Function at 0x43aa21
Capabilities:
Accept command line arguments
Check os version
Contain obfuscated stackstrings
Copy file
Get common file path

Disassembly:
push 0xfa8
mov eax, 0x46c759
call fcn.004422f9
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
xor ebx, ebx
push ebx
mov dword [ebp - 0xf84], edi
mov dword [ebp - 0xf40], ebx
call dword [sym.imp.ole32.dll_CoInitialize]
and dword [ebp - 4], ebx
call fcn.00456c09
cmp eax, 6
jb 0x43aa5d
call fcn.0043960a
push edi
lea ecx, [ebp - 0xf2c]
mov dword [0x498d58], edi
call fcn.00438e0b
mov byte [ebp - 4], 1
xor edi, edi
push edi
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xb54], 0x47c540
mov dword [ebp - 0xb2c], 0x474868
call fcn.00402580
mov byte [ebp - 4], 3
push 0x104
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0xb54]
call fcn.0040f2f0
mov byte [ebp - 4], 4
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push 0x104
push dword [eax]
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 1
lea eax, [ebp - 0xf2d]
push eax
push 0x47c998
call fcn.0040c568
mov byte [ebp - 4], 5
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf5c], esp
push 1
lea eax, [ebp - 0xb54]
push eax
call fcn.00433760
mov byte [ebp - 4], 6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf2c]
call fcn.004398fd
push 0x800
lea eax, [ebp - 0xf2c]
push edi
push 0x498d60
mov dword [0x498d5c], eax
call fcn.004412d0
and dword [0x499584], edi
and dword [ebp - 0xf68], edi
add esp, 0xc
lea eax, [ebp - 0xf68]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
push esi
lea ecx, [ebp - 0xf7c]
mov dword [ebp - 0xf80], edi
call fcn.00411123
mov byte [ebp - 4], 7
mov dword [ebp - 0x9a0], 0x47c540
mov dword [ebp - 0x978], 0x474868
push 0
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0x9a0]
call fcn.00402580
mov byte [ebp - 4], 9
lea eax, [ebp - 0xf58]
push eax
lea ecx, [ebp - 0x9a0]
call fcn.0041133f
mov byte [ebp - 4], 0xa
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.004035c0
push 1
push 0
push eax
push str.debuglog
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
mov byte [ebp - 0xf2e], al
mov byte [ebp - 4], 9
cmp byte [ebp - 0xf54], 0
je 0x43ac10
mov ecx, dword [ebp - 0xf58]
push dword [ecx + 0x24]
call fcn.00403640
mov al, byte [ebp - 0xf2e]
test al, al
je 0x43ac9a
call fcn.00402400
push 0
call fcn.004024f0
cmp dword [ebp - 0x98c], 0
lea eax, [ebp - 0x940]
push eax
je 0x43ac76
lea ecx, [ebp - 0x9a0]
call fcn.0043a811
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x940]
call fcn.00401580
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 1
lea eax, [ebp - 0x9a0]
push eax
call fcn.004036a0
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 9
call fcn.00402410
jmp 0x43ac9a
call fcn.00402500
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x9a0]
call fcn.00402520
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x940]
call fcn.00401580
push 1
lea eax, [ebp - 0xf2d]
push eax
push esi
lea ecx, [ebp - 0x940]
call fcn.004025e0
mov byte [ebp - 4], 0x10
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x43acbe
mov eax, dword [eax]
push eax
lea eax, [ebp - 0xf38]
push str.InstallShield_setup.exe__Unicode__started__cmdline:__s
push eax
mov dword [ebp - 0xf38], str.Setup.cpp
mov dword [ebp - 0xf34], 0xa0
call fcn.00411370
add esp, 0xc
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x940]
call fcn.00401580
push 1
push 1
push 0
push str.runfromtemp
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
mov byte [ebp - 0xf64], al
xor eax, eax
push eax
push eax
push eax
push str.reboot
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
test al, al
je 0x43ae85
cmp byte [0x4951c8], 0
jne 0x43ad41
cmp byte [0x49a838], 0
je 0x43adb1
push 1
lea eax, [ebp - 0xf2d]
push eax
push str.Setup.cpp
lea ecx, [ebp - 0xa30]
call fcn.004025e0
mov byte [ebp - 4], 0x12
push 1
lea eax, [ebp - 0xf2d]
