ebp - 0xb18], xmm0
mov dword [ebp - 0xb10], eax
call fcn.0040b560
xorps xmm0, xmm0
mov dword [ebp - 0xb0c], eax
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0xb08], edx
mov dword [ebp - 0xb04], 0xef
movlpd qword [ebp - 0xac8], xmm0
call fcn.0040ba10
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xac8]
test ecx, ecx
je 0x41b72a
push str.Entering_SFX_stub_guarded_code_section.
lea eax, [ebp - 0xb18]
push eax
push 2
call fcn.004101b0
mov byte [ebp - 4], 0x14
or edi, 0xffffffff
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0x1214], ecx
test ecx, ecx
je 0x41b77e
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41b77e
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov eax, edi
mov edi, dword [ebp - 0x1214]
lock xadd dword [edi + 8], eax
jne 0x41b77e
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4e933c]
mov ecx, edi
call esi
call fcn.0048b8e0
test al, al
je 0x41b790
push ecx
call fcn.00464410
add esp, 4
call fcn.0048b7f0
cmp eax, 5
jne 0x41b7e7
call fcn.004144c0
push dword [ebp - 0x1258]
lea ecx, [ebp - 0xb00]
mov esi, eax
call fcn.0040a540
push esi
mov byte [ebp - 4], 0x16
mov edi, 1
push ecx
mov edx, str._arm64
mov dword [ebp - 0x1204], edi
lea ecx, [ebp - 0xb00]
mov dword [ebp - 0x1208], edi
call fcn.00421150
add esp, 8
mov byte [ebp - 0x11fd], 1
test al, al
je 0x41b7ee
mov byte [ebp - 0x11fd], 0
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x1204]
test al, 1
je 0x41b819
and eax, 0xfffffffe
lea ecx, [ebp - 0xb00]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1208], eax
call fcn.0040a590
cmp byte [ebp - 0x11fd], 0
je 0x41b840
push 0x10
push str.Installation_failed
push str.We_are_sorry_but_the_Avast_Antivirus_installer_cannot_run_on_arm64_devices._n_nTip:_Check_our_website_if_there_is_a_supported_version.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edi, 0xc1
jmp 0x41f645
push 0xc0
lea eax, [ebp - 0x158]
push 0
push eax
call fcn.004a3580
add esp, 0xc
lea ecx, [ebp - 0x158]
call fcn.00410250
xor ecx, ecx
mov byte [ebp - 4], 0x17
call fcn.00414560
push eax
lea ecx, [ebp - 0x158]
call fcn.004103b0
test eax, eax
jne 0x41b9bb
push 0x34
push eax
lea eax, [ebp - 0xd2c]
push eax
call fcn.004a3580
add esp, 0xc
lea ecx, [ebp - 0xd2c]
call fcn.0041f880
push 0
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x18
call fcn.0040a630
push eax
lea ecx, [ebp - 0xd2c]
call fcn.004200b0
sub esp, 8
mov ecx, esp
push 0x4fcbf8
call fcn.0040baf0
lea ecx, [ebp - 0xd2c]
call fcn.00416110
test al, al
je 0x41b908
sub esp, 8
mov ecx, esp
push 0x4fcbf8
call fcn.0040baf0
lea ecx, [ebp - 0xd2c]
call fcn.004204e0
mov ecx, eax
call fcn.0040a630
push eax
call fcn.004b2c37
add esp, 4
mov dword [ebp - 0x124c], eax
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.0040baf0
lea ecx, [ebp - 0xd2c]
call fcn.00416110
test al, al
je 0x41b953
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.0040baf0
lea ecx, [ebp - 0xd2c]
call fcn.004204e0
mov ecx, eax
call fcn.0040a630
push eax
lea ecx, [ebp - 0xcac]
call fcn.0040a2a0
sub esp, 8
mov ecx, esp
push 0x4fcbf0
call fcn.0040baf0
lea ecx, [ebp - 0xd2c]
call fcn.00416110
test al, al
je 0x41b9b0
sub esp, 8
mov ecx, esp
push 0x4fcbf0
call fcn.0040baf0
lea ecx, [ebp - 0xd2c]
call fcn.004204e0
mov edx, str.clear
mov ecx, eax
call fcn.004167c0
mov ecx, dword [ebp - 0x1224]
test al, al
movzx ecx, cl
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x1224], ecx
lea ecx, [ebp - 0xd2c]
call fcn.0041fae0
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x14
call fcn.00410310
push 0
lea eax, [ebp - 0x11e8]
mov dword [ebp - 0x11e8], 0
push eax
push 1
push str.O:BAG:BAD:P_A_CIOI_FA___SY__A_CIOI_FA___BA__A_CIOI_FRFX___BU_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
mov eax, dword [ebp - 0x11e8]
lea ecx, [ebp - 0xac0]
mov edx, str.._
mov dword [ebp - 0x11fc], 0xc
mov dword [ebp - 0x11f8], eax
mov dword [ebp - 0x11f4], 0
call fcn.00421170
push 0
push 0x23
lea eax, [ebp - 0xab8]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.0044f3c0
mov ecx, eax
call fcn.0040a630
push 0x4fbcc8
lea ecx, [ebp - 0xb00]
mov esi, eax
call fcn.0040a540
push esi
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1240]
call fcn.00409e70
add esp, 4
mov ecx, eax
call fcn.0040a630
mov edx, eax
lea ecx, [ebp - 0xac0]
call fcn.00421180
lea ecx, [ebp - 0x1240]
call fcn.0040a590
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x14
call fcn.0040a590
xor eax, eax
lea esi, [ebp - 0x11fc]
cmp dword [ebp - 0x11e8], eax
lea ecx, [ebp - 0xb00]
cmove esi, eax
lea eax, [ebp - 0xac0]
push eax
call fcn.0040a540
mov edx, esi
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb00]
call fcn.00483b10
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x14
call fcn.0040a590
push dword [ebp - 0x11e8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
call fcn.0048baf0
test al, al
jne 0x41baf3
call fcn.0048bb60
test al, al
je 0x41bc1a
mov edx, str.SOFTWARE_
lea ecx, [ebp - 0xac0]
call fcn.00421170
lea ecx, [ebp - 0x2a0]
call fcn.00421190
call fcn.0044f3c0
mov ecx, eax
call fcn.0040a630
mov edx, eax
lea ecx, [ebp - 0xac0]
call fcn.00421180
mov edx, 0x4fdd40
lea ecx, [ebp - 0x2a0]
call fcn.004211b0
call fcn.0044f3c0
mov ecx, eax
call fcn.0040a630
mov edx, eax
lea ecx, [ebp - 0x2a0]
call fcn.004211b0
lea edx, [ebp - 0x11fd]
lea ecx, [ebp - 0xac0]
call fcn.00488100
test al, al
je 0x41bb97
cmp byte [ebp - 0x11fd], 0
je 0x41bb97
lea edx, [ebp - 0x11fd]
lea ecx, [ebp - 0x2a0]
call fcn.00488100
test al, al
je 0x41bb97
cmp byte [ebp - 0x11fd], 0
je 0x41bb97
lea ecx, [ebp - 0xac0]
call fcn.00487f60
lea edx, [ebp - 0x11fd]
lea ecx, [ebp - 0x2a0]
call fcn.00488100
test al, al
je 0x41bbc3
cmp byte [ebp - 0x11fd], 0
je 0x41bbc3
push ecx
lea edx, [ebp - 0xac0]
call fcn.00487230
jmp 0x41bc17
sub esp, 8
lea edx, [ebp - 0xac0]
call fcn.00487420
add esp, 8
test al, al
je 0x41bc05
lea edx, [ebp - 0x11fd]
lea ecx, [ebp - 0xac0]
call fcn.00488100
test al, al
je 0x41bbf6
cmp byte [ebp - 0x11fd], 0
jne 0x41bc1a
push ecx
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0xac0]
jmp 0x41bc12
push ecx
lea edx, [ebp - 0xac0]
lea ecx, [ebp - 0x2a0]
call fcn.00487c10
add esp, 4
call fcn.0048b8e0
test al, al
je 0x41bc34
call fcn.004211c0
mov esi, eax
mov ecx, esi
call dword [0x4e933c]
call esi
lea ecx, [ebp - 0x1240]
call fcn.0042b000
cmp byte [ebp - 0x1224], 0
je 0x41bc66
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x1b
push ecx
mov ecx, eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
push str.LogsClear.log
jmp 0x41bc82
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], 0x1c
push ecx
mov ecx, eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
push str.LogsSetup.log
mov edi, dword [eax]
mov esi, dword [eax + 4]
call fcn.0040baf0
push esi
push edi
lea ecx, [ebp - 0xe34]
call fcn.00483f80
add esp, 0x10
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1240]
call fcn.0040a590
push ecx
push 0x5c
lea ecx, [ebp - 0xe34]
call fcn.004206f0
push eax
push 0
lea eax, [ebp - 0x1240]
push eax
lea ecx, [ebp - 0xe34]
call fcn.0040dde0
xor edx, edx
mov byte [ebp - 4], 0x1d
mov ecx, eax
call fcn.00483b10
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], 0x14
call fcn.0040a590
sub esp, 8
lea ecx, [ebp - 0xe34]
call fcn.0040a630
mov ecx, eax
call fcn.00419c80
add esp, 8
call fcn.00419bc0
lea ecx, [ebp - 0x11e0]
call fcn.00439870
call fcn.00469320
push 1
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0xc0c]
call fcn.004200b0
sub esp, 8
mov ecx, esp
push str.silent
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
je 0x41bd96
call fcn.004144c0
sub esp, 8
mov esi, eax
mov ecx, esp
push str.silent
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
push esi
push ecx
mov edx, str.stub_loading
mov ecx, eax
call fcn.00421150
mov ecx, dword [ebp - 0x11e4]
add esp, 8
test al, al
movzx ecx, cl
mov esi, 1
cmove ecx, esi
mov dword [ebp - 0x11e4], ecx
jmp 0x41bd9b
mov esi, 1
sub esp, 8
mov ecx, esp
push str.AdminUpgrade
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
mov ecx, dword [ebp - 0x11e4]
test al, al
movzx ecx, cl
cmovne ecx, esi
sub esp, 8
mov dword [ebp - 0x11e8], ecx
mov ecx, esp
push str.language
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
sub esp, 8
mov ecx, esp
test al, al
je 0x41be21
push str.language
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
mov ecx, eax
call fcn.0040a630
push eax
call fcn.004b2c37
movzx esi, ax
add esp, 4
mov dword [ebp - 0x1214], esi
mov esi, 1
jmp 0x41be83
push str.langid
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
je 0x41be74
sub esp, 8
mov ecx, esp
push str.langid
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
mov ecx, eax
call fcn.0040a630
push eax
call fcn.004b2c37
movzx esi, ax
add esp, 4
mov dword [ebp - 0x1214], esi
mov esi, 1
jmp 0x41be83
call fcn.0041b100
movzx eax, word [eax + 0x40]
mov dword [ebp - 0x1214], eax
sub esp, 8
mov ecx, esp
push 0x4fd58c
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
sub esp, 8
mov byte [ebp - 0x121d], al
mov ecx, esp
push str.cookie
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
push eax
lea ecx, [ebp - 0xc3c]
call fcn.0040e600
