Function at 0x4234f0
Capabilities:
Accept command line arguments
Get common file path
Identify system language via api
Query environment variable
Query service status

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca605
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1158
call fcn.0047a740
mov eax, dword [0x505034]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0xb88], eax
xor eax, eax
mov dword [ebp - 0xac4], 0
mov dword [ebp - 0xcb8], 0
mov dword [ebp - 0xcb4], 7
mov word [ebp - 0xcc8], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbe0], 7
mov word [ebp - 0xbf4], ax
mov dword [ebp - 0xb74], eax
mov dword [ebp - 0xb70], 7
mov word [ebp - 0xb84], ax
mov dword [ebp - 0xda0], eax
mov dword [ebp - 0xd9c], 7
mov word [ebp - 0xdb0], ax
mov dword [ebp - 0xd88], eax
mov dword [ebp - 0xd84], 7
mov word [ebp - 0xd98], ax
mov dword [ebp - 0xd70], eax
mov dword [ebp - 0xd6c], 7
mov word [ebp - 0xd80], ax
mov dword [ebp - 0xd00], eax
mov dword [ebp - 0xcfc], 7
mov word [ebp - 0xd10], ax
xorps xmm0, xmm0
mov dword [ebp - 0xc68], eax
movlpd qword [ebp - 0xbc0], xmm0
movlpd qword [ebp - 0xbb8], xmm0
movlpd qword [ebp - 0xbb0], xmm0
mov dword [ebp - 0xc64], 7
mov word [ebp - 0xc78], ax
movups xmmword [ebp - 0xbdc], xmm0
mov dword [ebp - 0xbc4], eax
movq qword [ebp - 0xbcc], xmm0
mov byte [ebp - 0xbdc], al
mov byte [ebp - 0xbc4], al
movups xmmword [ebp - 0xbc0], xmm0
mov dword [ebp - 0xbb0], eax
mov dword [ebp - 0xbac], eax
push 1
lea eax, [ebp - 0xc78]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0xbdc]
call fcn.00428f60
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0xc64]
cmp edx, 8
jb 0x4236b4
mov ecx, dword [ebp - 0xc78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4236aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 0xc0
lea eax, [ebp - 0xf60]
push 0
push eax
call fcn.004928b0
add esp, 0xc
lea ecx, [ebp - 0xf60]
call fcn.00419860
push 0x40
lea eax, [ebp - 0xd50]
mov dword [ebp - method.Concurrency::details::SchedulerBase.virtual_68], 0x4e85f0
push 0
push eax
call fcn.004928b0
add esp, 0xc
mov dword [ebp - fcn.004181e0], vtable.ProgressCallback.0
mov dword [ebp - 0xd34], 0
mov dword [ebp - 0xd30], 0
mov dword [ebp - 0xd2c], 0
mov byte [ebp - 4], 0xc
push 0x38
mov dword [ebp - 0xd18], 0
mov dword [ebp - 0xd14], 0
call fcn.00479ea3
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0xd18], eax
lea eax, [ebp - 0xd4c]
mov byte [ebp - 4], 0xd
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0xd34]
lea ecx, [ebp - 0xd20]
mov dword [ebp - 0xd30], eax
xor eax, eax
mov byte [ebp - 0xd1c], 0
xchg dword [ecx], eax
lea eax, [ebp - 0xb3c]
mov byte [ebp - 0xd24], 0
xorps xmm0, xmm0
mov dword [ebp - 0xaf8], 0x64
push eax
lea ecx, [ebp - 0xd18]
movlpd qword [ebp - 0xaf0], xmm0
mov dword [ebp - 0xaf4], 0
mov byte [ebp - 0xb00], 1
mov dword [ebp - 0xae8], 0
mov dword [ebp - 0xb3c], 0
call fcn.00418940
movups xmm0, xmmword [ebp - 0xb00]
lea ecx, [ebp - 0xd18]
mov dword [ebp - 0x1164], 1
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0xaf0]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0x1164]
push eax
call fcn.00418940
movups xmm0, xmmword [ebp - 0xb00]
movups xmmword [eax], xmm0
movups xmm0, xmmword [ebp - 0xaf0]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0xd4c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0xd4c]
mov dword [ebp - 0xd28], 0
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov dword [ebp - 0xb3c], 0xffffffff
mov dword [ebp - 0xc38], 0
mov dword [ebp - 0xc34], 7
mov word [ebp - 0xc48], ax
xor ecx, ecx
mov dword [ebp - 0xbf8], eax
xorps xmm0, xmm0
mov byte [ebp - 0x1154], al
movq qword [ebp - 0xc00], xmm0
mov dword [ebp - 0x115c], eax
mov dword [ebp - 0x1164], ecx
mov dword [ebp - 0xc00], ecx
mov dword [ebp - 0xbfc], ecx
mov dword [ebp - 0xbf8], ecx
lea ecx, [ebp - 0x1148]
call fcn.00427e10
push 0x80
lea eax, [ebp - 0x98]
push 0
push eax
call fcn.004928b0
xor eax, eax
mov dword [ebp - 0xc20], 0
add esp, 0xc
mov dword [ebp - 0xc1c], 7
mov word [ebp - 0xc30], ax
mov dword [ebp - 0xc68], eax
mov dword [ebp - 0xc64], 7
mov word [ebp - 0xc78], ax
mov dword [ebp - 0xce8], eax
mov dword [ebp - 0xce4], 7
mov word [ebp - 0xcf8], ax
push 0x820
push eax
lea eax, [ebp - 0xac0]
mov byte [ebp - 4], 0x14
push eax
call fcn.004928b0
add esp, 0xc
mov dword [ebp - 0x1168], 0xffffffff
xor eax, eax
mov dword [ebp - 0xcd0], 0
lea ecx, [ebp - 0xce0]
mov dword [ebp - 0xccc], 7
mov word [ebp - 0xce0], ax
push eax
push 0x4e5e14
call fcn.00415170
mov esi, 1
mov byte [ebp - 4], 0x15
mov ecx, esi
call fcn.00440090
sub esp, 8
mov ecx, esi
call fcn.004499a0
add esp, 8
call fcn.00449c00
xor ecx, ecx
call fcn.00440230
call fcn.0044a6a0
xorps xmm0, xmm0
lea ecx, [ebp - 0xb08]
movlpd qword [ebp - 0xb08], xmm0
call fcn.004158a0
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0xb08]
test eax, eax
je 0x4239c2
push str.Entering_SFX_stub_guarded_code_section.
push 0x4e6454
push 0x50b668
push 2
push eax
call fcn.00417530
add esp, 0x14
mov byte [ebp - 4], 0x15
or edi, 0xffffffff
mov esi, dword [ebp - 0xb04]
test esi, esi
je 0x4239f2
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x4239f2
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x4239f2
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea ecx, [ebp - 0x1c0]
call fcn.004692f0
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [eax + 4]
cmp ecx, 6
jne 0x423a1e
cmp dword [eax + 8], 0
je 0x423a30
cmp ecx, 6
jne 0x423a1e
cmp dword [eax + 8], 1
je 0x423a30
cmp ecx, ecx
ja 0x423a30
jne 0x423b09
cmp dword [eax + 8], 2
jb 0x423b09
lea eax, [ebp - 0x114c]
xor esi, esi
push eax
push 0x28
mov dword [ebp - 0x114c], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x423ae2
lea eax, [ebp - 0xb08]
push eax
push str.SeRelabelPrivilege
push esi
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x423ae2
mov eax, dword [ebp - 0xb08]
xorps xmm0, xmm0
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0xb04]
mov dword [ebp - 0xacc], eax
lea eax, [ebp - 0xac4]
push eax
lea eax, [ebp - 0xb18]
mov dword [ebp - 0xad4], 1
push eax
push 0x10
lea eax, [ebp - 0xad4]
mov dword [ebp - 0xac8], 2
push eax
push esi
push dword [ebp - 0x114c]
mov dword [ebp - 0xb18], 1
movq qword [ebp - 0xb14], xmm0
mov dword [ebp - 0xb0c], esi
mov dword [ebp - 0xac4], esi
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x423aeb
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov esi, eax
mov eax, dword [ebp - 0x114c]
test eax, eax
je 0x423b06
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x114c], 0
push esi
call edi
push 0xc0
lea eax, [ebp - 0x158]
push 0
push eax
call fcn.004928b0
add esp, 0xc
lea ecx, [ebp - 0x158]
call fcn.00419860
push 0x50bc30
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x17
call fcn.00419b10
test eax, eax
jne 0x423f31
xorps xmm0, xmm0
mov dword [ebp - 0xb28], eax
movlpd qword [ebp - 0xc90], xmm0
movlpd qword [ebp - 0xc88], xmm0
movlpd qword [ebp - 0xc80], xmm0
mov dword [ebp - 0xb24], 7
mov word [ebp - 0xb38], ax
movups xmmword [ebp - 0xcac], xmm0
mov dword [ebp - 0xc94], eax
movq qword [ebp - 0xc9c], xmm0
mov byte [ebp - 0xcac], al
mov byte [ebp - 0xc94], al
movups xmmword [ebp - 0xc90], xmm0
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0xc7c], eax
push 1
lea eax, [ebp - 0xb38]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0xcac]
call fcn.00428f60
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0xb24]
cmp edx, 8
jb 0x423c08
mov ecx, dword [ebp - 0xb38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x423bfe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d70
push edx
push ecx
call fcn.00479e95
add esp, 8
cmp dword [ebp - 0x144], 8
lea eax, [ebp - 0x158]
push 0
cmovae eax, dword [ebp - 0x158]
lea ecx, [ebp - 0xcac]
push eax
call fcn.00428f60
push 7
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.edition
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
cmovae edx, dword [ebp - 0xadc]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423c76
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xcac]
call fcn.0041f910
test eax, eax
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0xac8]
setne al
mov byte [ebp - 0x114e], al
cmp edx, 8
jb 0x423ce7
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x423cd7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d75
push edx
push ecx
call fcn.00479e95
mov al, byte [ebp - 0x114e]
add esp, 8
test al, al
je 0x423d8f
push 7
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.edition
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
lea eax, [ebp - 0xadc]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0xcac]
call fcn.004288f0
cmp dword [eax + 0x14], 8
jb 0x423d3c
mov eax, dword [eax]
push eax
call fcn.0049f50d
mov byte [ebp - 4], 0x1b
add esp, 4
mov edx, dword [ebp - 0xac8]
mov dword [ebp - 0x1168], eax
cmp edx, 8
jb 0x423d8f
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x423d85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d7a
push edx
push ecx
call fcn.00479e95
add esp, 8
push 0xb
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.sub_edition
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
cmovae edx, dword [ebp - 0xadc]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423de0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xcac]
call fcn.0041f910
