Function at 0x407c70
Capabilities:
Accept command line arguments
Check if file exists
Check os version
Get common file path
Get file attributes
Log keystrokes via polling
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x43c
push ebx
push esi
push edi
push 0x407c50
call fcn.00420168
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, 0xf4240
jne 0x407ca4
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
call fcn.00403e80
lea eax, [ebp - 0x230]
mov dword [ebp - 0x230], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x408f89
cmp dword [ebp - 0x220], 2
jne 0x408f89
cmp dword [ebp - 0x22c], 5
jb 0x408f89
lea ecx, [ebp - 0x48]
mov byte [str.___InstallEnd__], 0x3b
mov byte [str.___Install__UTF_8_], 0x3b
call fcn.00416340
lea ecx, [ebp - 0x11c]
call fcn.00416340
lea ecx, [ebp - 0x6c]
call fcn.00416340
push 0x42b9ec
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x434f58], eax
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
call fcn.0040ca40
call fcn.00405660
push 3
call fcn.00404c70
push 0x28
mov dword [0x434f1c], eax
call fcn.00404c70
push 2
mov dword [0x434f5c], eax
call fcn.00404c70
push 5
mov dword [0x434f18], eax
call fcn.00404c70
push 0x15
mov dword [0x434f24], eax
call fcn.00404c70
push 0x16
mov dword [0x434f28], eax
call fcn.00404c70
push 0x17
mov dword [0x434f2c], eax
call fcn.00404c70
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
mov dword [0x434f34], eax
xor edi, edi
mov dword [0x434f30], 0
mov dword [0x434f20], 0
nop
push 0
push edi
lea eax, [ebp - 0x43c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x407e07
push edi
lea eax, [ebp - 0xf8]
push str.SfxFolder_02d
push eax
call ebx
push 1
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00406d90
add esp, 0x18
xor esi, esi
nop
cmp dword [esi + 0x4343c4], edi
jne 0x407dff
push 0
lea eax, [ebp - 0x43c]
push eax
push dword [esi + 0x4343c8]
call fcn.00406d90
add esp, 0xc
add esi, 8
cmp esi, 0x28
jb 0x407de0
inc edi
cmp edi, 0x40
jl 0x407da0
mov esi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea eax, [ebp - 0x48]
push eax
call esi
push eax
call fcn.00405e10
add esp, 8
lea ecx, [ebp - 0x6c]
push eax
call fcn.004164b0
lea eax, [ebp - 0x6c]
push eax
call fcn.00406540
mov edi, dword [ebp - 0x6c]
push 1
push 0x42ad40
push str.SfxVarModulePlatform
call fcn.00406d90
add esp, 0x10
push 1
call fcn.00404f70
push eax
push str.SfxVarSystemPlatform
call fcn.00406d90
add esp, 0xc
push 1
call esi
push eax
push str.SfxVarCmdLine0
call fcn.00406d90
movzx eax, word [0x434f08]
lea ecx, [ebp - 0x48]
add esp, 0xc
push eax
push 0x42bb78
push 0x20
call fcn.00407300
push eax
call ebx
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.004076e0
push 1
push dword [ebp - 0x48]
push str.SfxVarSystemLanguage
call fcn.00406d90