push eax
push str.Running_after_reboot
lea ecx, [ebp - 0x940]
call fcn.004025e0
mov byte [ebp - 4], 0x13
push 0xac
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0x940]
push eax
call fcn.004023a0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x940]
call fcn.00401580
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xa30]
call fcn.00401580
lea eax, [ebp - 0x940]
push eax
call fcn.004192e8
pop ecx
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0xaf4]
call fcn.00418bbd
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x940]
call fcn.00401580
lea ecx, [ebp - 0xaf4]
call fcn.00419875
test eax, eax
jne 0x43ae24
mov esi, dword [0x499584]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xaf4]
call fcn.00418ede
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c7d6
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 1
lea eax, [ebp - 0xf2d]
push eax
push esi
call fcn.004025e0
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xaf4]
call fcn.00419e7b
mov esi, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xaf4]
call fcn.00418ede
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c7d6
cmp byte [ebp - 0xf64], 0
je 0x43aeab
xor eax, eax
push eax
push eax
push eax
push 0x475af4
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
test al, al
je 0x43b030
push 0
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0xb84]
mov dword [ebp - 0xb84], 0x47c540
mov dword [ebp - 0xb5c], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0xf58]
push eax
lea ecx, [ebp - 0xb84]
call fcn.0041133f
mov byte [ebp - 4], 0x21
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.004035c0
push 1
push 0
push eax
push str.removeasmajorupgrade
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
mov byte [ebp - 0xf2d], al
mov byte [ebp - 4], 0x20
cmp byte [ebp - 0xf54], 0
je 0x43af34
mov ecx, dword [ebp - 0xf58]
push dword [ecx + 0x24]
call fcn.00403640
mov al, byte [ebp - 0xf2d]
test al, al
je 0x43b021
cmp byte [0x4951c8], 0
jne 0x43af4e
cmp byte [0x49a838], 0
je 0x43afbe
push 1
lea eax, [ebp - 0xf2d]
push eax
push str.Setup.cpp
lea ecx, [ebp - 0xa30]
call fcn.004025e0
mov byte [ebp - 4], 0x23
push 1
lea eax, [ebp - 0xf2d]
push eax
push 0x475af8
lea ecx, [ebp - 0x940]
call fcn.004025e0
mov byte [ebp - 4], 0x24
push 0xbb
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0x940]
push eax
call fcn.004023a0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x940]
call fcn.00401580
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xa30]
call fcn.00401580
push dword [ebp - 0xf64]
lea eax, [ebp - 0xb84]
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 1
push eax
call fcn.004036a0
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x20
call fcn.0043927c
add esp, 0x34
mov esi, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb84]
call fcn.00401580
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c7d6
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb84]
call fcn.00401580
cmp dword [ebp - 0xf68], 1
push 0x2d
pop edx
push 0x2f
pop ecx
mov dword [ebp - 0xf60], 0x6b
mov dword [ebp - 0xf5c], 0x4b
jbe 0x43b2cb
movzx eax, word [esi]
cmp ax, dx
je 0x43b068
cmp ax, cx
jne 0x43b114
cmp word [esi + 2], 0x25
jne 0x43b114
add esi, 4
mov ax, word [esi]
lea esi, [esi + 2]
cmp ax, cx
jne 0x43b076
xor eax, eax
mov word [esi - 4], ax
cmp dword [0x498ce0], 8
lea eax, [esi - 2]
push eax
mov ecx, 0x498ccc
cmovae ecx, dword [0x498ccc]
push ecx
lea eax, [ebp - 0x850]
push str._s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x850]
push 1
push eax
call fcn.004400c0
lea ecx, [ebp - 0xf3c]
call fcn.0040c724
mov byte [ebp - 4], 0x2c
push dword [ebp - 0xf84]
lea ecx, [ebp - 0xf3c]
call fcn.0040ca1b
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf3c]
call fcn.0040c76b
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c61d
cmp ax, dx
je 0x43b11e