test eax, eax
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0xac8]
setne al
mov byte [ebp - 0x114e], al
cmp edx, 8
jb 0x423e51
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x423e41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d7f
push edx
push ecx
call fcn.00479e95
mov al, byte [ebp - 0x114e]
add esp, 8
test al, al
je 0x423f10
push 0xb
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.sub_edition
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
lea eax, [ebp - 0xadc]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0xcac]
call fcn.004288f0
mov edx, eax
cmp dword [edx + 0x14], 8
jb 0x423ea8
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423eb0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xce0]
call fcn.00415170
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0xac8]
cmp edx, 8
jb 0x423f10
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x423f06
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d84
push edx
push ecx
call fcn.00479e95
add esp, 8
lea ecx, [ebp - 0xc84]
call fcn.00416120
lea ecx, [ebp - 0xc90]
call fcn.00428a70
lea ecx, [ebp - 0xcac]
call fcn.00428af0
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x15
call fcn.00419990
push 0
lea eax, [ebp - 0x114c]
mov dword [ebp - 0x114c], 0
push eax
push 1
push str.O:BAG:BAD:P_A_CIOI_FA___SY__A_CIOI_FA___BA__A_CIOI_FRFX___BU_
call dword [sym.imp.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW]
mov eax, dword [ebp - 0x114c]
push str.._
mov dword [ebp - 0xb10], eax
lea eax, [ebp - 0xac0]
push 0x410
push eax
mov dword [ebp - 0xb14], 0xc
mov dword [ebp - 0xb0c], 0
call fcn.004a46a5
add esp, 0xc
lea eax, [ebp - 0xab8]
push 0
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.0043f380
mov esi, eax
cmp dword [esi + 0x14], 8
jb 0x423fbb
mov esi, dword [esi]
push 1
xor eax, eax
mov dword [ebp - 0xb5c], 0
push 0x4e5ddc
lea ecx, [ebp - 0xb6c]
mov dword [ebp - 0xb58], 7
mov word [ebp - 0xb6c], ax
call fcn.00415170
mov ecx, esi
mov byte [ebp - 4], 0x20
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x423ff3
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0xb6c]
call fcn.00414dc0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xadc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xacc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea eax, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
cmovae eax, dword [ebp - 0xadc]
push eax
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.004a4709
mov edx, dword [ebp - 0xac8]
add esp, 0xc
cmp edx, 8
jb 0x4240a2
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424098
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d89
push edx
push ecx
call fcn.00479e95
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xb58]
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
cmp edx, 8
jb 0x424103
mov ecx, dword [ebp - 0xb6c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4240f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d89
push edx
push ecx
call fcn.00479e95
add esp, 8
xor eax, eax
mov dword [ebp - 0xac8], 7
cmp dword [ebp - 0x114c], eax
lea esi, [ebp - 0xb14]
lea ecx, [ebp - 0xac0]
mov dword [ebp - 0xacc], eax
cmove esi, eax
mov word [ebp - 0xadc], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424134
sub ecx, edx
lea eax, [ebp - 0xac0]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xadc]
call fcn.00415170
mov edx, esi
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xadc]
call fcn.00465ef0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
cmp edx, 8
jb 0x4241ab
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4241a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427d8e
push edx
push ecx
call fcn.00479e95
add esp, 8
push dword [ebp - 0x114c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x1c0]
call fcn.004692f0
cmp dword [eax + 0x11c], 2
je 0x4241e3
lea ecx, [ebp - 0x1c0]
call fcn.004692f0
cmp dword [eax + 0x11c], 5
jne 0x42441b
push str.SOFTWARE_
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.004a46a5
add esp, 0xc
lea eax, [ebp - 0x2a0]
push str.SOFTWARE_
push 0x104
push eax
call fcn.004a46a5
add esp, 0xc
call fcn.0043f380
cmp dword [eax + 0x14], 8
jb 0x424222
mov eax, dword [eax]
push eax
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.004a4709
add esp, 0xc
lea eax, [ebp - 0x2a0]
push 0x4e7908
push 0x104
push eax
call fcn.004a4709
add esp, 0xc
call fcn.0043f380
cmp dword [eax + 0x14], 8
jb 0x42425d
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x2a0]
push 0x104
push eax
call fcn.004a4709
add esp, 0xc
lea edx, [ebp - 0x114d]
lea ecx, [ebp - 0xac0]
call fcn.00469150
test al, al
je 0x4242b9
cmp byte [ebp - 0x114d], 0
je 0x4242b9
lea edx, [ebp - 0x114d]
lea ecx, [ebp - 0x2a0]
call fcn.00469150
test al, al
je 0x4242b9
cmp byte [ebp - 0x114d], 0
je 0x4242b9
lea ecx, [ebp - 0xac0]
call fcn.00468f90
lea edx, [ebp - 0x114d]
lea ecx, [ebp - 0x2a0]
call fcn.00469150
test al, al
je 0x424345
cmp byte [ebp - 0x114d], 0
je 0x424345
cmp word [ebp - 0xac0], 0
mov dword [ebp - 0x114c], 0
je 0x424338
push 0
lea eax, [ebp - 0x114c]
push eax
push 0
push 0x101
push 0
push 0
push 0
lea eax, [ebp - 0xac0]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov esi, eax
mov eax, dword [ebp - 0x114c]
test eax, eax
je 0x42433d
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push esi
mov dword [ebp - 0x114c], 0
call edi
jmp 0x42441b
mov esi, 0x57
push esi
call edi
jmp 0x42441b
cmp word [ebp - 0xac0], 0
mov dword [ebp - 0x114c], 0
je 0x42437b
lea eax, [ebp - 0x114c]
push eax
push 0x201
push 0
lea eax, [ebp - 0xac0]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
jmp 0x4243a6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x80000002
mov dword [ebp - 0x114c], 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov esi, eax
mov eax, dword [ebp - 0x114c]
test eax, eax
je 0x4243ca
cmp eax, 0x80000002
je 0x4243ca
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x114c], 0
xor eax, eax
cmp esi, 2
cmovne eax, esi
push eax
call edi
test esi, esi
jne 0x424406
lea edx, [ebp - 0x114d]
lea ecx, [ebp - 0xac0]
call fcn.00469150
test al, al
je 0x4243f7
cmp byte [ebp - 0x114d], 0
jne 0x42441b
push ecx
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0xac0]
jmp 0x424413
push ecx
lea edx, [ebp - 0xac0]
lea ecx, [ebp - 0x2a0]
call fcn.00468b70
add esp, 4
lea ecx, [ebp - 0x1c0]
call fcn.004692f0
mov ecx, dword [eax + 4]
cmp ecx, 6
jne 0x424440
cmp dword [eax + 8], 0
je 0x42444a
cmp ecx, ecx
jne 0x424440
cmp dword [eax + 8], 1
je 0x42444a
cmp ecx, ecx
ja 0x42444a
jne 0x424473
cmp dword [eax + 8], 2
jb 0x424473
push str.user32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x427d93
push str.SetProcessDPIAware
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x427dc0
call eax
xor eax, eax
mov dword [ebp - 0xacc], 0
cmp dword [ebp - 0x1168], 0xffffffff
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
push 0xe
mov word [ebp - 0xadc], ax
jne 0x42457f
push str.LogsClear.log
call fcn.00415170
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x22
call fcn.0042eba0
push ecx
lea ecx, [ebp - 0xadc]
mov byte [ebp - 4], 0x23
push ecx
mov edx, eax
lea ecx, [ebp - 0xc48]
call fcn.00466610
mov byte [ebp - 4], 0x22
add esp, 8
mov edx, dword [ebp - 0xb24]
cmp edx, 8
jb 0x42451e
mov ecx, dword [ebp - 0xb38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424514
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb24], 7
mov word [ebp - 0xb38], ax
cmp edx, 8
jb 0x424605
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4245fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
jmp 0x4245fb
push str.LogsSetup.log
call fcn.00415170
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x24
call fcn.0042eba0
push ecx
lea ecx, [ebp - 0xadc]
mov byte [ebp - 4], 0x25
push ecx
mov edx, eax
lea ecx, [ebp - 0xc48]
call fcn.00466610
mov byte [ebp - 4], 0x24
add esp, 8
mov edx, dword [ebp - 0xb24]
cmp edx, 8
jb 0x42451e
mov ecx, dword [ebp - 0xb38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424514
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
jmp 0x424514
push edx
push ecx
call fcn.00479e95
add esp, 8
mov edi, dword [ebp - 0xc34]
lea edx, [ebp - 0xc48]
mov esi, dword [ebp - 0xc38]
cmp edi, 8
cmovae edx, dword [ebp - 0xc48]
test esi, esi
je 0x424653
or ecx, 0xffffffff
lea eax, [esi - 1]
cmp eax, ecx
cmovb ecx, eax
cmp word [edx + ecx*2], 0x5c
lea ecx, [edx + ecx*2]
je 0x42464d
nop word [eax + eax]
cmp ecx, edx
je 0x424653
sub ecx, 2
cmp word [ecx], 0x5c
jne 0x424640
sub ecx, edx
sar ecx, 1
jmp 0x424656
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 0xacc], 0
cmp esi, ecx
mov word [ebp - 0xadc], ax
lea eax, [ebp - 0xc48]
mov dword [ebp - 0xac8], 7
cmovb ecx, esi
cmp edi, 8
push ecx
cmovae eax, dword [ebp - 0xc48]
lea ecx, [ebp - 0xadc]
push eax
call fcn.00415170
mov dword [ebp - 0xac4], 0x6000
xor edx, edx
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xadc]
call fcn.00465ef0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
cmp edx, 8
jb 0x4246f4
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4246ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
cmp dword [ebp - 0xc34], 8
lea edi, [ebp - 0xc48]
xorps xmm0, xmm0
mov dword [ebp - 0xad4], 0x4e5ed4
cmovae edi, dword [ebp - 0xc48]
mov dword [ebp - method.std::exception.virtual_0], vtable.std::exception.0