push str.sfxlang
push edi
call fcn.00407350
add esp, 0x14
test eax, eax
je 0x407ef9
cmp word [eax], 0x3a
jne 0x407ef9
add eax, 2
push eax
call fcn.0041fca5
add esp, 4
test eax, eax
jle 0x407ee7
movzx edx, word [0x434f08]
cmp eax, 0xffff
movzx ecx, ax
cmovle edx, ecx
mov word [0x434f08], dx
add edi, 2
cmp word [edi], 0x20
jbe 0x407ef9
add edi, 2
cmp word [edi], 0x20
ja 0x407ef0
push str.sfxversion
push edi
call fcn.00407350
add esp, 8
test eax, eax
je 0x407fee
lea ecx, [ebp - 0xf0]
mov dword [0x4343b4], 8
call fcn.00409830
push 1
mov dword [ebp - 0xf0], 0x42b9bc
call fcn.00404c70
add esp, 4
lea ecx, [ebp - 0xc]
push eax
call fcn.004162e0
xor esi, esi
cmp dword [0x4350a8], esi
jbe 0x407f7c
nop dword [eax + eax]
test esi, esi
je 0x407f61
push 0x42ba1c
lea ecx, [ebp - 0xc]
call fcn.004167f0
mov eax, dword [esi*4 + 0x4350b0]
lea ecx, [ebp - 0xc]
push dword [eax + 0x10]
call fcn.00416860
inc esi
cmp esi, dword [0x4350a8]
jb 0x407f50
push 7
push 0x3eff
push 0x1f
push 0x88
push 1
lea eax, [ebp - 0x334]
push str.__n_t_X____03X____03X____03X____03X
push eax
call ebx
add esp, 0x1c
lea eax, [ebp - 0x334]
lea ecx, [ebp - 0xc]
push eax
call fcn.004167f0
push 0x42ba6c
lea ecx, [ebp - 0xc]
call fcn.004167f0
push 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0xf0]
push dword [0x434f18]
push 0x11
call fcn.0040c180
push dword [ebp - 0xc]
call fcn.0041e4d9
add esp, 4
lea ecx, [ebp - 0xf0]
call fcn.004098b0
xor esi, esi
jmp 0x408f60
push str.sfxwaitall
push edi
call fcn.00407350
add esp, 8
test eax, eax
je 0x40800d
push eax
call fcn.00402240
mov esi, eax
jmp 0x408f5d
push str.sfxelevation
push edi
mov byte [ebp - 0xd], 0
call fcn.00407350
add esp, 8
test eax, eax
je 0x408029
mov byte [ebp - 0xd], 1
mov edi, eax
push 0x208
push 0x208
mov ecx, 0x434fb4
call fcn.00407300
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x408060
push 6
push 1
call fcn.0040c000
add esp, 8
mov esi, 1
jmp 0x408f60
mov ecx, 0x434fb4
call fcn.004076e0
push str.sfxtest
push edi
call fcn.00407350
mov esi, eax
add esp, 8
test esi, esi
je 0x4081e1
cmp word [esi], 0x3a
jne case.0x4080a0.98
movzx ecx, word [esi + 2]
mov eax, ecx
or eax, 0x20
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x4080a0.98
movzx eax, byte [eax + 0x408fc4]
jmp dword [eax*4 + 0x408fac]
cmp ecx, 0x44
jne 0x4080f3
cmp word [esi + 4], 0x3a
jne case.0x4080a0.98
movzx eax, word [esi + 6]
add esi, 6
cmp eax, 0x20
jbe 0x4080e0
mov ecx, eax
cmp cx, 0x3a
je 0x4080e0
push ecx
mov ecx, 0x435098
call fcn.00403ad0
movzx eax, word [esi + 2]
add esi, 2
mov ecx, eax
cmp eax, 0x20
ja 0x4080c1
cmp dword [0x43509c], 0
jne 0x4080f6
mov esi, 0x64
jmp 0x408f60
add esi, 4
mov dword [0x435090], 0
cmp word [esi], 0x3a
jne 0x408122
lea eax, [esi + 2]
push eax
call fcn.0041fca5
add esp, 4
