Function at 0x430c64
Capabilities:
Accept command line arguments
Check internet connectivity via wininet
Contain obfuscated stackstrings
Create thread
Get common file path
Parse pe header
Read file on windows

Disassembly:
push ebp
sub esp, 0x8f8
lea ebp, [esp - 4]
mov eax, dword [0x4ff5d0]
xor eax, ebp
mov dword [ebp + 0x8f8], eax
push 0x168
mov eax, 0x4c1154
call fcn.004943c6
and dword [ebp - 0x5c], 0
lea eax, [ebp - 0x38]
push eax
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp + 0x8e4]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea ecx, [ebp - 0x14]
call fcn.00472090
push dword [ebp + 0x8ee]
and dword [ebp - 4], 0
push dword [ebp + 0x8ec]
lea ecx, [ebp - 0x14]
push dword [ebp + 0x8e4]
push dword [ebp + 0x8ea]
push dword [ebp + 0x8e6]
push str.Now__UTC__:__02d__02d__04d__02d:_02d_n
call fcn.00429a02
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00472320
push dword [ebp - 0x38]
lea eax, [esi + 0xec]
push 0x4d1918
push eax
call fcn.00472ff0
mov edi, 0x501e84
add esp, 0xc
mov ecx, edi
call fcn.0041bec2
mov ecx, 0x5022bc
call fcn.0042b591
mov ebx, str.help
push ebx
lea ecx, [ebp - 0x14]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._help
mov dword [ebp - 4], 1
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Show_the_short_help._Use__help_long_to_show_the_long_help.
mov byte [ebp - 4], 2
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Show_this_help
mov byte [ebp - 4], 3
call fcn.00472340
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 1
call fcn.0041c3ed
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.00472320
push ebx
lea ecx, [ebp - 0x38]
call fcn.00472340
mov byte [ebp - 4], 6
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
call fcn.0041bfa2
lea ecx, [ebp - 0x38]
mov ebx, eax
mov byte [ebp - 4], 5
call fcn.00472320
test ebx, ebx
je 0x430dc3
push 0
mov ecx, 0x5020a4
call fcn.0045f19b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x510]
call fcn.0041a44c
push str.help_long
lea ecx, [ebp - 0x14]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._help_long
mov dword [ebp - 4], 7
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Show_the_long_help
push ebx
mov byte [ebp - 4], 8
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 9
call fcn.00472340
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 7
call fcn.0041c3ed
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xb
call fcn.00472320
push str.help_long
lea ecx, [ebp - 0x38]
call fcn.00472340
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.0041bfa2
lea ecx, [ebp - 0x38]
mov ebx, eax
mov byte [ebp - 4], 0xb
call fcn.00472320
test ebx, ebx
je 0x430e79
push 1
mov ecx, 0x5020a4
call fcn.0045f19b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x510]
call fcn.0041a44c
push str.help_reg
lea ecx, [ebp - 0x14]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._help_reg
mov dword [ebp - 4], 0xd
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Show_short_help_for_reg_overrides
push ebx
mov byte [ebp - 4], 0xe
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0xf
call fcn.00472340
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0xd
call fcn.0041c3ed
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.00472320
push str.help_reg
lea ecx, [ebp - 0x38]
call fcn.00472340
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x12
call fcn.0041bfa2
lea ecx, [ebp - 0x38]
mov ebx, eax
mov byte [ebp - 4], 0x11
call fcn.00472320
test ebx, ebx
je 0x430f2f
push 0
mov ecx, 0x501b70
call fcn.0045f19b
push str.help_reg_long
lea ecx, [ebp - 0x38]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._help_reg_long
mov byte [ebp - 4], 0x13
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Show_long_help_for_reg_overrides
push ebx
mov byte [ebp - 4], 0x14
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0x15
call fcn.00472340
push 0
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x13
call fcn.0041c3ed
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x17
call fcn.00472320
push str.help_reg_long
lea ecx, [ebp - 0x30]
call fcn.00472340
lea eax, [ebp - 0x30]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x18
call fcn.0041bfa2
lea ecx, [ebp - 0x30]
mov ebx, eax
mov byte [ebp - 4], 0x17
call fcn.00472320
test ebx, ebx
je 0x430fd3
push 1
mov ecx, 0x501b70
call fcn.0045f19b
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x11
call fcn.0041a44c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x89c]
call fcn.0041a44c
mov ebx, str.uh_pre
push ebx
lea ecx, [ebp - 0x14]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._uh_pre
mov dword [ebp - 4], 0x19
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Used_when_invoking_stub_in_non_admin_mode_to_generate_an_install_prompt_and_then_optionally_restart_stub_in_admin_mode_if_the_user_chose_to_install
mov byte [ebp - 4], 0x1a
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Used_when_invoking_stub_in_non_admin_mode_to_prompt
mov byte [ebp - 4], 0x1b
call fcn.00472340
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x860]
mov byte [ebp - 4], 0x19
call fcn.0041c3ed
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1d
call fcn.00472320
push ebx
lea ecx, [ebp - 0x38]
call fcn.00472340
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x1e
call fcn.0041bfa2
lea ecx, [ebp - 0x38]
mov dword [esi + 0x1d8], eax
mov byte [ebp - 4], 0x1d
call fcn.00472320
push str.uh_post
lea ecx, [ebp - 0x38]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._uh_post
mov byte [ebp - 4], 0x1f
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Used_by_stub_when_called_with__uh_pre_to_re_call_itself_in_admin_mode.
push ebx
mov byte [ebp - 4], 0x20
call fcn.00472340
mov byte [ebp - 4], 0x21
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
call fcn.00472340
push 0
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x1f
call fcn.0041c3ed
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x23
call fcn.00472320
push str.uh_post
lea ecx, [ebp - 0x30]
call fcn.00472340
lea eax, [ebp - 0x30]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x24
call fcn.0041bfa2
lea ecx, [ebp - 0x30]
mov dword [esi + 0x1dc], eax
mov byte [ebp - 4], 0x23
call fcn.00472320
push str.pageflownum
lea ecx, [ebp - 0x30]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._pageflownum2
mov byte [ebp - 4], 0x25
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.This_specs_the_page_to_start_in_the_page_flow
push ebx
mov byte [ebp - 4], 0x26
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0x27
call fcn.00472340
push 4
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x25
call fcn.0041c3ed
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x29
call fcn.00472320
push str.pageflownum
lea ecx, [ebp - 0x28]
call fcn.00472340
lea eax, [esi + 0x1e0]
push eax
lea eax, [ebp - 0x28]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x2a
call fcn.0041bdb0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x28]
call fcn.00472320
cmp dword [esi + 0x1d8], 0
lea ecx, [ebp - 0x28]
je 0x4311d9
push str.stubstarted_pre
call fcn.00472340
mov byte [ebp - 4], 0x2b
jmp 0x431200
cmp dword [esi + 0x1dc], 0
je 0x4311f2
push str.stubstarted_post
call fcn.00472340
mov byte [ebp - 4], 0x2c
jmp 0x431200
push str.stubstarted_standalone
call fcn.00472340
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.00446132
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x29
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x23
call fcn.0041a44c
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x1d
call fcn.0041a44c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x860]
call fcn.0041a44c
mov ebx, str.orgexename
push ebx
lea ecx, [ebp - 0x14]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._orgexename_blah_
mov dword [ebp - 4], 0x2e
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.When_stub_first_runs__the_extractor_copies_the_stub_to_rnsetup.exe_in__temp__and_then_executes_it_there._The_extractor_will_pass_the_original_EXE_name_using_this_parameter._The_original_name_may_have_distcode_and_web_ID_imbedded_in_it.