movq qword [ebp - 0xacc], xmm0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb10]
movlpd qword [ebp - 0xb08], xmm0
call fcn.004161c0
lea ecx, [ebp - 0xb5c]
push ecx
mov ecx, eax
call fcn.004160a0
mov esi, dword [ebp - 0xb58]
mov eax, dword [eax]
mov dword [ebp - 0x114c], eax
test esi, esi
je 0x42477f
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x42477f
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x42477f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xb0c]
test ecx, ecx
je 0x424798
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
jne 0x424798
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x114c]
lea edx, [ebp - 0xb08]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0xb08]
test ecx, ecx
je 0x4247c7
mov eax, dword [ecx]
push 0
push 0
push 0x400000
push edi
call dword [eax + 0x2c]
mov esi, dword [ebp - 0xb04]
test esi, esi
je 0x4247f3
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x4247f3
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x4247f3
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea eax, [ebp - 0xacc]
mov dword [ebp - 0xad4], 0x4e5ed4
push eax
mov dword [ebp - method.std::exception.virtual_0], vtable.std::exception.0
call fcn.0049117a
xorps xmm0, xmm0
mov dword [ebp - 0xad4], 0x4e5ed4
add esp, 4
mov dword [ebp - method.std::exception.virtual_0], vtable.std::exception.0
movq qword [ebp - 0xacc], xmm0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xb5c]
movlpd qword [ebp - 0xb08], xmm0
call fcn.004161c0
lea ecx, [ebp - 0xb10]
push ecx
mov ecx, eax
call fcn.004160a0
mov esi, dword [ebp - 0xb0c]
mov edi, dword [eax]
test esi, esi
je 0x424887
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x424887
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x424887
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xb58]
test ecx, ecx
je 0x4248a0
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
jne 0x4248a0
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [edi]
lea ecx, [ebp - 0xb08]
push ecx
mov ecx, edi
call dword [eax + 4]
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0xb08]
test ecx, ecx
je 0x4248c3
mov eax, dword [ecx]
push 7
call dword [eax + 0x28]
mov esi, dword [ebp - 0xb04]
test esi, esi
je 0x4248ef
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x4248ef
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x4248ef
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea eax, [ebp - 0xacc]
mov byte [ebp - 4], 0x15
push eax
mov dword [ebp - 0xad4], 0x4e5ed4
mov dword [ebp - method.std::exception.virtual_0], vtable.std::exception.0
call fcn.0049117a
add esp, 4
lea ecx, [ebp - 0x1148]
call fcn.0042ffb0
call fcn.00440cb0
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [ebp - 0xacc], 0
mov ecx, edx
mov dword [ebp - 0xac8], 7
xor eax, eax
mov word [ebp - 0xadc], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424950
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xadc]
call fcn.00415170
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
lea ecx, [ebp - 0xbdc]
push 1
cmovae eax, dword [ebp - 0xadc]
push eax
call fcn.00428f60
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
cmp edx, 8
jb 0x4249d6
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4249cc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 6
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.silent
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x2c
lea edx, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
cmovae edx, dword [ebp - 0xadc]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424a22
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
setne al
mov byte [ebp - 0x114e], al
cmp edx, 8
jb 0x424a93
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424a83
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov al, byte [ebp - 0x114e]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], cx
test al, al
je 0x424bcd
mov ecx, dword fs:[0x2c]
mov eax, dword [0x50a500]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 4]
jle 0x424b03
push 0x50a500
call fcn.0047a469
add esp, 4
cmp dword [0x50a500], 0xffffffff
jne 0x424b03
mov byte [ebp - 4], 0x2d
call fcn.0047743d
push 0x50a500
mov dword [0x50a4fc], eax
mov byte [ebp - 4], 0x15
call fcn.0047a41f
add esp, 4
mov esi, dword [0x50a4fc]
lea ecx, [ebp - 0xb20]
push 6
xor eax, eax
mov dword [ebp - 0xb10], 0
push str.silent
mov dword [ebp - 0xb0c], 7
mov word [ebp - 0xb20], ax
call fcn.00415170
lea eax, [ebp - 0xb20]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
push esi
sub esp, 8
mov ecx, eax
call fcn.0042a7c0
add esp, 0xc
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xb0c]
cmp eax, 0xffffffff
sete al
mov byte [ebp - 0x114e], al
cmp edx, 8
jb 0x424bb2
mov ecx, dword [ebp - 0xb20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424ba2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov al, byte [ebp - 0x114e]
add esp, 8
mov ecx, dword [ebp - 0x1154]
test al, al
movzx ecx, cl
mov edi, 1
cmovne ecx, edi
mov dword [ebp - 0x1154], ecx
jmp 0x424bd2
mov edi, 1
push 0xc
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.AdminUpgrade
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x2f
lea edx, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
cmovae edx, dword [ebp - 0xadc]
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424c20
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
setne al
mov byte [ebp - 0x114e], al
cmp edx, 8
jb 0x424c91
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424c81
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov al, byte [ebp - 0x114e]
add esp, 8
mov ecx, dword [ebp - 0x1154]
test al, al
movzx ecx, cl
cmovne ecx, edi
mov dword [ebp - 0xacc], 0
push 5
mov dword [ebp - 0x114c], ecx
xor eax, eax
push 0x4e769c
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
cmovae edx, dword [ebp - 0xadc]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424cf1
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
setne byte [ebp - 0x115d]
cmp edx, 8
jb 0x424d5a
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424d50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 6
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.cookie
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
lea eax, [ebp - 0xadc]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
lea ecx, [ebp - 0xc30]
cmp ecx, eax
je 0x424dc1
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x424db4
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xc30]
call fcn.00415170
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
cmp edx, 8
jb 0x424e05
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424dfb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 0xb
xor eax, eax
mov dword [ebp - 0xb5c], 0
push str.ga_clientid
lea ecx, [ebp - 0xb6c]
mov dword [ebp - 0xb58], 7
mov word [ebp - 0xb6c], ax
call fcn.00415170
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0xb6c]
cmp dword [ebp - 0xb58], 8
cmovae edx, dword [ebp - 0xb6c]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424e51
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
je 0x424edd
push 0xb
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.ga_clientid
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
lea eax, [ebp - 0xadc]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 0xac4], 0x6001
call fcn.004288f0
push eax
lea ecx, [ebp - 0xb38]
call fcn.00417d60
mov dword [ebp - 4], 0x34
mov edi, 0x6003
jmp 0x424f98
call fcn.0046a960
mov esi, eax
mov dword [ebp - 0xb14], edx
call fcn.0046a960
mov dword [ebp - 0xb10], eax
and al, 0x3f
mov ecx, dword [ebp - 0xb12]
or al, 0x80
mov byte [ebp - 0xb10], al
and ecx, 0xfff
mov byte [ebp - 0x114e], al
or ecx, 0x4000
mov eax, edx
mov dword [ebp - 0xb0c], edx
shr eax, 0x18
push eax
mov eax, edx
mov word [ebp - 0xb12], cx
mov ecx, dword [ebp - 0xb10]
shr eax, 0x10
movzx eax, al
push eax
shr edx, 8
movzx eax, dl
push eax
movzx eax, byte [ebp - 0xb0c]
push eax
mov eax, ecx
shr eax, 0x18
push eax
mov eax, ecx
shr ecx, 8
shr eax, 0x10
movzx eax, al
push eax
movzx eax, cl
push eax
movzx eax, byte [ebp - 0x114e]
push eax
mov eax, dword [ebp - 0xb14]
shr eax, 0x10
push eax
movzx eax, word [ebp - 0xb14]
push eax
push esi
lea eax, [ebp - 0xb54]
push str._08lx__04hx__04hx__02hhx_02hhx__02hhx_02hhx_02hhx_02hhx_02hhx_02hhx
push eax
call fcn.0041fa00
add esp, 0x34
lea eax, [ebp - 0xb54]
mov edi, 0xe004
push eax
lea ecx, [ebp - 0xc78]
mov dword [ebp - 0xac4], edi
mov dword [ebp - 0x1154], edi
call fcn.00417c60
mov eax, edi
test al, 4
je 0x425028
mov edx, dword [ebp - 0xb40]
and eax, 0xfffffffb
mov dword [ebp - 0x1154], eax
mov dword [ebp - 0xac4], eax
cmp edx, 8
jb 0x42500b
mov ecx, dword [ebp - 0xb54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424ffb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov eax, dword [ebp - 0x1154]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xb44], 0
mov dword [ebp - 0xb40], 7
mov word [ebp - 0xb54], cx
mov dword [ebp - 4], 0x33
test al, 2
je 0x4250a5
mov edx, dword [ebp - 0xb24]
and eax, 0xfffffffd
mov dword [ebp - 0x1154], eax
mov dword [ebp - 0xac4], eax
cmp edx, 8
jb 0x425088
mov ecx, dword [ebp - 0xb38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425078