sub esp, 8
mov ecx, esp
push str.ga_clientid
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
je 0x41bf18
sub esp, 8
mov ecx, esp
push str.ga_clientid
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
push eax
lea ecx, [ebp - 0xb00]
call fcn.0040e700
mov edi, dword [ebp - 0x1204]
or edi, 2
jmp 0x41bf4b
lea eax, [ebp - 0xbb8]
push eax
call fcn.0048b180
add esp, 4
lea edx, [ebp - 0xb70]
lea ecx, [ebp - 0x1240]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb70], xmm0
call fcn.0041a4c0
mov edi, dword [ebp - 0x1204]
or edi, 4
push eax
lea ecx, [ebp - 0xc60]
mov dword [ebp - 0x1208], edi
mov dword [ebp - 0x1204], edi
call fcn.0040e650
mov eax, edi
test al, 4
je 0x41bf89
and eax, 0xfffffffb
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1208], eax
call fcn.0040a590
mov eax, dword [ebp - 0x1204]
mov dword [ebp - 4], 0x14
test al, 2
je 0x41bfae
and eax, 0xfffffffd
lea ecx, [ebp - 0xb00]
mov dword [ebp - 0x1204], eax
mov dword [ebp - 0x1208], eax
call fcn.0040a590
sub esp, 8
mov ecx, esp
push str.edat_dir
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
je 0x41bffb
sub esp, 8
mov ecx, esp
push str.edat_dir
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
push eax
lea ecx, [ebp - 0xb00]
call fcn.0040e700
or dword [ebp - 0x1204], 8
jmp 0x41c012
push 0x4fbcd4
lea ecx, [ebp - 0x1240]
call fcn.0040a540
or dword [ebp - 0x1204], 0x10
push eax
lea ecx, [ebp - 0xcc4]
call fcn.0040e650
mov eax, dword [ebp - 0x1204]
test al, 0x10
je 0x41c042
and eax, 0xffffffef
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0x1204], eax
call fcn.0040a590
mov eax, dword [ebp - 0x1204]
mov dword [ebp - 4], 0x14
test al, 8
je 0x41c061
and eax, 0xfffffff7
lea ecx, [ebp - 0xb00]
mov dword [ebp - 0x1204], eax
call fcn.0040a590
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
je 0x41c09b
sub esp, 8
mov ecx, esp
push str.sub_edition
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
jmp 0x41c0a1
lea eax, [ebp - 0xcac]
push eax
lea ecx, [ebp - 0xcac]
call fcn.0040e600
sub esp, 8
mov ecx, esp
push str.ifeo
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
sete byte [ebp - 0x124d]
xor ecx, ecx
call fcn.00414560
sub esp, 0x10
mov dword [ebp - 0x11e4], eax
mov eax, esp
mov dword [ebp - 0xb28], 0x180
mov dword [ebp - 0xb24], 0x14
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0xb20], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb1c], str.GuardedWinMain
movups xmm0, xmmword [ebp - 0xb28]
push 0x522e70
movups xmmword [eax], xmm0
call fcn.0040b800
lea eax, [ebp - 0x11e4]
push eax
lea ecx, [ebp - 0x1240]
call fcn.00421240
add esp, 4
mov ecx, esi
call fcn.0048b960
test al, al
jne 0x41c2f7
mov ecx, dword [ebp - 0x124c]
call fcn.0041a5a0
test al, al
je 0x41c2f7
cmp byte [ebp - 0x11e8], 0
jne 0x41c178
push 0x10
push str.Unsupported_system
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Please_upgrade_your_OS_at_least_to_Windows_7_SP1.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522e78]
movq qword [ebp - 0xb18], xmm0
mov dword [ebp - 0xb10], eax
call fcn.0040b560
xorps xmm0, xmm0
mov dword [ebp - 0xb0c], eax
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0xb08], edx
mov dword [ebp - 0xb04], 0x18a
movlpd qword [ebp - 0xac8], xmm0
call fcn.0040ba10
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xac8]
test ecx, ecx
je 0x41c1ea
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Please_upgrade_your_OS_at_least_to_Windows_7_SP1.
lea eax, [ebp - 0xb18]
push eax
push 7
call fcn.004101b0
mov byte [ebp - 4], 0x14
or edi, 0xffffffff
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0x11e4], ecx
test ecx, ecx
je 0x41c242
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41c242
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x11e4]
call esi
mov ecx, dword [ebp - 0x11e4]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41c242
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x11e4]
call esi
xor esi, esi
call fcn.004690f0
call fcn.00478840
sub esp, 8
xor ecx, ecx
call fcn.004784c0
add esp, 8
xor ecx, ecx
call fcn.004685a0
mov edx, dword [ebp - 0xad0]
test edx, edx
je 0x41f57c
cmp dword [ebp - 0xacc], 8
lea ecx, [ebp - 0xae0]
cmovae ecx, dword [ebp - 0xae0]
sub esp, 8
mov eax, esp
push edx
push ecx
lea ecx, [ebp - 0xb48]
mov dword [eax], str.Reboot.txt
mov dword [eax + 4], 0xa
call fcn.00483f80
add esp, 0x10
lea eax, [ebp - 0xb48]
cmp dword [ebp - 0xb34], 8
cmovae eax, dword [ebp - 0xb48]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41c2d1
mov byte [ebp - 0x120d], 1
test al, 0x10
je 0x41c2d8
mov byte [ebp - 0x120d], 0
cmp byte [ebp - 0x121d], 0
lea ecx, [ebp - 0xae0]
je 0x41f563
mov dl, 1
call fcn.00484cf0
jmp 0x41f56e
lea eax, [ebp - 0x11e4]
mov dword [ebp - 0x11e4], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
cmp dword [ebp - 0x11e4], 0
je 0x41c3db
push str.wintrust.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x41c355
push str.CryptCATAdminAcquireContext2
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
setne al
test al, al
jne 0x41c3db
mov ecx, dword [ebp - 0x124c]
call fcn.0041a5a0
test al, al
je 0x41c3db
cmp byte [ebp - 0x11e8], 0
jne 0x41c381
push 0x10
push str.Unsupported_system
push str.Your_operating_system_is_not_supported_for_Avast_One_installation._Windows_7_KB3033929_is_required.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
sub esp, 0x10
mov dword [ebp - 0xb28], 0x193
mov eax, esp
mov dword [ebp - 0xb24], 0x1d
mov dword [ebp - 0xb20], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0xb1c], str.GuardedWinMain
movups xmm0, xmmword [ebp - 0xb28]
push 0x522e70
movups xmmword [eax], xmm0
call fcn.0040b800
lea ecx, [ebp - 0x1240]
call fcn.00421300
or edi, 0xffffffff
jmp 0x41c242
lea eax, [ebp - 0x11ec]
push eax
sub esp, 8
lea eax, [ebp - 0xc24]
lea edx, [ebp - 0xe64]
lea ecx, [ebp - 0xe4c]
push eax
call fcn.00439620
add esp, 0x10
mov byte [ebp - 0x120d], al
test al, al
je 0x41c430
cmp dword [ebp - 0x110c], 8
lea ecx, [ebp - 0x1120]
lea eax, [ebp - 0x98]
cmovae ecx, dword [ebp - 0x1120]
push ecx
push 0x40
push eax
call fcn.004b7ff8
add esp, 0xc
cmp word [ebp - 0x98], 0
jne 0x41c53d
push 4
push 0x4fd5e0
lea ecx, [ebp - 0xc0c]
call fcn.00416250
test eax, eax
je 0x41c4a2
sub esp, 8
mov ecx, esp
push 0x4fd5e0
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
cmp dword [eax + 0x10], 0x24
jne 0x41c4a2
sub esp, 8
mov ecx, esp
push 0x4fd5e0
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
mov ecx, eax
call fcn.0040a630
mov edx, eax
lea ecx, [ebp - 0x98]
call fcn.004213b0
cmp word [ebp - 0x98], 0
jne 0x41c53d
call fcn.0048b080
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0xb24], edx
call fcn.0048b080
mov dword [ebp - 0xb20], eax
lea ecx, [ebp - 0x1240]
mov eax, dword [ebp - 0xb22]
and eax, 0xfff
mov dword [ebp - 0xb1c], edx
or eax, 0x4000
lea edx, [ebp - 0xb70]
mov word [ebp - 0xb22], ax
mov al, byte [ebp - 0xb20]
and al, 0x3f
or al, 0x80
mov byte [ebp - 0xb20], al
movups xmm0, xmmword [ebp - 0xb28]
movups xmmword [ebp - 0xb70], xmm0
call fcn.0041a4c0
cmp dword [eax + 0x14], 8
jb 0x41c520
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x98]
push 0x40
push eax
call fcn.004b7ff8
add esp, 0xc
lea ecx, [ebp - 0x1240]
call fcn.0040a590
cmp byte [ebp - 0x1224], 0
jne 0x41c7f7
cmp byte [ebp - 0x120d], 0
jne 0x41c7f7
cmp byte [ebp - 0x1030], 0
jne 0x41c7f7
lea ecx, [ebp - 0xb60]
call fcn.0040a2d0
mov byte [ebp - 4], 0x21
call fcn.0044f2a0
push 0x4fbbb0
mov edx, eax
lea ecx, [ebp - 0x1240]
call fcn.00409e00
add esp, 4
mov ecx, eax
call fcn.0040a630
mov ecx, eax
call fcn.004152c0
lea ecx, [ebp - 0x1240]
mov byte [ebp - 0x11fd], al
call fcn.0040a590
call fcn.0044f2a0
cmp byte [ebp - 0x11fd], 0
lea ecx, [ebp - 0x1240]
mov edx, eax
je 0x41c5eb
push 0x4fbbb0
call fcn.00409e00
add esp, 4
lea ecx, [ebp - 0xb60]
push eax
call fcn.0040e650
lea ecx, [ebp - 0x1240]
call fcn.0040a590
jmp 0x41c67b
push str.FsBlk
call fcn.00409e00
add esp, 4
mov ecx, eax
call fcn.0040a630
mov ecx, eax
call fcn.004152c0
lea ecx, [ebp - 0x1240]
mov byte [ebp - 0x11fd], al
call fcn.0040a590
cmp byte [ebp - 0x11fd], 0
je 0x41c653
call fcn.0044f2a0
push str.FsBlk
mov edx, eax
lea ecx, [ebp - 0x1240]
call fcn.00409e00
add esp, 4
lea ecx, [ebp - 0xb60]
push eax
call fcn.0040e650
lea ecx, [ebp - 0x1240]
call fcn.0040a590
jmp 0x41c67b
call fcn.0044fe00
mov ecx, eax
call fcn.0040a630
mov ecx, eax
call fcn.004152c0
test al, al
je 0x41c67b
call fcn.0044fe00
push eax
lea ecx, [ebp - 0xb60]
call fcn.0040e600
cmp dword [ebp - 0xb50], 0
je 0x41c7e8
call fcn.0044fd20
push eax
lea ecx, [ebp - 0xb00]
call fcn.0040e700
mov byte [ebp - 4], 0x22
mov edi, 0xa003
cmp byte [ebp - 0x11e8], 0
mov dword [ebp - 0x120c], edi
jne 0x41c73b
call fcn.0044f0f0
cmp eax, 2
mov ecx, str.avastClear.exe
mov edi, str.avgClear.exe
cmovne edi, ecx
lea ecx, [ebp - 0xb60]
call fcn.0040a630
lea ecx, [ebp - 0xb00]
mov esi, eax
call fcn.0040a630
push edi
push esi
push eax
push str.The_installer_has_detected_corrupted__s_installation_on_this_computer__service__s_is_running___thus_this_installer_cannot_continue._Use_the__s_utility_to_fix_the_problem_or_contact_our_support_team.