cmp ax, cx
jne 0x43b13f
movzx ecx, word [esi + 2]
cmp cx, word [ebp - 0xf60]
je 0x43b264
cmp cx, word [ebp - 0xf5c]
je 0x43b264
push 0x2f
pop ecx
cmp ax, dx
je 0x43b14d
cmp ax, cx
jne 0x43b2cb
movzx eax, word [esi + 2]
cmp eax, 0x67
je 0x43b15f
cmp eax, 0x47
jne 0x43b2cb
lea edi, [esi + 4]
mov ax, word [edi]
lea edi, [edi + 2]
cmp ax, cx
jne 0x43b162
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x238], ax
lea eax, [ebp - 0x236]
push eax
call fcn.004412d0
add esp, 0xc
lea eax, [edi + 4]
push eax
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
movzx ecx, word [ebp + eax*2 - 0x23c]
push 0x2d
pop edx
xor ebx, ebx
cmp cx, dx
je 0x43b1c3
push 0x2f
pop edx
cmp cx, dx
jne 0x43b1f0
movzx ecx, word [ebp + eax*2 - 0x23a]
cmp ecx, 0x73
je 0x43b1d5
cmp ecx, 0x53
jne 0x43b1f0
xor ebx, ebx
lea eax, [eax*2 - 4]
inc ebx
cmp eax, 0x208
jae 0x43b25f
xor ecx, ecx
mov word [ebp + eax - 0x238], cx
xor eax, eax
push 0x206
push eax
mov word [edi - 4], ax
mov word [ebp - 0x648], ax
lea eax, [ebp - 0x646]
push eax
call fcn.004412d0
add esp, 0xc
lea eax, [esi + 6]
push eax
lea eax, [ebp - 0x648]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push ebx
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x648]
push eax
call fcn.0043f1a3
add esp, 0xc
mov esi, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c7d6
call fcn.00443b89
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x440], ax
lea eax, [ebp - 0x43e]
push eax
add esi, 4
call fcn.004412d0
push esi
push dword [edi]
lea eax, [ebp - 0x440]
push 0x4710b0
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
lea eax, [ebp - 0x440]
push 1
push eax
call fcn.0043ff8c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c61d
xor edi, edi
cmp dword [ebp - 0xf68], 1
mov dword [ebp - 0xf60], edi
jbe 0x43b30c
movzx eax, word [esi]
cmp ax, dx
je 0x43b2e9
cmp ax, cx
jne 0x43b30c
movzx eax, word [esi + 2]
push 0x71
pop ecx
cmp ax, cx
je 0x43b2fa
cmp eax, 0x51
jne 0x43b30c
mov edi, dword [ebp - 0xf80]
mov edi, dword [edi + 4]
add edi, 4
mov dword [ebp - 0xf60], edi
push 0
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0x8e0]
mov dword [ebp - 0x8e0], 0x47c540
mov dword [ebp - 0x8b8], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x34
push 1
lea ecx, [ebp - 0xfa0]
call fcn.00438d6a
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0xf38]
push eax
lea ecx, [ebp - 0xfa0]
call fcn.0043926c
mov eax, dword [eax]
push 0
push 0
add eax, 0x10
push eax
push str.tempdisk1folder
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
test al, al
je 0x43b3aa
lea ecx, [ebp - 0xfa0]
call fcn.0043a961
cmp dword [ebp - 0xf90], 0
mov eax, 0x47c998
mov ecx, eax
cmovne ecx, dword [ebp - 0xf90]
test ecx, ecx
cmovne eax, ecx
push eax
lea ecx, [ebp - 0x8dc]
call fcn.00405070
cmp dword [ebp - 0x8cc], 0
jne 0x43b4f6
mov ebx, 0x104
push ebx
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040f2f0
mov byte [ebp - 4], 0x36
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
call fcn.0045c135
test al, al
je 0x43b415
lea eax, [ebp - 0xa30]
push eax
call fcn.0045649e
pop ecx
mov byte [ebp - 4], 0x37
xor ebx, ebx
inc ebx
jmp 0x43b478
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 1
lea eax, [ebp - 0xf2d]
push eax
mov ebx, 0x47c998
push ebx
call fcn.0040c568
mov dword [ebp - 4], 0x38
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf5c], esp
push 1
lea eax, [ebp - 0xf2d]
push eax
push ebx
call fcn.0040c568
mov byte [ebp - 4], 0x39
push 0
lea eax, [ebp - 0x940]
push eax
mov byte [ebp - 4], 0x37
call fcn.004568df
add esp, 0x68
mov dword [ebp - 4], 0x3a
push 2
pop ebx
push eax
lea ecx, [ebp - 0x8e0]
mov dword [ebp - 0xf40], ebx
call fcn.0040c7e2
mov dword [ebp - 4], 0x37
test bl, 2
je 0x43b4b1
and ebx, 0xfffffffd
mov dword [ebp - 0xf40], ebx
mov dword [ebp - 4], 0x37
lea ecx, [ebp - 0x940]
call fcn.00401580
mov dword [ebp - 4], 0x35