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov eax, dword [ebp - 0x1154]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb24], 7
mov word [ebp - 0xb38], cx
mov dword [ebp - 4], 0x32
test al, 1
je 0x42511c
mov edx, dword [ebp - 0xac8]
and eax, 0xfffffffe
mov dword [ebp - 0x1154], eax
mov dword [ebp - 0xac4], eax
cmp edx, 8
jb 0x4250ff
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4250f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
xor eax, eax
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xb58]
cmp edx, 8
jb 0x425160
mov ecx, dword [ebp - 0xb6c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425156
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 8
xor eax, eax
mov dword [ebp - 0xb10], 0
push str.edat_dir
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0xb0c], 7
mov word [ebp - 0xb20], ax
call fcn.00415170
mov byte [ebp - 4], 0x35
lea edx, [ebp - 0xb20]
cmp dword [ebp - 0xb0c], 8
cmovae edx, dword [ebp - 0xb20]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4251b0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
je 0x425246
push 8
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.edat_dir
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xadc]
mov edi, dword [ebp - 0x1154]
lea ecx, [ebp - 0xbdc]
or edi, 8
push eax
mov dword [ebp - 0xac4], edi
call fcn.004288f0
push eax
lea ecx, [ebp - 0xb38]
call fcn.00417d60
or edi, 0x10
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x1154], edi
jmp 0x425281
xor eax, eax
mov dword [ebp - 0xb44], 0
push eax
push 0x4e5e14
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xb40], 7
mov word [ebp - 0xb54], ax
call fcn.00415170
or dword [ebp - 0x1154], 0x20
lea eax, [ebp - 0xb54]
push eax
lea ecx, [ebp - 0xcf8]
call fcn.00417c60
mov eax, dword [ebp - 0x1154]
test al, 0x20
je 0x4252e6
mov edx, dword [ebp - 0xb40]
and eax, 0xffffffdf
mov dword [ebp - 0x1154], eax
cmp edx, 8
jb 0x4252e6
mov ecx, dword [ebp - 0xb54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4252d6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov eax, dword [ebp - 0x1154]
add esp, 8
mov dword [ebp - 4], 0x36
test al, 0x10
je 0x42535d
mov edx, dword [ebp - 0xb24]
and eax, 0xffffffef
mov dword [ebp - 0x1154], eax
cmp edx, 8
jb 0x425340
mov ecx, dword [ebp - 0xb38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425330
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov eax, dword [ebp - 0x1154]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xb28], 0
mov dword [ebp - 0xb24], 7
mov word [ebp - 0xb38], cx
mov dword [ebp - 4], 0x35
test al, 8
je 0x4253ce
mov edx, dword [ebp - 0xac8]
and eax, 0xfffffff7
mov dword [ebp - 0x1154], eax
cmp edx, 8
jb 0x4253b1
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4253a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
xor eax, eax
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xb0c]
cmp edx, 8
jb 0x425412
mov ecx, dword [ebp - 0xb20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425408
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 0xb
xor eax, eax
mov dword [ebp - 0xb10], 0
push str.sub_edition
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0xb0c], 7
mov word [ebp - 0xb20], ax
call fcn.00415170
mov byte [ebp - 4], 0x38
lea edx, [ebp - 0xb20]
cmp dword [ebp - 0xb0c], 8
cmovae edx, dword [ebp - 0xb20]
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x425460
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
je 0x425500
push 0xb
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.sub_edition
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0xadc]
mov edi, dword [ebp - 0x1154]
lea ecx, [ebp - 0xbdc]
or edi, 0x40
push eax
mov dword [ebp - 0x1154], edi
mov dword [ebp - 0xac4], edi
call fcn.004288f0
lea ecx, [ebp - 0xce0]
cmp ecx, eax
je 0x425500
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4254f3
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xce0]
call fcn.00415170
mov dword [ebp - 4], 0x38
mov eax, dword [ebp - 0x1154]
test al, 0x40
je 0x425577
mov edx, dword [ebp - 0xac8]
and eax, 0xffffffbf
mov dword [ebp - 0x1154], eax
cmp edx, 8
jb 0x42555a
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425550
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
xor eax, eax
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xb0c]
cmp edx, 8
jb 0x4255bb
mov ecx, dword [ebp - 0xb20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4255b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 4
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.ifeo
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov byte [ebp - 4], 0x3a
lea edx, [ebp - 0xadc]
cmp dword [ebp - 0xac8], 8
cmovae edx, dword [ebp - 0xadc]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x425607
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xac8]
sete byte [ebp - 0x1155]
cmp edx, 8
jb 0x425670
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425666
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
xorps xmm0, xmm0
lea ecx, [ebp - 0xb08]
movlpd qword [ebp - 0xb08], xmm0
call fcn.004158a0
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0xb08]
test eax, eax
je 0x4256ae
push 0x50bc30
push str.Running_SFX__s
push 0x50b668
push 2
push eax
call fcn.00417530
add esp, 0x14
mov byte [ebp - 4], 0x15
mov esi, dword [ebp - 0xb04]
test esi, esi
je 0x4256de
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x4256de
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x4256de
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea eax, [ebp - 0xb3c]
push eax
sub esp, 8
lea eax, [ebp - 0xd10]
lea edx, [ebp - 0xd80]
lea ecx, [ebp - 0xd98]
push eax
call fcn.0042fc50
add esp, 0x10
mov byte [ebp - 0x114e], al
test al, al
je 0x425733
cmp dword [ebp - 0x1074], 8
lea ecx, [ebp - 0x1088]
lea eax, [ebp - 0x98]
cmovae ecx, dword [ebp - 0x1088]
push ecx
push 0x40
push eax
call fcn.004a46a5
add esp, 0xc
cmp word [ebp - 0x98], 0
jne 0x425834
push 4
xor eax, eax
mov dword [ebp - 0xb10], 0
push str.guid
lea ecx, [ebp - 0xb20]
mov dword [ebp - 0xb0c], 7
mov word [ebp - 0xb20], ax
call fcn.00415170
mov byte [ebp - 4], 0x3c
lea edx, [ebp - 0xb20]
mov eax, dword [ebp - 0x1154]
or eax, 0x80
cmp dword [ebp - 0xb0c], 8
mov dword [ebp - 0x1154], eax
cmovae edx, dword [ebp - 0xb20]
mov ecx, edx
mov dword [ebp - 0xac4], eax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4257a4
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xbdc]
call fcn.0041f910
test eax, eax
je 0x425834
push 4
xor eax, eax
mov dword [ebp - 0xacc], 0
push str.guid
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
call fcn.00415170
mov dword [ebp - 4], 0x3d
lea ecx, [ebp - 0xbdc]
mov eax, dword [ebp - 0x1154]
or eax, 0x100
mov dword [ebp - 0x1154], eax
mov dword [ebp - 0xac4], eax
lea eax, [ebp - 0xadc]
push eax
call fcn.004288f0
mov byte [ebp - 0x114d], 1
cmp dword [eax + 0x10], 0x24
je 0x42583b
mov byte [ebp - 0x114d], 0
mov dword [ebp - 4], 0x3c
mov eax, dword [ebp - 0x1154]
test eax, 0x100
je 0x4258c1
mov edx, dword [ebp - 0xac8]
and eax, 0xfffffeff
mov dword [ebp - 0x1154], eax
cmp edx, 8
jb 0x4258a4
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425894
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
mov eax, dword [ebp - 0x1154]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], cx
mov dword [ebp - 4], 0x15
test al, al
jns 0x425917
mov edx, dword [ebp - 0xb0c]
and eax, 0xffffff7f
mov dword [ebp - 0x1154], eax
cmp edx, 8
jb 0x425917
mov ecx, dword [ebp - 0xb20]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42590d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
cmp byte [ebp - 0x114d], 0
je 0x4259c7
push 4
xor eax, eax
mov dword [ebp - 0xb44], 0
push str.guid
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xb40], 7
mov word [ebp - 0xb54], ax
call fcn.00415170
lea eax, [ebp - 0xb54]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
cmp dword [eax + 0x14], 8
jb 0x425971
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x98]
push 0x40
push eax
call fcn.004a46a5
mov byte [ebp - 4], 0x15
add esp, 0xc
mov edx, dword [ebp - 0xb40]
cmp edx, 8
jb 0x4259c7
mov ecx, dword [ebp - 0xb54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4259bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
cmp word [ebp - 0x98], 0
jne 0x425af5
call fcn.0046a960
mov esi, eax
mov dword [ebp - 0xb14], edx
call fcn.0046a960
mov dword [ebp - 0xb10], eax
and al, 0x3f
mov ecx, dword [ebp - 0xb12]
or al, 0x80
mov byte [ebp - 0xb10], al
and ecx, 0xfff
mov byte [ebp - 0x114d], al
or ecx, 0x4000
mov eax, edx
mov dword [ebp - 0xb0c], edx
shr eax, 0x18
push eax
mov eax, edx
mov word [ebp - 0xb12], cx
mov ecx, dword [ebp - 0xb10]
shr eax, 0x10
movzx eax, al
push eax
shr edx, 8
movzx eax, dl
push eax
movzx eax, byte [ebp - 0xb0c]
push eax
mov eax, ecx
shr eax, 0x18
push eax
mov eax, ecx
shr ecx, 8
shr eax, 0x10
movzx eax, al
push eax
movzx eax, cl
push eax
movzx eax, byte [ebp - 0x114d]
push eax
mov eax, dword [ebp - 0xb14]
shr eax, 0x10
push eax
movzx eax, word [ebp - 0xb14]
push eax
push esi
lea eax, [ebp - 0xb38]
push str._08lx__04hx__04hx__02hhx_02hhx__02hhx_02hhx_02hhx_02hhx_02hhx_02hhx
push eax
call fcn.0041fa00
or dword [ebp - 0x1154], 0x10000
lea eax, [ebp - 0xb38]
add esp, 0x34
cmp dword [ebp - 0xb24], 8
cmovae eax, dword [ebp - 0xb38]
push eax
lea eax, [ebp - 0x98]
push 0x40
push eax
call fcn.004a46a5