mov dword [0x435090], eax
cmp eax, 0xe10
ja 0x408122
test eax, eax
jne 0x40812c
mov dword [0x435090], 0xa
mov dword [0x435094], 1
jmp 0x408156
mov dword [0x435094], 2
jmp 0x408156
xor eax, eax
cmp word [esi + 4], 0x63
sete al
add eax, 3
mov dword [0x435094], eax
cmp word [esi], 0x20
jbe 0x408169
nop dword [eax]
add esi, 2
cmp word [esi], 0x20
ja 0x408160
push str.sfxconfig
push esi
mov edi, esi
call fcn.00407350
mov edx, eax
add esp, 8
test edx, edx
je 0x4081e1
movzx ecx, word [edx]
mov eax, ecx
cmp ecx, 0x3a
jne 0x408190
movzx eax, word [edx + 2]
add edx, 2
test ax, ax
je 0x4081ac
movzx ecx, ax
cmp cx, 0x20
ja 0x4081ac
movzx eax, word [edx + 2]
add edx, 2
mov ecx, eax
test ax, ax
jne 0x408198
mov eax, dword [ebp - 0x48]
xor ecx, ecx
mov dword [ebp - 0x44], 0
mov word [eax], cx
lea eax, [ebp - 0x48]
push eax
push edx
call fcn.00405e10
add esp, 8
mov edi, eax
cmp dword [0x435094], 2
je 0x4081e1
lea eax, [ebp - 0x48]
mov ecx, 0x434fb4
push eax
call fcn.00416440
push 0x434fb4
mov ecx, 0x434f78
call fcn.00416440
push 0x434fb4
mov ecx, 0x434f84
call fcn.00416440
push 0x434fb4
call fcn.00404bc0
mov esi, eax
add esp, 4
test esi, esi
js 0x4082b4
mov eax, dword [0x434f78]
xor edx, edx
mov dword [0x434f7c], esi
mov ecx, 0x434f84
mov word [eax + esi*2], dx
mov eax, dword [0x434fb4]
lea eax, [eax + esi*2]
add eax, 2
push eax
call fcn.004164b0
mov eax, dword [0x434fb4]
mov ecx, 0x434f9c
lea eax, [eax + esi*2]
add eax, 2
push eax
call fcn.004164b0
push 0x2e
mov ecx, 0x434f9c
call fcn.00416eb0
test eax, eax
jle 0x408274
mov ecx, dword [0x434f9c]
xor edx, edx
mov dword [0x434fa0], eax
mov word [ecx + eax*2], dx
push 0x434f9c
mov ecx, 0x434f90
call fcn.00416440
push 4
call fcn.00404c70
add esp, 4
mov ecx, 0x434f90
push eax
call fcn.004167f0
mov ecx, dword [0x434f9c]
mov eax, dword [0x434f90]
mov dword [0x434f18], ecx
mov dword [0x434f1c], eax
mov dword [0x434f48], ecx
call fcn.00404f70
push eax
mov ecx, 0x434fa8
call fcn.004164b0
push dword [0x434fb4]
mov ecx, 0x434fc0
call fcn.004015a0
test al, al
jne 0x408352
push dword [0x434fb4]
push 7
push 1
call fcn.0040c000
add esp, 0xc
mov esi, 2
jmp 0x408f60
cmp word [esi + 4], 0x3a
jne case.default.0x40830f
movzx eax, word [esi + 6]
add eax, 0xffffffcf
cmp eax, 4
ja case.default.0x40830f
jmp dword [eax*4 + 0x408fdc]
mov esi, 1
jmp 0x408f60
mov esi, 0x88
jmp 0x408f60
mov esi, 0x1f
jmp 0x408f60
mov esi, 0x3eff
jmp 0x408f60
mov esi, 7
jmp 0x408f60
mov esi, 0x4f3c
jmp 0x408f60
lea ecx, [ebp - 0x84]
call fcn.00416180
mov ecx, 0x43504c
call fcn.004070e0
lea eax, [ebp - 0x84]
push eax
push 0
push dword [0x434fc4]
call fcn.00405a10
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x408f52
mov eax, dword [0x435094]
test eax, eax
jne 0x408528
push str.sfxconfig
push edi
call fcn.00407350
mov esi, eax
