Function at 0x401270
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Delete registry key
Download url
Get common file path
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x426fac
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1114
call fcn.0041c0f0
mov eax, dword [0x430304]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x42b2f5
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryA]
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, ebx
jl 0x401956
cmp dword [0x432b30], 0xb7
jne 0x401333
push str.Only_one_instance_at_a_time_please
call fcn.004029b0
add esp, 4
mov esi, eax
push 0xa
mov ecx, esi
call fcn.00402180
mov eax, dword [esi]
mov eax, dword [eax + 4]
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0x40130b
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0x40130b
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0x401956
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0x401327
or eax, 4
push ebx
push eax
call fcn.004010a0
jmp 0x401956
push 8
mov dword [ebp - 0x690], ebx
call fcn.0040ee52
mov esi, eax
add esp, 4
mov dword [ebp - 0x698], esi
mov dword [ebp - 4], ebx
cmp esi, ebx
je 0x401360
push esi
call fcn.0040aca0
mov dword [ebp - 0x68c], esi
jmp 0x401366
mov dword [ebp - 0x68c], ebx
lea edi, [ebp - 0x1120]
mov dword [ebp - 4], 0xffffffff
call fcn.0040b870
push 0x103
xor edi, edi
lea edx, [ebp - 0x523]
push edi
mov dword [ebp - 4], 1
push edx
mov byte [ebp - 0x524], 0
call fcn.00411ae0
push 0x103
lea eax, [ebp - 0x197]
push edi
push eax
mov byte [ebp - 0x198], 0
call fcn.00411ae0
push ecx
mov ecx, esp
mov dword [ebp - 0x698], esp
push 3
mov esi, 0xf
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], edi
push 0x42b34c
mov byte [ecx], 0
call fcn.00402650
sub esp, 0x1c
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x694], esp
push 0xb
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], edi
push str.__d___p:__m
mov byte [ecx], 0
call fcn.00402650
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x69c], esp
mov byte [ebp - 4], 3
mov ebx, 0x10
push ebx
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], edi
push str.AUCHECK_CORE.txt
mov byte [ecx], 0
call fcn.00402650
lea esi, [ebp - 0x688]
mov byte [ebp - 4], 1
call fcn.00403b20
mov byte [ebp - 4], 4
cmp dword [ebp - 0x688], 3
jg 0x401459
push str.AUCHECK_STARTED
push str.main
push 0x55
push str.jaucheck.cpp
mov edi, esi
call fcn.00403d50
add esp, 0x10
lea ecx, [ebp - 0x524]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp eax, 1
jl 0x401477
cmp eax, 0x104
jle 0x40148b
lea edx, [ebp - 0x524]
push 0x42b398
push edx
call fcn.0040f00c
add esp, 8
mov esi, dword [ebp - 0x68c]
lea eax, [ebp - 0x690]
push eax
mov ecx, esi
call fcn.00409c70
test eax, eax
js 0x4014e1
mov eax, dword [ebp - 0x690]
mov edx, esi
call fcn.00409e50
cmp dword [ebp - 0x688], 3
jg 0x401bfe
push str.Downloading_File_from_an_old_job
push str.main
push 0x60
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
jmp 0x401bfe
call fcn.0040f0ae
push eax
lea ecx, [ebp - 0x524]
push ecx
lea edx, [ebp - 0x198]
push str._sAUCHECK_MAP__d.xml
push edx
call fcn.0040f00c
add esp, 0x10
call fcn.00409ff0
mov esi, eax
test esi, esi
je 0x40156a
cmp dword [ebp - 0x688], 3
jg 0x401541
cmp dword [esi + 0x14], ebx
jb 0x40151f
mov eax, dword [esi]
jmp 0x401521
mov eax, esi
push eax
push str.Override_is_enabled__downloading_from__s:
push str.main
push 0x6c
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x14
cmp dword [esi + 0x14], ebx
jb 0x40154a
mov eax, dword [esi]
jmp 0x40154c
mov eax, esi
push 0
push 0
lea ecx, [ebp - 0x198]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.00401240
jmp 0x401612
push 0x7f
lea edx, [ebp - 0x93]
push 0
push edx
mov byte [ebp - 0x94], 0
call fcn.00411ae0
push 0x7f
lea eax, [ebp - 0x41f]
push 0
push eax
mov byte [ebp - 0x420], 0
call fcn.00411ae0
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push 0x42b404