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.004143d0
add esp, 0x18
lea ecx, [ebp - 0xb00]
call fcn.0040a630
push eax
push str.Corrupted__s_detected.
lea eax, [ebp - 0x298]
push 0x100
push eax
call fcn.004143d0
add esp, 0x10
lea eax, [ebp - 0x298]
push 0x10
push eax
lea eax, [ebp - 0xac0]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xb60]
call fcn.0040a630
lea ecx, [ebp - 0xb00]
mov dword [ebp - 0xae4], eax
call fcn.0040a630
sub esp, 0x10
mov dword [ebp - 0x1258], eax
mov eax, esp
mov dword [ebp - 0xb28], 0x1bc
mov dword [ebp - 0xb24], 0x21
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0xb20], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb1c], str.GuardedWinMain
movups xmm0, xmmword [ebp - 0xb28]
push 0x522e70
movups xmmword [eax], xmm0
call fcn.0040b800
lea eax, [ebp - 0xae4]
push eax
lea eax, [ebp - 0x1258]
push eax
lea ecx, [ebp - 0x1240]
call fcn.004213c0
add esp, 8
lea ecx, [ebp - 0xb00]
call fcn.0040a590
lea ecx, [ebp - 0xb60]
mov byte [ebp - 4], 0x14
call fcn.0040a590
mov esi, dword [ebp - 0x120c]
or edi, 0xffffffff
jmp 0x41c244
lea ecx, [ebp - 0xb60]
mov byte [ebp - 4], 0x14
call fcn.0040a590
push 0x523af8
lea ecx, [ebp - 0xf40]
call fcn.004103b0
mov esi, eax
mov dword [ebp - 0x11e4], esi
test esi, esi
je 0x41c8d2
cmp byte [ebp - 0x11e8], 0
jne 0x41c858
xor ecx, ecx
call fcn.00414560
push esi
push eax
push str.The_installer_cannot_open_the_SFX_archive__s.__code_0x_x__r_n_r_nIts_probably_caused_by_corrupted_installer_thus_please_try_to_download_it_again.
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.004143d0
add esp, 0x14
lea eax, [ebp - 0xac0]
push 0x10
push str.Installation_failed
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522e78]
mov dword [ebp - 0xae4], 0x523af8
movq qword [ebp - 0xb18], xmm0
mov dword [ebp - 0xb10], eax
call fcn.0040b560
mov dword [ebp - 0xb0c], eax
lea ecx, [ebp - 0xb18]
lea eax, [ebp - 0x11e4]
mov dword [ebp - 0xb08], edx
push eax
lea eax, [ebp - 0xae4]
mov dword [ebp - 0xb04], 0x1ca
push eax
mov edx, str.Cannot_open_the_SFX_archive__s__code_0x_x_
call fcn.004213e0
mov esi, dword [ebp - 0x11e4]
add esp, 8
mov dword [ebp - 0x120c], esi
or edi, 0xffffffff
jmp 0x41c244
lea ecx, [ebp - 0x1240]
call fcn.00414620
mov esi, eax
lea eax, [ebp - 0xae0]
cmp eax, esi
je 0x41c91a
mov ecx, eax
call fcn.0040a590
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xae0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xad0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x1240]
call fcn.0040a590
cmp dword [ebp - 0xacc], 8
lea eax, [ebp - 0xae0]
mov edx, str._TMPPATH_
lea ecx, [ebp - 0xf40]
cmovae eax, dword [ebp - 0xae0]
push eax
call fcn.00414f10
add esp, 4
lea eax, [ebp - 0xf40]
cmp dword [ebp - 0xf2c], 8
lea ecx, [ebp - 0xc0c]
cmovae eax, dword [ebp - 0xf40]
push 0
push eax
call fcn.004200b0
mov esi, dword [ebp - 0xc2c]
test esi, esi
jne 0x41c9c3
sub esp, 8
mov ecx, esp
push str.cookie
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
je 0x41c9c3
sub esp, 8
mov ecx, esp
push str.cookie
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
push eax
lea ecx, [ebp - 0xc3c]
call fcn.0040e600
mov esi, dword [ebp - 0xc2c]
cmp dword [ebp - 0xc9c], 0
je 0x41c9f7
lea eax, [ebp - 0xcac]
push eax
sub esp, 0xc
mov ecx, esp
push str.sub_edition
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
add esp, 4
mov ecx, eax
call fcn.0040e600
test esi, esi
jne 0x41ca4a
call fcn.004144c0
xor ecx, ecx
mov esi, eax
call fcn.00414560
push eax
lea ecx, [ebp - 0x1240]
call fcn.0040a540
mov byte [ebp - 4], 0x23
mov edx, str._x64.exe
mov edi, dword [ebp - 0x1204]
push ecx
or edi, 0x20
mov ecx, eax
push esi
mov dword [ebp - 0x1204], edi
mov dword [ebp - 0x1208], edi
call fcn.004214a0
add esp, 8
mov byte [ebp - 0x11fd], 1
test al, al
je 0x41ca51
mov byte [ebp - 0x11fd], 0
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x1204]
test al, 0x20
je 0x41ca76
and eax, 0xffffffdf
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0x1204], eax
call fcn.0040a590
cmp byte [ebp - 0x11fd], 0
je 0x41cc92
xorps xmm0, xmm0
mov dword [ebp - 0x11f4], 0
push 0x4fbcc8
lea ecx, [ebp - 0x1274]
movq qword [ebp - 0x11fc], xmm0
call fcn.0040a540
xor ecx, ecx
mov byte [ebp - 4], 0x24
call fcn.00414560
push eax
lea ecx, [ebp - 0xb00]
call fcn.0040a540
sub esp, 8
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x1274]
lea edx, [ebp - 0xb00]
lea ecx, [ebp - 0x11fc]
push 1
push eax
call fcn.0040cf00
add esp, 0x10
lea ecx, [ebp - 0xb00]
call fcn.0040a590
lea ecx, [ebp - 0x1274]
mov byte [ebp - 4], 0x28
call fcn.0040a590
lea ecx, [ebp - 0x11fc]
call fcn.0040bc50
cmp eax, 2
jb 0x41cc83
mov eax, dword [ebp - 0x11f8]
lea ecx, [ebp - 0xb18]
add eax, 0xffffffe8
push eax
call fcn.0040e700
sub esp, 8
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xb18]
call fcn.00420740
mov esi, eax
cmp esi, 0xffffffff
je 0x41cc78
push esi
push 0x4fe498
lea ecx, [ebp - 0xb18]
call fcn.0040c1c0
cmp eax, 0xffffffff
jne 0x41cb73
push esi
push 0x4fd9c4
lea ecx, [ebp - 0xb18]
call fcn.0040c1c0
cmp eax, 0xffffffff
je 0x41cc78
sub eax, esi
lea ecx, [ebp - 0xb18]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0xba8]
push eax
call fcn.0040dde0
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0xb98], 3
jne 0x41cc6d
push 1
lea ecx, [ebp - 0xba8]
call fcn.0040e630
cmp word [eax], 0x30
jb 0x41cc6d
push 1
lea ecx, [ebp - 0xba8]
call fcn.0040e630
cmp word [eax], 0x39
ja 0x41cc6d
call fcn.0044f0f0
cmp eax, 2
lea ecx, [ebp - 0xb00]
lea eax, [ebp - 0xba8]
push eax
jne 0x41cbf6
mov edx, str.mmm_bav_ppc_999_
call fcn.004214f0
add esp, 4
mov byte [ebp - 4], 0x2b
jmp 0x41cc07
mov edx, str.mmm_ava_ppc_999_
call fcn.004214f0
add esp, 4
mov byte [ebp - 4], 0x2c
push 0x4fe49c
mov edx, eax
lea ecx, [ebp - 0x1240]
call fcn.00409e70
add esp, 4
lea ecx, [ebp - 0xc3c]
push eax
call fcn.0040e650
lea ecx, [ebp - 0x1240]
call fcn.0040a590
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x2a
call fcn.0040a590
lea eax, [ebp - 0xc3c]
push eax
sub esp, 0xc
mov ecx, esp
push str.cookie
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
add esp, 4
mov ecx, eax
call fcn.0040e600
lea ecx, [ebp - 0xba8]
call fcn.0040a590
lea ecx, [ebp - 0xb18]
call fcn.0040a590
lea ecx, [ebp - 0x11fc]
mov byte [ebp - 4], 0x14
call fcn.0040c480
lea ecx, [ebp - 0x11e4]
mov dword [ebp - 0x11e4], 0
call fcn.0047a850
xorps xmm0, xmm0
mov dword [ebp - 0xc68], 0
xor eax, eax
mov dword [ebp - 0xc64], 7
movups xmmword [ebp - 0xc78], xmm0
mov word [ebp - 0xc78], ax
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x11e4], 2
jl 0x41ccf0
push str.Loading
lea ecx, [ebp - 0xc78]
call fcn.0040a2a0
jmp 0x41cd7e
cmp byte [ebp - 0x1224], 0
je 0x41cd19
push str._Clear
push ecx
call fcn.0044fd20
add esp, 4
lea ecx, [ebp - 0x1240]
mov edx, eax
call fcn.00409e00
add esp, 4
jmp 0x41cd67
mov esi, dword [ebp - 0x124c]
mov ecx, esi
call fcn.0041a5a0
test al, al
je 0x41cd4c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov ecx, 0x409
cmp ax, cx
jne 0x41cd4c
push str.Setting_up_Avast_One_installation...