add esp, 8
test esi, esi
je 0x408523
movzx ecx, word [esi]
mov eax, ecx
cmp ecx, 0x3a
jne 0x4083be
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
je 0x40882a
movzx ecx, ax
nop word [eax + eax]
movzx edx, cx
cmp cx, 0x20
ja 0x4083e9
movzx eax, word [esi + 2]
add esi, 2
mov ecx, eax
mov edx, eax
test ax, ax
jne 0x4083d0
test dx, dx
je 0x40882a
push 1
xorps xmm0, xmm0
mov dword [ebp - 0x5c], 0
push esi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x60], 0x42aaec
mov dword [ebp - 0x58], 0xffffffff
movlpd qword [ebp - 0x50], xmm0
call fcn.00414830
test al, al
jne 0x40847e
push esi
lea ecx, [ebp - 0xc]
call fcn.004162e0
lea eax, [ebp - 0xc]
push eax
call fcn.00404bc0
mov ecx, eax
add esp, 4
test ecx, ecx
jns 0x408441
push dword [ebp - 0xc]
jmp 0x4084ec
mov eax, dword [ebp - 0xc]
xor edx, edx
mov dword [ebp - 8], ecx
mov word [eax + ecx*2], dx
push dword [ebp - 0xc]
call fcn.00403f30
add esp, 4
test eax, eax
je 0x408439
push 1
xorps xmm0, xmm0
lea ecx, [ebp - 0x58]
push esi
movlpd qword [ebp - 0x50], xmm0
call fcn.00414830
test al, al
je 0x408439
push dword [ebp - 0xc]
call fcn.0041e4d9
add esp, 4
lea ecx, [ebp - 0x1c]
call fcn.00416180
push 0x434408
lea ecx, [ebp - 0x1c]
call fcn.004163d0
push str.___Install__UTF_8_
lea ecx, [ebp - 0x1c]
call fcn.00416730
push dword [ebp - 0x84]
lea ecx, [ebp - 0x1c]
call fcn.00416730
push str.___InstallEnd__
lea ecx, [ebp - 0x1c]
call fcn.00416730
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0x60]
push dword [ebp - 0x1c]
push eax
call fcn.00414f80
test eax, eax
jne 0x4084e9
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x18]
jne 0x4084e9
push dword [ebp - 0x1c]
call fcn.0041e4d9
add esp, 4
mov bl, 1
jmp 0x4084f6
push dword [ebp - 0x1c]
call fcn.0041e4d9
add esp, 4
xor bl, bl
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x60], 0x42aaec
call fcn.00414800
test bl, bl
jne 0x40882a
push 0xa
push 0
call fcn.0040c000
add esp, 8
mov esi, 4
jmp 0x408f52
mov eax, dword [0x435094]
cmp eax, 4
je 0x40882a
mov eax, dword [0x4340c0]
mov esi, 0x4340c0
test eax, eax
je 0x408578
nop
push eax
lea eax, [ebp - 0xf4]
push str.SfxString_d
push eax
call ebx
add esp, 0xc
push 0
push dword [esi]
call fcn.00404c70
add esp, 4
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.00406d90
mov eax, dword [esi + 0x10]
lea esi, [esi + 0x10]
add esp, 0xc
test eax, eax
jne 0x408540
push 0x42aa0c
mov ecx, 0x434fd4
call fcn.004164b0
push edi
mov ecx, 0x434fd4
call fcn.004167f0
call fcn.00401d00
mov ebx, eax
test ebx, ebx
jne 0x4085a5
lea esi, [eax + 0x20]
jmp 0x408f52
call fcn.004077a0
mov ecx, 0x434fc0
call fcn.004017f0
mov ecx, 0x43504c
call fcn.004070e0
push 0
push 0
push dword [0x434fc4]
call fcn.00405a10
add esp, 0xc
call fcn.004077a0
mov ecx, 0x434fc0
call fcn.00401600