push str.http:__javadl_esd.sun.com_update_AU_
lea ecx, [ebp - 0x94]
push str._smap__s.xml
push ecx
call esi
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x420]
push str.No_Override__downloading_from__s
push eax
call esi
add esp, 0x34
cmp dword [ebp - 0x688], 3
jg 0x4015f8
lea ecx, [ebp - 0x420]
push ecx
push str.main
push 0x79
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
push 0
push 0
lea edx, [ebp - 0x198]
push edx
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
cmp dword [ebp - 0x688], 3
jg 0x40163a
push str.Parsing_XML_file
push str.main
push 0x7e
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
push 0x188
mov byte [ebp - 4], 5
call fcn.0040ee52
add esp, 4
mov dword [ebp - 0x698], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x401671
lea ecx, [ebp - 0x198]
push ecx
mov ecx, eax
call fcn.0040bc30
mov esi, eax
mov dword [ebp - 0x69c], esi
jmp 0x401681
mov dword [ebp - 0x69c], 0
mov esi, dword [ebp - 0x69c]
push esi
mov dword [ebp - 4], 4
call fcn.0040c020
test al, al
jne 0x4016ed
cmp dword [ebp - 0x688], 3
jg 0x4016bd
push str.Error_Parsing_the_Document:_Quiting_application
push str.main
push 0x8a
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
test esi, esi
je 0x4016d0
push esi
call fcn.0040bf40
push esi
call fcn.0040e8d9
add esp, 4
cmp dword [ebp - 0x68c], 0
je 0x401940
mov edi, dword [ebp - 0x68c]
call fcn.004020a0
jmp 0x401940
cmp dword [ebp - 0x688], 3
jg 0x401718
push str.Done_Parsing_XML_file
push str.main
push 0x90
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
mov eax, dword [esi + 0x24]
xor edi, edi
mov dword [esi + 0x28], eax
cmp eax, edi
je 0x401731
push str.mapping
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
je 0x401745
push str.version
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
jne 0x401754
mov dword [ebp - 0x698], edi
jmp 0x40175d
mov edx, dword [eax + 4]
mov dword [ebp - 0x698], edx
mov eax, dword [esi + 0x24]
mov dword [esi + 0x28], eax
cmp eax, edi
je 0x401774
push str.mapping
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
je 0x401788
push 0x42b4fc
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
jne 0x401797
mov dword [ebp - 0x690], edi
jmp 0x4017a0
mov eax, dword [eax + 4]
mov dword [ebp - 0x690], eax
mov eax, dword [esi + 0x24]
mov dword [esi + 0x28], eax
cmp eax, edi
je 0x4017b7
push str.mapping
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
je 0x4017cb
push 0x42b500
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
jne 0x4017da
mov dword [ebp - 0x694], edi
jmp 0x4017e3
mov ecx, dword [eax + 4]
mov dword [ebp - 0x694], ecx
mov eax, dword [esi + 0x24]
mov dword [esi + 0x28], eax
cmp eax, edi
je 0x4017fa
push str.mapping
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
je 0x40180e
push str.checksum
call fcn.0040de90
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x28]
cmp eax, edi
jne 0x401819
xor ebx, ebx
jmp 0x40181c
mov ebx, dword [eax + 4]
cmp dword [ebp - 0x688], 3
jg 0x401847
push str.Checking_map.xml_for_valid_tags:
push str.main
push 0x97
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
test ebx, ebx
je 0x402022
cmp dword [ebp - 0x698], 0
je 0x402022
mov edi, dword [ebp - 0x694]
test edi, edi
jne 0x4018ba
cmp dword [ebp - 0x690], edi
jne 0x4018ba
call fcn.004020d0
cmp dword [ebp - 0x68c], edi
je 0x401886
mov edi, dword [ebp - 0x68c]
call fcn.004020a0
cmp dword [ebp - 0x688], 3
jg 0x401940
push str.Error_parsing_XML_file:_Missing_downloadUrl
push str.main
push 0xa7
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
jmp 0x401940
cmp dword [ebp - 0x688], 3
jg 0x4018eb
push str.Storing_file_type_to_registry
push str.main
push 0xac
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
mov edi, dword [ebp - 0x694]
add esp, 0x10
mov edx, dword [ebp - 0x690]
push edx
push edi
call fcn.0040a3a0
test eax, eax
jns 0x401977
cmp dword [ebp - 0x688], 3
jg 0x401927
push str.Could_not_store_checksum_value:_Exit