mov edx, dword [ebp - 0xb24]
add esp, 0xc
cmp edx, 8
jb 0x425af5
mov ecx, dword [ebp - 0xb38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425aeb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
cmp dword [ebp - 0x1168], 0xffffffff
je 0x4260c9
cmp byte [ebp - 0x114e], 0
jne 0x4260c9
cmp byte [ebp - 0xf9c], 0
jne 0x4260c9
xor eax, eax
mov dword [ebp - 0xc08], 0
mov dword [ebp - 0xc04], 7
mov word [ebp - 0xc18], ax
mov byte [ebp - 4], 0x3f
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x50be5c]
cmp eax, dword [ecx + 4]
jle 0x425b8f
push 0x50be5c
call fcn.0047a469
add esp, 4
cmp dword [0x50be5c], 0xffffffff
jne 0x425b8f
mov byte [ebp - 4], 0x40
call fcn.0043f6b0
push 0x4d0f40
call fcn.0047a10f
add esp, 4
mov byte [ebp - 4], 0x3f
push 0x50be5c
call fcn.0047a41f
add esp, 4
push 0x4e5d3c
mov edx, 0x50be80
lea ecx, [ebp - 0xaf8]
call fcn.00414ad0
mov esi, eax
add esp, 4
cmp dword [esi + 0x14], 8
jb 0x425bb1
mov esi, dword [esi]
push 1
push 0
push 0
mov byte [ebp - 0xac4], 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 0xb04], eax
test eax, eax
je 0x425c1f
push 4
push esi
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov esi, eax
test esi, esi
je 0x425c17
lea eax, [ebp - 0xba8]
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x425c14
mov eax, dword [ebp - 0xac4]
mov ecx, 1
cmp dword [ebp - 0xba4], 4
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0xac4], eax
push esi
call edi
push dword [ebp - 0xb04]
call edi
mov edx, dword [ebp - 0xae4]
cmp edx, 8
jb 0x425c5f
mov ecx, dword [ebp - 0xaf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425c55
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
cmp byte [ebp - 0xac4], 0
je 0x425cdf
push 0x4e5d3c
push ecx
call fcn.004149c0
add esp, 4
lea ecx, [ebp - 0xaf8]
mov edx, eax
call fcn.00414ad0
add esp, 4
lea ecx, [ebp - 0xc18]
push eax
call fcn.00417c60
mov edx, dword [ebp - 0xae4]
cmp edx, 8
jb 0x425e6d
mov ecx, dword [ebp - 0xaf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425cd0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
jmp 0x425e6d
push str.FsBlk
push ecx
call fcn.004149c0
add esp, 4
lea ecx, [ebp - 0xaf8]
mov edx, eax
call fcn.00414ad0
mov esi, eax
add esp, 4
cmp dword [esi + 0x14], 8
jb 0x425d07
mov esi, dword [esi]
push 1
push 0
push 0
mov byte [ebp - 0xac4], 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0xb04], eax
test eax, eax
je 0x425d6f
push 4
push esi
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov esi, eax
test esi, esi
je 0x425d67
lea eax, [ebp - 0xba8]
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x425d64
mov eax, dword [ebp - 0xac4]
mov ecx, 1
cmp dword [ebp - 0xba4], 4
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0xac4], eax
push esi
call edi
push dword [ebp - 0xb04]
call edi
mov edx, dword [ebp - 0xae4]
cmp edx, 8
jb 0x425daf
mov ecx, dword [ebp - 0xaf8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425da5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
cmp byte [ebp - 0xac4], 0
je 0x425dc2
push str.FsBlk
jmp 0x425c71
call fcn.0043f5d0
mov esi, eax
cmp dword [esi + 0x14], 8
jb 0x425dd1
mov esi, dword [esi]
push 1
push 0
push 0
mov byte [ebp - 0xac4], 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0xb04], eax
test eax, eax
je 0x425e6d
push 4
push esi
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov esi, eax
test esi, esi
je 0x425e35
lea eax, [ebp - 0xafc]
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x425e32
mov eax, dword [ebp - 0xac4]
mov ecx, 1
cmp dword [ebp - 0xaf8], 4
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0xac4], eax
push esi
call edi
push dword [ebp - 0xb04]
call edi
cmp byte [ebp - 0xac4], 0
je 0x425e6d
call fcn.0043f5d0
lea ecx, [ebp - 0xc18]
cmp ecx, eax
je 0x425e6d
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x425e60
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xc18]
call fcn.00415170
cmp dword [ebp - 0xc08], 0
je 0x426085
call fcn.0043f4f0
push eax
lea ecx, [ebp - 0xadc]
call fcn.00417d60
mov byte [ebp - 4], 0x41
mov esi, 0xa003
cmp byte [ebp - 0x114c], 0
jne 0x425f3d
call fcn.0043f260
cmp eax, 2
mov ecx, str.avastClear.exe
mov edx, str.avgClear.exe
lea eax, [ebp - 0xadc]
cmovne edx, ecx
cmp dword [ebp - 0xc04], 8
push edx
lea ecx, [ebp - 0xc18]
cmovae ecx, dword [ebp - 0xc18]
cmp dword [ebp - 0xac8], 8
push ecx
cmovae eax, dword [ebp - 0xadc]
push eax
push str.The_installer_has_detected_corrupted__s_installation_on_this_computer__service__s_is_running___thus_this_installer_cannot_continue._Use_the__s_utility_to_fix_the_problem_or_contact_our_support_team.
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.0041d160
cmp dword [ebp - 0xac8], 8
lea eax, [ebp - 0xadc]
cmovae eax, dword [ebp - 0xadc]
push eax
push str.Corrupted__s_detected.
lea eax, [ebp - 0x298]
push 0x100
push eax
call fcn.0041d160
add esp, 0x28
lea eax, [ebp - 0x298]
push 0x10
push eax
lea eax, [ebp - 0xac0]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0xc04], 8
lea edi, [ebp - 0xc18]
lea eax, [ebp - 0xadc]
xorps xmm0, xmm0
cmovae edi, dword [ebp - 0xc18]
lea ecx, [ebp - 0xb8c]
cmp dword [ebp - 0xac8], 8
movlpd qword [ebp - 0xb8c], xmm0
cmovae eax, dword [ebp - 0xadc]
mov dword [ebp - 0xb04], eax
call fcn.004158a0
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0xb8c]
test eax, eax
je 0x425fab
push edi
push dword [ebp - 0xb04]
push str._s_was_not_detected_but_service__s_is_running._There_is_a_corrupted_installation__thus_this_installer_cannot_continue.
push 0x50b668
push 8
push eax
call fcn.00417530
add esp, 0x18
mov edi, dword [ebp - 0xb88]
test edi, edi
je 0x425fd7
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x425fd7
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
dec eax
jne 0x425fd7
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0xac8]
cmp edx, 8
jb 0x42601b
mov ecx, dword [ebp - 0xadc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x426011
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xc04]
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 7
mov word [ebp - 0xadc], ax
cmp edx, 8
jb 0x427bb8
mov ecx, dword [ebp - 0xc18]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x426076
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
jmp 0x427bb8
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xc04]
cmp edx, 8
jb 0x4260c9
mov ecx, dword [ebp - 0xc18]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4260bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
push 0x50bc30
lea ecx, [ebp - 0xf60]
call fcn.00419b10
mov esi, eax
test esi, esi
je 0x4261a1
cmp byte [ebp - 0x114c], 0
jne 0x426121
push esi
push 0x50bc30
push str.The_installer_cannot_open_the_SFX_archive__s.__code_0x_x__r_n_r_nIts_probably_caused_by_corrupted_installer_thus_please_try_to_download_it_again.
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.0041d160
add esp, 0x14
lea eax, [ebp - 0xac0]
push 0x10
push str.Installation_failed
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xorps xmm0, xmm0
lea ecx, [ebp - 0xb8c]
movlpd qword [ebp - 0xb8c], xmm0
call fcn.004158a0
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0xb8c]
test eax, eax
je 0x426160
push esi
push 0x50bc30
push str.Cannot_open_the_SFX_archive__s__code_0x_x_
push 0x50b668
push 7
push eax
call fcn.00417530
add esp, 0x18
mov byte [ebp - 4], 0x15
mov edi, dword [ebp - 0xb88]
test edi, edi
je 0x427bb8
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x427bb8
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
dec eax
jne 0x427bb8
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
jmp 0x427bb8
lea ecx, [ebp - 0xaf8]
call fcn.0041d4c0
mov esi, eax
lea eax, [ebp - 0xb84]
cmp eax, esi
je 0x42623d
mov edx, dword [ebp - 0xb70]
cmp edx, 8
jb 0x4261fc
mov ecx, dword [ebp - 0xb84]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4261f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x427de9
push edx
push ecx
call fcn.00479e95
add esp, 8
mov dword [ebp - 0xb74], 0
xor eax, eax
mov dword [ebp - 0xb70], 7
mov word [ebp - 0xb84], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0xb84], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xb74], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xb84]
call fcn.00414fe0
push eax
mov edx, str._TMPPATH_
lea ecx, [ebp - 0xf60]
call fcn.0041de40
add esp, 4
lea eax, [ebp - 0xf60]
lea ecx, [ebp - 0xbdc]
push 0
push eax
call fcn.004288d0
mov esi, dword [ebp - 0xc20]
test esi, esi
jne 0x4262cd
push str.cookie
lea ecx, [ebp - 0xaf8]
call fcn.00415290
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xbdc]
mov eax, dword [ebp - 0x1154]
or eax, 0x200
mov dword [ebp - 0x1154], eax
mov dword [ebp - 0xac4], eax
lea eax, [ebp - 0xaf8]
push eax
call fcn.0041f560
mov byte [ebp - 0x114d], 1
test al, al
jne 0x4262d4
mov byte [ebp - 0x114d], 0
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x1154]
test eax, 0x200
je 0x4262fe
and eax, 0xfffffdff
lea ecx, [ebp - 0xaf8]
mov dword [ebp - 0x1154], eax
call fcn.004152e0
cmp byte [ebp - 0x114d], 0
je 0x42634e
push str.cookie
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
push eax
lea ecx, [ebp - 0xc30]
call fcn.00417c30
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x15
call fcn.004152e0
mov esi, dword [ebp - 0xc20]
cmp dword [ebp - 0xcd0], 0
je 0x42639e
push str.sub_edition