lea ecx, [ebp - 0xc78]
call fcn.0040a2a0
jmp 0x41cd7e
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov edx, esi
push eax
push ecx
lea ecx, [ebp - 0x1240]
call fcn.0041a610
add esp, 8
push eax
lea ecx, [ebp - 0xc78]
call fcn.0040e650
lea ecx, [ebp - 0x1240]
call fcn.0040a590
mov ecx, dword [ebp - 0x124c]
cmp ecx, 0xffffffff
jne 0x41cdad
mov ecx, dword [ebp - 0x105c]
cmp ecx, 0xffffffff
jne 0x41cdad
call fcn.0044f0f0
sub eax, 2
neg eax
sbb eax, eax
add eax, 0x3ea
mov dword [ebp - 0x11e4], eax
jmp 0x41cde1
cmp ecx, 0x13
jne 0x41cdb9
mov esi, 0x3eb
jmp 0x41cde7
call fcn.0041a5a0
test al, al
je 0x41cdc9
mov esi, 0x3ec
jmp 0x41cde7
call fcn.0041a5f0
xor ecx, ecx
test al, al
setne cl
add ecx, 0x3e9
mov dword [ebp - 0x11e4], ecx
mov esi, dword [ebp - 0x11e4]
push 0x58
lea eax, [ebp - 0xff8]
push 0
push eax
call fcn.004a3580
add esp, 0xc
lea eax, [ebp - 0xc78]
push eax
push esi
push ecx
lea ecx, [ebp - 0xff8]
call fcn.00418590
lea eax, [ebp - 0xc7c]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xe1c]
call fcn.0040eeb0
lea eax, [ebp - 0xff8]
push eax
lea ecx, [ebp - 0xe1c]
call fcn.0040eeb0
cmp byte [ebp - 0x11e8], 0
jne 0x41ce4a
lea ecx, [ebp - 0xff8]
call fcn.00418ec0
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
xorps xmm0, xmm0
mov dword [ebp - 0xb98], 0
cmovae edx, dword [ebp - 0xae0]
mov ecx, edx
mov dword [ebp - 0xb94], 0
movups xmmword [ebp - 0xba8], xmm0
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ce81
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xba8]
call fcn.0040a4a0
mov byte [ebp - 4], 0x2f
mov eax, 0x490
mov esi, dword [ebp - 0xeb0]
mov edi, dword [ebp - 0xeac]
mov dword [ebp - 0x11e4], eax
cmp esi, edi
je 0x41cf6a
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x41ceca
mov ecx, dword [esi]
mov edx, dword [esi + 0x10]
push 0xb
push str.servers.def
push 0
call fcn.0040d030
add esp, 0xc
test eax, eax
je 0x41ceee
add esi, 0x40
cmp esi, edi
jne 0x41cec0
jmp 0x41cf6a
cmp dword [ebp - 0xb94], 8
lea edx, [ebp - 0xba8]
xorps xmm0, xmm0
mov dword [ebp - 0xb08], 0
cmovae edx, dword [ebp - 0xba8]
mov ecx, edx
mov dword [ebp - 0xb04], 0
movups xmmword [ebp - 0xb18], xmm0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41cf25
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xb18]
call fcn.0040a4a0
push ecx
push esi
lea eax, [ebp - 0xb18]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0xf40]
call fcn.004115e0
lea ecx, [ebp - 0xb18]
mov dword [ebp - 0x11e4], eax
call fcn.0040a590
lea ecx, [ebp - 0xba8]
mov byte [ebp - 4], 0x2e
call fcn.0040a590
mov eax, dword [ebp - 0x11e4]
test eax, eax
je 0x41d010
mov edx, eax
lea ecx, [ebp - 0xb00]
call fcn.0042a460
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.0040a630
sub esp, 0x10
mov dword [ebp - 0x11e4], eax
mov eax, esp
mov dword [ebp - 0xb28], 0x23f
mov dword [ebp - 0xb24], 0x1d
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0xb20], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb1c], str.GuardedWinMain
movups xmm0, xmmword [ebp - 0xb28]
push 0x522e70
movups xmmword [eax], xmm0
call fcn.0040b800
lea eax, [ebp - 0x11e4]
push eax
lea ecx, [ebp - 0x1240]
call fcn.00421550
add esp, 4
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xb00]
call fcn.0040a590
cmp byte [ebp - 0x1224], 0
jne 0x41da22
call fcn.0041af90
test al, al
je 0x41d08d
sub esp, 8
mov ecx, esp
push 0x4fcbf0
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.00416110
test al, al
je 0x41d08d
sub esp, 8
mov ecx, esp
push 0x4fcbf0
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
cmp dword [eax + 0x10], 0
jne 0x41d08d
push 0x4fd548
sub esp, 0xc
mov ecx, esp
push 0x4fcbf0
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
add esp, 4
mov ecx, eax
call fcn.0040a2a0
cmp dword [ebp - 0xcb4], 0
je 0x41d5b1
lea ecx, [ebp - 0xcc4]
call fcn.00483730
test al, al
je 0x41d544
push str..edat
lea ecx, [ebp - 0xb00]
call fcn.0040a540
push 1
lea eax, [ebp - 0xb00]
mov byte [ebp - 4], 0x32
push 0
push eax
lea edx, [ebp - 0xcc4]
lea ecx, [ebp - 0xb24]
call fcn.00485310
add esp, 0xc
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x34
call fcn.0040a590
mov esi, dword [ebp - 0xb24]
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x11e4], esi
mov dword [ebp - 0xac4], eax
cmp esi, eax
je 0x41d533
nop
lea eax, [ebp - 0x12d4]
mov ecx, esi
push eax
call fcn.0040c240
lea ecx, [ebp - 0xb90]
push dword [eax + 4]
push dword [eax]
call fcn.004837d0
add esp, 8
lea eax, [ebp - 0x12cc]
mov byte [ebp - 4], 0x35
push eax
mov ecx, esi
call fcn.0040c240
lea ecx, [ebp - 0xb60]
push dword [eax + 4]
push dword [eax]
call fcn.00483750
add esp, 8
mov byte [ebp - 4], 0x36
call fcn.004144c0
mov dword [ebp - 0x1208], eax
lea ecx, [ebp - 0xb90]
lea eax, [ebp - 0x1304]
push eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.elic
call fcn.0040baf0
mov edx, dword [ebp - 0x1208]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414540
add esp, 0x10
test eax, eax
jne 0x41d1ac
push str.license.avastlic
jmp 0x41d33e
call fcn.004144c0
mov dword [ebp - 0x1208], eax
lea ecx, [ebp - 0xb90]
lea eax, [ebp - 0x12fc]
push eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ebcf
call fcn.0040baf0
mov edx, dword [ebp - 0x1208]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414540
add esp, 0x10
test eax, eax
jne 0x41d1fe
push str.bcc.cfg.tmp
jmp 0x41d33e
call fcn.004144c0
mov dword [ebp - 0x1208], eax
lea ecx, [ebp - 0xb90]
lea eax, [ebp - 0x12f4]
push eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ebpk
call fcn.0040baf0
mov edx, dword [ebp - 0x1208]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414540
add esp, 0x10
test eax, eax
jne 0x41d250
push str.bcpub.key.tmp
jmp 0x41d33e
call fcn.004144c0
mov dword [ebp - 0x1208], eax
lea ecx, [ebp - 0xb90]
lea eax, [ebp - 0x12ec]
push eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.erid
call fcn.0040baf0
mov edx, dword [ebp - 0x1208]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414540
add esp, 0x10
test eax, eax
jne 0x41d2a2
push str.rid.bin
jmp 0x41d33e
call fcn.004144c0
mov dword [ebp - 0x1208], eax
lea ecx, [ebp - 0xb90]
lea eax, [ebp - 0x12c4]
push eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.ecoo
call fcn.0040baf0
mov edx, dword [ebp - 0x1208]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414540
add esp, 0x10
test eax, eax
jne 0x41d2f1
push str.cookie.bin
jmp 0x41d33e
call fcn.004144c0
mov dword [ebp - 0x1208], eax
lea ecx, [ebp - 0xb90]
lea eax, [ebp - 0x12e4]
push eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.eapt
call fcn.0040baf0
mov edx, dword [ebp - 0x1208]
or ecx, 0xffffffff
push esi
push edi
call fcn.00414540
add esp, 0x10
test eax, eax
jne 0x41d349
push str.pairing.bin
lea ecx, [ebp - 0xb60]
call fcn.0040a2a0
lea ecx, [ebp - 0xb18]
call fcn.0040a2d0
lea eax, [ebp - 0x12dc]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0xb60]
call fcn.0040c240
lea ecx, [ebp - 0xae0]
mov edi, dword [eax]
mov esi, dword [eax + 4]
lea eax, [ebp - 0x11f8]
push eax
call fcn.0040c240
push esi
push edi
lea ecx, [ebp - 0xb18]
push dword [eax + 4]
push dword [eax]
call fcn.00483f80
mov esi, dword [ebp - 0x11e4]
lea edx, [ebp - 0xb18]
add esp, 8
mov ecx, esi
call fcn.00484ba0
add esp, 8
test al, al
je 0x41d43e
lea ecx, [ebp - 0xb18]
call fcn.0040a630
lea ecx, [ebp - 0xb90]
mov dword [ebp - 0x11e4], eax
call fcn.0040a630
sub esp, 0x10
mov dword [ebp - 0x1208], eax
mov eax, esp
mov dword [ebp - 0xbb8], 0x264
mov dword [ebp - 0xbb4], 0x2c
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0xbb0], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xbac], str.GuardedWinMain
movups xmm0, xmmword [ebp - 0xbb8]
push 0x522e70
movups xmmword [eax], xmm0
call fcn.0040b800
lea eax, [ebp - 0x11e4]
push eax
lea eax, [ebp - 0x1208]
push eax
lea ecx, [ebp - 0x1240]
call fcn.00421610
add esp, 8
jmp 0x41d4f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x1274]
call fcn.0042a460
mov ecx, eax
mov byte [ebp - 4], 0x38
call fcn.0040a630
lea ecx, [ebp - 0xb18]
mov dword [ebp - 0x11e4], eax
call fcn.0040a630
lea ecx, [ebp - 0xb90]
mov dword [ebp - 0x1208], eax
call fcn.0040a630
sub esp, 0x10
mov dword [ebp - 0x120c], eax
mov eax, esp
mov dword [ebp - 0xb70], 0x266
mov dword [ebp - 0xb6c], 0x2d
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0xb68], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb64], str.GuardedWinMain
movups xmm0, xmmword [ebp - 0xb70]
push 0x522e70
movups xmmword [eax], xmm0
call fcn.0040b800
lea eax, [ebp - 0x11e4]
push eax
lea eax, [ebp - 0x1208]
push eax
lea eax, [ebp - 0x120c]
push eax
lea ecx, [ebp - 0x1240]
call fcn.00421630
add esp, 0xc
lea ecx, [ebp - 0x1274]
call fcn.0040a590
lea ecx, [ebp - 0xb18]
call fcn.0040a590
lea ecx, [ebp - 0xb60]
call fcn.0040a590
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x34
call fcn.0040a590
add esi, 0x18
mov dword [ebp - 0x11e4], esi
cmp esi, dword [ebp - 0xac4]
jne 0x41d110
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 0x2e
call fcn.0040c480
jmp 0x41d5b1
lea ecx, [ebp - 0xcc4]
call fcn.0040a630
sub esp, 0x10
mov dword [ebp - 0xac4], eax
mov eax, esp
mov dword [ebp - 0xb70], 0x26b
mov dword [ebp - 0xb6c], 0x27
lea ecx, [ebp - 0x1240]
mov dword [ebp - 0xb68], str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov dword [ebp - 0xb64], str.GuardedWinMain
movups xmm0, xmmword [ebp - 0xb70]
push 0x522e70
movups xmmword [eax], xmm0
call fcn.0040b800
lea eax, [ebp - 0xac4]
push eax
lea ecx, [ebp - 0x1240]
call fcn.00421650
add esp, 4
cmp dword [ebp - 0xacc], 8
lea edi, [ebp - 0xae0]
mov ecx, dword [ebp - 0xea4]
cmovae edi, dword [ebp - 0xae0]
test ecx, ecx