mov byte [ebp - 4], 0x2f
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.This_is_the_original_EXE_name_before_the_Extractor_was_called
mov byte [ebp - 4], 0x30
call fcn.00472340
push 4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x2e
call fcn.0041c3ed
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x32
call fcn.00472320
push ebx
lea ecx, [ebp - 0x38]
call fcn.00472340
lea ebx, [esi + 0x1d0]
push ebx
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x33
call fcn.0041bdb0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x32
call fcn.00472320
cmp dword [ebp - 0x3c], 0
je 0x4314aa
push ebx
lea ecx, [ebp - 0x40]
call fcn.00472280
push 4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x34
call fcn.00472ab0
push str..exe
push eax
mov byte [ebp - 4], 0x35
call fcn.0040d604
pop ecx
pop ecx
lea ecx, [ebp - 0x1c]
mov bl, al
mov byte [ebp - 4], 0x34
call fcn.00472320
test bl, bl
je 0x43135c
lea ecx, [ebp - 0x40]
call fcn.004720a0
sub eax, 4
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x40]
call fcn.00472b10
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x36
call fcn.004723d0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x34
call fcn.00472320
push 2
push 0x5f
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x40]
call fcn.00472cc0
push 3
push 0x5f
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x37
call fcn.00472cc0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x38
call fcn.0040d59a
test al, al
jne 0x431486
lea ecx, [ebp - 0x30]
call fcn.00473290
lea ecx, [ebp - 0x30]
call fcn.004720a0
cmp byte [ebp - 0x29], 0xff
lea eax, [ebp - 0x30]
jne 0x4313b0
mov eax, dword [ebp - 0x30]
cmp byte [eax], 0x72
jne 0x43142d
lea ecx, [ebp - 0x30]
call fcn.004720a0
cmp eax, 5
jb 0x43142d
lea ecx, [ebp - 0x30]
call fcn.004720a0
cmp eax, 0xa
ja 0x43142d
lea eax, [ebp - 0x30]
lea ebx, [esi + 0x15c]
push eax
mov ecx, ebx
call fcn.004723d0
push 0x4d6d80
lea ecx, [ebp - 0x50]
call fcn.00472340
push 0x4d21a0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x39
call fcn.00472340
push ebx
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x3a
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x39
call fcn.00472320
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x38
call fcn.00472320
jmp 0x431439
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x28]
call fcn.004723d0
lea ecx, [ebp - 0x28]
call fcn.00473290
lea ecx, [ebp - 0x28]
call fcn.0040d59a
test al, al
jne 0x431486
lea ecx, [ebp - 0x28]
call fcn.004720a0
cmp eax, 0x20
jne 0x431486
cmp byte [ebp - 0x21], 0xff
lea eax, [ebp - 0x28]
jne 0x431466
mov eax, dword [ebp - 0x28]
push 0x4d6d6c
push eax
call fcn.00425362
pop ecx
pop ecx
test eax, eax
jne 0x431486
lea eax, [ebp - 0x28]
push eax
lea ecx, [esi + 0x16c]
call fcn.004723d0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x37
call fcn.00472320
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x34
call fcn.00472320
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x32
call fcn.00472320
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x510]
call fcn.0041a44c
mov ebx, 0x4d28fc
push ebx
lea ecx, [ebp - 0xb8]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._log_blah_blah
mov dword [ebp - 4], 0x3b
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.An_ampersand_char_followed_by_the_rest_of_the_command_line_is_appended_________to_a_standard_log_line_and_written_to_the_http_log._The_program_________immediately_exits.
mov byte [ebp - 4], 0x3c
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Write_text_to_the_http_log_and_exit_the_program
mov byte [ebp - 4], 0x3d
call fcn.00472340
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x3b
call fcn.0041c3ed
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3f
call fcn.00472320
or dword [ebp - 0xb0], 0xffffffff
push ebx
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x40
call fcn.0041bfba
lea ecx, [ebp - 0x14]
mov ebx, eax
mov byte [ebp - 4], 0x3f
call fcn.00472320
test ebx, ebx
je 0x4315d1
mov eax, dword [ebp - 0xb0]
inc eax
push eax
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
call fcn.00472fa0
push eax
lea eax, [ebp - 0x50]
push 0x4d1b10
push eax
mov byte [ebp - 4], 0x41
call fcn.00472c70
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x43
call fcn.00472320
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x50]
push ecx
mov ecx, esi
call dword [eax + 0x10]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x3f
call fcn.00472320
xor esi, esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.0041a44c
mov eax, esi
jmp 0x43448b
mov ebx, str.stubselfupdate
push ebx
lea ecx, [ebp - 0x38]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._stubselfupdate__distcode_
mov byte [ebp - 4], 0x44
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Specifies_that_this_stub_was_downloaded_and_called_by_an_older_stub._The_distcode_is_from_the_original_Stub_execution
mov byte [ebp - 4], 0x45
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.This_stub_was_downloaded_and_called_by_an_older_stub.
mov byte [ebp - 4], 0x46
call fcn.00472340
push 3
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x44
call fcn.0041c3ed
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x48
call fcn.00472320
lea ecx, [esi + 0xcc]
push 0x4d1a1a
call fcn.00472470
push ebx
lea ecx, [ebp - 0x30]
call fcn.00472340
lea eax, [esi + 0xcc]
push eax
lea eax, [ebp - 0x30]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x49
call fcn.0041bdb0
lea ecx, [ebp - 0x30]
mov dword [esi + 0x150], eax
mov byte [ebp - 4], 0x48
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.0041a44c
lea ecx, [ebp - 0x14]
call fcn.00472090
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x14]
push ecx
push eax
push str.SoftwareRealNetworksConfigOutputLog
push SysReAllocStringLen
mov byte [ebp - 4], 0x4a
call fcn.00410aaa
add esp, 0x18
push str.output
lea ecx, [ebp - 0x58]
call fcn.00472340
push ecx
mov byte [ebp - 4], 0x4b
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._output
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Keep_a_copy_of_the_log_in_c:logaction.txt._Obsolete_
push ebx
mov byte [ebp - 4], 0x4c
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0x4d
call fcn.00472340
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x4b
call fcn.0041c3ed
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x4f
call fcn.00472320
push str.output
lea ecx, [ebp - 0x68]
call fcn.00472340
lea eax, [ebp - 0x68]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x50
mov dword [ebp - 0x5c], 1
call fcn.0041bfa2
test eax, eax
jne 0x431757
lea ecx, [ebp - 0x14]
call fcn.0040d59a
test al, al
je 0x431757
xor bl, bl
jmp 0x431759
mov bl, 1
lea ecx, [ebp - 0x68]
mov dword [ebp - 4], 0x4f
call fcn.00472320
test bl, bl
je 0x431780
push 0x4d23fc
push str.c:logaction.txt
call fcn.00494eaf
pop ecx
pop ecx
mov dword [esi + 0x2c], eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x4a
call fcn.0041a44c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call fcn.00472320
mov ebx, str.datecheck
push ebx
lea ecx, [ebp - 0x68]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._datecheckTF
mov byte [ebp - 4], 0x51
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Specifies_that_the_stub_caller_vouches_for_its_own_source__e.g._UpgradeHelper.exe_is_always_downloaded_from_RealN_and_will_pass__datecheckT._Stub_will_vouch_for_itself_if_its_own_digital_signature_timestamp_is_less_than_a_certain_age__currently_2_weeks__and_will_pass__datecheckTF_accordingly._Stubs_EXEs_that_are_too_old_to_even_have_this_code_will_not_pass_the__datecheck_param_at_all_indicating_that_our_source_is_unvouched._This_is_used_to_configure_the_Ask.com_DLP_offer.
mov byte [ebp - 4], 0x52
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Specifies_that_the_stub_caller_vouches_for_its_own_source.