call fcn.00401d00
call fcn.004077a0
cmp byte [ebp - 0xd], 0
jne 0x408728
test byte [0x434f3c], 4
je 0x408728
call fcn.00405960
test eax, eax
jne 0x408728
lea ecx, [ebp - 0x1c]
call fcn.00416340
lea ecx, [ebp - 0xc]
call fcn.00416340
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call fcn.00405e10
add esp, 8
lea ecx, [ebp - 0x3c]
push eax
call fcn.004162e0
push str.sfxelevation
push 0x42aa30
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x54]
push 0x42a99c
push eax
call fcn.00416640
add esp, 0xc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.004165b0
add esp, 0xc
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.004165b0
add esp, 0xc
lea ecx, [ebp - 0x9c]
push 0x20
push eax
call fcn.004161b0
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.00416520
add esp, 0xc
lea ecx, [ebp - 0xc]
push dword [eax]
call fcn.004164b0
push dword [ebp - 0x104]
call fcn.0041e4d9
push dword [ebp - 0x9c]
call fcn.0041e4d9
push dword [ebp - 0x110]
call fcn.0041e4d9
push dword [ebp - 0x90]
call fcn.0041e4d9
push dword [ebp - 0x54]
call fcn.0041e4d9
add esp, 0x14
push 0xffffffffffffffff
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
push 0
push 2
push dword [ebp - 0xc]
call fcn.00402a50
push dword [ebp - 0x3c]
neg eax
sbb esi, esi
and esi, 0xfffffff5
add esi, 0xb
call fcn.0041e4d9
push dword [ebp - 0xc]
call fcn.0041e4d9
push dword [ebp - 0x1c]
call fcn.0041e4d9
add esp, 0x18
jmp 0x408f52
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0
push eax
push str.SetEnvironment
call fcn.00405640
mov esi, eax
add esp, 8
test esi, esi
je 0x4087ab
push esi
lea ecx, [ebp - 0xc]
call fcn.004162e0
push 0x3d
push dword [ebp - 0xc]
call fcn.004169a0
mov ecx, eax
add esp, 8
test ecx, ecx
jle 0x4087a0
mov eax, dword [ebp - 0xc]
xor edx, edx
mov dword [ebp - 8], ecx
push edx
mov word [eax + ecx*2], dx
inc ecx
lea eax, [esi + ecx*2]
push eax
push dword [ebp - 0xc]
call fcn.00406d90
push dword [ebp - 0xc]
inc dword [ebp - 0x20]
call fcn.0041e4d9
lea eax, [ebp - 0x20]
push eax
push str.SetEnvironment
call fcn.00405640
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x408746
jmp 0x4087ab
push dword [ebp - 0xc]
call fcn.0041e4d9
add esp, 4
call fcn.00407af0
mov eax, dword [0x4343b4]
xor ecx, ecx
cmp eax, 0xffffffff
cmove eax, ecx
mov dword [0x4343b4], eax
cmp byte [0x434fd3], cl
je 0x408831
push ecx
push str.HelpText
call fcn.00405640
mov esi, eax
add esp, 8
test esi, esi
jne 0x4087ea
push 0x18
call fcn.00404c70
add esp, 4
mov esi, eax
lea ecx, [ebp - 0xf0]
call fcn.00409830
push 0
push esi
push dword [0x434f18]
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x42b9bc
push 0x11
mov dword [ebp - 0xb8], 0x7d6
call fcn.0040c180
lea ecx, [ebp - 0xf0]
call fcn.004098b0
xor esi, esi
jmp 0x408f52
cmp byte [0x434fd1], cl