je 0x41d65e
mov edx, dword [ebp - 0xea0]
test edx, edx
je 0x41d65e
mov eax, dword [ebp - 0xf28]
sub ecx, edx
push 0
push ecx
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x4e933c]
lea ecx, [ebp - 0xf28]
call esi
test eax, eax
js 0x41d65e
mov eax, dword [ebp - 0xf28]
push dword [ebp - 0xea0]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x4e933c]
lea ecx, [ebp - 0xf28]
call esi
mov dword [ebp - 0xac4], eax
test eax, eax
je 0x41d65e
push edi
push dword [ebp - 0xea0]
push eax
call fcn.00412280
mov ecx, dword [ebp - 0xf28]
mov edi, eax
push dword [ebp - 0xac4]
mov esi, dword [ecx + 0x10]
mov ecx, esi
call dword [0x4e933c]
lea ecx, [ebp - 0xf28]
call esi
test edi, edi
je 0x41d675
lea ecx, [ebp - 0xae0]
call fcn.0040a630
push eax
lea ecx, [ebp - 0xf40]
call fcn.00411c70
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
mov ecx, dword [ebp - 0xad0]
cmovae edx, dword [ebp - 0xae0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb48]
mov dword [eax], str.cookie.bin
mov dword [eax + 4], 0xa
call fcn.00483f80
add esp, 0x10
cmp dword [ebp - 0xc2c], 0
jne 0x41d78f
lea ecx, [ebp - 0xb48]
call fcn.00483710
test al, al
je 0x41d78f
xorps xmm0, xmm0
mov dword [ebp - 0x11f4], 0
lea edx, [ebp - 0xb48]
movq qword [ebp - 0x11fc], xmm0
lea ecx, [ebp - 0x11fc]
call fcn.00421670
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x11f8]
mov eax, dword [ebp - 0x11fc]
sub ecx, eax
push ecx
push eax
lea ecx, [ebp - 0xb00]
call fcn.004143f0
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x1240]
call fcn.00421740
add esp, 4
lea ecx, [ebp - 0xc3c]
push eax
call fcn.0040e650
lea ecx, [ebp - 0x1240]
call fcn.0040a590
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x39
call fcn.0040eb60
lea eax, [ebp - 0xc3c]
push eax
sub esp, 0xc
mov ecx, esp
push str.cookie
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
add esp, 4
mov ecx, eax
call fcn.0040e600
lea ecx, [ebp - 0x11fc]
mov byte [ebp - 4], 0x2e
call fcn.0040c0a0
sub esp, 0x18
lea eax, [ebp - 0xc3c]
mov ecx, esp
push eax
call fcn.0040e700
lea eax, [ebp - 0xc0c]
push 0x523af8
push eax
lea edx, [ebp - 0x98]
lea ecx, [ebp - 0x1240]
call fcn.00415340
add esp, 0x20
lea ecx, [ebp - 0x1240]
call fcn.0040a590
xor edi, edi
nop dword [eax]
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
mov ecx, dword [edi + 0x51cbec]
cmovae edx, dword [ebp - 0xae0]
sub esp, 8
mov eax, dword [ebp - 0xad0]
mov esi, esp
mov dword [ebp - 0x11e4], eax
lea eax, [ecx + 2]
mov dword [ebp - 0xac4], eax
mov dword [esi], ecx
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d806
sub ecx, dword [ebp - 0xac4]
push dword [ebp - 0x11e4]
sar ecx, 1
mov dword [esi + 4], ecx
lea ecx, [ebp - 0xb48]
push edx
call fcn.00483f80
add esp, 0x10
lea eax, [ebp - 0xb48]
cmp dword [ebp - 0xb34], 8
cmovae eax, dword [ebp - 0xb48]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41d90b
test al, 0x10
jne 0x41d90b
mov ecx, dword [edi + 0x51cbf0]
mov esi, ecx
mov dword [ebp - 0xac4], ecx
lea edx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x41d870
sub esi, edx
sar esi, 1
push esi
push ecx
lea ecx, [ebp - 0xc0c]
call fcn.00416250
mov ecx, eax
test ecx, ecx
jne 0x41d8e7
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov dword [ebp - 0x11e4], esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
push esi
push dword [ebp - 0xac4]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040a4a0
lea ecx, [ebp - 0xc0c]
mov byte [ebp - 4], 0x2e
call fcn.004207c0
mov ecx, eax
lea eax, [ebp - 0xb48]
cmp ecx, eax
je 0x41d90b
cmp dword [ebp - 0xb34], 8
push dword [ebp - 0xb38]
cmovae eax, dword [ebp - 0xb48]
push eax
call fcn.0040a190
add edi, 8
cmp edi, 0x18
jb 0x41d7d0
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
mov ecx, dword [ebp - 0xad0]
cmovae edx, dword [ebp - 0xae0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb48]
mov dword [eax], str.aswOfferTool.exe
mov dword [eax + 4], 0x11
call fcn.00483f80
cmp dword [ebp - 0xb34], 8
lea edx, [ebp - 0xb48]
cmovae edx, dword [ebp - 0xb48]
add esp, 0xc
push 0x7d1
call fcn.0040bb20
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
mov ecx, dword [ebp - 0xad0]
mov eax, esp
cmovae edx, dword [ebp - 0xae0]
push ecx
push edx
lea ecx, [ebp - 0xb48]
mov dword [eax], str.GuiCust.dll
mov dword [eax + 4], 0xb
call fcn.00483f80
cmp dword [ebp - 0xb34], 8
lea edx, [ebp - 0xb48]
cmovae edx, dword [ebp - 0xb48]
add esp, 0xc
push 0x7d0
call fcn.0040bb20
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
mov ecx, dword [ebp - 0xad0]
mov eax, esp
cmovae edx, dword [ebp - 0xae0]
push ecx
push edx
lea ecx, [ebp - 0xb48]
mov dword [eax], str.CustomInstallation.ini
mov dword [eax + 4], 0x16
call fcn.00483f80
cmp dword [ebp - 0xb34], 8
lea edx, [ebp - 0xb48]
cmovae edx, dword [ebp - 0xb48]
add esp, 0xc
push 0x7d2
call fcn.0040bb20
add esp, 8
push 0x5c
lea eax, [ebp - 0xd90]
push 0
push eax
call fcn.004a3580
sub esp, 0xc
mov eax, 0x7ffffffe
mov ecx, esp
mov dword [ebp - 0xac4], ecx
mov edx, dword [ebp - 0xad0]
sub eax, edx
cmp eax, 0xc
jb 0x41f849
cmp dword [ebp - 0xacc], 8
lea eax, [ebp - 0xae0]
push 0xc
cmovae eax, dword [ebp - 0xae0]
push str._servers.def
push edx
push eax
push ecx
push dword [ebp - 0xac4]
call fcn.00409ee0
mov edi, dword [ebp - 0x1204]
lea ecx, [ebp - 0xd90]
or edi, 0x200
mov dword [ebp - 0x1204], edi
call fcn.00419d40
sub esp, 0x18
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0xc3c]
mov dword [ebp - 0xac4], esp
mov ecx, esp
push eax
call fcn.0040e700
sub esp, 0x18
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0xc60]
mov dword [ebp - 0x11e4], esp
mov ecx, esp
push eax
call fcn.0040e700
sub esp, 0x18
mov byte [ebp - 4], 0x3e
mov edx, esp
lea ecx, [ebp - 0x98]
xorps xmm0, xmm0
lea esi, [ecx + 2]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41daf5
sub ecx, esi
lea eax, [ebp - 0x98]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0040a4a0
lea eax, [ebp - 0xc0c]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0xd90]
call fcn.00424830
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 4
movups xmmword [ecx], xmm0
push str.stub
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040a4a0
lea ecx, [ebp - 0xd90]
call fcn.00424bd0
xorps xmm0, xmm0
mov dword [ebp - 0xce4], 0
movq qword [ebp - 0xcec], xmm0
mov byte [ebp - 0xcc8], 0
mov al, byte [ebp - 0x121d]
lea esi, [ebp - 0x98]
mov ecx, esi
mov byte [ebp - 4], 0x3f
mov byte [ebp - 0xcf8], al
mov eax, dword [ebp - 0x124c]
mov dword [ebp - 0xcec], eax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41dba0
mov eax, dword [ebp - 0x1214]
sub ecx, edx
movzx eax, ax
mov dword [ebp - 0xce4], eax
mov eax, dword [ebp - 0x11ec]
sar ecx, 1
mov dword [ebp - 0x1214], eax
mov dword [ebp - 0xce8], eax
lea eax, [ebp - 0xc3c]
mov dword [ebp - 0xcf0], ecx
lea ecx, [ebp - 0xce0]
push eax
mov dword [ebp - 0xcf4], esi
call fcn.0040e700
xorps xmm0, xmm0
mov byte [ebp - 0xcc8], 1
push 0
lea ecx, [ebp - 0xb90]
movq qword [ebp - 0xb80], xmm0
movups xmmword [ebp - 0xb90], xmm0
call fcn.00492eb0
push 7
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], 0x40
call fcn.00492eb0
push eax
lea ecx, [ebp - 0xb90]
call fcn.00493330
lea ecx, [ebp - 0x1240]
call fcn.004932b0
lea eax, [ebp - 0xc60]
mov byte [ebp - 4], 0x41
push eax
push str.session_id
lea ecx, [ebp - 0xb90]
call fcn.0041a940
mov ecx, 0x523af8
mov dword [ebp - 0xb68], 0
xorps xmm0, xmm0
mov dword [ebp - 0xb64], 0
movups xmmword [ebp - 0xb78], xmm0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41dc80
sub ecx, edx
sar ecx, 1
push ecx
push 0x523af8
lea ecx, [ebp - 0xb78]
call fcn.0040a4a0
mov byte [ebp - 4], 0x42
mov esi, dword [ebp - 0xb68]
test esi, esi
je 0x41ded9
cmp dword [ebp - 0xb64], 8
lea eax, [ebp - 0xb78]
push 2
cmovae eax, dword [ebp - 0xb78]
mov edx, esi
push 0x5026b4
push ecx
mov ecx, eax
mov dword [ebp - 0x11ec], eax
call fcn.0044df60
add esp, 0xc
cmp eax, 0xffffffff
je 0x41dd06
lea edx, [eax + 1]
cmp esi, edx
jb 0x41f84e
mov eax, dword [ebp - 0x11ec]
sub esi, edx
or ecx, 0xffffffff
cmp esi, 0xffffffff
cmovb ecx, esi
lea eax, [eax + edx*2]
jmp 0x41dd0e
mov eax, dword [ebp - 0x11ec]
mov ecx, esi
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0xb08], 0
push eax
lea ecx, [ebp - 0xb18]
mov dword [ebp - 0xb04], 0
movups xmmword [ebp - 0xb18], xmm0
call fcn.0040a4a0
or edi, 0x400
mov dword [ebp - 0x1204], edi
lea eax, [ebp - 0xb18]
mov byte [ebp - 4], 0x43
push eax
push str.sfx_name
lea ecx, [ebp - 0xb90]
call fcn.0041a940
lea ecx, [ebp - 0xb18]
mov byte [ebp - 4], 0x42
call fcn.0040a590
lea edx, [ebp - 0xb78]
lea ecx, [ebp - 0x11f0]
call fcn.00484e00
cmp word [ebp - 0x11f0], 0
mov ax, word [ebp - 0x11ea]
mov cx, word [ebp - 0x11ec]
jne 0x41ddb0
cmp word [ebp - 0x11ee], 0
jne 0x41ddb0
test cx, cx
jne 0x41ddb0
test ax, ax
je 0x41de35
xorps xmm0, xmm0
mov dword [ebp - 0xb98], 0
xor edx, edx
mov dword [ebp - 0xb94], 7
movups xmmword [ebp - 0xba8], xmm0
mov word [ebp - 0xba8], dx
mov byte [ebp - 4], 0x44
lea edx, [ebp - 0xba8]
movzx esi, ax
movzx eax, word [ebp - 0x11f0]
push esi
mov dword [ebp - 0xac4], edx
movzx edx, cx
movzx ecx, word [ebp - 0x11ee]
push edx
push ecx
push eax
lea eax, [ebp - 0xac4]
push 0x4fd6dc
push eax
call fcn.0040e3b0
add esp, 0x18
lea eax, [ebp - 0xba8]
lea ecx, [ebp - 0xb90]
push eax
push str.sfx_version
call fcn.0041a940
lea ecx, [ebp - 0xba8]
call fcn.0040a590
cmp dword [ebp - 0xb64], 8
lea eax, [ebp - 0xb78]
push 0
cmovae eax, dword [ebp - 0xb78]
push 0
push 3
push 0
push 7
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0xac4], esi
mov byte [ebp - 4], 0x45
cmp esi, 0xffffffff
je 0x41ded9
push 0
push 0
lea eax, [ebp - 0x11f0]