mov byte [ebp - 4], 0x53
call fcn.00472340
push 2
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x51
call fcn.0041c3ed
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x55
call fcn.00472320
and dword [esi + 0x14c], 0
lea ecx, [ebp - 0x14]
call fcn.00472090
push ebx
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x56
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x57
call fcn.0041bdb0
lea ecx, [ebp - 0x38]
mov ebx, eax
mov byte [ebp - 4], 0x56
call fcn.00472320
test ebx, ebx
je 0x431871
lea eax, [ebp - 0x14]
push 0x4d6900
push eax
mov dword [esi + 0x14c], 1
call fcn.0040d604
pop ecx
pop ecx
xor ecx, ecx
test al, al
setne cl
mov dword [esi + 0x148], ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x55
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.0041a44c
push edi
lea ecx, [ebp - 0x98]
call fcn.00472280
push eax
lea eax, [ebp - 0x90]
push str.Run____strCmdLine_
push eax
mov byte [ebp - 4], 0x58
call fcn.00472c70
push 0x4d37d4
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x59
call fcn.00472c20
push eax
mov byte [ebp - 4], 0x5a
call fcn.00411af0
add esp, 0x1c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x59
call fcn.00472320
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x58
call fcn.00472320
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x3f
call fcn.00472320
lea eax, [esi + 0x18c]
push eax
lea eax, [ebp - 0x78]
push str.Stamp_Data__Lang:
push eax
call fcn.00472c70
mov ebx, 0x4d68d4
push ebx
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x5b
call fcn.00472c20
push str._r_n_____________Prod:
push eax
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 0x5c
call fcn.00472c20
lea ecx, [esi + 0x174]
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x5d
call fcn.00472bd0
push ebx
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x5e
call fcn.00472c20
push str._r_n_____________Version:
push eax
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x5f
call fcn.00472c20
add esp, 0x48
lea ecx, [esi + 0x194]
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x60
call fcn.00472bd0
push ebx
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x61
call fcn.00472c20
push str._r_n_____________DistCode:
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x62
call fcn.00472c20
lea ecx, [esi + 0x15c]
push ecx
push eax
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x63
call fcn.00472bd0
push ebx
push eax
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 0x64
call fcn.00472c20
push str._r_n_____________OEM:
push eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x65
call fcn.00472c20
add esp, 0x48
lea ecx, [esi + 0x640]
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x66
call fcn.00472bd0
push eax
mov byte [ebp - 4], 0x67
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x66
call fcn.00472320
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x65
call fcn.00472320
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x64
call fcn.00472320
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x63
call fcn.00472320
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x62
call fcn.00472320
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x61
call fcn.00472320
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x60
call fcn.00472320
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x38]
call fcn.00472320
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x5e
call fcn.00472320
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x5d
call fcn.00472320
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x5c
call fcn.00472320
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x5b
call fcn.00472320
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x3f
call fcn.00472320
push 0xa
pop ebx
push ebx
lea eax, [ebp + 0x8d8]
push eax
push 7
call fcn.004bb871
push ebx
lea eax, [ebp + 0x87c]
push eax
push 5
call fcn.004bb871
push ebx
lea eax, [ebp + 0x8b8]
push eax
push 0
call fcn.004bb871
push ebx
lea eax, [ebp + 0x52c]
push eax
push 0x10
call fcn.004bb871
add esp, 0x30
push str.NOLOG_complete_version_
lea ecx, [ebp - 0x48]
call fcn.00472340
lea ecx, [ebp + 0x8d8]
push ecx
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x68
call fcn.00472c20
mov ebx, 0x4d1a18
push ebx
push eax
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x69
call fcn.00472c20
lea ecx, [ebp + 0x87c]
push ecx
push eax
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x6a
call fcn.00472c20
push ebx
push eax
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 0x6b
call fcn.00472c20
lea ecx, [ebp + 0x8b8]
push ecx
push eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x6c
call fcn.00472c20
push ebx
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x6d
call fcn.00472c20
add esp, 0x48
lea ecx, [ebp + 0x52c]
push ecx
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x6e
call fcn.00472c20
push eax
mov byte [ebp - 4], 0x6f
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x6e
call fcn.00472320
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x6d
call fcn.00472320
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x6c
call fcn.00472320
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x6b
call fcn.00472320
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x6a
call fcn.00472320
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x69
call fcn.00472320
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x68
call fcn.00472320
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3f
call fcn.00472320
mov ebx, str.detectionxml
push ebx
lea ecx, [ebp - 0x68]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._detectionxml__filepath_
mov byte [ebp - 4], 0x70
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Specifies_the_filepath_to_an_alternate_detection_XML
mov byte [ebp - 4], 0x71
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Specifies_alternate_detection_XML
mov byte [ebp - 4], 0x72
call fcn.00472340
push 3
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x70
call fcn.0041c3ed
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x74
call fcn.00472320
push str.Specify_alternate_detection_XML_file_to_the_one_in__temp__rninst1ui_datainst_config..._Examples:_n_____________n________________c:_tempmyinst_detect.xml_n___________________or_n________________file:__c:_tempmyinst_detect.xml_n___________________or_n________________http:__server_5.9_stub_xml_inst_detect.xml
lea ecx, [ebp - 0x30]
call fcn.00472340
push str.Specify_alternate_detection_XML
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x75
call fcn.00472340
push str.DetectionXML
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x76
call fcn.00472340
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x77
call fcn.0041ab2c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x79
call fcn.00472320
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x7a
call fcn.00472320
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x7b
call fcn.00472320
lea ecx, [ebp - 0x1c]
call fcn.00472090
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x7c
call fcn.00472340
lea ebx, [esi + 0x1004]
push ebx
lea eax, [ebp - 0x58]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x7d
call fcn.0041bdb0
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x7c
call fcn.00472320
cmp dword [ebp - 0x3c], 0
je 0x431d5b
push ebx
lea eax, [ebp - 0x48]
push str.m_strXMLDetectFile_from_cmd_line_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0x7e
call fcn.00411af0
lea ecx, [ebp - 0x48]
jmp 0x431e18
push str.DetectionXML
lea ecx, [ebp - 0x28]
call fcn.00472340
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x5022bc
mov byte [ebp - 4], 0x7f
call fcn.0041a826
mov ecx, eax
call fcn.0041a24f
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x7c
call fcn.00472320
cmp dword [ebp - 0x3c], 0
je 0x431e24
push str.DetectionXML
lea ecx, [ebp - 0x28]
call fcn.00472340
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x5022bc
mov byte [ebp - 4], 0x80
call fcn.0041a826
mov ecx, eax
call fcn.0042004f
push eax
mov ecx, ebx
call fcn.00472470
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x7c
call fcn.00472320
push ebx
lea eax, [ebp - 0x48]
push str.DetectionXML_Override_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0x81
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x7c
call fcn.00472320
push ebx
lea eax, [ebp - 0x78]
push str.m_strXMLDetectFile_from_reg_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0x82
call fcn.00411af0
lea ecx, [ebp - 0x78]
add esp, 0x10
mov byte [ebp - 4], 0x7c
call fcn.00472320
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x7b
call fcn.00472320
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x74
call fcn.0041a2ea
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x3f
call fcn.0041a44c
push str.forceinstall
lea ecx, [ebp - 0x68]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._forceinstall
mov byte [ebp - 4], 0x83
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Ignore_common_setup_errors_during_development_e.g._bad_MD5_checksum
mov byte [ebp - 4], 0x84
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Ignore_common_setup_errors_during_development
mov byte [ebp - 4], 0x85
call fcn.00472340
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x83
call fcn.0041c3ed
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x87
call fcn.00472320
push str.Debug_support._Skip_miscellaneous_requirements_like_bad_or_missing_MD5__etc._so_that_stub_will_run_on_a_dev_machine_without_a_lot_of_effort.
lea ecx, [ebp - 0x30]
call fcn.00472340
push str.Debug_support._Skip_misc_requirements_like_bad_MD5
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x88
call fcn.00472340
push str.ForceInstall
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x89
call fcn.00472340
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x8a
call fcn.0041ab2c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x8c
call fcn.00472320
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x8d
call fcn.00472320
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x30]
call fcn.00472320
lea ecx, [ebp - 0x48]
call fcn.00472090
push str.forceinstall
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x8f