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0xce0]
mov byte [ebp - 4], 0x46
push eax
push ecx
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00417c30
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x15
call fcn.004152e0
test esi, esi
jne 0x4263ef
call fcn.0041d380
xor ecx, ecx
mov esi, eax
call fcn.0041d400
push eax
lea ecx, [ebp - 0xaf8]
call fcn.00415290
mov byte [ebp - 4], 0x47
mov edi, dword [ebp - 0x1154]
push ecx
or edi, 0x400
mov ecx, eax
push esi
mov dword [ebp - 0x1154], edi
mov dword [ebp - 0xac4], edi
call fcn.00429bf0
add esp, 8
mov byte [ebp - 0x114d], 1
test al, al
je 0x4263f6
mov byte [ebp - 0x114d], 0
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x1154]
test eax, 0x400
je 0x426420
and eax, 0xfffffbff
lea ecx, [ebp - 0xaf8]
mov dword [ebp - 0x1154], eax
call fcn.004152e0
cmp byte [ebp - 0x114d], 0
je 0x426650
xorps xmm0, xmm0
mov dword [ebp - 0xb0c], 0
push 0x4e5ddc
lea ecx, [ebp - 0xba4]
movq qword [ebp - 0xb14], xmm0
call fcn.00415290
xor ecx, ecx
mov byte [ebp - 4], 0x48
call fcn.0041d400
push eax
lea ecx, [ebp - 0xaf8]
call fcn.00415290
sub esp, 8
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0xba4]
lea edx, [ebp - 0xaf8]
lea ecx, [ebp - 0xb14]
push 1
push eax
call fcn.00416b60
add esp, 0x10
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xba4]
mov byte [ebp - 4], 0x4c
call fcn.004152e0
lea ecx, [ebp - 0xb14]
call fcn.00415b10
cmp eax, 2
jb 0x426645
mov eax, dword [ebp - 0xb10]
lea ecx, [ebp - 0xb38]
add eax, 0xffffffe8
push eax
call fcn.00417d60
sub esp, 8
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0xb38]
call fcn.00428bc0
mov esi, eax
cmp esi, 0xffffffff
je 0x42663a
push esi
push 0x4e7ea0
lea ecx, [ebp - 0xb38]
call fcn.00415fa0
cmp eax, 0xffffffff
jne 0x42651d
push esi
push 0x4e7ea4
lea ecx, [ebp - 0xb38]
call fcn.00415fa0
cmp eax, 0xffffffff
je 0x42663a
sub eax, esi
lea ecx, [ebp - 0xb38]
dec eax
push eax
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0xb54]
push eax
call fcn.00417710
mov byte [ebp - 4], 0x4e
cmp dword [ebp - 0xb44], 3
jne 0x42662f
push 1
lea ecx, [ebp - 0xb54]
call fcn.00417df0
cmp word [eax], 0x30
jb 0x42662f
push 1
lea ecx, [ebp - 0xb54]
call fcn.00417df0
cmp word [eax], 0x39
ja 0x42662f
call fcn.0043f260
cmp eax, 2
lea ecx, [ebp - 0xba4]
lea eax, [ebp - 0xb54]
push eax
jne 0x4265a0
mov edx, str.mmm_bav_ppc_999_
call fcn.00429b20
add esp, 4
mov byte [ebp - 4], 0x4f
jmp 0x4265b1
mov edx, str.mmm_ava_ppc_999_
call fcn.00429b20
add esp, 4
mov byte [ebp - 4], 0x50
push 0x4e7ea8
mov edx, eax
lea ecx, [ebp - 0xaf8]
call fcn.00414ba0
add esp, 4
lea ecx, [ebp - 0xc30]
push eax
call fcn.00417c60
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xba4]
mov byte [ebp - 4], 0x4e
call fcn.004152e0
push str.cookie
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0xc30]
mov byte [ebp - 4], 0x51
push eax
push ecx
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00417c30
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xb54]
call fcn.004152e0
lea ecx, [ebp - 0xb38]
call fcn.004152e0
lea ecx, [ebp - 0xb14]
call fcn.00416120
lea ecx, [ebp - 0xb38]
call fcn.00414fc0
mov edi, dword [ebp - 0x1168]
mov byte [ebp - 4], 0x52
cmp edi, 0xffffffff
jne 0x42668a
push str._Clear
push ecx
call fcn.0043f4f0
add esp, 4
lea ecx, [ebp - 0xaf8]
mov edx, eax
call fcn.00414ad0
add esp, 4
jmp 0x4266a5
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
movzx eax, ax
mov edx, edi
push eax
push ecx
lea ecx, [ebp - 0xaf8]
call fcn.00423000
add esp, 8
push eax
lea ecx, [ebp - 0xb38]
call fcn.00417c60
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push 0x58
lea eax, [ebp - 0xe08]
push 0
push eax
call fcn.004928b0
add esp, 0xc
lea eax, [ebp - 0xb38]
push eax
push ecx
lea ecx, [ebp - 0xe08]
call fcn.00421810
lea eax, [ebp - 0xcb0]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0xd50]
call fcn.004181e0
lea eax, [ebp - 0xe08]
push eax
lea ecx, [ebp - 0xd50]
call fcn.004181e0
cmp byte [ebp - 0x114c], 0
jne 0x42671e
lea ecx, [ebp - 0xe08]
call fcn.004220f0
lea ecx, [ebp - 0xb84]
call fcn.00414fe0
push eax
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0xf60]
call fcn.0041c2a0
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x53
mov esi, eax
call fcn.004152e0
test esi, esi
je 0x42679a
mov edx, esi
lea ecx, [ebp - 0xaf8]
call fcn.0042e130
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.00414fe0
push eax
mov edx, str.The_installer_cannot_extract_servers.def_with_error__s_
mov ecx, 0x50b668
call fcn.00416c00
add esp, 4
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
cmp edi, 0xffffffff
je 0x426f01
call fcn.00423380
test al, al
je 0x42683e
push 0x4e6d9c
lea ecx, [ebp - 0xba4]
call fcn.00415290
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0xbdc]
mov eax, dword [ebp - 0x1154]
or eax, 0x800
mov dword [ebp - 0x1154], eax
mov dword [ebp - 0xac4], eax
lea eax, [ebp - 0xba4]
push eax
call fcn.0041f560
test al, al
je 0x42683e
push 0x4e6d9c
lea ecx, [ebp - 0xaf8]
call fcn.00415290
mov dword [ebp - 4], 0x57
lea ecx, [ebp - 0xbdc]
mov eax, dword [ebp - 0x1154]
or eax, 0x1000
mov dword [ebp - 0x1154], eax
mov dword [ebp - 0xac4], eax
lea eax, [ebp - 0xaf8]
push eax
call fcn.004288f0
mov byte [ebp - 0x114d], 1
cmp dword [eax + 0x10], 0
je 0x426845
mov byte [ebp - 0x114d], 0
mov eax, dword [ebp - 0x1154]
test eax, 0x1000
je 0x42686e
and eax, 0xffffefff
lea ecx, [ebp - 0xaf8]
mov dword [ebp - 0x1154], eax
call fcn.004152e0
mov eax, dword [ebp - 0x1154]
mov dword [ebp - 4], 0x53
test eax, 0x800
je 0x426887
lea ecx, [ebp - 0xba4]
call fcn.004152e0
cmp byte [ebp - 0x114d], 0
je 0x4268d5
push 0x4e6d9c
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push 0x4e7688
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00414f90
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x53
call fcn.004152e0
cmp dword [ebp - 0xce8], 0
je 0x426b9d
lea ecx, [ebp - 0xcf8]
call fcn.004155f0
test al, al
je 0x426b89
push str..edat
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push 1
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x59
push 0
push eax
lea edx, [ebp - 0xcf8]
lea ecx, [ebp - 0xb14]
call fcn.00466d30
add esp, 0xc
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x5b
call fcn.004152e0
mov esi, dword [ebp - 0xb14]
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0xac4], esi
mov dword [ebp - 0xb04], eax
cmp esi, eax
je 0x426b78
nop word [eax + eax]
mov edx, esi
lea ecx, [ebp - 0xadc]
call fcn.00465ab0
mov edx, esi
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xb6c]
call fcn.00465940
mov byte [ebp - 4], 0x5d
call fcn.0041d380
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, str.elic
lea ecx, [ebp - 0xadc]
call fcn.0041fcf0
add esp, 0xc
test eax, eax
jne 0x4269ad
push str.license.avastlic
jmp 0x426a79
call fcn.0041d380
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, str.ebcf
lea ecx, [ebp - 0xadc]
call fcn.0041fcf0
add esp, 0xc
test eax, eax
jne 0x4269d8
push str.bcc.cfg.tmp
jmp 0x426a79
call fcn.0041d380
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, str.ebpk
lea ecx, [ebp - 0xadc]
call fcn.0041fcf0
add esp, 0xc
test eax, eax
jne 0x426a03
push str.bcpub.key.tmp
jmp 0x426a79
call fcn.0041d380
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, str.erid
lea ecx, [ebp - 0xadc]
call fcn.0041fcf0
add esp, 0xc
test eax, eax
jne 0x426a2b
push str.rid.bin
jmp 0x426a79
call fcn.0041d380
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, str.ecoo
lea ecx, [ebp - 0xadc]
call fcn.0041fcf0
add esp, 0xc
test eax, eax
jne 0x426a53
push str.cookie.bin
jmp 0x426a79
call fcn.0041d380
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, str.eapt
lea ecx, [ebp - 0xadc]
call fcn.0041fcf0
add esp, 0xc
test eax, eax
jne 0x426a84
push str.pairing.bin
lea ecx, [ebp - 0xb6c]
call fcn.00414f90
lea ecx, [ebp - 0xb54]
call fcn.00414fc0
push ecx
lea eax, [ebp - 0xb6c]
mov byte [ebp - 4], 0x5e
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xb54]
call fcn.00466610
lea edx, [ebp - 0xb54]
mov ecx, esi
call fcn.00422f00
add esp, 8
test al, al
je 0x426ae4
lea ecx, [ebp - 0xb54]
call fcn.00414fe0
lea ecx, [ebp - 0xadc]
mov esi, eax
call fcn.00414fe0
push esi
push eax
call fcn.00429c30
add esp, 8
jmp 0x426b32
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0xba4]
call fcn.0042e130
mov ecx, eax
mov byte [ebp - 4], 0x5f
call fcn.00414fe0
lea ecx, [ebp - 0xb54]
mov edi, eax
call fcn.00414fe0
lea ecx, [ebp - 0xadc]
mov esi, eax
call fcn.00414fe0
push edi
push esi
push eax
call fcn.00429ce0
add esp, 0xc
lea ecx, [ebp - 0xba4]
call fcn.004152e0
lea ecx, [ebp - 0xb54]
call fcn.004152e0
lea ecx, [ebp - 0xb6c]
call fcn.004152e0
lea ecx, [ebp - 0xadc]
mov byte [ebp - 4], 0x5b
call fcn.004152e0
mov esi, dword [ebp - 0xac4]
add esi, 0x18
mov dword [ebp - 0xac4], esi
cmp esi, dword [ebp - 0xb04]
jne 0x426960
mov edi, dword [ebp - 0x1168]
lea ecx, [ebp - 0xb14]
mov byte [ebp - 4], 0x53
call fcn.00416120
jmp 0x426b9d
lea ecx, [ebp - 0xcf8]
call fcn.00414fe0
push eax
call fcn.00429d90
add esp, 4
lea ecx, [ebp - 0xb84]
call fcn.00414fe0
push eax
lea ecx, [ebp - 0xf60]
call fcn.0041b7d0
test eax, eax
je 0x426bcf
lea ecx, [ebp - 0xb84]
call fcn.00414fe0
push eax
lea ecx, [ebp - 0xf60]
call fcn.0041b690
push str.cookie.bin
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x60
