Function at 0x4023d0
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4132d7
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1c8
mov eax, dword [0x41c014]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov dword [ebp - 0x110], esi
mov edi, ecx
mov dword [ebp - 0x114], edi
xor eax, eax
mov dword [ebp - 0x108], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
lea edx, [ebp - 0x108]
mov dword [ebp - 4], eax
mov ecx, str.DOTNET_DISABLE_GUI_ERRORS
call fcn.0040c830
test al, al
je 0x402486
cmp dword [ebp - 0xf4], 8
lea eax, [ebp - 0x108]
cmovae eax, dword [ebp - 0x108]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
cmp eax, 1
je 0x4035a2
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf0]
push 0x29
mov dword [ebp - 0xf0], eax
push str.____https:__aka.ms_dotnet_core_applaunch_
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
call fcn.00404c90
mov byte [ebp - 4], 3
cmp esi, 0x80008083
jne 0x4029b8
push 0x3f
xor eax, eax
mov dword [ebp - 0x90], 0
push str.To_run_this_application__you_must_install_.NET_Desktop_Runtime
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
call fcn.00404c90
push 5
push str.6.0.6
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 4
call fcn.00404da0
mov dword [ebp - 0xc0], 0
xor ecx, ecx
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xc0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 2
push 0x417220
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 5
call fcn.00404da0
mov dword [ebp - 0xd8], 0
xor ecx, ecx
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xd8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 3
push 0x417720
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 6
call fcn.00404da0
mov dword [ebp - 0x78], 0
xor ecx, ecx
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x78], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x68], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 4
push str._._n_n
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 7
call fcn.00404da0
xor ecx, ecx
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov edx, dword [ebp - 0x4c]
movq qword [ebp - 0x128], xmm1
movups xmmword [ebp - 0x40], xmm0
cmp edx, 8
jb 0x4026bf
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4026a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
movups xmm0, xmmword [ebp - 0x40]
add esp, 8
movq xmm1, qword [ebp - 0x128]
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x64]
movq qword [ebp - 0x50], xmm1
movups xmmword [ebp - 0x60], xmm0
cmp edx, 8
jb 0x402706
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4026fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
cmp edx, 8
jb 0x40275e
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402754
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
cmp edx, 8
jb 0x4027bb
mov ecx, dword [ebp - 0xc0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4027b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
cmp edx, 8
jb 0x40281b
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402811
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402811
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
sub esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d8]
call fcn.00404340
push ecx
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d8]
call fcn.00405560
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x40296b
nop dword [eax + eax]
mov edx, dword [ebp - 0xe0]
test edx, edx
je 0x4028aa
cmp dword [ebp - 0x1c], edx
jb 0x4028aa
cmp dword [ebp - 0xdc], 8
lea ecx, [ebp - 0xf0]
push edx
cmovae ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
push ecx
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.004065e0
test eax, eax
je 0x4028ca
push ecx
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x1d8]
call fcn.00405560
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x402870
jmp 0x40296b
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x1c]
add ecx, 0xffffffdb
sub edx, ecx
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
cmp dword [ebp - 0x1c], ecx
jb 0x4035de
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push edx
cmovae eax, dword [ebp - 0x2c]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x90]
call fcn.00404c90
mov edx, dword [ebp - 0x94]
cmp edx, 8
jb 0x402950
mov ecx, dword [ebp - 0xa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402946
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4029b2
push edx
push ecx
call fcn.0040fe50
add esp, 8
movups xmm0, xmmword [ebp - 0x90]
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [ebp - 0x80]
movq qword [ebp - 0x98], xmm0
lea ecx, [ebp - 0x1d8]
call fcn.004035f0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x40347a
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4030d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4030d4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp esi, 0x80008096
jne 0x4030e3
push 0x48
push str.To_run_this_application__you_must_install_missing_frameworks_for_.NET._n_n
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
call fcn.00404c90
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x402a28
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402a1e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4030ce
push edx
push ecx
call fcn.0040fe50
add esp, 8
movups xmm0, xmmword [ebp - 0x90]
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x38], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x34], 7
movq xmm0, qword [ebp - 0x80]
movq qword [ebp - 0x50], xmm0
mov word [ebp - 0x48], ax
sub esp, 0xc
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1d8]
call fcn.00404340
push ecx
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d8]
call fcn.00405560
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x40308f
nop dword [eax]
push 0xf
xor eax, eax
mov dword [ebp - 0x78], 0
push str.The_framework_
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
call fcn.00404c90
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xd8]
push 0x10
xor eax, eax
mov dword [ebp - 0xd8], 0
push str._was_not_found.