call fcn.00472340
lea eax, [ebp - 0x58]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x90
mov dword [ebp - 0x5c], 2
call fcn.0041bfa2
test eax, eax
jne 0x431f94
push str.ForceInstall
lea ecx, [ebp - 0x28]
call fcn.00472340
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x5022bc
mov dword [ebp - 4], 0x91
mov dword [ebp - 0x5c], 6
call fcn.0041a826
mov ecx, eax
call fcn.0041a24f
mov byte [ebp - 0x1d], 0
test eax, eax
je 0x431f98
mov byte [ebp - 0x1d], 1
test byte [ebp - 0x5c], 4
mov dword [ebp - 4], 0x90
je 0x431fb1
and dword [ebp - 0x5c], 0xfffffffb
lea ecx, [ebp - 0x28]
call fcn.00472320
test byte [ebp - 0x5c], 2
mov dword [ebp - 4], 0x8f
je 0x431fca
and dword [ebp - 0x5c], 0xfffffffd
lea ecx, [ebp - 0x58]
call fcn.00472320
cmp byte [ebp - 0x1d], 0
je 0x431fda
mov dword [esi + 0x1000], 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x8e
call fcn.00472320
lea ecx, [ebp + 0x51c]
mov byte [ebp - 4], 0x87
call fcn.0041a2ea
lea ecx, [ebp + 0x89c]
mov byte [ebp - 4], 0x3f
call fcn.0041a44c
push str.detection
lea ecx, [ebp - 0x68]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._detection
mov byte [ebp - 4], 0x92
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Run_script_test
mov byte [ebp - 4], 0x93
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Run_script_test
mov byte [ebp - 4], 0x94
call fcn.00472340
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x92
call fcn.0041c3ed
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x96
call fcn.00472320
push str.detection
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x97
call fcn.0041bfa2
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x96
call fcn.00472320
cmp dword [ebp - 0x3c], 0
je 0x4320b3
and dword [esi + 0x1024], 0
mov dword [esi + 0x101c], 1
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.0041a44c
and dword [esi + 0xac4], 0
lea ecx, [ebp - 0x14]
call fcn.00472090
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x14]
push ecx
push eax
push str.SoftwareRealNetworksConfigDetectionLog
push SysReAllocStringLen
mov byte [ebp - 4], 0x98
call fcn.00410aaa
add esp, 0x18
push str.detectionlog
lea ecx, [ebp - 0x68]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._detectionlog
mov byte [ebp - 4], 0x99
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Turn_on_script_logging
mov byte [ebp - 4], 0x9a
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Turn_on_script_logging
mov byte [ebp - 4], 0x9b
call fcn.00472340
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x99
call fcn.0041c3ed
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x9d
call fcn.00472320
push str.detectionlog
lea ecx, [ebp - 0x38]
call fcn.00472340
or dword [ebp - 0x5c], 8
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x9e
call fcn.0041bfa2
test eax, eax
jne 0x432199
lea eax, [ebp - 0x14]
push 0x4d1a4c
push eax
call fcn.0040d604
pop ecx
pop ecx
mov byte [ebp - 0x1d], 0
test al, al
je 0x43219d
mov byte [ebp - 0x1d], 1
test byte [ebp - 0x5c], 8
mov dword [ebp - 4], 0x9d
je 0x4321b6
and dword [ebp - 0x5c], 0xfffffff7
lea ecx, [ebp - 0x38]
call fcn.00472320
cmp byte [ebp - 0x1d], 0
je 0x4321c6
mov dword [esi + 0xac4], 1
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x98
call fcn.0041a44c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call fcn.00472320
push str.noshortcircuit
lea ecx, [ebp - 0x68]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._noshortcircuit
mov byte [ebp - 4], 0x9f
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Turn_off_short_circuit_evaluation_in_scripts_for_regression_tests._When_short_circuit_____________is_on__the_default___lots_of_script_elements_dont_get_evaluated_because_they_are_logically_____________irrelevant__e.g._once_an_element_in_an__and__group_is_FALSE__the_rest_of_the_group_need_not_____________be_evaluated__and_could_in_fact_contain_errors_that_would_be_missed._When_short_circuit_eval_____________is_on_it_doesnt_change_the_ultimate_results
mov byte [ebp - 4], 0xa0
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Turn_off_short_circuit_evaluation_in_scripts_for_regression_tests
mov byte [ebp - 4], 0xa1
call fcn.00472340
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x9f
call fcn.0041c3ed
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xa3
call fcn.00472320
push str.noshortcircuit
lea ecx, [ebp - 0x38]
call fcn.00472340
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa4
call fcn.0041bfa2
neg eax
sbb eax, eax
inc eax
lea ecx, [ebp - 0x38]
mov dword [esi + 0xab4], eax
mov byte [ebp - 4], 0xa3
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.0041a44c
push str.detectionerrormsg
lea ecx, [ebp - 0x30]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._detectionerrormsg
mov byte [ebp - 4], 0xa5
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov byte [ebp - 4], 0xa6
push str.Turn_on_MessageBox_detection_XML_errors
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Turn_on_MessageBox_detection_XML_errors
mov byte [ebp - 4], 0xa7
call fcn.00472340
push 0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xa5
call fcn.0041c3ed
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xa9
call fcn.00472320
push str.detectionerrormsg
lea ecx, [ebp - 0x58]
call fcn.00472340
lea eax, [ebp - 0x58]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xaa
call fcn.0041bfa2
lea ecx, [ebp - 0x58]
mov dword [esi + 0xab8], eax
mov byte [ebp - 4], 0xa9
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0x3f
call fcn.0041a44c
lea eax, [esi + 0xac]
push eax
lea eax, [ebp - 0x48]
push str.Config_URL_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xab
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3f
call fcn.00472320
push str.Specify_the_config_URL__the_locaion_of_the_config_XML._This_must_be_a_fully_specified_URL_and_overrides_the_address_set_in_the_stub_stamp_info._Example:_n_________n____________http:__server_config_en_config.xml_n_______________or_n____________file:__yellow.d.p.com_stubinstaller5.9_stubxmlconfig.xml
lea ecx, [ebp - 0xa4]
call fcn.00472340
push str.Specify_the_config_URL__the_locaion_of_the_config_XML
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xac
call fcn.00472340
push 0x4d6068
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xad
call fcn.00472340
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0xae
call fcn.0041ab2c
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0xb0
call fcn.00472320
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0xac]
call fcn.00472320
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xb2
call fcn.00472320
push 0x4d6068
lea ecx, [ebp - 0x88]
call fcn.00472340
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x5022bc
mov byte [ebp - 4], 0xb3
call fcn.0041a826
mov ecx, eax
call fcn.0041a24f
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0xb2
call fcn.00472320
cmp dword [ebp - 0x3c], 0
je 0x4324a1
push 0x4d6068
lea ecx, [ebp - 0x88]
call fcn.00472340
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x5022bc
mov byte [ebp - 4], 0xb4
call fcn.0041a826
mov ecx, eax
call fcn.0042004f
push eax
lea ecx, [esi + 0xac]
call fcn.00472470
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xb2
call fcn.00472320
lea eax, [esi + 0xac]
push eax
lea eax, [ebp - 0x48]
push str.Config_URL_Override_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xb5
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xb2
call fcn.00472320
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x48]
push str.Backup_Config_URL_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xb6
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xb2
call fcn.00472320
push str.Specify_the_backup_config_URL__the_locaion_of_the_backup_config_XML._This_must_be_a_fully_specified_URL_and_overrides_the_address_set_in_the_stub_stamp_info._Example:_n_________n____________http:__server_config_en_config.xml_n_______________or_n____________file:__yellow.d.p.com_stubinstaller5.9_stubxmlconfig.xml
lea ecx, [ebp - 0x90]
call fcn.00472340
push str.Specify_the_backup_config_URL__the_locaion_of_the_backup_config_XML
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xb7
call fcn.00472340
push str.BackupURL
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xb8
call fcn.00472340
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb9
call fcn.0041ab2c
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xbb
call fcn.00472320
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0xbc
call fcn.00472320
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xbd
call fcn.00472320
push str.BackupURL
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x5022bc
mov byte [ebp - 4], 0xbe
call fcn.0041a826
mov ecx, eax
call fcn.0041a24f
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0xbd
call fcn.00472320
cmp dword [ebp - 0x3c], 0
je 0x4325ff
push str.BackupURL
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x5022bc
mov byte [ebp - 4], 0xbf
call fcn.0041a826
mov ecx, eax
call fcn.0042004f
push eax
lea ecx, [esi + 0xb4]
call fcn.00472470
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xbd
call fcn.00472320
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x48]
push str.Backup_Config_URL_Override_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xc0
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xbd
call fcn.00472320
push str.verifyxml
lea ecx, [ebp - 0x1c]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._verify__config_xml___detect_xml_
mov byte [ebp - 4], 0xc1
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Dev_support_to_check_a_config_XML_detection_XML_pair_for_syntax_semantic_errors._It_may_be_useful_to_include__noshortcircuit_to_cause_a_more_complete_check
mov byte [ebp - 4], 0xc2
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Check_config_XML_detection_XML_pair_syntax
mov byte [ebp - 4], 0xc3
call fcn.00472340
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xc1
call fcn.0041c3ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc5
call fcn.00472320
and dword [ebp - 0x54], 0
push str.verifyxml
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc6
call fcn.0041bfba
lea ecx, [ebp - 0x14]
mov dword [esi + 0x144], eax