test bl, 1
je 0x43b4d5
and ebx, 0xfffffffe
mov dword [ebp - 0xf40], ebx
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xa30]
call fcn.00401580
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040fa2a
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x940]
call fcn.00401580
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.00414cc6
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x940]
call fcn.00401580
cmp dword [ebp - 0x8c8], 8
lea eax, [ebp - 0x8dc]
cmovae eax, dword [ebp - 0x8dc]
push eax
push 0x498d60
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
sub esp, 0x30
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 1
lea eax, [ebp - 0x8e0]
push eax
call fcn.00433760
mov byte [ebp - 4], 0x3f
mov byte [ebp - 4], 0x35
mov ecx, dword [0x498d5c]
call fcn.00439e73
push 0
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0xb24]
mov dword [ebp - 0xb24], 0x47c540
mov dword [ebp - 0xafc], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0xf58]
push eax
lea ecx, [ebp - 0xb24]
call fcn.0041133f
mov byte [ebp - 4], 0x42
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push 0
push 0
push eax
push str.runprerequisites
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
mov byte [ebp - 0xf2f], al
mov byte [ebp - 4], 0x41
cmp byte [ebp - 0xf54], 0
je 0x43b5ec
mov ecx, dword [ebp - 0xf58]
push dword [ecx + 0x24]
call fcn.00403640
mov al, byte [ebp - 0xf2f]
mov byte [ebp - 0xf2d], 1
test al, al
je 0x43b613
push 1
push 0
push 0
push 0x471734
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
mov byte [ebp - 0xf2d], al
test edi, edi
je 0x43b62f
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x43b62f
cmp byte [ebp - 0xf2d], 0
jne 0x43c3e9
cmp byte [ebp - 0xf64], 0
jne 0x43b647
push esi
call fcn.0045c5ec
pop ecx
test al, al
je 0x43c3e9
mov esi, dword [ebp - 0xf80]
push 1
lea eax, [ebp - 0xf2d]
push eax
push dword [esi]
lea ecx, [ebp - 0x880]
call fcn.0040c568
mov byte [ebp - 4], 0x44
push 0
lea ecx, [ebp - 0xa30]
push ecx
mov ecx, eax
call fcn.0040f926
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x880]
call fcn.00401580
push 0
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0xa30]
call fcn.0040f926
mov byte [ebp - 4], 0x48
push 1
lea eax, [ebp - 0xf2d]
push eax
push dword [esi]
lea ecx, [ebp - 0x880]
call fcn.0040c568
mov byte [ebp - 4], 0x49
push 0
push 0
lea ecx, [ebp - 0x9d0]
push ecx
mov ecx, eax
call fcn.0040f4da
push 0x4b
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x880]
call fcn.00401580
cmp dword [ebp - 0x9bc], 0
je 0x43b6f7
lea ecx, [ebp - 0x9d0]
call fcn.0043a5a9
test al, al
jne 0x43b7aa
push 0
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0x880]
mov dword [ebp - 0x880], 0x47c540
mov dword [ebp - 0x858], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x4e
mov esi, 0x104
push esi
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x880]
call fcn.0040f2f0
mov byte [ebp - 4], 0x4f
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push esi
push dword [eax]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
push 0
push 0
lea eax, [ebp - 0x970]
push eax
lea ecx, [ebp - 0x880]
call fcn.0040f4da
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x9d0]
call fcn.0040c7e2
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x970]
call fcn.00401580
push 0x4b
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x880]
call fcn.00401580
lea ecx, [ebp - 0xf58]
call fcn.0040c724
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x9d0]
call fcn.0040ff43
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0x940]
push eax
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040ff43
mov byte [ebp - 4], 0x55
cmp dword [ebp - 0x898], 8
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [ebp - 0x8ac]
cmovae ecx, dword [ebp - 0x8ac]
cmp dword [ebp - 0x8f8], 8
push 0
lea eax, [ebp - 0x90c]