je 0x408843
and eax, 0xfffffeff
mov dword [0x4343b4], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push str.InstallPath
call fcn.00405640
add esp, 8
test eax, eax
je 0x408870
push eax
mov ecx, 0x434f6c
call fcn.004164b0
mov byte [0x434f41], 1
push 0x434f6c
call fcn.00407710
push 0
push str.BeginPromptTimeout
call fcn.00405640
add esp, 0xc
test eax, eax
je 0x40889b
push eax
call fcn.0041fca5
add esp, 4
mov dword [0x434f44], eax
cmp dword [0x43509c], 0
je 0x4088b0
call fcn.0040c5c0
mov esi, eax
jmp 0x408f52
cmp dword [0x435094], 3
jne 0x4088c5
call fcn.0040c910
mov esi, eax
jmp 0x408f52
push 0
push 0x42aa08
push str.SfxVarApiPath
call fcn.00406d90
call fcn.00407af0
push 0
push str.ExecuteOnLoad
call fcn.00405640
add esp, 0x14
test eax, eax
je 0x40895b
cmp byte [0x434fd2], 0
jne 0x40895b
mov ecx, 0x4343ec
call fcn.00409490
push 0
push dword [0x4343f0]
push str.SfxVarApiPath
call fcn.00406d90
add esp, 0xc
call fcn.00407af0
push 0x42aa08
lea ecx, [ebp - 0x3c]
call fcn.004162e0
mov ecx, 0x4343ec
call fcn.00409490
push 0x42aa08
lea eax, [ebp - 0x3c]
push eax
push 0x42aa08
push dword [0x4343f0]
push str.ExecuteOnLoad
call fcn.004022d0
push dword [ebp - 0x3c]
call fcn.0041e4d9
add esp, 0x18
mov ecx, 0x434ff8
call fcn.0040a240
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
mov esi, 0x8000
push 0
push str.BeginPrompt
call fcn.00405640
add esp, 8
test eax, eax
je 0x4089c8
cmp byte [0x434fd1], 0
jne 0x4089c8
push eax
push dword [0x434f18]
call fcn.0040bed0
add esp, 8
test eax, eax
je 0x408ae6
push 0x10
call edi
test si, ax
je 0x4089b5
mov word [0x434fd0], 0x101
cmp dword [0x435068], 0
je 0x4089c8
and dword [0x4343b4], 0xffffff7f
lea ecx, [ebp - 0x30]
call fcn.00416340
cmp byte [0x434fd0], 0
je 0x408a45
mov esi, dword [0x434fcc]
nop
push str.AutoInstall
lea ecx, [ebp - 0x30]
call fcn.004164b0
movzx eax, word [esi]
lea ecx, [ebp - 0x30]
push eax
call fcn.00403ad0
push 0
push dword [ebp - 0x30]
call fcn.00405640
add esp, 8
test eax, eax
je 0x408af0
movzx eax, word [esi + 2]
add esi, 2
cmp eax, 0x30
jb 0x408a1f
cmp eax, 0x39
jbe 0x4089e0
cmp eax, 0x61
jb 0x408a29
cmp eax, 0x7a
jbe 0x4089e0
cmp eax, 0x41
jb 0x408a33
cmp eax, 0x5a
jbe 0x4089e0
push str.AutoInstall
lea ecx, [ebp - 0x30]
call fcn.004164b0
mov esi, 0x8000
cmp dword [ebp - 0x2c], 0
mov byte [ebp - 0x24], 0
jne 0x408a99
push 0
push str.ExecuteFile
call fcn.00405640
add esp, 8
test eax, eax
je 0x408a73
push str.ExecuteFile
lea ecx, [ebp - 0x30]
call fcn.004164b0
mov byte [ebp - 0x24], 1
cmp dword [ebp - 0x2c], 0
jne 0x408a99
push 0
push str.RunProgram
call fcn.00405640
add esp, 8
test eax, eax
je 0x408a99
push str.RunProgram
lea ecx, [ebp - 0x30]
call fcn.004164b0
cmp byte [0x434fd0], 0
jne 0x408b13
cmp byte [0x434fd1], 0
jne 0x408b13