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xbf4]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
cmp dword [ebp - 0xc20], 0
jne 0x426d04
lea ecx, [ebp - 0xbf4]
call fcn.00422ee0
test al, al
je 0x426d04
xorps xmm0, xmm0
mov dword [ebp - 0xb0c], 0
lea edx, [ebp - 0xbf4]
movq qword [ebp - 0xb14], xmm0
lea ecx, [ebp - 0xb14]
call fcn.00429e40
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0xb10]
mov eax, dword [ebp - 0xb14]
sub ecx, eax
push ecx
push eax
lea ecx, [ebp - 0xc60]
call fcn.0041d210
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xba4]
call fcn.00429f00
add esp, 4
lea ecx, [ebp - 0xc30]
push eax
call fcn.00417c60
lea ecx, [ebp - 0xba4]
call fcn.004152e0
lea ecx, [ebp - 0xc60]
mov byte [ebp - 4], 0x61
call fcn.00417ff0
push str.cookie
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0xc30]
mov byte [ebp - 4], 0x63
push eax
push ecx
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00417c30
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xb14]
mov byte [ebp - 4], 0x53
call fcn.00415bf0
xor ecx, ecx
call fcn.0041d400
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0xc30]
mov ecx, esp
push eax
call fcn.00417d60
lea eax, [ebp - 0xbdc]
push esi
push eax
lea edx, [ebp - 0x98]
lea ecx, [ebp - 0xaf8]
call fcn.0041e160
add esp, 0x20
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
xor esi, esi
nop word [eax + eax]
push dword [esi + 0x505a18]
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x64
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xbf4]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xbf4]
call fcn.00422ee0
test al, al
je 0x426de7
push dword [esi + 0x505a1c]
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0xbf4]
mov byte [ebp - 4], 0x65
push eax
push ecx
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00417c30
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x53
call fcn.004152e0
add esi, 8
cmp esi, 0x18
jb 0x426d50
push str.aswOfferTool.exe
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x66
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xbf4]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push ecx
push 0x7d1
lea ecx, [ebp - 0xbf4]
call fcn.00414fe0
mov edx, eax
call fcn.00415970
add esp, 8
lea ecx, [ebp - 0xaf8]
push str.GuiCust.dll
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x67
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xbf4]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push ecx
push 0x7d0
lea ecx, [ebp - 0xbf4]
call fcn.00414fe0
mov edx, eax
call fcn.00415970
add esp, 8
lea ecx, [ebp - 0xaf8]
push str.CustomInstallation.ini
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x68
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xbf4]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push ecx
push 0x7d2
lea ecx, [ebp - 0xbf4]
call fcn.00414fe0
mov edx, eax
call fcn.00415970
add esp, 8
push 0x5c
lea eax, [ebp - 0xea0]
push 0
push eax
call fcn.004928b0
sub esp, 0xc
lea edx, [ebp - 0xb84]
mov ecx, esp
push str._servers.def
call fcn.00414ad0
add esp, 4
lea ecx, [ebp - 0xea0]
call fcn.00422870
sub esp, 0x18
mov byte [ebp - 4], 0x69
lea eax, [ebp - 0xc30]
mov dword [ebp - 0xb04], esp
mov ecx, esp
push eax
call fcn.00417d60
sub esp, 0x18
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0xc78]
mov dword [ebp - 0xac4], esp
mov ecx, esp
push eax
call fcn.00417d60
sub esp, 0x18
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00415290
lea eax, [ebp - 0xbdc]
mov byte [ebp - 4], 0x69
push eax
lea ecx, [ebp - 0xea0]
call fcn.0042c460
sub esp, 0x18
mov ecx, esp
push str.stub
call fcn.00415290
lea ecx, [ebp - 0xea0]
call fcn.0042c9f0
push ecx
lea eax, [ebp - 0xd50]
push eax
lea ecx, [ebp - 0xb84]
call fcn.00414fe0
push eax
lea ecx, [ebp - 0xf60]
call fcn.0041c3d0
mov esi, eax
test esi, esi
je 0x427042
cmp byte [ebp - 0x114c], 0
jne 0x42701e
push esi
lea ecx, [ebp - 0xb84]
call fcn.00414fe0
push eax
push str.The_installer_cannot_extract_VPX_files_to__s__code_0x_x_
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.0041d160
add esp, 0x14
call fcn.00423130
push 0x10
push eax
lea eax, [ebp - 0xac0]
push eax
push dword [ebp - 0xdc0]
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
lea ecx, [ebp - 0xb84]
call fcn.00414fe0
push eax
mov edx, str.Cannot_extract_VPX_files_to__s__code_0x_x_
mov ecx, 0x50b668
call fcn.0041cc10
add esp, 8
jmp 0x427b93
cmp byte [ebp - 0x1155], 0
je 0x427113
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0xba4]
call fcn.00415290
push 0x4e75f4
mov edx, eax
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0xaf8]
call fcn.00414ba0
add esp, 4
push 0x200
mov ecx, eax
mov byte [ebp - 4], 0x6d
call fcn.00414fe0
mov edx, eax
mov ecx, 0x80000002
call fcn.00468220
add esp, 4
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xba4]
mov byte [ebp - 4], 0x69
call fcn.004152e0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_
lea ecx, [ebp - 0xc60]
call fcn.00415290
push 0x4e75f4
mov edx, eax
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0xaf8]
call fcn.00414ba0
add esp, 4
push 0x100
mov ecx, eax
mov byte [ebp - 4], 0x6f
call fcn.00414fe0
mov edx, eax
mov ecx, 0x80000002
call fcn.00468220
add esp, 4
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xc60]
mov byte [ebp - 4], 0x69
call fcn.004152e0
push 0x4e75f4
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x70
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xcc8]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
cmp byte [ebp - 0x114e], 0
je 0x427997
cmp edi, 0xffffffff
je 0x427182
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, edi
mov edx, eax
call fcn.00422fd0
push 1
movzx ecx, al
push edx
push ecx
call fcn.00422dc0
add esp, 0xc
lea ecx, [ebp - 0xadc]
call fcn.00414fc0
push fcn.004152e0
push fcn.00414fc0
push 2
push 0x18
lea eax, [ebp - 0xca8]
mov byte [ebp - 4], 0x71
push eax
call fcn.0047a53f
lea ecx, [ebp - 0xb54]
call fcn.00414fc0
push 0x4e75f4
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x73
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x74
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xca8]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push str.Instup.dll
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x75
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xc90]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push 0x4e75f4
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x76
push eax
lea edx, [ebp - 0xd10]
lea ecx, [ebp - 0xadc]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xadc]
call fcn.00422ee0
test al, al
je 0x4274aa
cmp dword [ebp - 0xb3c], 0x7cb
jbe 0x4274aa
lea eax, [ebp - 0xca8]
xor edi, edi
mov dword [ebp - 0xac4], eax
test esi, esi
jne 0x42795c
cmp dword [ebp - 0x115c], esi
jne 0x42795c
push 0x34
lea eax, [ebp - 0xe3c]
push esi
push eax
call fcn.004928b0
add esp, 0xc
lea ecx, [ebp - 0xba4]
call fcn.00414fc0
push eax
lea ecx, [ebp - 0xe3c]
mov byte [ebp - 4], 0x77
call fcn.004289b0
lea ecx, [ebp - 0xba4]
mov byte [ebp - 4], 0x79
call fcn.004152e0
push str.copy_sfx
lea ecx, [ebp - 0xaf8]
call fcn.00415290
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0xaf8]
push dword [ebp - 0xac4]
push ecx
push eax
lea ecx, [ebp - 0xe3c]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00417c30
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x79
call fcn.004152e0
push str.wait
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push 0x4e5e14
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x7b
push eax
lea ecx, [ebp - 0xe3c]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00414f90
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x79
call fcn.004152e0
push ecx
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xe3c]
call fcn.004288b0
mov ecx, eax
mov byte [ebp - 4], 0x7c
call fcn.00414fe0
lea ecx, [ebp - 0xadc]
mov esi, eax
call fcn.00414fe0
push 0
lea ecx, [ebp - 0x115c]
mov edx, esi
push 0
push ecx
mov ecx, eax
call fcn.0041d960
add esp, 0xc
lea ecx, [ebp - 0xaf8]
mov esi, eax
call fcn.004152e0
lea ecx, [ebp - 0xe3c]
mov byte [ebp - 4], 0x73
call fcn.00427df0
add dword [ebp - 0xac4], 0x18
inc edi
cmp edi, 2
jb 0x4272a8
test esi, esi
jne 0x42795c
cmp dword [ebp - 0x115c], esi
jne 0x42795c
push 0x4e75ec
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x7d
push eax
lea edx, [ebp - 0xd10]
lea ecx, [ebp - 0xb54]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push 0x4e75f4
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x7e
lea edx, [ebp - 0xb54]
push eax
mov ecx, edx
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xb54]
call fcn.00422ee0
test al, al
je 0x42795c
lea eax, [ebp - 0xb54]
push eax
lea ecx, [ebp - 0xcc8]
call fcn.00417c30
jmp 0x42795c
push str.setup.ovr
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x7f
push eax
lea edx, [ebp - 0xd10]
lea ecx, [ebp - 0xadc]
call fcn.00466610
add esp, 8
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xadc]
call fcn.00422ee0
test al, al
je 0x42795c
lea ecx, [ebp - 0xb20]
call fcn.00414fc0
push str._copysfx
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x80
call fcn.00415290
push 0x4e824c
mov edx, eax
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xba4]
call fcn.00414ba0
add esp, 4
lea ecx, [ebp - 0xca8]
mov byte [ebp - 4], 0x82
push ecx
mov edx, eax
lea ecx, [ebp - 0xb6c]
call fcn.00414a70
add esp, 4