mov byte [ebp - 4], 0xc5
call fcn.00472320
cmp dword [esi + 0x144], 0
je 0x4328f6
lea ecx, [ebp - 0x30]
call fcn.00472090
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc7
call fcn.00472090
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x30]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc8
call fcn.0041b94e
test eax, eax
je 0x432d2b
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x38]
push eax
mov ecx, edi
call fcn.0041b94e
test eax, eax
je 0x432d2b
push 0x4d5d8c
lea ecx, [ebp - 0x30]
call fcn.004721b0
cmp eax, 0xffffffff
jne 0x432719
push 0x4d5d8c
lea ecx, [ebp - 0x38]
call fcn.004721b0
cmp eax, 0xffffffff
je 0x432733
lea eax, [ebp - 0x30]
push eax
lea ecx, [esi + 0xac]
call fcn.004723d0
lea eax, [ebp - 0x38]
push eax
mov ecx, ebx
call fcn.004723d0
cmp byte [ebp - 0x29], 0xff
lea eax, [ebp - 0x30]
jne 0x43273f
mov eax, dword [ebp - 0x30]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocStringLen
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x3c], eax
call fcn.00472090
and dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 0x2710
push 0x2711
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc9
call fcn.00472db0
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0x4d5d88
lea ecx, [ebp - 0x14]
call fcn.004721b0
push str._config
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x4c], eax
call fcn.004721b0
cmp dword [ebp - 0x4c], 0xffffffff
je 0x4327d5
cmp eax, 0xffffffff
je 0x4327d5
sub eax, dword [ebp - 0x4c]
test eax, eax
jle 0x4327d5
cmp eax, 0xf
jge 0x4327d5
lea eax, [ebp - 0x30]
push eax
lea ecx, [esi + 0xac]
call fcn.004723d0
lea eax, [ebp - 0x38]
jmp 0x4327e7
lea eax, [ebp - 0x38]
push eax
lea ecx, [esi + 0xac]
call fcn.004723d0
lea eax, [ebp - 0x30]
push eax
mov ecx, ebx
call fcn.004723d0
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc8
call fcn.00472320
push 0x4d5d8c
lea ecx, [esi + 0xac]
call fcn.004721b0
cmp eax, 0xffffffff
jne 0x43284d
lea eax, [esi + 0xac]
push eax
lea eax, [ebp - 0x48]
push str.file:__
push eax
call fcn.00472c70
add esp, 0xc
push eax
lea ecx, [esi + 0xac]
mov byte [ebp - 4], 0xca
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc8
call fcn.00472320
push 0x4d5d8c
mov ecx, ebx
call fcn.004721b0
cmp eax, 0xffffffff
jne 0x432888
push ebx
lea eax, [ebp - 0x48]
push str.file:__
push eax
call fcn.00472c70
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xcb
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc8
call fcn.00472320
lea eax, [esi + 0xac]
push eax
lea eax, [ebp - 0x48]
push str.Config_XML_URL_Cmdline_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xcc
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xc8
call fcn.00472320
push ebx
lea eax, [ebp - 0x78]
push str.m_strXMLDetectFile_from_cmd_line_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xcd
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xc8
call fcn.00472320
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xc7
call fcn.00472320
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xc5
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.0041a44c
push str.quiet
lea ecx, [ebp - 0x1c]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._quiet
mov byte [ebp - 4], 0xd2
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Turn_off_MessageBox_UI_for_INTERNAL_ASSERT_calls
push ebx
mov byte [ebp - 4], 0xd3
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0xd4
call fcn.00472340
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xd2
call fcn.0041c3ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd6
call fcn.00472320
push str.quiet
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xd7
call fcn.0041bfa2
neg eax
sbb eax, eax
inc eax
lea ecx, [ebp - 0x14]
mov dword [0x4fd00c], eax
mov byte [ebp - 4], 0xd6
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.0041a44c
cmp byte [0x501e8b], 0xff
mov eax, edi
jne 0x4329c0
mov eax, dword [0x501e84]
push str._add_log:
push eax
call fcn.00493420
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x432a1f
mov al, byte [ebx + 9]
add ebx, 0xa
cmp al, 0x22
jne 0x432a1f
lea ecx, [ebp - 0x14]
call fcn.00472090
mov byte [ebp - 4], 0xd8
test ebx, ebx
je 0x432a04
movzx eax, byte [ebx]
test al, al
je 0x432a04
cmp al, 0x22
je 0x432a04
push eax
lea ecx, [ebp - 0x14]
call fcn.00472820
inc ebx
jne 0x4329ed
lea eax, [ebp - 0x14]
push eax
lea ecx, [esi + 0x19c]
call fcn.004723d0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xbd
call fcn.00472320
push 0x4d290c
lea ecx, [ebp - 0x1c]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._loc__2_char_country_code_
mov byte [ebp - 4], 0xd9
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Override_country_code
push ebx
mov byte [ebp - 4], 0xda
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0xdb
call fcn.00472340
push 4
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xd9
call fcn.0041c3ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xdd
call fcn.00472320
push 0x4d290c
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [esi + 0x84]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xde
call fcn.0041bdb0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xdd
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.0041a44c
mov ebx, str.home
push ebx
lea ecx, [ebp - 0x38]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._home___org_path__
mov byte [ebp - 4], 0xdf
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Used_by_UpgradeHelper._This_specifies_the_path_where_the_stub_EXE_started_before_the_Extractor_is_called
mov byte [ebp - 4], 0xe0
call fcn.00472340
push ecx
push ecx
mov byte [ebp - 4], 0xe1
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Used_by_UpgradeHelper._Specifies_path_where_the_stub_EXE_started
call fcn.00472340
push 3
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xdf
call fcn.0041c3ed
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xe3
call fcn.00472320
push ebx
lea ecx, [ebp - 0x30]
call fcn.00472340
lea ebx, [esi + 0x8c]
push ebx
lea eax, [ebp - 0x30]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xe4
call fcn.0041bdb0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xe3
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.0041a44c
push str.location
lea ecx, [ebp - 0x58]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._location__c:_tempinstalldata_
mov byte [ebp - 4], 0xe5
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Specifies_a_flat_filespace_where_UpgradeHelper_has_placed_install_files__XML__CAB__etc._
mov byte [ebp - 4], 0xe6
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Specifies_a_flat_filespace_where_install_files_will_be_found.
mov byte [ebp - 4], 0xe7
call fcn.00472340
push 3
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xe5
call fcn.0041c3ed
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xe9
call fcn.00472320
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
mov dword [ebp - 0x24], eax
call fcn.0049536f
pop ecx
xor eax, eax
push eax
push eax
push 0x104
lea ecx, [ebp + 0x408]
push ecx
push 0xffffffffffffffff
push dword [ebp - 0x24]
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp + 0x408]
push eax
lea ecx, [ebp - 0x14]
call fcn.00472340
push str._location__
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xea
call fcn.004721b0
lea ecx, [ebp - 0x14]
cmp eax, 0xffffffff
je 0x432dd6
add eax, 0xb
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00472fa0
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xeb
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xea
call fcn.00472320
push 0x4e6714
lea ecx, [esi + 0xc]
call fcn.004721b0
cmp eax, 0xffffffff
je 0x432c93
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0xc]
call fcn.00472b10
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xec
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xea
call fcn.00472320
lea ecx, [esi + 0xc]
call fcn.0040d59a
test al, al
jne 0x432ce0
push 1
push 0x5c
lea ecx, [ebp - 0x1c]
call fcn.00472eb0
or dword [ebp - 0x5c], 0x10
push 1
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0xc]
mov byte [ebp - 4], 0xed
call fcn.00472ab0
or dword [ebp - 0x5c], 0x20
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov dword [ebp - 4], 0xee
call fcn.0040d622
pop ecx
pop ecx
mov byte [ebp - 0x1d], 1
test al, al
jne 0x432ce4
mov byte [ebp - 0x1d], 0
test byte [ebp - 0x5c], 0x20
mov dword [ebp - 4], 0xed
je 0x432cfd
and dword [ebp - 0x5c], 0xffffffdf
lea ecx, [ebp - 0x48]
call fcn.00472320
test byte [ebp - 0x5c], 0x10
mov dword [ebp - 4], 0xea
je 0x432d12
lea ecx, [ebp - 0x1c]
call fcn.00472320
cmp byte [ebp - 0x1d], 0
je 0x432e7c
push 0x5c
lea ecx, [esi + 0xc]
call fcn.00472820
jmp 0x432e7c
mov eax, str.LogDebug
cmp eax, str.NULL
je 0x432dcf
cmp eax, str.__noop
je 0x432dcf
push str.INTERNAL_ERROR:
lea ecx, [ebp - 0x90]
call fcn.00472340
push str._verifyxml_on_command_line_must_be_followed_by_full_config_XML_path_and_detect_XML_path
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xce
call fcn.00472c20
push 0x4d1e68
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0xcf
call fcn.00472c20
push 0x4d1a1a
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0xd0
call fcn.00472c20
push eax
mov byte [ebp - 4], 0xd1
call fcn.00411af0
add esp, 0x28
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xd0
call fcn.00472320
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xcf
call fcn.00472320
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xce
call fcn.00472320
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xc8
call fcn.00472320
push 1
call fcn.0049ae8b
push str._location
call fcn.004721b0
cmp eax, 0xffffffff
je 0x432e7c
cmp byte [ebx + 7], 0xff
mov eax, ebx
jne 0x432df3
mov eax, dword [ebx]
test eax, eax
je 0x432e02
push ebx
lea ecx, [esi + 0xc]
call fcn.004723d0
jmp 0x432e7c
push 0x104
lea eax, [ebp + 0x258]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp + 0x258]
lea ebx, [esi + 0xc]
push eax
mov ecx, ebx
call fcn.00472470
push ebx
lea eax, [ebp - 0x48]
push str.GetModuleFileName___
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xef
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xea
call fcn.00472320
push 0x5c
mov ecx, ebx
call fcn.00472180