cmovae eax, dword [ebp - 0x90c]
push ecx
push eax
call esi
push 0x104
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040f2f0
mov byte [ebp - 4], 0x56
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
lea ecx, [ebp - 0xf58]
call fcn.0040e3ed
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
push 1
lea eax, [ebp - 0xf2d]
push eax
push dword [0x493744]
lea ecx, [ebp - 0x880]
call fcn.0040c568
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x970]
push eax
lea ecx, [ebp - 0x9d0]
call fcn.0040ff43
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x910]
call fcn.0040c7e2
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x970]
call fcn.00401580
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x880]
call fcn.00401580
push 1
lea eax, [ebp - 0xf2d]
push eax
push dword [0x493744]
lea ecx, [ebp - 0x880]
call fcn.0040c568
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x970]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040ff43
mov byte [ebp - 4], 0x5c
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040c7e2
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x970]
call fcn.00401580
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x880]
call fcn.00401580
cmp dword [ebp - 0x898], 8
lea ecx, [ebp - 0x8ac]
cmovae ecx, dword [ebp - 0x8ac]
cmp dword [ebp - 0x8f8], 8
push 0
lea eax, [ebp - 0x90c]
cmovae eax, dword [ebp - 0x90c]
push ecx
push eax
call esi
push 0x104
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040f2f0
mov byte [ebp - 4], 0x5f
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
lea ecx, [ebp - 0xf58]
call fcn.0040e3ed
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
push 1
lea eax, [ebp - 0xf2d]
push eax
push str.ISSetup.dll
lea ecx, [ebp - 0x880]
call fcn.0040c452
mov byte [ebp - 4], 0x60
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x970]
push eax
lea ecx, [ebp - 0x9d0]
call fcn.0040ff43
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0x910]
call fcn.0040c7e2
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x970]
call fcn.00401580
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x880]
call fcn.00401580
push 1
lea eax, [ebp - 0xf2d]
push eax
push 0x471308
lea ecx, [ebp - 0x880]
call fcn.0040c568
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x970]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040ff43
mov byte [ebp - 4], 0x65
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040c7e2
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x970]
call fcn.00401580
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x880]
call fcn.00401580
cmp dword [ebp - 0x898], 8
lea ecx, [ebp - 0x8ac]
cmovae ecx, dword [ebp - 0x8ac]
cmp dword [ebp - 0x8f8], 8
push 0
lea eax, [ebp - 0x90c]
cmovae eax, dword [ebp - 0x90c]
push ecx
push eax
call esi
push 0x104
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040f2f0
mov byte [ebp - 4], 0x68
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
lea ecx, [ebp - 0xf58]
call fcn.0040e3ed
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
push 0
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0xa90]
mov dword [ebp - 0xa90], 0x47c540
mov dword [ebp - 0xa68], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x6a
push 0x104
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0xa90]
call fcn.0040f2f0
push 0x6b
pop ecx
mov byte [ebp - 4], cl
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push 0x104
push dword [eax]
push str.Skin
push str.Startup
call fcn.0043e63e
add esp, 0x10
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
cmp dword [ebp - 0xa7c], 0
jne 0x43bb70
push str.setup.isn
lea ecx, [ebp - 0xa8c]
call fcn.00405070
lea eax, [ebp - 0xa90]
push eax
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x9d0]
call fcn.0040ff43
mov byte [ebp - 4], 0x6c
push eax
lea ecx, [ebp - 0x910]
call fcn.0040c7e2