mov eax, dword [0x4343b4]
and al, 0xc0
cmp al, 0x80
jne 0x408b13
push dword [0x434f2c]
push dword [0x434f28]
call fcn.0040c110
add esp, 8
test eax, eax
jne 0x408b13
cmp byte [0x434f40], al
je 0x408b09
push dword [ebp - 0x30]
call fcn.0041e4d9
add esp, 4
jmp 0x408970
mov esi, 5
jmp 0x408f52
push dword [ebp - 0x30]
push 0xe
push 0
call fcn.0040c000
add esp, 0xc
mov esi, 6
jmp 0x408f47
mov esi, 5
jmp 0x408f47
cmp dword [0x434f70], 0
jne 0x408b49
lea eax, [ebp - 0x54]
push str.7ZipSfx._03x
push eax
call fcn.00404580
add esp, 8
mov ecx, 0x434f6c
push eax
call fcn.00416440
push dword [ebp - 0x54]
call fcn.0041e4d9
mov byte [0x434f41], 0
jmp 0x408b85
push 0x434f6c
lea ecx, [ebp - 0xc]
call fcn.00416280
lea eax, [ebp - 0xc]
push eax
call fcn.00407710
add esp, 4
cmp dword [ebp - 8], 0
je 0x408b76
lea eax, [ebp - 0xc]
mov ecx, 0x434f6c
push eax
call fcn.00416440
push dword [ebp - 0xc]
mov byte [0x434f41], 1
call fcn.0041e4d9
mov ecx, dword [0x434f6c]
add esp, 4
mov edx, dword [0x434f70]
movzx eax, word [ecx + edx*2 - 2]
cmp eax, 0x5c
je 0x408ba3
cmp eax, 0x2f
jne 0x408bb1
lea eax, [edx - 1]
xor edx, edx
mov dword [0x434f70], eax
mov word [ecx + eax*2], dx
cmp byte [0x434fd1], 0
je 0x408bc1
or dword [0x434f3c], 3
push str.PreExtract
lea ecx, [ebp - 0x78]
call fcn.004162e0
mov eax, dword [0x434fcc]
lea ecx, [ebp - 0x78]
movzx eax, word [eax]
push eax
call fcn.00403ad0
push 0
push dword [ebp - 0x78]
call fcn.00405640
add esp, 8
test eax, eax
je 0x408c63
cmp byte [0x434fd2], 0
jne 0x408c63
mov ecx, 0x4343ec
call fcn.00409490
push 0
push dword [0x4343f0]
push str.SfxVarApiPath
call fcn.00406d90
add esp, 0xc
call fcn.00407af0
push 0x42aa08
lea ecx, [ebp - 0x3c]
call fcn.004162e0
mov esi, dword [0x434fcc]
mov ecx, 0x4343ec
call fcn.00409490
push 0x42aa08
lea eax, [ebp - 0x3c]
push eax
push esi
push dword [0x4343f0]
push str.PreExtract
call fcn.004022d0
push dword [ebp - 0x3c]
call fcn.0041e4d9
add esp, 0x18
cmp dword [0x435090], 0
jne 0x408d72
push 0x434f6c
call fcn.00402de0
add esp, 4
test eax, eax
jne 0x408d7f
call fcn.00407af0
cmp byte [0x434fd2], 0
je 0x408ca0
cmp byte [0x434f41], 0
jne 0x408e66
lea ecx, [ebp - 0xc]
call fcn.00416340
lea ecx, [ebp - 0x1c]
call fcn.00416340
cmp byte [0x434fd0], 0
jne 0x408cc5
lea eax, [ebp - 0xc]
push eax
call fcn.00402730
add esp, 4
cmp dword [ebp - 0x2c], 0
jne 0x408dd2
cmp byte [0x434f41], 0
jne 0x408dee
push str.setup.exe
push 0x42abc8
lea eax, [ebp - 0x90]
push 0x434f6c
push eax
call fcn.004165b0
add esp, 0xc
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004165b0
add esp, 0xc
lea ecx, [ebp - 0x1c]
push dword [eax]
call fcn.004164b0
push dword [ebp - 0x54]
call fcn.0041e4d9
push dword [ebp - 0x90]
call fcn.0041e4d9
add esp, 8
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x408da0