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, ebx
call fcn.00472b10
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf0
call fcn.004723d0
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xea
call fcn.00472320
lea ebx, [esi + 0xc]
push ebx
lea eax, [ebp - 0x48]
push str.m_strLocation_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xf1
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xea
call fcn.00472320
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xe9
call fcn.00472320
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.0041a44c
mov ecx, ebx
call fcn.0040d59a
test al, al
jne 0x432f7a
push ebx
lea ebx, [esi + 0xac]
lea eax, [ebp - 0x48]
push ebx
push eax
call fcn.0040f140
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf2
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xbd
call fcn.00472320
push 0
lea eax, [ebp - 0x78]
push ebx
push eax
call fcn.004183e0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf3
call fcn.004723d0
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xbd
call fcn.00472320
lea eax, [esi + 0xc]
push eax
lea ebx, [esi + 0xb4]
lea eax, [ebp - 0x1c]
push ebx
push eax
call fcn.0040f140
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf4
call fcn.004723d0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xbd
call fcn.00472320
push 0
lea eax, [ebp - 0x14]
push ebx
push eax
call fcn.004183e0
add esp, 0xc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xf5
call fcn.004723d0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xbd
call fcn.00472320
push 0x4d2968
lea ecx, [ebp - 0x1c]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._distcode___new_distcode__
mov byte [ebp - 4], 0xf6
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Manually_override_the_distcode
push ebx
mov byte [ebp - 4], 0xf7
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 0xf8
call fcn.00472340
push 3
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xf6
call fcn.0041c3ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xfa
call fcn.00472320
push 0x4d2968
lea ecx, [ebp - 0x14]
call fcn.00472340
lea ebx, [esi + 0x15c]
push ebx
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xfb
call fcn.0041bdb0
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xfa
call fcn.00472320
cmp dword [ebp - 0x24], 0
je 0x433023
mov ecx, ebx
call fcn.00473270
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xbd
call fcn.0041a44c
mov ebx, str.dynamicdistcode
push ebx
lea ecx, [ebp - 0x1c]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._dynamicdistcode___distcode__
mov byte [ebp - 4], 0xfc
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push str.Force_override_of_the_randomly_selected_dynamic_distcode_for_test_automation
mov byte [ebp - 4], 0xfd
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str.Force_override_of_dynamic_distcode_for_test_automation
mov byte [ebp - 4], 0xfe
call fcn.00472340
push 3
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 0xfc
call fcn.0041c3ed
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0x100
call fcn.00472320
push ebx
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.0041bfa2
lea ebx, [esi + 0x638]
cmp byte [ebx + 7], 0xff
je 0x4330cc
mov dword [ebp - 0x3c], ebx
jmp 0x4330d1
mov eax, dword [ebx]
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.00472320
cmp dword [ebp - 0x3c], 0
je 0x4330ea
mov ecx, ebx
call fcn.00473270
lea ecx, [ebp + 0x510]
mov dword [ebp - 4], 0xbd
call fcn.0041a44c
push 0x4d2878
lea ecx, [ebp - 0x1c]
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._xml___filepath__
mov dword [ebp - 4], 0x102
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
mov ebx, str.Force_config_XML_to_be_read_from_a_local_filepath
push ebx
mov byte [ebp - 4], 3
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push ebx
mov byte [ebp - 4], 4
call fcn.00472340
push 3
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x510]
mov byte [ebp - 4], 2
call fcn.0041c3ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 6
call fcn.00472320
lea ecx, [ebp - 0x30]
call fcn.00472090
push 0x4d2878
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 7
call fcn.00472340
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 8
call fcn.0041bdb0
lea ecx, [ebp - 0x14]
mov ebx, eax
mov byte [ebp - 4], 7
call fcn.00472320
test ebx, ebx
je 0x43322f
lea eax, [ebp - 0x30]
push eax
call fcn.0040f3c0
lea ecx, [ebp - 0x30]
mov dword [esp], 0x4d5d8c
call fcn.004721b0
cmp eax, 0xffffffff
jne 0x4331f6
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x48]
push str.file:__
push eax
call fcn.00472c70
add esp, 0xc
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 9
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 7
call fcn.00472320
lea eax, [ebp - 0x30]
lea ebx, [esi + 0xac]
push eax
mov ecx, ebx
call fcn.004723d0
push ebx
lea eax, [ebp - 0x48]
push str.Config_XML_URL_Cmdline_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0xa
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 7
call fcn.00472320
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 6
call fcn.00472320
mov ebx, 0xbd
lea ecx, [ebp + 0x510]
mov dword [ebp - 4], ebx
call fcn.0041a44c
push str.before_GetProcessorID__
lea ecx, [ebp - 0x1c]
call fcn.00472340
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 4], 0x10b
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], ebx
call fcn.00472320
lea eax, [ebp - 0x48]
push eax
call fcn.0040eda2
pop ecx
lea ecx, [esi + 0x12c]
push eax
mov dword [ebp - 4], 0x10c
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.00472320
lea eax, [ebp - 0x78]
push eax
call fcn.00413ce2
pop ecx
lea ecx, [esi + 0x134]
push eax
mov dword [ebp - 4], 0x10d
call fcn.004723d0
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], ebx
call fcn.00472320
push 1
mov ebx, 0x4d1a1a
push ebx
push 0x4d1e68
lea ecx, [esi + 0x12c]
call fcn.004732b0
push 1
push ebx
push 0x4d1e68
lea ecx, [esi + 0x134]
call fcn.004732b0
push 1
push ebx
push 0x4d2844
lea ecx, [esi + 0x134]
call fcn.004732b0
lea eax, [ebp - 0x24]
push eax
call fcn.00413f8d
pop ecx
mov eax, dword [eax]
lea ecx, [ebp + 0x490]
push 3
mov dword [ebp + 0x48c], ecx
push eax
lea ecx, [ebp + 0x48c]
mov dword [ebp - 4], 0x10e
call fcn.004204cc
push dword [ebp + 0x48c]
lea ecx, [esi + 0x1c4]
mov byte [ebp - 4], 0xf
call fcn.00472470
lea eax, [ebp + 0x490]
mov byte [ebp - 4], 0xe
cmp dword [ebp + 0x48c], eax
je 0x433365
push dword [ebp + 0x48c]
call fcn.00495dac
pop ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
mov dword [ebp - 4], 0xbd
call fcn.0040d576
push str.Setup_GUID_stuff.
lea ecx, [ebp - 0x1c]
call fcn.00472340
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 4], 0x110
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xbd
call fcn.00472320
lea ecx, [esi + 0xe4]
push ebx
call fcn.00472470
lea ecx, [esi + 0xdc]
push ebx
call fcn.00472470
xor eax, eax
push 0x208
mov word [ebp + 0x54c], ax
xor ebx, ebx
lea eax, [ebp + 0x54e]
push ebx
push eax
call fcn.00493d40
push 0x104
lea eax, [ebp + 0x759]
push ebx
push eax
mov byte [ebp + 0x758], bl
call fcn.00493d40
add esp, 0x18
lea eax, [ebp + 0x54c]
push eax
push ebx
push ebx
push 0x23
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push ebx
push ebx
push 0x105
lea eax, [ebp + 0x758]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0x54c]
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp + 0x758]
push eax
lea ecx, [ebp - 0x70]
call fcn.00472340
push str.RealRealPlayer_
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0x111
call fcn.004727a0
cmp byte [ebp - 0x69], 0xff
lea eax, [ebp - 0x70]
jne 0x433454
mov eax, dword [ebp - 0x70]
push 0
push eax
call fcn.0040e521
pop ecx
pop ecx
push str.setup_machine_GUID
lea ecx, [ebp - 0x1c]
call fcn.00472340
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x12
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x11
call fcn.00472320
push 0
lea ebx, [esi + 0xe4]
push ebx
push ecx
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
push str.S_1_5_18
lea ecx, [ebp - 0x70]
push ecx
push eax
call fcn.00472c20
add esp, 0xc
mov ecx, esi
call fcn.00437d83
mov dword [ebp - 0x24], eax
test eax, eax
jns 0x433515
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x48]
push str.Failed_creating_or_reading_machine_UUID__directory_
push eax
call fcn.00472c70
push eax
mov byte [ebp - 4], 0x13
call fcn.00411af0
add esp, 0x10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x11
call fcn.00472320
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00472320
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.0041a2ea
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.0041a2ea
mov esi, dword [ebp - 0x24]
jmp 0x4315bb
push str.systemguid
lea ecx, [ebp - 0x14]
call fcn.00472340
push 0x4d21a0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
call fcn.00472340
push ebx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x15
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
call fcn.00472320
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.00472320
push str.setup_user_GUID
lea ecx, [ebp - 0x30]
call fcn.00472340
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x16
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.00472320
lea ecx, [ebp - 0x38]
call fcn.00472090
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x17
call fcn.00414880
mov ebx, eax
pop ecx
test ebx, ebx
jns 0x43360a
push str.Failed_to_get_logged_in_users_SID.
lea ecx, [ebp - 0x1c]
call fcn.00472340
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x1c]
push eax
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x17
call fcn.00472320
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.00472320
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00472320
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.0041a2ea
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.0041a2ea
mov esi, ebx
jmp 0x4315bb
push 1
lea eax, [esi + 0xdc]
push eax
push ecx
push ecx
mov eax, esp
mov dword [ebp - 0x24], esp
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x70]
push ecx
push eax
call fcn.00472bd0
add esp, 0xc
mov ecx, esi
call fcn.00437d83
mov ebx, eax
test ebx, ebx
jns 0x43364e
push str.Failed_creating_or_reading_user_UUID.