push 0x4e75e8
mov edx, eax
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0xc60]
call fcn.00414ba0
add esp, 4
lea ecx, [ebp - 0xb20]
push eax
call fcn.00417c60
lea ecx, [ebp - 0xc60]
call fcn.004152e0
lea ecx, [ebp - 0xb6c]
call fcn.004152e0
lea ecx, [ebp - 0xba4]
call fcn.004152e0
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x80
call fcn.004152e0
lea ecx, [ebp - 0xb20]
call fcn.00414fe0
lea ecx, [ebp - 0xadc]
mov esi, eax
call fcn.00414fe0
push 0
lea ecx, [ebp - 0x115c]
mov edx, esi
push 0
push ecx
mov ecx, eax
call fcn.0041d960
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x427715
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
nop
mov ecx, dword [ebp - 0x115c]
cmp ecx, 0x2000000a
jne 0x4276f1
push 0xbb8
mov dword [ebp - 0x115c], 0xa004
call edi
lea ecx, [ebp - 0xb20]
call fcn.004152e0
lea ecx, [ebp - 0xb20]
call fcn.00414fc0
push str._copysfx
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x80
call fcn.00415290
push 0x4e824c
mov edx, eax
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0xba4]
call fcn.00414ba0
add esp, 4
lea ecx, [ebp - 0xca8]
mov byte [ebp - 4], 0x82
push ecx
mov edx, eax
lea ecx, [ebp - 0xb6c]
call fcn.00414a70
add esp, 4
push 0x4e75e8
mov edx, eax
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0xc60]
call fcn.00414ba0
add esp, 4
lea ecx, [ebp - 0xb20]
push eax
call fcn.00417c60
lea ecx, [ebp - 0xc60]
call fcn.004152e0
lea ecx, [ebp - 0xb6c]
call fcn.004152e0
lea ecx, [ebp - 0xba4]
call fcn.004152e0
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x80
call fcn.004152e0
lea ecx, [ebp - 0xb20]
call fcn.00414fe0
lea ecx, [ebp - 0xadc]
mov esi, eax
call fcn.00414fe0
push 0
lea ecx, [ebp - 0x115c]
mov edx, esi
push 0
push ecx
mov ecx, eax
call fcn.0041d960
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4275e0
jmp 0x427715
cmp ecx, 0x20000000
je 0x42770b
mov dword [ebp - 0x115c], 5
cmp ecx, 0x20000001
jne 0x427715
mov dword [ebp - 0x115c], 0
lea ecx, [ebp - 0xb20]
mov byte [ebp - 4], 0x73
call fcn.004152e0
test esi, esi
jne 0x42795c
cmp dword [ebp - 0x115c], esi
jne 0x42795c
push 0x4e75ec
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x84
push eax
lea edx, [ebp - 0xd10]
lea ecx, [ebp - 0xbf4]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
push str.avast.setup
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x85
push eax
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0xcc8]
call fcn.00466610
add esp, 8
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov edi, eax
test edi, edi
je 0x42795c
xorps xmm0, xmm0
mov dword [ebp - 0xb0c], esi
movq qword [ebp - 0xb14], xmm0
mov dword [ebp - 0xb14], esi
mov dword [ebp - 0xb10], esi
mov dword [ebp - 0xb0c], esi
lea eax, [ebp - 0xb14]
mov byte [ebp - 4], 0x86
push eax
mov ecx, edi
call fcn.00422160
add esp, 4
test al, al
je 0x42794a
mov esi, dword [ebp - 0xb14]
mov dword [ebp - 0xb3c], esi
cmp esi, dword [ebp - 0xb10]
je 0x42794a
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xc60]
call fcn.00417d60
push ecx
mov byte [ebp - 4], 0x87
call fcn.0041d380
push eax
lea ecx, [ebp - 0xc60]
call fcn.00429fd0
add esp, 8
lea ecx, [ebp - 0xc60]
test al, al
jne 0x42787e
mov byte [ebp - 4], 0x86
call fcn.004152e0
push ecx
lea eax, [ebp - 0xb04]
push eax
lea ecx, [ebp - 0xb3c]
call fcn.00422570
mov esi, dword [ebp - 0xb3c]
cmp esi, dword [ebp - 0xb10]
jne 0x427820
jmp 0x42794a
mov eax, dword [ebp - 0xc50]
dec eax
push eax
call fcn.00417df0
cmp word [eax], 0x3b
je 0x4278b9
push 0x4e828c
mov edx, esi
lea ecx, [ebp - 0xaf8]
call fcn.00414ad0
add esp, 4
mov ecx, esi
push eax
call fcn.00417c60
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea eax, [ebp - 0xb84]
mov edx, esi
push eax
lea ecx, [ebp - 0xba4]
call fcn.00429f30
add esp, 4
push 0x4e828c
mov edx, eax
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xaf8]
call fcn.00414ba0
add esp, 4
mov ecx, esi
push eax
call fcn.00417c60
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xba4]
mov byte [ebp - 4], 0x87
call fcn.004152e0
lea edx, [ebp - 0xb14]
lea ecx, [ebp - 0xb60]
call fcn.004222f0
push eax
lea ecx, [ebp - 0xc00]
call fcn.004224e0
lea ecx, [ebp - 0xb60]
call fcn.00415bf0
lea ecx, [ebp - 0xc60]
call fcn.004152e0
mov ecx, dword [ebp - 0xc00]
mov dword [ebp - 0x1164], ecx
push edi
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
lea ecx, [ebp - 0xb14]
call fcn.00416120
lea ecx, [ebp - 0xb54]
call fcn.004152e0
push fcn.004152e0
push 2
push 0x18
lea eax, [ebp - 0xca8]
mov byte [ebp - 4], 0x71
push eax
call fcn.0047a5b3
lea ecx, [ebp - 0xadc]
mov byte [ebp - 4], 0x69
call fcn.004152e0
mov edi, dword [ebp - 0x1168]
jmp 0x4279e7
cmp edi, 0xffffffff
je 0x427a33
push str.guid
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x89
push eax
push ecx
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00414f90
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x69
call fcn.004152e0
cmp edi, 0xffffffff
je 0x427a33
push str.ga_clientid
lea ecx, [ebp - 0xaf8]
call fcn.00415290
lea eax, [ebp - 0xc78]
mov byte [ebp - 4], 0x8a
push eax
push ecx
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288f0
add esp, 4
mov ecx, eax
call fcn.00417c30
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x69
call fcn.004152e0
lea ecx, [ebp - 0xcc8]
call fcn.00414fe0
push eax
mov edx, 0x4e8290
mov ecx, 0x50b668
call fcn.0041ccc0
lea eax, [ebp - 0xd68]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.004288b0
mov byte [ebp - 4], 0x8b
mov esi, dword [ebp - 0xb88]
test esi, esi
je 0x427aa0
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427a73
sub ecx, edx
sar ecx, 1
je 0x427aa0
push 0x4e82e8
lea ecx, [ebp - 0xd68]
call fcn.00414d90
push esi
lea ecx, [ebp - 0xd68]
call fcn.00414d90
mov eax, dword [ebp - 0x1164]
lea edi, [ebp - 0xe08]
xor ecx, ecx
cmp eax, dword [ebp - 0xbfc]
cmove eax, ecx
lea ecx, [ebp - 0xd68]
mov dword [ebp - 0x1164], eax
xor eax, eax
cmp dword [ebp - 0xdc0], eax
cmove edi, eax
call fcn.00414fe0
lea ecx, [ebp - 0xcc8]
mov esi, eax
call fcn.00414fe0
mov ecx, dword [ebp - 0x1164]
mov edx, esi
push ecx
lea ecx, [ebp - 0x115c]
push edi
push ecx
mov ecx, eax
call fcn.0041d960
mov esi, eax
add esp, 0xc
test esi, esi
je 0x427b6d
cmp byte [ebp - 0x114c], 0
jne 0x427b4f
push esi
lea ecx, [ebp - 0xcc8]
call fcn.00414fe0
push eax
push str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
lea eax, [ebp - 0xac0]
push 0x410
push eax
call fcn.0041d160
add esp, 0x14
call fcn.00423130
push 0x10
push eax
lea eax, [ebp - 0xac0]
push eax
push dword [ebp - 0xdc0]
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
lea ecx, [ebp - 0xcc8]
call fcn.00414fe0
push eax
mov edx, str.The_stub_cannot_run_installer_updater_executable__s__code_0x_x_
mov ecx, 0x50b668
call fcn.0041cc10
jmp 0x427b85
mov esi, dword [ebp - 0x115c]
lea ecx, [ebp - 0xcc8]
push esi
call fcn.00414fe0
push eax
call fcn.0042a000
add esp, 8
lea ecx, [ebp - 0xd68]
call fcn.004152e0
lea ecx, [ebp - 0xea0]
call fcn.00422ad0
lea ecx, [ebp - 0xe08]
call fcn.00421a60
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x15
call fcn.004152e0
call fcn.00440aa0
call fcn.00449d30
sub esp, 8
xor ecx, ecx
call fcn.004499a0
add esp, 8
xor edx, edx
push 0
push 0
sub esp, 0xc
push 0
push 0
push 0
push ecx
push 0
push 0
push 0
push 0
xor ecx, ecx
call fcn.0043fe50
add esp, 0x34
xor ecx, ecx
call fcn.00440090
cmp dword [ebp - 0xb74], 0
je 0x427c8a
push str.Reboot.txt
lea ecx, [ebp - 0xaf8]
call fcn.00415290
push ecx
lea eax, [ebp - 0xaf8]
mov byte [ebp - 4], 0x8c
push eax
lea edx, [ebp - 0xb84]
lea ecx, [ebp - 0xbf4]
call fcn.00466610
add esp, 8
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaf8]
call fcn.004152e0
lea ecx, [ebp - 0xbf4]
call fcn.00422ee0
cmp byte [ebp - 0x115d], 0
mov byte [ebp - 0x1155], al
je 0x427c6d
mov dl, 1
lea ecx, [ebp - 0xb84]
call fcn.00422fb0
jmp 0x427c7c
push ecx
lea ecx, [ebp - 0xb84]
call fcn.00466010
add esp, 4
cmp byte [ebp - 0x1155], 0
je 0x427c8a
call fcn.0041df80
push esi
call fcn.0042a0b0
add esp, 4
lea ecx, [ebp - 0xce0]
call fcn.004152e0
lea ecx, [ebp - 0xcf8]
call fcn.004152e0
lea ecx, [ebp - 0xc78]
call fcn.004152e0
lea ecx, [ebp - 0xc30]
call fcn.004152e0
lea ecx, [ebp - 0x1148]
call fcn.00427fb0
lea ecx, [ebp - 0xc00]
call fcn.00415bf0
lea ecx, [ebp - 0xc48]
call fcn.004152e0
lea ecx, [ebp - 0xd50]
call fcn.00418170
lea ecx, [ebp - 0xf60]
call fcn.00419990
lea ecx, [ebp - 0xbdc]
call fcn.00427df0
lea ecx, [ebp - 0xd10]
call fcn.004152e0
lea ecx, [ebp - 0xd80]
call fcn.004152e0
lea ecx, [ebp - 0xd98]
call fcn.004152e0
lea ecx, [ebp - 0xdb0]
call fcn.004152e0
lea ecx, [ebp - 0xb84]
call fcn.004152e0
lea ecx, [ebp - 0xbf4]
call fcn.004152e0
lea ecx, [ebp - 0xcc8]
call fcn.004152e0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00479e61
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
call fcn.0049b19a
call fcn.0049b19a
call fcn.0049b19a
call fcn.0049b19a
call fcn.0049b19a
call fcn.0049b19a
call fcn.0049b19a
push str.user32
push str.GetModuleHandleW___s_
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xad8]
call fcn.0042a730
push 0x50271c
lea eax, [ebp - 0xad8]
push eax
call fcn.00491d27
push str.SetProcessDPIAware
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0xad8]
call fcn.00429a90
push 0x50271c
lea eax, [ebp - 0xad8]
push eax
call fcn.00491d27
call fcn.0049b19a
int3