push str.main
push 0xae
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
cmp dword [ebp - 0x68c], 0
je 0x40193b
mov edi, dword [ebp - 0x68c]
call fcn.004020a0
call fcn.004020d0
lea esi, [ebp - 0x688]
call fcn.00403ce0
lea eax, [ebp - 0x1120]
call fcn.0040b970
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040e376
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x401983
mov dword [ebp - 0x694], edi
jmp 0x40198f
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x688], 3
jg 0x4019ba
push str.Storing_checksums_to_file
push str.main
push 0xb7
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
cmp dword [ebx + 0x14], 0x10
jb 0x4019c4
mov edi, dword [ebx]
jmp 0x4019c6
mov edi, ebx
test edi, edi
je 0x4019d3
call fcn.0040a130
test eax, eax
jns 0x401a11
cmp dword [ebp - 0x688], 3
jg 0x4019fe
push str.Could_not_store_checksum_value:_Exit
push str.main
push 0xb9
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
mov edi, dword [ebp - 0x68c]
test edi, edi
je 0x40193b
jmp 0x401936
cmp dword [ebp - 0x688], 3
jg 0x401a3c
push str.Verifying_that_version_is_newer
push str.main
push 0xc0
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
mov ebx, dword [ebp - 0x698]
call fcn.00409ec0
test eax, eax
jns 0x401a86
mov esi, dword [ebp - 0x69c]
call fcn.004020d0
mov edi, dword [ebp - 0x68c]
test edi, edi
je 0x401a65
call fcn.004020a0
cmp dword [ebp - 0x688], 3
jg 0x401940
push str.No_update_available__exit
push str.main
push 0xc5
jmp 0x4018a2
lea ecx, [ebp - 0x524]
push ecx
lea edx, [ebp - 0x198]
push str._sAUPatch
push edx
call fcn.0040f00c
add esp, 0xc
push 3
lea ecx, [ebp - 0x198]
push ecx
lea edx, [ebp - 0x29c]
lea eax, [ebp - 0x298]
push edx
mov dword [ebp - 0x29c], eax
call fcn.00402520
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x694]
cmp dword [eax + 0x14], 0x10
jb 0x401ad4
mov eax, dword [eax]
push 3
push eax
lea edx, [ebp - 0x3a0]
lea ecx, [ebp - 0x39c]
push edx
mov dword [ebp - 0x3a0], ecx
call fcn.00402520
mov byte [ebp - 4], 9
cmp dword [ebp - 0x688], 3
jg 0x401b1e
push str.Downloading_the_file
push str.main
push 0xd0
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
push 0x64
call fcn.0040ee52
add esp, 4
mov dword [ebp - 0x698], eax
mov byte [ebp - 4], 0xa
test eax, eax
je 0x401b43
push 1
mov ebx, eax
call fcn.0040a660
mov ebx, eax
jmp 0x401b45
xor ebx, ebx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x3a0]
mov edx, dword [ebp - 0x29c]
push eax
mov ecx, ebx
mov dword [ebp - 0x690], ebx
call fcn.0040a860
mov esi, dword [ebp - 0x68c]
mov eax, ebx
mov ecx, esi
call fcn.00409af0
test eax, eax
js 0x401f8c
mov eax, ebx
mov edx, esi
call fcn.00409e50
cmp dword [ebp - 0x688], 3
jg 0x401bbd
mov eax, dword [ebp - 0x694]
cmp dword [eax + 0x14], 0x10
jb 0x401b9a
mov eax, dword [eax]
push eax
push str.Successfully_downloaded_file_from__s
push str.main
push 0xdf
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x14
mov eax, dword [ebp - 0x3a0]
lea ecx, [ebp - 0x39c]
cmp eax, ecx
je 0x401bd6
push eax
call fcn.0040e8e4
add esp, 4
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x29c]
lea edx, [ebp - 0x298]
cmp eax, edx
je 0x401bf3
push eax
call fcn.0040e8e4
add esp, 4
mov esi, dword [ebp - 0x69c]
call fcn.004020d0
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x198]
push str._sAUPatch
push ecx
call fcn.0040f00c
add esp, 0xc
call fcn.0040a270
mov esi, eax
call fcn.0040a500
lea edx, [ebp - 0x6bc]
push edx
push 0xf003f
push 0
push 0
push 0x80000001
mov ebx, eax
mov dword [ebp - 0x6c0], 0x80000001
mov dword [ebp - 0x6b0], 0
mov byte [ebp - 0x6b4], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x401c68
mov byte [ebp - 0x6b4], 1
mov eax, dword [ebp - 0x6bc]
push str.SoftwareJavaSoftAuto_Update_
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov edi, dword [ebp - 0x68c]
lea edx, [ebp - 0x198]
mov ecx, edi
call fcn.0040b1c0
test eax, eax
jns 0x401cd5
test edi, edi