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
call fcn.00404c90
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xc0]
push 4
xor eax, eax
mov dword [ebp - 0xc0], 0
push str.___
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
call fcn.00404c90
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x68]
test edx, edx
je 0x402bd8
mov esi, dword [ebp - 0x38]
cmp esi, edx
jb 0x402bdb
cmp dword [ebp - 0x64], 8
lea ecx, [ebp - 0x78]
push edx
cmovae ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
push ecx
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004065e0
test eax, eax
jne 0x402bd8
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0xc8]
cmp esi, edx
jb 0x402bdb
cmp dword [ebp - 0xc4], 8
lea eax, [ebp - 0xd8]
mov edi, dword [ebp - 0x34]
lea ecx, [ebp - 0x48]
cmovae eax, dword [ebp - 0xd8]
cmp edi, 8
push eax
cmovae ecx, dword [ebp - 0x48]
mov eax, esi
sub eax, edx
lea eax, [ecx + eax*2]
push eax
call fcn.00406590
test eax, eax
jne 0x402bde
cmp edi, 8
lea eax, [ebp - 0x48]
push esi
cmovae eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x60]
push eax
call fcn.00404da0
push 2
push 0x41739c
lea ecx, [ebp - 0x60]
call fcn.00404da0
jmp 0x402dba
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
mov edx, dword [ebp - 0xb0]
test edx, edx
je 0x402d7e
cmp esi, edx
jb 0x402d7e
cmp dword [ebp - 0xac], 8
lea ecx, [ebp - 0xc0]
push edx
cmovae ecx, dword [ebp - 0xc0]
lea eax, [ebp - 0x48]
cmp edi, 8
push ecx
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004065e0
test eax, eax
jne 0x402d78
cmp dword [ebp - 0x4c], 8
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 7
mov word [eax], cx
xor eax, eax
mov ecx, dword [ebp - 0xb0]
mov word [ebp - 0x2c], ax
mov eax, dword [ebp - 0x38]
cmp eax, ecx
jb 0x4035e8
sub eax, ecx
or esi, 0xffffffff
cmp eax, 0xffffffff
cmovb esi, eax
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
mov dword [ebp - 0x124], esi
cmovae eax, dword [ebp - 0x48]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x118], eax
cmp esi, 7
ja 0x402ca8
mov dword [ebp - 0x1c], esi
add esi, esi
push esi
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00411140
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0x2c], ax
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x2c]
jmp 0x402d12
cmp esi, 0x7ffffffe
ja 0x4035e3
mov edi, esi
or edi, 7
cmp edi, 0x7ffffffe
jbe 0x402cc8
mov edi, 0x7ffffffe
jmp 0x402cd3
cmp edi, 0xa
mov eax, 0xa
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00404f20
mov dword [ebp - 0x1c], esi
add esi, esi
push esi
push dword [ebp - 0x118]
mov dword [ebp - 0x11c], eax
push eax
mov dword [ebp - 0x18], edi
call fcn.00411140
mov edx, dword [ebp - 0x11c]
add esp, 0xc
mov ecx, dword [ebp - 0x124]
xor eax, eax
mov dword [ebp - 0x2c], edx
mov word [esi + edx], ax
cmp edi, 8
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2c]
push ecx
cmovae eax, edx
lea ecx, [ebp - 0x60]
push eax
call fcn.00404da0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x402d67
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402d5d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
push 2
push 0x41739c
lea ecx, [ebp - 0x60]
call fcn.00404da0
jmp 0x402dba
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0xe0]
test edx, edx
je 0x402dba
cmp esi, edx
jb 0x402dba
cmp dword [ebp - 0xdc], 8
lea ecx, [ebp - 0xf0]
push edx
cmovae ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0x48]
cmp edi, 8
push ecx
cmovae eax, dword [ebp - 0x48]
push eax
call fcn.004065e0
test eax, eax
je 0x402ede
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0xac]
cmp edx, 8
jb 0x402dfe
mov ecx, dword [ebp - 0xc0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402df4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
cmp edx, 8
jb 0x402e5f
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402e55
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
cmp edx, 8
jb 0x402eba
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402eb0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
push ecx
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x1d8]
call fcn.00405560
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x402a90
jmp 0x403083
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x38]
add ecx, 0xffffffdb
sub edx, ecx
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
cmp dword [ebp - 0x38], ecx
jb 0x4035e8
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
push edx
cmovae eax, dword [ebp - 0x48]
lea eax, [eax + ecx*2]
push eax
lea ecx, [ebp - 0x90]
call fcn.00404c90
mov edx, dword [ebp - 0x94]
cmp edx, 8
jb 0x402f68
mov ecx, dword [ebp - 0xa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402f5e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
movups xmm0, xmmword [ebp - 0x90]
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [ebp - 0x80]
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0xac]
movq qword [ebp - 0x98], xmm0
cmp edx, 8
jb 0x402fc7
mov ecx, dword [ebp - 0xc0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x402fbd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
cmp edx, 8
jb 0x403028
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40301e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
cmp edx, 8
jb 0x403083
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403079
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
mov esi, dword [ebp - 0x110]
mov edi, dword [ebp - 0x114]
lea ecx, [ebp - 0x1d8]
call fcn.004035f0
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x40347a
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4030d4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4030d4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0040fe50
add esp, 8
jmp 0x40347a
cmp esi, 0x8000809f
jne 0x403503
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
sub esp, 0xc
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1d8]
call fcn.00404340
push ecx
lea edx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1d8]
call fcn.00405560
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x40344b
nop
push 0x31
xor eax, eax
mov dword [ebp - 0x2c], 0
push str.Bundle_header_version_compatibility_check_failed.