xorps xmm0, xmm0
push eax
push esi
movlpd qword [ebp - 0x11f0], xmm0
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x41ded2
push dword [ebp - 0x11ec]
push dword [ebp - 0x11f0]
call fcn.0041a450
push edx
push eax
lea ecx, [ebp - 0xb00]
call fcn.00423170
add esp, 0x10
push eax
push str.sfx_created
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x46
call fcn.0041a940
lea ecx, [ebp - 0xb00]
call fcn.0040a590
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb78]
mov byte [ebp - 4], 0x41
call fcn.0040a590
xorps xmm0, xmm0
lea ecx, [ebp - 0xb60]
push 0
movups xmmword [ebp - 0xb60], xmm0
movq qword [ebp - 0xb50], xmm0
call fcn.00492eb0
push 7
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], 0x47
call fcn.00492eb0
push eax
lea ecx, [ebp - 0xb60]
call fcn.00493330
lea ecx, [ebp - 0x1240]
call fcn.004932b0
lea eax, [ebp - 0xb90]
mov byte [ebp - 4], 0x48
push eax
push str.instup
lea ecx, [ebp - 0xb60]
call fcn.004935d0
mov ecx, eax
call fcn.00493390
push 0x5c
lea eax, [ebp - 0xfa0]
push 0
push eax
call fcn.004a3580
add esp, 0xc
call fcn.0044f0f0
dec eax
cmp eax, 5
ja case.0x41df73.3
jmp dword [eax*4 + 0x41f864]
mov esi, 1
jmp 0x41df94
mov esi, 0x40
jmp 0x41df94
mov esi, 0x258
jmp 0x41df94
mov esi, 0x1f4
sub esp, 0x34
mov edx, esp
mov dword [ebp - 0xac4], edx
mov al, byte [ebp - 0xcf8]
mov byte [edx], al
mov eax, dword [ebp - 0xcf4]
mov ecx, dword [ebp - 0xcf0]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov eax, dword [ebp - 0xcec]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0xce8]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0xce4]
mov dword [edx + 0x14], eax
lea eax, [edx + 0x18]
mov dword [ebp - 0xac4], eax
mov byte [eax + 0x18], 0
mov byte [ebp - 4], 0x49
cmp byte [ebp - 0xcc8], 0
je 0x41e006
lea ecx, [ebp - 0xce0]
push ecx
mov ecx, eax
call fcn.0040e700
mov eax, dword [ebp - 0xac4]
mov byte [eax + 0x18], 1
push esi
lea ecx, [ebp - 0xfa0]
mov byte [ebp - 4], 0x48
call fcn.0041ab00
lea eax, [ebp - 0xb60]
mov byte [ebp - 4], 0x4a
push eax
push ecx
lea ecx, [ebp - 0xfa0]
call fcn.00426700
lea ecx, [ebp - 0xf5c]
call fcn.0040a590
cmp byte [ebp - 0xf60], 0
je 0x41e04c
lea ecx, [ebp - 0xf78]
call fcn.0040a590
mov eax, dword [ebp - 0xf98]
test eax, eax
je 0x41e06c
mov eax, dword [eax]
push 1
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0xf98]
call esi
lea ecx, [ebp - 0xb60]
call fcn.004932b0
lea ecx, [ebp - 0xb90]
call fcn.004932b0
mov byte [ebp - 4], 0x3c
cmp byte [ebp - 0xcc8], 0
je 0x41e09a
lea ecx, [ebp - 0xce0]
call fcn.0040a590
cmp dword [ebp - 0xacc], 8
lea eax, [ebp - 0xae0]
push ecx
cmovae eax, dword [ebp - 0xae0]
lea ecx, [ebp - 0xe1c]
push ecx
push eax
lea ecx, [ebp - 0xf40]
call fcn.00412b00
mov esi, eax
mov dword [ebp - 0x120c], esi
test esi, esi
je 0x41e2a6
cmp byte [ebp - 0x11e8], 0
jne 0x41e125
cmp dword [ebp - 0xacc], 8
lea eax, [ebp - 0xae0]
push esi
cmovae eax, dword [ebp - 0xae0]
push eax
push str.The_installer_cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.004143d0
add esp, 0x14
call fcn.0041aed0
push 0x10
push eax
lea eax, [ebp - 0xac0]
push eax
push dword [ebp - 0xfb0]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0xacc], 8
lea edi, [ebp - 0xae0]
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522e78]
cmovae edi, dword [ebp - 0xae0]
movq qword [ebp - 0xb18], xmm0
mov dword [ebp - 0xb10], eax
call fcn.0040b560
xorps xmm0, xmm0
mov dword [ebp - 0xb0c], eax
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0xb08], edx
mov dword [ebp - 0xb04], 0x2ca
movlpd qword [ebp - 0xac8], xmm0
call fcn.0040ba10
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0xac8]
test ecx, ecx
je 0x41e1ad
push esi
push edi
push str.Cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0xb18]
push eax
push 7
call fcn.004141b0
mov ecx, dword [ebp - 0xac4]
or edi, 0xffffffff
mov dword [ebp - 0x1214], ecx
test ecx, ecx
je 0x41e207
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41e207
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov ecx, dword [ebp - 0x1214]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41e201
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov esi, dword [ebp - 0x120c]
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0xd3c]
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xae4], ecx
cmp eax, ecx
je 0x41e23b
mov esi, eax
mov ecx, esi
call fcn.00423240
add esi, 8
cmp esi, dword [ebp - 0xae4]
jne 0x41e223
mov esi, dword [ebp - 0x120c]
lea ecx, [ebp - 0xd40]
call fcn.004205b0
lea eax, [ebp - 0xd70]
push eax
call fcn.0049eaea
mov eax, dword [ebp - 0xd78]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xd78]
push eax
mov ecx, eax
call fcn.00416d50
push 0x40
push dword [ebp - 0xd78]
call fcn.004a05b3
add esp, 8
lea ecx, [ebp - 0xd90]
call fcn.0040a590
lea ecx, [ebp - 0xff8]
call fcn.00418800
lea ecx, [ebp - 0xc78]
mov byte [ebp - 4], 0x14
call fcn.0040a590
jmp 0x41c244
cmp byte [ebp - 0x124d], 0
je 0x41e469
push 0x4a
xorps xmm0, xmm0
mov dword [ebp - 0x12ac], 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0x12bc]
mov dword [ebp - 0x12a8], 0
movups xmmword [ebp - 0x12bc], xmm0
call fcn.0040a4a0
push 0xa
push str.instup.exe
lea ecx, [ebp - 0x12bc]
mov byte [ebp - 4], 0x4d
call fcn.0040a0d0
mov dword [ebp - 0xb20], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xb30], xmm0
mov dword [ebp - 0xb1c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x800
movups xmmword [ebp - 0xb30], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb20], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 0x4e
lea edx, [ebp - 0xb30]
cmp dword [ebp - 0xb1c], 8
mov ecx, 0x80000002
push 0x200
cmovae edx, dword [ebp - 0xb30]
call fcn.004872d0
add esp, 4
lea ecx, [ebp - 0xb30]
call fcn.0040a590
lea ecx, [ebp - 0x12bc]
mov byte [ebp - 4], 0x3c
call fcn.0040a590
push 0x4a
xorps xmm0, xmm0
mov dword [ebp - 0x1264], 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0x1274]
mov dword [ebp - 0x1260], 0
movups xmmword [ebp - 0x1274], xmm0
call fcn.0040a4a0
push 0xa
push str.instup.exe
lea ecx, [ebp - 0x1274]
mov byte [ebp - 4], 0x4f
call fcn.0040a0d0
mov dword [ebp - 0xb98], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xba8], xmm0
mov dword [ebp - 0xb94], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or edi, 0x1000
movups xmmword [ebp - 0xba8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb98], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x1204], edi
mov byte [ebp - 4], 0x50
lea edx, [ebp - 0xba8]
cmp dword [ebp - 0xb94], 8
mov ecx, 0x80000002
push 0x100
cmovae edx, dword [ebp - 0xba8]
call fcn.004872d0
add esp, 4
lea ecx, [ebp - 0xba8]
call fcn.0040a590
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x1274]
call fcn.0040a590
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
mov ecx, dword [ebp - 0xad0]
cmovae edx, dword [ebp - 0xae0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbd8]
mov dword [eax], str.instup.exe
mov dword [eax + 4], 0xa
call fcn.00483f80
mov eax, dword fs:[0x2c]
add esp, 0x10
cmp byte [ebp - 0x120d], 0
mov dword [ebp - 0x11ec], eax
je 0x41eef3
cmp byte [ebp - 0x1224], 0
jne 0x41e4e9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0x124c]
mov edx, eax
call fcn.0041a5b0
push 1
movzx ecx, al
push edx
push ecx
call fcn.0041a2b0
add esp, 0xc
xorps xmm0, xmm0
mov dword [ebp - 0xbb0], 0
xor eax, eax
mov dword [ebp - 0xbac], 7
movups xmmword [ebp - 0xbc0], xmm0
mov word [ebp - 0xbc0], ax
push 0x40a5f0
push fcn.0040a2d0
push 2
push 0x18
lea eax, [ebp - 0xd28]
mov byte [ebp - 4], 0x51
push eax
call fcn.004a0c71
xorps xmm0, xmm0
mov dword [ebp - 0xb50], 0
xor eax, eax
mov dword [ebp - 0xb4c], 7
movups xmmword [ebp - 0xb60], xmm0
mov word [ebp - 0xb60], ax
mov byte [ebp - 4], 0x53
lea edx, [ebp - 0xae0]
cmp dword [ebp - 0xacc], 8
mov ecx, dword [ebp - 0xad0]
cmovae edx, dword [ebp - 0xae0]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xd28]
mov dword [eax], str.instup.exe
mov dword [eax + 4], 0xa
call fcn.00483f80
cmp dword [ebp - 0xacc], 8
lea edx, [ebp - 0xae0]
mov ecx, dword [ebp - 0xad0]
cmovae edx, dword [ebp - 0xae0]
add esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xd10]
mov dword [eax], 0x4fc22c
mov dword [eax + 4], 0xa
call fcn.00483f80
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
add esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbc0]
mov dword [eax], str.instup.exe
mov dword [eax + 4], 0xa
call fcn.00483f80
add esp, 0x10
lea eax, [ebp - 0xbc0]
cmp dword [ebp - 0xbac], 8
cmovae eax, dword [ebp - 0xbc0]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41e7f9
test al, 0x10
jne 0x41e7f9
cmp dword [ebp - 0x1214], 0x7cb
jbe 0x41e7f9
lea eax, [ebp - 0xd28]
xor edi, edi
mov dword [ebp - 0x1214], eax
xor eax, eax
test esi, esi
jne 0x41eeb1
test eax, eax
jne 0x41eeb1
push 0x34
push eax
lea eax, [ebp - 0xf78]
push eax
call fcn.004a3580
add esp, 0xc
lea ecx, [ebp - 0xf78]
call fcn.0041f880
mov byte [ebp - 4], 0x54
push dword [ebp - 0x1214]
sub esp, 0xc
mov ecx, esp
push str.copy_sfx
call fcn.0040baf0
lea ecx, [ebp - 0xf78]
call fcn.004204e0
add esp, 4
mov ecx, eax
call fcn.0040e600
push 0x4fbcd4
sub esp, 0xc
mov ecx, esp
push str.wait
call fcn.0040baf0
lea ecx, [ebp - 0xf78]
call fcn.004204e0
add esp, 4
mov ecx, eax
call fcn.0040a2a0
sub esp, 8
lea eax, [ebp - 0x1240]
lea ecx, [ebp - 0xf78]
push eax
call fcn.0041fe80
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.0040a630
lea ecx, [ebp - 0xbc0]
mov esi, eax
call fcn.0040a630
push 0
lea ecx, [ebp - 0x121c]
mov edx, esi
push 0
push ecx
mov ecx, eax
call fcn.00414a30
add esp, 0xc
lea ecx, [ebp - 0x1240]
mov esi, eax
call fcn.0040a590