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x880]
call fcn.00401580
lea eax, [ebp - 0xa90]
push eax
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040ff43
mov byte [ebp - 4], 0x6e
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040c7e2
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x880]
call fcn.00401580
cmp dword [ebp - 0x898], 8
lea ecx, [ebp - 0x8ac]
cmovae ecx, dword [ebp - 0x8ac]
cmp dword [ebp - 0x8f8], 8
push 0
lea eax, [ebp - 0x90c]
cmovae eax, dword [ebp - 0x90c]
push ecx
push eax
call esi
test eax, eax
je 0x43bc54
push 0x104
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040f2f0
mov byte [ebp - 4], 0x70
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
lea ecx, [ebp - 0xf58]
call fcn.0040e3ed
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
push 0x10
lea eax, [ebp - 0x30]
push eax
push str.count
push str.Languages
call fcn.0043e63e
push 0xa
xor esi, esi
lea eax, [ebp - 0x30]
push esi
push eax
call fcn.004436bf
add esp, 0x1c
mov dword [ebp - 0xf34], eax
test eax, eax
je 0x43be82
mov edi, esi
mov ebx, eax
push edi
lea eax, [ebp - 0x960]
push str.key_d
push eax
call fcn.00444834
push 0x10
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x960]
push eax
push str.Languages
call fcn.0043e63e
push 0x10
lea eax, [ebp - 0x870]
push esi
push eax
call fcn.004436bf
mov esi, eax
add esp, 0x28
test esi, esi
je 0x43be6b
cmp dword [ebp - 0x9b8], 8
lea ecx, [ebp - 0x9cc]
cmovae ecx, dword [ebp - 0x9cc]
push esi
push ecx
lea eax, [ebp - 0x910]
push str._s0x_04x.ini
push eax
call fcn.00417a04
cmp dword [ebp - 0x8c8], 8
lea eax, [ebp - 0x8dc]
cmovae eax, dword [ebp - 0x8dc]
push esi
push eax
lea eax, [ebp - 0x8b0]
push str._s0x_04x.ini
push eax
call fcn.00417a04
add esp, 0x20
cmp dword [ebp - 0x898], 8
lea ecx, [ebp - 0x8ac]
cmovae ecx, dword [ebp - 0x8ac]
cmp dword [ebp - 0x8f8], 8
push 0
lea eax, [ebp - 0x90c]
cmovae eax, dword [ebp - 0x90c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x43bd9f
push 0x104
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040f2f0
push 0x71
pop ecx
mov byte [ebp - 4], cl
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
lea ecx, [ebp - 0xf58]
call fcn.0040e3ed
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xf4c]
call fcn.0040c772
cmp dword [ebp - 0x9b8], 8
lea eax, [ebp - 0x9cc]
cmovae eax, dword [ebp - 0x9cc]
push esi
push eax
lea eax, [ebp - 0x910]
push str._s_04x.mst
push eax
call fcn.00417a04
cmp dword [ebp - 0x8c8], 8
lea eax, [ebp - 0x8dc]
cmovae eax, dword [ebp - 0x8dc]
push esi
push eax
lea eax, [ebp - 0x8b0]
push str._s_04x.mst
push eax
call fcn.00417a04
add esp, 0x20
cmp dword [ebp - 0x898], 8
lea ecx, [ebp - 0x8ac]
cmovae ecx, dword [ebp - 0x8ac]
cmp dword [ebp - 0x8f8], 8
lea eax, [ebp - 0x90c]
cmovae eax, dword [ebp - 0x90c]
xor esi, esi
push esi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x43be6d
push 0x104
lea eax, [ebp - 0xf3c]
push eax
lea ecx, [ebp - 0x8b0]
call fcn.0040f2f0
mov byte [ebp - 4], 0x72
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push dword [eax]
lea ecx, [ebp - 0xf58]
call fcn.0040e3ed
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xf3c]
call fcn.0040c772
jmp 0x43be6d
xor esi, esi
inc edi
cmp edi, ebx
jb 0x43bc8c
mov ebx, dword [ebp - 0xf40]
mov edi, dword [ebp - 0xf60]
push esi
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0xa60]
mov dword [ebp - 0xa60], 0x47c540
mov dword [ebp - 0xa38], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x74
lea eax, [ebp - 0xf3c]
push eax
lea ecx, [ebp - 0xa60]
call fcn.0041133f
mov byte [ebp - 4], 0x75
mov ecx, dword [eax]
push 1
push esi
mov byte [eax + 4], 1
call fcn.0040f295
push eax
push 0x475244
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
mov byte [ebp - 4], 0x74
cmp byte [ebp - 0xf38], 0
je 0x43befd
mov ecx, dword [ebp - 0xf3c]
push dword [ecx + 0x24]
call fcn.00403640