lea ecx, [ebp - 0x1c]
call fcn.00472340
mov byte [ebp - 4], 0x19
jmp 0x4335b4
push str.userguid
lea ecx, [ebp - 0x14]
call fcn.00472340
push 0x4d21a0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1a
call fcn.00472340
lea eax, [esi + 0xdc]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x1b
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1a
call fcn.00472320
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x17
call fcn.00472320
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.00472320
push str.exit_GUID_code
lea ecx, [ebp - 0x30]
call fcn.00472340
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x1c
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.00472320
push 0
lea eax, [esi + 0x7c]
push eax
push 0x4d6d80
mov ebx, str.RealPlayer
push ebx
push SysReAllocStringLen
call fcn.00410b8e
push 0
lea eax, [esi + 0x74]
push eax
push str.OrigCode
push ebx
push SysReAllocStringLen
call fcn.00410b8e
add esp, 0x28
push str.ext_country
lea ecx, [ebp - 0x28]
call fcn.00472340
mov ebx, str.uh_settings
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1d
call fcn.00472340
lea eax, [esi + 0x1a4]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x1e
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1d
call fcn.00472320
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00472320
push str.ext_stamp_country
lea ecx, [ebp - 0x40]
call fcn.00472340
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1f
call fcn.00472340
lea eax, [esi + 0x1a4]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x20
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1f
call fcn.00472320
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x11
call fcn.00472320
push str.ext_language
lea ecx, [ebp - 0x50]
call fcn.00472340
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x21
call fcn.00472340
lea eax, [esi + 0x18c]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x22
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x21
call fcn.00472320
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x11
call fcn.00472320
push str.ext_distcode
lea ecx, [ebp - 0x58]
call fcn.00472340
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x23
call fcn.00472340
lea ebx, [esi + 0x15c]
push ebx
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x24
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x23
call fcn.00472320
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x11
call fcn.00472320
push ebx
lea ecx, [esi + 0x184]
call fcn.004723d0
and dword [esi + 0x30], 0
lea eax, [ebp + 0x8a8]
push eax
call fcn.0047b720
pop ecx
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x80]
push ecx
mov ecx, eax
call fcn.0047b5b0
lea ecx, [ebp + 0x8a8]
mov byte [ebp - 4], 0x27
call fcn.0047b580
cmp byte [ebp - 0x79], 0xff
lea eax, [ebp - 0x80]
jne 0x433886
mov eax, dword [ebp - 0x80]
xor ebx, ebx
push ebx
push eax
call fcn.0041123f
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
call fcn.00472090
push ebx
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x28
call fcn.00472db0
push ebx
push eax
lea eax, [ebp - 0x30]
push str._srninst_d_
push eax
call fcn.00472ff0
add esp, 0x10
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp + 0x51c]
mov dword [ebp - 0x54], 1
call fcn.0047b470
jmp 0x43391a
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x27
call fcn.00472320
lea ecx, [ebp - 0x30]
call fcn.00472090
push 0
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x28
call fcn.00472db0
push dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x30]
push str._srninst_d_
push eax
call fcn.00472ff0
add esp, 0x10
inc dword [ebp - 0x54]
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp + 0x51c]
call fcn.0047b470
lea eax, [ebp + 0x51c]
push eax
mov byte [ebp - 4], 0x29
call fcn.0047b680
mov ebx, eax
pop ecx
neg ebx
lea ecx, [ebp + 0x51c]
sbb bl, bl
mov byte [ebp - 4], 0x28
call fcn.0047b580
inc bl
je 0x4338d1
lea eax, [ebp - 0x30]
lea ebx, [esi + 0x54]
push eax
mov ecx, ebx
call fcn.004723d0
push str.basepath
lea ecx, [ebp - 0x14]
call fcn.00472340
push 0x4d21a0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2a
call fcn.00472340
push ebx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x2b
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2a
call fcn.00472320
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x28
call fcn.00472320
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x27
call fcn.00472320
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
call fcn.00425423
cmp byte [eax + 7], 0xff
mov byte [ebp - 4], 0x2c
jne 0x4339c0
mov eax, dword [eax]
push 5
push eax
call fcn.0041123f
pop ecx
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x27
call fcn.00472320
lea eax, [ebp - 0x78]
push eax
mov ecx, esi
call fcn.0041dae7
cmp byte [eax + 7], 0xff
mov byte [ebp - 4], 0x2d
jne 0x4339ed
mov eax, dword [eax]
push 5
push eax
call fcn.0041123f
pop ecx
pop ecx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x27
call fcn.00472320
lea eax, [ebp - 0x9c]
push eax
push 0x20219
xor ebx, ebx
push ebx
push str.CLSIDf414c260_6ac0_11cf_b6d1_00aa00bbbb58
push SysReAllocStringLen
mov dword [esi + 0x28], 1
mov dword [ebp - 0x9c], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x433a84
push dword [ebp - 0x9c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x9c], ebx
cmp dword [esi + 0x1d8], ebx
jne 0x433d90
lea ecx, [ebp - 0x30]
call fcn.00472090
mov eax, 0x104
push eax
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x30
call fcn.00472db0
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x433ba0
lea ecx, [ebp - 0x30]
jmp 0x433b54
push str.actionwarningvaluejscript_disabled
lea ecx, [ebp - 0x1c]
call fcn.00472340
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x2e
call dword [eax + 0x10]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x27
call fcn.00472320
push str.jscript.dll
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x3c], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esi + 0x50], eax
cmp eax, ebx
je 0x433b14
push str.DllRegisterServer
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x24], eax
cmp eax, ebx
je 0x433b02
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call dword [ebp - 0x24]
test eax, eax
js 0x433af0
mov dword [ebp - 0x3c], 1
jmp 0x433af9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x54], eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x433b0b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x3c], ebx
jne 0x433a45
lea ecx, [ebp - 0x14]
call fcn.00472090
push dword [ebp - 0x54]
lea eax, [ebp - 0x14]
push str.actionerrorvaluejavascriptreturn_value_d
push eax
mov byte [ebp - 4], 0x2f
call fcn.00472ff0
mov eax, dword [esi]
add esp, 0xc
push ebx
lea ecx, [ebp - 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi + 0x50]
cmp eax, ebx
je 0x433b51
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esi + 0x50], ebx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
call fcn.00472320
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x11
call fcn.00472320
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00472320
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.0041a2ea
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.0041a2ea
mov esi, 0x80004005
jmp 0x4315bb
push 0xffffffffffffffff
lea ecx, [ebp - 0x30]
call fcn.00472e40
push 3
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x30]
call fcn.00472b10
mov ebx, 0x5dc
push ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x31
call fcn.00427363
test eax, eax
lea ecx, [ebp - 0x48]
sets byte [ebp - 0x1d]
mov byte [ebp - 4], 0x30
call fcn.00472320
cmp byte [ebp - 0x1d], 0
je 0x433c87
push str.1500
lea ecx, [esi + 0xfc]
call fcn.00472470
push 2
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x30]
call fcn.00472b10
push eax
lea ecx, [esi + 0xf4]
mov byte [ebp - 4], 0x32
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x30
call fcn.00472320
push esi
lea ecx, [ebp + 0x360]
call fcn.0041e2e3
push 2
push 0x463
lea ecx, [ebp + 0x360]
mov byte [ebp - 4], 0x33
call fcn.0041fcce
push str.actionerrorvaluelow_disk_space
lea ecx, [ebp - 0x1c]
mov dword [esi + 0x14], 1
call fcn.00472340
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x34
call dword [eax + 0x10]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x33
call fcn.00472320
lea ecx, [ebp + 0x360]
mov byte [ebp - 4], 0x30
call fcn.0041fd2a
jmp 0x433a7c
push str._progfiles_
lea ecx, [ebp - 0x30]
call fcn.00472470
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004183e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x35
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x30
call fcn.00472320
push 3
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x30]
call fcn.00472b10
push ebx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x36
call fcn.00427363
test eax, eax
lea ecx, [ebp - 0x78]
sets bl
mov byte [ebp - 4], 0x30
call fcn.00472320
test bl, bl
je 0x433d82
push str.1500
lea ecx, [esi + 0xfc]
call fcn.00472470
push 2
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x30]
call fcn.00472b10
push eax
lea ecx, [esi + 0xf4]
mov byte [ebp - 4], 0x37
call fcn.004723d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x30
call fcn.00472320
push esi
lea ecx, [ebp]
call fcn.0041e2e3
push 2
push 0x463
lea ecx, [ebp]
mov byte [ebp - 4], 0x38
call fcn.0041fcce
push str.actionerrorvaluelow_disk_space
lea ecx, [ebp - 0x1c]
mov dword [esi + 0x14], 1
call fcn.00472340
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x39