lea ecx, [ebp - 0xf78]
mov byte [ebp - 4], 0x53
call fcn.0041fae0
add dword [ebp - 0x1214], 0x18
inc edi
cmp edi, 2
jae 0x41e74f
mov eax, dword [ebp - 0x121c]
jmp 0x41e653
test esi, esi
jne 0x41eeb1
cmp dword [ebp - 0x121c], esi
jne 0x41eeb1
lea eax, [ebp - 0x11f8]
push eax
lea ecx, [ebp - 0xc24]
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push 0x4fd4c4
call fcn.0040baf0
push esi
push edi
lea ecx, [ebp - 0xb60]
call fcn.00483f80
add esp, 0x10
lea eax, [ebp - 0x11f8]
lea ecx, [ebp - 0xb60]
push eax
call fcn.0040c240
sub esp, 8
mov ecx, esp
mov edi, dword [eax]
mov esi, dword [eax + 4]
push str.instup.exe
call fcn.0040baf0
push esi
push edi
lea ecx, [ebp - 0xb60]
call fcn.00483f80
add esp, 0x10
lea ecx, [ebp - 0xb60]
call fcn.00483710
test al, al
je 0x41eeb1
lea eax, [ebp - 0xb60]
push eax
lea ecx, [ebp - 0xbd8]
call fcn.0040e600
jmp 0x41eeb1
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbc0]
mov dword [eax], str.setup.ovr
mov dword [eax + 4], 9
call fcn.00483f80
add esp, 0x10
lea eax, [ebp - 0xbc0]
cmp dword [ebp - 0xbac], 8
cmovae eax, dword [ebp - 0xbc0]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x41eeb1
test al, 0x10
jne 0x41eeb1
xorps xmm0, xmm0
mov dword [ebp - 0xc84], 0
xor eax, eax
mov dword [ebp - 0xc80], 7
movups xmmword [ebp - 0xc94], xmm0
mov word [ebp - 0xc94], ax
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0xb00]
push 8
push str._copysfx
movups xmmword [ebp - 0xb00], xmm0
mov dword [ebp - 0xaf0], eax
mov dword [ebp - 0xaec], eax
call fcn.0040a4a0
push 2
push 0x4fe8dc
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x57
call fcn.0040a0d0
mov dword [ebp - 0x127c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x128c], xmm0
mov dword [ebp - 0x1278], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x128c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x127c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x1204], 0x40
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0xd28]
cmp dword [ebp - 0xd14], 8
lea ecx, [ebp - 0x128c]
push dword [ebp - 0xd18]
cmovae eax, dword [ebp - 0xd28]
push eax
call fcn.0040a0d0
mov dword [ebp - 0x1294], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x12a4], xmm0
mov dword [ebp - 0x1290], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12a4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1294], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x1204], 0x80
push 1
push 0x4fd6d8
lea ecx, [ebp - 0x12a4]
mov byte [ebp - 4], 0x59
call fcn.0040a0d0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb70], xmm0
movups xmmword [ebp - 0xb18], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xac8], xmm0
movq qword [ebp - 0xb08], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0xc94]
or dword [ebp - 0x1204], 0x100
call fcn.0040a590
movups xmm0, xmmword [ebp - 0xb70]
mov dword [ebp - 0xb08], 0
mov dword [ebp - 0xb04], 7
movups xmmword [ebp - 0xc94], xmm0
movq xmm0, qword [ebp - 0xac8]
movq qword [ebp - 0xc84], xmm0
xor eax, eax
lea ecx, [ebp - 0xb18]
mov word [ebp - 0xb18], ax
call fcn.0040a590
lea ecx, [ebp - 0x12a4]
call fcn.0040a590
lea ecx, [ebp - 0x128c]
call fcn.0040a590
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x56
call fcn.0040a590
cmp dword [ebp - 0xc80], 8
lea edx, [ebp - 0xc94]
push 0
cmovae edx, dword [ebp - 0xc94]
lea eax, [ebp - 0x121c]
cmp dword [ebp - 0xbac], 8
lea ecx, [ebp - 0xbc0]
push 0
cmovae ecx, dword [ebp - 0xbc0]
push eax
call fcn.00414a30
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x41eafc
mov ecx, dword [ebp - 0x121c]
cmp ecx, 0x2000000a
jne 0x41ead5
push 0xbb8
mov dword [ebp - 0x121c], 0xa004
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xc94]
call fcn.0040a590
jmp 0x41e861
cmp ecx, 0x20000000
je 0x41eaf2
cmp ecx, 0x20000001
je 0x41eaf2
mov esi, 5
mov dword [ebp - 0x121c], esi
jmp 0x41eb02
xor esi, esi
mov dword [ebp - 0x121c], esi
jmp 0x41eb02
mov esi, dword [ebp - 0x121c]
lea ecx, [ebp - 0xc94]
mov byte [ebp - 4], 0x53
call fcn.0040a590
test edi, edi
jne 0x41eeb1
test esi, esi
jne 0x41eeb1
cmp dword [ebp - 0xc10], 8
lea edx, [ebp - 0xc24]
mov ecx, dword [ebp - 0xc14]
cmovae edx, dword [ebp - 0xc24]
sub esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xb48]
mov dword [eax], 0x4fd4c4
mov dword [eax + 4], 3
call fcn.00483f80
cmp dword [ebp - 0xb34], 8
lea edx, [ebp - 0xb48]
mov ecx, dword [ebp - 0xb38]
cmovae edx, dword [ebp - 0xb48]
add esp, 8
mov eax, esp
push ecx
push edx
lea ecx, [ebp - 0xbd8]
mov dword [eax], str.avast.setup
mov dword [eax + 4], 0xb
call fcn.00483f80
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x1214], eax
test eax, eax
je 0x41eeb1
xorps xmm0, xmm0
mov dword [ebp - 0x11f4], esi
movq qword [ebp - 0x11fc], xmm0
mov dword [ebp - 0x11fc], esi
mov dword [ebp - 0x11f8], esi
mov dword [ebp - 0x11f4], esi
lea ecx, [ebp - 0x11fc]
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, eax
call fcn.00418f30
add esp, 4
test al, al
je 0x41ee9a
mov esi, dword [ebp - 0x11fc]
cmp esi, dword [ebp - 0x11f8]
je 0x41ee9a
mov edi, dword [ebp - 0x11ec]
mov edi, dword [edi]
mov dword [ebp - 0xac4], edi
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xb90]
call fcn.0040e700
mov byte [ebp - 4], 0x5b
mov eax, dword [0x521c28]
cmp eax, dword [edi + 4]
jle 0x41ec62
push 0x521c28
call fcn.004a094a
add esp, 4
cmp dword [0x521c28], 0xffffffff
jne 0x41ec62
mov byte [ebp - 4], 0x5c
call fcn.0049e144
push 0x521c28
mov dword [0x521c24], eax
mov byte [ebp - 4], 0x5b
call fcn.004a0900
add esp, 4
cmp dword [ebp - 0xb7c], 8
lea edi, [ebp - 0xb90]
mov ecx, dword [ebp - 0xb80]
cmovae edi, dword [ebp - 0xb90]
sub esp, 8
mov edx, dword [0x521c24]
mov eax, esp
push ecx
push edi
mov ecx, 5
mov dword [eax], str.path
mov dword [eax + 4], 5
call fcn.00416520
add esp, 0x10
test eax, eax
je 0x41ecd0
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x5a
call fcn.0040a590
mov edi, dword [ebp - 0xac4]
add esi, 0x18
cmp esi, dword [ebp - 0x11f8]
jne 0x41ec10
jmp 0x41ee9a
cmp dword [ebp - 0xb7c], 8
lea eax, [ebp - 0xb90]
mov ecx, dword [ebp - 0xb80]
cmovae eax, dword [ebp - 0xb90]
cmp word [eax + ecx*2 - 2], 0x3b
je 0x41ed1a
push 0x4fe91c
mov edx, esi
lea ecx, [ebp - 0xb00]
call fcn.00409e00
add esp, 4
mov ecx, esi
push eax
call fcn.0040e650
lea ecx, [ebp - 0xb00]
call fcn.0040a590
mov edx, dword [esi + 0x10]
mov eax, 0x7ffffffe
mov edi, dword [ebp - 0xad0]
sub eax, edx
cmp eax, edi
jb 0x41f853
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x41ed3c
mov ecx, dword [esi]
cmp dword [ebp - 0xacc], 8
lea eax, [ebp - 0xae0]
push edi
cmovae eax, dword [ebp - 0xae0]
push eax
push edx
push ecx
push ecx
push dword [ebp - 0xac4]
lea ecx, [ebp - 0x1240]
call fcn.00409ee0
push 1
push 0x4fe91c
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], 0x5d
call fcn.0040a0d0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb70], xmm0
movups xmmword [ebp - 0xb18], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xac8], xmm0
movq qword [ebp - 0xb08], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0xb18]
cmp esi, eax
je 0x41edfa
mov ecx, esi
call fcn.0040a590
movups xmm0, xmmword [ebp - 0xb70]
xor eax, eax
mov dword [ebp - 0xb08], 0
mov dword [ebp - 0xb04], 7
movups xmmword [esi], xmm0
mov word [ebp - 0xb18], ax
movq xmm0, qword [ebp - 0xac8]
movq qword [esi + 0x10], xmm0
lea ecx, [ebp - 0xb18]
call fcn.0040a590
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], 0x5b
call fcn.0040a590
lea edx, [ebp - 0x11fc]
lea ecx, [ebp - 0xb24]
call fcn.004190d0
push eax
lea ecx, [ebp - 0xc48]
call fcn.004192a0
mov edx, dword [ebp - 0xb24]
test edx, edx
je 0x41ee6b
mov ecx, dword [ebp - 0xb1c]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x41ee61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f858
push ecx
push edx
call fcn.004a05b3
add esp, 8
lea ecx, [ebp - 0xb90]
call fcn.0040a590
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x1254], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x125c], eax
push dword [ebp - 0x1214]
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0x11fc]
call fcn.0040c480
lea ecx, [ebp - 0xb60]
call fcn.0040a590
push 0x40a5f0
push 2
push 0x18
lea eax, [ebp - 0xd28]
mov byte [ebp - 4], 0x51
push eax
call fcn.004a0ce5
lea ecx, [ebp - 0xbc0]
mov byte [ebp - 4], 0x3c
call fcn.0040a590
cmp byte [ebp - 0x1224], 0
jne 0x41efbc
jmp 0x41ef2b
cmp byte [ebp - 0x1224], 0
jne 0x41efbc
lea eax, [ebp - 0x98]
push eax
sub esp, 0xc
mov ecx, esp
push 0x4fd5e0
call fcn.0040baf0
lea ecx, [ebp - 0xc0c]
call fcn.004204e0
add esp, 4
mov ecx, eax
call fcn.0040a2a0
push 0xb
push str.ga_clientid
lea ecx, [ebp - 0xc0c]
call fcn.00416250
mov ecx, eax
test ecx, ecx
jne 0x41ef98
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov dword [ebp - 0xac4], esp
movups xmmword [eax], xmm0
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, esp
push 0xb
movups xmmword [ecx], xmm0
push str.ga_clientid
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.0040a4a0
lea ecx, [ebp - 0xc0c]
mov byte [ebp - 4], 0x3c
call fcn.004207c0
mov ecx, eax
lea eax, [ebp - 0xc60]
cmp ecx, eax
je 0x41efbc
cmp dword [ebp - 0xc4c], 8
push dword [ebp - 0xc50]
cmovae eax, dword [ebp - 0xc60]
push eax
call fcn.0040a190
cmp dword [ebp - 0xbc4], 8
lea esi, [ebp - 0xbd8]
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522e78]
cmovae esi, dword [ebp - 0xbd8]
movq qword [ebp - 0xb00], xmm0
mov dword [ebp - 0xaf8], eax
call fcn.0040b560
xorps xmm0, xmm0
mov dword [ebp - 0xaf4], eax
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0xaf0], edx
mov dword [ebp - 0xaec], 0x36a
movlpd qword [ebp - 0xac8], xmm0