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0xa60]
call fcn.00414cc6
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x880]
call fcn.00401580
cmp dword [ebp - 0xa4c], 0
jne 0x43bf5f
lea eax, [ebp - 0xa30]
push eax
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x9d0]
call fcn.0040ff43
mov byte [ebp - 4], 0x78
push eax
lea ecx, [ebp - 0xa60]
call fcn.0040c7e2
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x880]
call fcn.00401580
push esi
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0xac0]
mov dword [ebp - 0xac0], 0x47c540
mov dword [ebp - 0xa98], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0xf3c]
push eax
lea ecx, [ebp - 0xac0]
call fcn.0041133f
mov byte [ebp - 4], 0x7c
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.0040f295
push eax
lea ecx, [ebp - 0xf7c]
call fcn.004136c7
mov byte [ebp - 4], 0x7b
cmp byte [ebp - 0xf38], 0
je 0x43bfd2
mov ecx, dword [ebp - 0xf3c]
push dword [ecx + 0x24]
call fcn.00403640
push esi
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0xa00]
mov dword [ebp - 0xa00], 0x47c540
mov dword [ebp - 0x9d8], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0x7f
push 1
lea eax, [ebp - 0xf2d]
push eax
push 0x498d60
lea ecx, [ebp - 0x970]
call fcn.0040c568
mov esi, eax
mov byte [ebp - 4], 0x80
lea eax, [ebp - 0x940]
push eax
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.0040ff43
mov byte [ebp - 4], 0x81
cmp dword [ebp - 0xaa8], 8
lea edx, [ebp - 0xabc]
cmovae edx, dword [ebp - 0xabc]
add esi, 4
cmp dword [esi + 0x14], 8
jb 0x43c058
mov esi, dword [esi]
cmp dword [ebp - 0xa48], 8
lea ecx, [ebp - 0xa5c]
cmovae ecx, dword [ebp - 0xa5c]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x43c077
mov eax, dword [eax]
push edx
push esi
push ecx
push eax
lea eax, [ebp - 0xa00]
push str._s__q__s___tempdisk1folder__s___s
push eax
call fcn.00417a04
add esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x880]
call fcn.00401580
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x970]
call fcn.00401580
cmp byte [ebp - 0xf2f], 0
je 0x43c0cf
mov esi, str.__eprq
push esi
call fcn.0041692b
pop ecx
push eax
push esi
lea ecx, [ebp - 0x9fc]
call fcn.0041792c
cmp byte [ebp - 0xf64], 0
jne 0x43c0f1
mov esi, str.__IS_temp
push esi
call fcn.0041692b
pop ecx
push eax
push esi
lea ecx, [ebp - 0x9fc]
call fcn.0041792c
cmp byte [ebp - 0xf2e], 0
je 0x43c198
push 1
lea eax, [ebp - 0xf2d]
push eax
push str.__debuglog
lea ecx, [ebp - 0x970]
call fcn.0040c568
mov byte [ebp - 4], 0x84
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x9a0]
call fcn.004148c3
mov byte [ebp - 4], 0x85
push 0
push 0
lea eax, [ebp - 0xaf0]
push eax
lea ecx, [ebp - 0x880]
call fcn.0041d6b7
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0xaf0]
call fcn.00401580
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x970]
call fcn.0041d453
lea eax, [ebp - 0x970]
push eax
lea ecx, [ebp - 0xa00]
call fcn.0041d453
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x880]
call fcn.00401580
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x970]
call fcn.00401580
cmp byte [0x4951c8], 0
jne 0x43c1aa
cmp byte [0x49a838], 0
je 0x43c21a
push 1
lea eax, [ebp - 0xf2d]
push eax
push str.Setup.cpp
lea ecx, [ebp - 0x970]
call fcn.004025e0
mov byte [ebp - 4], 0x89
push 1
lea eax, [ebp - 0xf2d]
push eax
push str.Relaunching_setup_from_temp
lea ecx, [ebp - 0x880]
call fcn.004025e0
mov byte [ebp - 4], 0x8a
push 0x1b3
lea eax, [ebp - 0x970]
push eax
lea eax, [ebp - 0x880]
push eax
call fcn.004023a0
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x880]
call fcn.00401580
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x970]
call fcn.00401580
push 1
push 1
push 0
push str.clone_wait
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
cmp byte [ebp - 0xf2f], 0
jne 0x43c6d5
test al, al
jne 0x43c6d5
cmp dword [ebp - 0x9e8], 8
lea eax, [ebp - 0x9fc]