call dword [eax + 0x10]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x38
call fcn.00472320
lea ecx, [ebp]
jmp 0x433c79
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x27
call fcn.00472320
xor ebx, ebx
lea ecx, [esi + 0xc]
call fcn.0040d59a
push ebx
test al, al
jne 0x433ded
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], ebx
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
jne 0x433db5
mov dword [esi + 0x4c], 1
lea ecx, [esi + 0xac]
call fcn.0040d59a
lea ecx, [ebp - 0x1c]
test al, al
je 0x433ee8
push str.actionerrorvaluemissing_xml_url
call fcn.00472340
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3c
call dword [eax + 0x10]
lea ecx, [ebp - 0x1c]
jmp 0x433b54
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x5c], ebx
jmp 0x433e35
push esi
lea ecx, [ebp + 0x1b0]
call fcn.0041e2e3
push 3
push 0xab
lea ecx, [ebp + 0x1b0]
mov byte [ebp - 4], 0x3a
call fcn.0041fcce
cmp eax, 6
jne 0x433e48
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 3
jge 0x433e48
lea ecx, [ebp + 0x1b0]
mov byte [ebp - 4], 0x27
call fcn.0041fd2a
push ebx
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x433df5
jmp 0x433db5
cmp dword [ebp - 0x5c], 3
mov dword [esi + 0x14], 1
jl 0x433e9b
push str.actionerrorvaluestub_update_failure
lea ecx, [ebp - 0x1c]
call fcn.00472340
mov eax, dword [esi]
push ebx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3b
call dword [eax + 0x10]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x3a
call fcn.00472320
push 1
mov ecx, esi
call fcn.0042cb05
lea ecx, [ebp + 0x1b0]
mov byte [ebp - 4], 0x27
call fcn.0041fd2a
jmp 0x433b5d
lea ecx, [ebp + 0x1b0]
mov byte [ebp - 4], 0x27
call fcn.0041fd2a
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x11
call fcn.00472320
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00472320
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.0041a2ea
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.0041a2ea
jmp 0x4315b9
push str.testexit1
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str._testexit1
mov byte [ebp - 4], 0x3d
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
mov ebx, str.Used_by_the_unit_tests_to_have_CMaster_exit_early
push ebx
mov byte [ebp - 4], 0x3e
call fcn.00472340
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
push ebx
mov byte [ebp - 4], 0x3f
call fcn.00472340
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 0x860]
mov byte [ebp - 4], 0x3d
call fcn.0041c3ed
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x41
call fcn.00472320
push str.testexit1
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x42
call fcn.0041bfa2
lea ecx, [ebp - 0x14]
mov ebx, eax
mov byte [ebp - 4], 0x41
call fcn.00472320
lea ecx, [ebp + 0x860]
mov byte [ebp - 4], 0x27
call fcn.0041a44c
test ebx, ebx
jne 0x433eaa
lea ecx, [esi + 0xcc]
call fcn.0040d59a
test al, al
je 0x4342bf
push 0x4d1a1a
lea ecx, [ebp - 0x58]
call fcn.00472340
push str.2.0.50727
lea ecx, [ebp + 0x524]
mov byte [ebp - 4], 0x43
call fcn.00472340
push 0x4d56e4
lea ecx, [ebp + 0x52c]
mov byte [ebp - 4], 0x44
call fcn.00472340
push 0x4d56e0
lea ecx, [ebp + 0x534]
mov byte [ebp - 4], 0x45
call fcn.00472340
push 0x4d1bd8
lea ecx, [ebp + 0x53c]
mov byte [ebp - 4], 0x46
call fcn.00472340
push 0x4d56dc
lea ecx, [ebp + 0x544]
mov byte [ebp - 4], 0x47
call fcn.00472340
mov byte [ebp - 4], 0x48
lea ebx, [ebp + 0x524]
mov dword [ebp - 0x4c], 5
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push ebx
call fcn.00472280
call fcn.00410f03
pop ecx
pop ecx
test eax, eax
je 0x43405f
lea ecx, [ebp - 0x58]
call fcn.0040d59a
test al, al
jne 0x434056
push 0x4d3f6c
lea ecx, [ebp - 0x58]
call fcn.004727a0
push ebx
lea ecx, [ebp - 0x58]
call fcn.00472880
add ebx, 8
dec dword [ebp - 0x4c]
jne 0x434025
lea ecx, [ebp - 0x58]
call fcn.0040d59a
test al, al
je 0x434080
push str.none
lea ecx, [ebp - 0x58]
call fcn.00472470
push str.normal
lea ecx, [ebp - 0x14]
call fcn.00472340
push str.uh_pre
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x49
call fcn.00472340
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4a
call fcn.0041bfa2
lea ecx, [ebp - 0x1c]
mov ebx, eax
mov byte [ebp - 4], 0x49
call fcn.00472320
test ebx, ebx
je 0x4340c6
push str.prestub
jmp 0x4340f9
push str.pageflownum
lea ecx, [ebp - 0x1c]
call fcn.00472340
lea eax, [ebp - 0x1c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x4b
call fcn.0041bfa2
lea ecx, [ebp - 0x1c]
mov edi, eax
mov byte [ebp - 4], 0x49
call fcn.00472320
test edi, edi
je 0x434101
push str.poststub
lea ecx, [ebp - 0x14]
call fcn.00472470
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 0x8ec]
push str.actioninstallerstartedvalue
push eax
call fcn.00472c70
push str.procid
push eax
lea eax, [ebp - 0x120]
push eax
mov byte [ebp - 4], 0x4c
call fcn.00472c20
lea ecx, [esi + 0x12c]
push ecx
push eax
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0x4d
call fcn.00472bd0
push str.gpuid
push eax
lea eax, [ebp - 0x130]
push eax
mov byte [ebp - 4], 0x4e
call fcn.00472c20
lea ecx, [esi + 0x134]
push ecx
push eax
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 0x4f
call fcn.00472bd0
push str.dotnetver
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x50
call fcn.00472c20
add esp, 0x48
lea ecx, [ebp - 0x58]
push ecx
push eax
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 0x51
call fcn.00472bd0
push str.exename
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x52
call fcn.00472c20
lea ecx, [esi + 0x1d0]
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x53
call fcn.00472bd0
push str.webuserid
push eax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x54
call fcn.00472c20
lea ecx, [esi + 0x16c]
push ecx
push eax
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x55
push eax
call fcn.00472bd0
add esp, 0x3c
mov edx, dword [esi]
push 0
push eax
mov ecx, esi
mov byte [ebp - 4], 0x56
call dword [edx + 0x10]
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x55
call fcn.00472320
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x54
call fcn.00472320
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x53
call fcn.00472320
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x52
call fcn.00472320
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x51
call fcn.00472320
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x50
call fcn.00472320
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x4f
call fcn.00472320
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x4e
call fcn.00472320
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x4d
call fcn.00472320
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x4c
call fcn.00472320
lea ecx, [ebp + 0x8ec]
mov byte [ebp - 4], 0x49
call fcn.00472320
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x48
call fcn.00472320
push fcn.00472320
push 5
push 8
lea eax, [ebp + 0x524]
push eax
mov byte [ebp - 4], 0x43
call fcn.00496598
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x27
call fcn.00472320
mov ecx, esi
xor edi, edi
call fcn.0042b750
mov ebx, eax
cmp ebx, 0x8000aaa3
jne 0x4342d9
mov ecx, esi
call fcn.004296ec
cmp dword [esi + 0x144], edi
je 0x434348
cmp ebx, edi
jl 0x434323
cmp dword [0x4fd00c], edi
je 0x434312
lea ecx, [ebp - 0x1c]
call fcn.00472090
push str.Verify_XMLs
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x57
call fcn.00472470
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x27
call fcn.00472320
push str.No_XML_errors_detected
call fcn.0049927d
pop ecx
push edi
jmp 0x432dd1
push str.An_XML_error_was_detected
call fcn.0049927d
cmp byte [0x5014f7], 0xff
pop ecx
mov eax, 0x5014f0
jne 0x434341
mov eax, dword [0x5014f0]
push eax
call fcn.0049927d
pop ecx
cmp ebx, edi
jl 0x433b5d
cmp dword [esi + 0x144], edi
jne 0x434441
cmp dword [esi + 0x1d8], edi
jne 0x434388
lea eax, [ebp - 0x24]
push eax
push edi
push esi
push 0x42d1d2
push edi
push edi
mov dword [ebp - 0x24], edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0xbb0], eax
cmp eax, edi
je 0x433b5d
cmp dword [esi + 0x1dc], edi
je 0x4343b8
lea edi, [esi + 0x1e0]
mov ecx, edi
call fcn.0040d59a
test al, al
jne 0x4343b8
cmp byte [edi + 7], 0xff
jne 0x4343a9
mov edi, dword [edi]
push edi
call fcn.004963f5
pop ecx
mov dword [esi + 0xb30], eax
jmp 0x4343c2
mov dword [esi + 0xb30], 1
push str.actionpreEula
lea ecx, [ebp - 0x1c]
call fcn.00472340
mov eax, dword [esi]
push 8
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x58
call dword [eax + 0x10]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x27
call fcn.00472320
push str.NOLOG:_about_to_call_ShowCurrentPage__
lea ecx, [ebp - 0x14]
call fcn.00472340
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x59
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x27
call fcn.00472320
mov ecx, esi
call fcn.0042da84
push str.NOLOG:_after_ShowCurrentPage__
lea ecx, [ebp - 0x58]
call fcn.00472340
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x5a
call fcn.00411af0
pop ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x27
call fcn.00472320
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x11
call fcn.00472320
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xbd
call fcn.00472320
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xb2
call fcn.0041a2ea
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x3f
call fcn.0041a2ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.0041a44c
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8f8]
xor ecx, ebp
call fcn.00493f43
add ebp, 0x8fc
leave
ret