cmp byte [0x434f41], 0
jne 0x408d4c
push dword [0x434f6c]
call fcn.00404830
add esp, 4
push 0xf
push 0
call fcn.0040c000
push dword [ebp - 0x1c]
call fcn.0041e4d9
push dword [ebp - 0xc]
call fcn.0041e4d9
add esp, 0x10
mov esi, 7
jmp 0x408f3c
call fcn.0040a190
test eax, eax
jne 0x408c85
cmp byte [0x434f41], 0
jne 0x408d96
push dword [0x434f6c]
call fcn.00404830
add esp, 4
mov esi, 8
jmp 0x408f3c
mov esi, dword [0x434f6c]
lea ecx, [ebp - 0x3c]
push str.setup.exe
call fcn.004162e0
push ebx
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x3c]
push esi
push eax
call fcn.004023f0
push dword [ebp - 0x3c]
call fcn.0041e4d9
add esp, 0x18
jmp 0x408dee
push ebx
lea eax, [ebp - 0xc]
push eax
push dword [0x434fcc]
push dword [0x434f6c]
push dword [ebp - 0x30]
call fcn.004022d0
add esp, 0x14
cmp dword [0x435094], 0
jne 0x408e53
call fcn.00407af0
push 0xffffffffffffffff
push dword [0x434fcc]
push str.Shortcut
push 0x407470
call fcn.004075d0
add esp, 0x10
push dword [0x434f78]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 0xffffffffffffffff
push dword [0x434fcc]
push str.Delete
push 0x4073f0
call fcn.004075d0
add esp, 0x10
cmp byte [0x434f41], 0
jne 0x408e53
push dword [0x434f6c]
call fcn.00404830
add esp, 4
push dword [ebp - 0x1c]
call fcn.0041e4d9
push dword [ebp - 0xc]
call fcn.0041e4d9
add esp, 8
mov eax, dword [0x4343c0]
cmp eax, 0xffffffff
jne 0x408e89
cmp byte [0x434fd1], 0
jne 0x408ef8
mov dword [0x4343c0], 1
jmp 0x408e8d
test eax, eax
jle 0x408ef8
push 0
push str.FinishMessage
call fcn.00405640
mov esi, eax
add esp, 8
test esi, esi
je 0x408ef8
mov ecx, dword [0x4343c0]
mov eax, 0x3e7
cmp ecx, eax
cmovg ecx, eax
mov dword [0x4343c0], ecx
lea ecx, [ebp - 0xec]
call fcn.00409830
push 0
push esi
push dword [0x434f18]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xec], 0x42b98c
push 0x11
mov dword [ebp - 0xb4], 0x7d5
call fcn.0040c180
lea ecx, [ebp - 0xec]
call fcn.004098b0
cmp byte [0x434fd2], 0
jne 0x408f3a
cmp dword [0x435094], 0
jne 0x408f3a
push 0
push str.SelfDelete
call fcn.00405640
add esp, 8
test eax, eax
je 0x408f3a
cmp word [eax], 0x31
jne 0x408f3a
sub esp, 0xc
mov ecx, esp
push 0x434fb4
call fcn.00416280
call fcn.00407130
add esp, 0xc
xor esi, esi
push dword [ebp - 0x78]
call fcn.0041e4d9
add esp, 4
push dword [ebp - 0x30]
call fcn.0041e4d9
add esp, 4
push dword [ebp - 0x84]
call fcn.0041e4d9
add esp, 4
push dword [ebp - 0x6c]
call fcn.0041e4d9
push dword [ebp - 0x11c]
call fcn.0041e4d9
push dword [ebp - 0x48]
call fcn.0041e4d9
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x10
push str.7_Zip_SFX
push str.Sorry__this_program_requires_Microsoft_Windows_2000_or_later.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
mov eax, 0x14
pop ebx
mov esp, ebp
pop ebp
ret 0x10