call fcn.0040ba10
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0xac8]
test ecx, ecx
je 0x41f043
push esi
push 0x4fe920
lea eax, [ebp - 0xb00]
push eax
push 2
call fcn.0040def0
mov byte [ebp - 4], 0x3c
or edi, 0xffffffff
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0x1214], ecx
test ecx, ecx
je 0x41f09b
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f09b
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov ecx, dword [ebp - 0x1214]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41f09b
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
sub esp, 8
lea eax, [ebp - 0xda8]
lea ecx, [ebp - 0xc0c]
push eax
call fcn.0041fe80
mov byte [ebp - 4], 0x60
mov esi, dword [ebp - 0x1258]
test esi, esi
je 0x41f10c
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f0c3
sub ecx, edx
sar ecx, 1
je 0x41f10c
push 1
push 0x4fe978
lea ecx, [ebp - 0xda8]
call fcn.0040a0d0
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41f0f0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xda8]
call fcn.0040a0d0
mov eax, dword [ebp - 0x125c]
lea edx, [ebp - 0xda8]
xor ecx, ecx
mov esi, eax
cmp eax, dword [ebp - 0xae4]
lea eax, [ebp - 0xff8]
cmove esi, ecx
cmp dword [ebp - 0xfb0], ecx
push esi
cmove eax, ecx
cmp dword [ebp - 0xd94], 8
push eax
cmovae edx, dword [ebp - 0xda8]
lea eax, [ebp - 0x121c]
cmp dword [ebp - 0xbc4], 8
lea ecx, [ebp - 0xbd8]
push eax
cmovae ecx, dword [ebp - 0xbd8]
call fcn.00414a30
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x120c], esi
test esi, esi
je 0x41f3c3
cmp byte [ebp - 0x11e8], 0
jne 0x41f229
cmp dword [ebp - 0xbc4], 8
lea eax, [ebp - 0xbd8]
push esi
cmovae eax, dword [ebp - 0xbd8]
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.004143d0
mov eax, dword [ebp - 0x11ec]
add esp, 0x14
mov ecx, dword [eax]
mov eax, dword [0x523d00]
cmp eax, dword [ecx + 4]
jle 0x41f20e
push 0x523d00
call fcn.004a094a
add esp, 4
cmp dword [0x523d00], 0xffffffff
jne 0x41f20e
mov byte [ebp - 4], 0x61
call fcn.0044f0f0
cmp eax, 1
mov byte [ebp - 4], 0x60
mov edx, str.AVG_Antivirus
mov ecx, 0x4fd9f0
cmovne ecx, edx
push 0x523d00
mov dword [0x523d04], ecx
call fcn.004a0900
add esp, 4
push 0x10
push dword [0x523d04]
lea eax, [ebp - 0xac0]
push eax
push dword [ebp - 0xfb0]
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0xbc4], 8
lea eax, [ebp - 0xbd8]
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
cmovae eax, dword [ebp - 0xbd8]
mov dword [ebp - 0xac4], eax
mov eax, dword [0x522e78]
movq qword [ebp - 0xb00], xmm0
mov dword [ebp - 0xaf8], eax
call fcn.0040b560
xorps xmm0, xmm0
mov dword [ebp - 0xaf4], eax
lea ecx, [ebp - 0xae8]
mov dword [ebp - 0xaf0], edx
mov dword [ebp - 0xaec], 0x37c
movlpd qword [ebp - 0xae8], xmm0
call fcn.0040ba10
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0xae8]
test ecx, ecx
je 0x41f2bc
push esi
push dword [ebp - 0xac4]
lea eax, [ebp - 0xb00]
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
push eax
push 7
call fcn.004141b0
mov ecx, dword [ebp - 0xae4]
mov dword [ebp - 0x1214], ecx
test ecx, ecx
je 0x41f313
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f313
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov ecx, dword [ebp - 0x1214]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41f30d
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov esi, dword [ebp - 0x120c]
lea ecx, [ebp - 0xda8]
call fcn.0040a590
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0xd3c]
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xae4], ecx
cmp eax, ecx
je 0x41f358
mov esi, eax
nop word [eax + eax]
mov ecx, esi
call fcn.00423240
add esi, 8
cmp esi, dword [ebp - 0xae4]
jne 0x41f340
mov esi, dword [ebp - 0x120c]
lea ecx, [ebp - 0xd40]
call fcn.004205b0
lea eax, [ebp - 0xd70]
push eax
call fcn.0049eaea
mov eax, dword [ebp - 0xd78]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xd78]
push eax
mov ecx, eax
call fcn.00416d50
push 0x40
push dword [ebp - 0xd78]
call fcn.004a05b3
add esp, 8
lea ecx, [ebp - 0xd90]
call fcn.0040a590
lea ecx, [ebp - 0xff8]
call fcn.00418800
lea ecx, [ebp - 0xc78]
mov byte [ebp - 4], 0x14
call fcn.0040a590
jmp 0x41c244
cmp dword [ebp - 0xbc4], 8
lea eax, [ebp - 0xbd8]
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
cmovae eax, dword [ebp - 0xbd8]
mov esi, dword [ebp - 0x121c]
mov dword [ebp - 0xac4], eax
mov eax, dword [0x522e78]
mov dword [ebp - 0x120c], esi
movq qword [ebp - 0xb00], xmm0
mov dword [ebp - 0xaf8], eax
call fcn.0040b560
xorps xmm0, xmm0
mov dword [ebp - 0xaf4], eax
lea ecx, [ebp - 0xae8]
mov dword [ebp - 0xaf0], edx
mov dword [ebp - 0xaec], 0x384
movlpd qword [ebp - 0xae8], xmm0
call fcn.0040ba10
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0xae8]
test ecx, ecx
je 0x41f462
push esi
push dword [ebp - 0xac4]
lea eax, [ebp - 0xb00]
push str.Installer_updater_executable__s_finished__process_return_code_0x_x_
push eax
push 2
call fcn.004141b0
mov ecx, dword [ebp - 0xae4]
mov dword [ebp - 0x1214], ecx
test ecx, ecx
je 0x41f4b9
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f4b9
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov ecx, dword [ebp - 0x1214]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x41f4b3
mov eax, dword [ecx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov esi, dword [ebp - 0x120c]
lea ecx, [ebp - 0xda8]
call fcn.0040a590
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0xd3c]
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xae4], ecx
cmp eax, ecx
je 0x41f4f8
mov esi, eax
mov ecx, esi
call fcn.00423240
add esi, 8
cmp esi, dword [ebp - 0xae4]
jne 0x41f4e0
mov esi, dword [ebp - 0x120c]
lea ecx, [ebp - 0xd40]
call fcn.004205b0
lea eax, [ebp - 0xd70]
push eax
call fcn.0049eaea
mov eax, dword [ebp - 0xd78]
add esp, 4
push dword [eax + 4]
lea eax, [ebp - 0xd78]
push eax
mov ecx, eax
call fcn.00416d50
push 0x40
push dword [ebp - 0xd78]
call fcn.004a05b3
add esp, 8
lea ecx, [ebp - 0xd90]
call fcn.0040a590
lea ecx, [ebp - 0xff8]
call fcn.00418800
lea ecx, [ebp - 0xc78]
mov byte [ebp - 4], 0x14
call fcn.0040a590
jmp 0x41c244
sub esp, 8
call fcn.00483c60
add esp, 8
cmp byte [ebp - 0x120d], 0
je 0x41f57c
call fcn.00415090
movq xmm0, qword [0x522e70]
mov ecx, str.C:BUILDworke0dd96435fde7cb0projects_avastinstupStubs_srcSfxInst.cpp
mov eax, dword [0x522e78]
movq qword [ebp - 0xb00], xmm0
mov dword [ebp - 0xaf8], eax
call fcn.0040b560
xorps xmm0, xmm0
mov dword [ebp - 0xaf4], eax
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0xaf0], edx
mov dword [ebp - 0xaec], 0x3a1
movlpd qword [ebp - 0xac8], xmm0
call fcn.0040ba10
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0xac8]
test ecx, ecx
je 0x41f5ef
push esi
push str.Leaving_SFX_stub_guarded_code_section__return_code_0x_x_
lea eax, [ebp - 0xb00]
push eax
push 2
call fcn.00413fc0
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0x1214], ecx
test ecx, ecx
je 0x41f63f
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x41f63f
mov eax, dword [ecx]
mov esi, dword [eax]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov eax, dword [ebp - 0x1214]
lock xadd dword [eax + 8], edi
dec edi
jne 0x41f63f
mov eax, dword [eax]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x4e933c]
mov ecx, dword [ebp - 0x1214]
call esi
mov edi, dword [ebp - 0x120c]
lea ecx, [ebp - 0xcac]
call fcn.0040a590
lea ecx, [ebp - 0xcc4]
call fcn.0040a590
lea ecx, [ebp - 0xc60]
call fcn.0040a590
lea ecx, [ebp - 0xc3c]
call fcn.0040a590
lea ecx, [ebp - 0x11e0]
call fcn.0041fb10
mov ecx, dword [ebp - 0x125c]
mov byte [ebp - 4], 0xe
test ecx, ecx
je 0x41f6ba
mov edx, dword [ebp - 0x1254]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x41f6b0
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f85d
push edx
push ecx
call fcn.004a05b3
add esp, 8
lea ecx, [ebp - 0xe34]
call fcn.0040a590
lea eax, [ebp - 0xe18]
mov dword [ebp - fcn.0040eeb0], vtable.ProgressCallback.0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0xe00]
test eax, eax
je 0x41f6ed
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xdb0]
call fcn.0040fa10
lea ecx, [ebp - 0xdd0]
call fcn.0040a590
lea ecx, [ebp - 0xde8]
call fcn.0040a590
lea ecx, [ebp - 0xdfc]
call fcn.0040e5a0
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0xf28]
mov dword [ebp - 0xea4], 0
mov esi, dword [eax + 0x18]
mov ecx, esi
call dword [0x4e933c]
lea ecx, [ebp - 0xf28]
call esi
lea eax, [ebp - 0xe9c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0xeb0]
call fcn.00413420
lea ecx, [ebp - 0xec8]
call fcn.0040a590
lea ecx, [ebp - 0xee0]
call fcn.0040a590
lea ecx, [ebp - 0xf08]
call fcn.0040a590
lea ecx, [ebp - 0xf28]
call fcn.0048eb90
lea ecx, [ebp - 0xf40]
call fcn.0040a590
lea ecx, [ebp - 0xbe4]
call fcn.0040c480
lea ecx, [ebp - 0xbf0]
call fcn.00420cf0
cmp byte [ebp - 0xbf4], 0
je 0x41f7b9
lea ecx, [ebp - 0xc0c]
call fcn.0040a590
lea ecx, [ebp - 0xc24]
call fcn.0040a590
lea ecx, [ebp - 0xe64]
call fcn.0040a590
lea ecx, [ebp - 0xe4c]
call fcn.0040a590
lea ecx, [ebp - 0xe7c]
call fcn.0040a590
lea ecx, [ebp - 0xae0]
call fcn.0040a590
lea ecx, [ebp - 0xb48]
call fcn.0040a590
lea ecx, [ebp - 0xbd8]
call fcn.0040a590
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004a057b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
push str.Invalid_brand
lea ecx, [ebp - 0xb74]
call fcn.0048dda0
push 0x518e4c
lea eax, [ebp - 0xb74]
push eax
call fcn.004a2f8b
inc edx
aaa
or byte [eax], al
call fcn.0040a2f0
call fcn.0040c8f0
call fcn.0040a2f0
call fcn.004ace5f
call fcn.004ace5f
nop
jp 0x41f845
inc ecx
add byte [ecx + 0x280041df], al
clc
inc ecx
add byte [eax], ch
clc
inc ecx
add byte [edi - 0x77ffbe21], cl
fild word [ecx]
int3