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00404c90
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x1c]
test edx, edx
je 0x4031a3
cmp dword [ebp - 0x68], edx
jb 0x4031a3
cmp dword [ebp - 0x18], 8
lea ecx, [ebp - 0x2c]
push edx
cmovae ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 8
push ecx
cmovae eax, dword [ebp - 0x78]
push eax
call fcn.004065e0
mov byte [ebp - 0x109], 1
test eax, eax
je 0x4031aa
mov byte [ebp - 0x109], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x18]
cmp edx, 8
jb 0x4031e8
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4031de
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
cmp byte [ebp - 0x109], 0
je 0x403426
push 0x3f
xor eax, eax
mov dword [ebp - 0x90], 0
push str.To_run_this_application__you_must_install_.NET_Desktop_Runtime
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
call fcn.00404c90
push str.6.0.6
lea edx, [ebp - 0x90]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x48]
call fcn.004051c0
push 0x417220
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xc0]
call fcn.004051c0
push 0x417720
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd8]
call fcn.004051c0
push str._._n_n
mov edx, eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x2c]
call fcn.004051c0
mov esi, eax
lea eax, [ebp - 0x60]
cmp eax, esi
je 0x4032f3
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x4032c1
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4032b7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
mov dword [ebp - 0x50], 0
xor eax, eax
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x60], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x50], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x2c]
call fcn.00401260
lea ecx, [ebp - 0xd8]
call fcn.00401260
lea ecx, [ebp - 0xc0]
call fcn.00401260
lea ecx, [ebp - 0x48]
call fcn.00401260
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x7c]
cmp edx, 8
jb 0x40335a
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403350
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
push ecx
lea ecx, [ebp - 0x90]
call fcn.00407260
mov esi, eax
lea eax, [ebp - 0xa8]
cmp eax, esi
je 0x4033f7
mov edx, dword [ebp - 0x94]
cmp edx, 8
jb 0x4033b6
mov ecx, dword [ebp - 0xa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4033ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40280b
push edx
push ecx
call fcn.0040fe50
add esp, 8
mov dword [ebp - 0x98], 0
xor eax, eax
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x98], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x90]
call fcn.00401260
push 0x11
push str.apphost_version
lea ecx, [ebp - 0xa8]
call fcn.00404da0
push 5
push str.6.0.6
lea ecx, [ebp - 0xa8]
call fcn.00404da0
push ecx
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x1d8]
call fcn.00405560
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x403140
mov esi, dword [ebp - 0x110]
cmp dword [ebp - 0x50], 0
lea ecx, [ebp - 0x1d8]
jne 0x403469
call fcn.004035f0
lea ecx, [ebp - 0x78]
call fcn.00401260
jmp 0x403503
call fcn.004035f0
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 3
call fcn.00401260
push 0x22
push str.Would_you_like_to_download_it_now_
lea ecx, [ebp - 0x60]
call fcn.00404da0
push 9
push str.guitrue
lea ecx, [ebp - 0xa8]
call fcn.00404da0
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
cmovae eax, dword [ebp - 0xa8]
push eax
push esi
push edi
push str.Showing_error_dialog_for_application:__s___error_code:_0x_x___url:__s
call fcn.00406210
add esp, 0x10
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 8
cmovae eax, dword [ebp - 0x60]
push 0x14
push edi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x403503
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
push 1
cmovae eax, dword [ebp - 0xa8]
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [ebp - 0xdc]
cmp eax, 8
jb 0x403521
inc eax
lea ecx, [ebp - 0xf0]
push eax
push dword [ebp - 0xf0]
call fcn.004012c0
xor eax, eax
mov dword [ebp - 0xe0], 0
mov word [ebp - 0xf0], ax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xdc], 7
cmp eax, 8
jb 0x40355c
inc eax
lea ecx, [ebp - 0xa8]
push eax
push dword [ebp - 0xa8]
call fcn.004012c0
xor eax, eax
mov dword [ebp - 0x98], 0
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x94], 7
cmp eax, 8
jb 0x40358e
inc eax
lea ecx, [ebp - 0x60]
push eax
push dword [ebp - 0x60]
call fcn.004012c0
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov eax, dword [ebp - 0xf4]
cmp eax, 8
jb 0x4035c0
inc eax
lea ecx, [ebp - 0x108]
push eax
push dword [ebp - 0x108]
call fcn.004012c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040fe42
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
call fcn.00405180
call fcn.00401490
call fcn.00405180
int3