je 0x401c9a
call fcn.004020a0
mov esi, dword [ebp - 0x690]
test esi, esi
je 0x401cb4
mov eax, esi
call fcn.0040a790
push esi
call fcn.0040e8d9
add esp, 4
cmp dword [ebp - 0x688], 3
jg 0x401940
push str.Failed_the_Publisher_verification
push str.main
push 0xf9
jmp 0x4018a2
mov edi, 3
cmp dword [ebp - 0x688], edi
jg 0x401d09
push str.Verifying_the_Checksums
push str.main
push 0xfe
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
mov edi, 3
test esi, esi
je 0x401f2d
cmp dword [esi + 0x14], 0x10
jb 0x401d1b
mov edx, dword [esi]
jmp 0x401d1d
mov edx, esi
lea ecx, [ebp - 0x198]
push ecx
mov ecx, dword [ebp - 0x68c]
call fcn.0040b7e0
test al, al
je 0x401f2d
cmp dword [ebp - 0x688], edi
jg 0x401d66
push str.Checksums_match__starting_Install
push str.main
push 0x101
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
mov edi, 3
call fcn.00401240
push 0x44
lea edx, [ebp - 0x58]
push 0
push edx
call fcn.00411ae0
xor eax, eax
push 0x103
push eax
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0x6a0], eax
mov byte [ebp - 0x29c], al
lea eax, [ebp - 0x29b]
push eax
mov dword [ebp - 0x58], 0x44
call fcn.00411ae0
add esp, 0x18
cmp ebx, 1
jne 0x401e4a
push 0x103
lea ecx, [ebp - 0x39f]
push 0
push ecx
mov byte [ebp - 0x3a0], 0
call fcn.00411ae0
add esp, 0xc
lea edx, [ebp - 0x3a0]
push edx
push 0
push 0
push 0x25
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
js 0x401ec1
cmp dword [ebp - 0x688], edi
jg 0x401e21
push str.Launching_MSP
push str.main
push 0x117
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push str._smsiexec__Update__s__qn
lea edx, [ebp - 0x29c]
push 0x104
push edx
call fcn.0040e82d
add esp, 0x14
jmp 0x401ec1
test ebx, ebx
jne 0x401e97
cmp dword [ebp - 0x688], edi
jg 0x401e78
push str.Launching_Executable
push str.main
push 0x11c
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
lea eax, [ebp - 0x198]
push eax
push 0x42b760
lea ecx, [ebp - 0x29c]
push 0x104
push ecx
call fcn.0040e82d
jmp 0x401ebe
cmp dword [ebp - 0x688], edi
jg 0x401ec1
push str.Cannot_retrieve_file_type
push str.main
push 0x120
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
lea edx, [ebp - 0x6ac]
push edx
lea eax, [ebp - 0x58]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x29c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp dword [ebp - 0x68c], 0
je 0x401efb
mov edi, dword [ebp - 0x68c]
call fcn.004020a0
mov esi, dword [ebp - 0x690]
test esi, esi
je 0x401f0a
call fcn.004020f0
lea esi, [ebp - 0x688]
call fcn.00403ce0
lea eax, [ebp - 0x1120]
call fcn.0040b970
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
jmp 0x40195b
cmp dword [ebp - 0x688], edi
jg 0x401f57
push str.Checksum_did_not_match__exit_install
push str.main
push 0x131
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x10
test esi, esi
je 0x401f60
call fcn.00401240
cmp dword [ebp - 0x68c], 0
je 0x401f74
mov edi, dword [ebp - 0x68c]
call fcn.004020a0
mov esi, dword [ebp - 0x690]
test esi, esi
je 0x401940
call fcn.004020f0
jmp 0x401940
cmp dword [ebp - 0x688], 3
jg 0x401fc6
mov eax, dword [ebp - 0x694]
cmp dword [eax + 0x14], 0x10
jb 0x401fa3
mov eax, dword [eax]
push eax
push str.Unable_to_start_download__s
push str.main
push 0xd8
push str.jaucheck.cpp
lea edi, [ebp - 0x688]
call fcn.00403d50
add esp, 0x14
test esi, esi
je 0x401fd1
mov edi, esi
call fcn.004020a0
test ebx, ebx
je 0x401fdc
mov esi, ebx
call fcn.004020f0
mov esi, dword [ebp - 0x69c]
call fcn.004020d0
mov eax, dword [ebp - 0x3a0]
lea edx, [ebp - 0x39c]
cmp eax, edx
je 0x402000
push eax
call fcn.0040e8e4
add esp, 4
mov eax, dword [ebp - 0x29c]
lea ecx, [ebp - 0x298]
cmp eax, ecx
je 0x401940
push eax
call fcn.0040e8e4
add esp, 4
jmp 0x401940
call fcn.004020d0
cmp dword [ebp - 0x68c], 0
je 0x40203b
mov edi, dword [ebp - 0x68c]
call fcn.004020a0
cmp dword [ebp - 0x688], 3
jg 0x401940
push str.Error_parsing_XML_file:_Missing_checksum_or_version
push str.main
push 0x9e
jmp 0x4018a2