cmovae eax, dword [ebp - 0x9fc]
push 1
push eax
call fcn.0043ff8c
test eax, eax
je 0x43c351
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa00]
call fcn.00401580
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0xac0]
call fcn.00401580
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xa60]
call fcn.00401580
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa90]
call fcn.00401580
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x8b0]
call fcn.00401580
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x910]
call fcn.00401580
push 0x4b
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0xf58]
call fcn.0040c76b
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x9d0]
call fcn.00401580
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x940]
call fcn.00401580
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa30]
call fcn.00401580
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb24]
call fcn.00401580
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xfa0]
call fcn.00415364
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8e0]
call fcn.00401580
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c61d
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa00]
call fcn.00401580
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0xac0]
call fcn.00401580
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xa60]
call fcn.00401580
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa90]
call fcn.00401580
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x8b0]
call fcn.00401580
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x910]
call fcn.00401580
push 0x4b
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0xf58]
call fcn.0040c76b
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x9d0]
call fcn.00401580
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x940]
call fcn.00401580
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa30]
call fcn.00401580
call fcn.0043fdcc
lea ecx, [ebp - 0xfb0]
call fcn.0041c374
mov byte [ebp - 4], 0xb0
cmp byte [ebp - 0xf2e], 0
je 0x43c441
push 0
lea eax, [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0x880]
mov dword [ebp - 0x880], 0x47c540
mov dword [ebp - 0x858], 0x474868
call fcn.004036a0
mov byte [ebp - 4], 0xb0
lea eax, [ebp - 0x880]
mov byte [ebp - 4], 0xb2
or ebx, 4
jmp 0x43c464
push 1
lea eax, [ebp - 0xf2d]
push eax
push 0x47c998
lea ecx, [ebp - 0xaf0]
call fcn.004025e0
mov dword [ebp - 4], 0xb3
or ebx, 8
lea ecx, [ebp - 0xf2c]
push ecx
sub esp, 0x30
mov dword [ebp - 0xf40], ebx
mov ecx, esp
mov dword [ebp - 0xf34], esp
push 1
push eax
call fcn.004036a0
mov dword [ebp - 4], 0xb4
push edi
push dword [ebp - 0xf80]
push dword [ebp - 0xf68]
push dword [ebp - 0xf84]
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0xfb0]
call fcn.0041cc27
mov esi, eax
mov eax, 0xb2
mov dword [ebp - 4], eax
test bl, 8
je 0x43c4d3
and ebx, 0xfffffff7
mov dword [ebp - 0xf40], ebx
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xaf0]
call fcn.00401580
mov dword [ebp - 4], 0xb0
test bl, 4
je 0x43c4f7
and ebx, 0xfffffffb
mov dword [ebp - 0xf40], ebx
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x880]
call fcn.00401580
test esi, esi
je 0x43c642
xor ebx, ebx
push ebx
lea eax, [ebp - 0xf2d]
push eax
lea ecx, [ebp - 0x880]
mov dword [ebp - 0x880], 0x47c540
mov dword [ebp - 0x858], 0x474868
call fcn.00402580
mov byte [ebp - 4], 0xb8
lea eax, [ebp - 0xf3c]
push eax
lea ecx, [ebp - 0x880]
call fcn.0041133f
mov byte [ebp - 4], 0xb9
mov ecx, dword [eax]
mov byte [eax + 4], 1
call fcn.004035c0
push ebx
push ebx
push eax
push str.runprerequisites
lea ecx, [ebp - 0xf7c]
call fcn.00411b30
mov bl, al
mov byte [ebp - 4], 0xb8
cmp byte [ebp - 0xf38], 0
je 0x43c57d
mov ecx, dword [ebp - 0xf3c]
push dword [ecx + 0x24]
call fcn.00403640
test bl, bl
je 0x43c628
lea ecx, [ebp - 0xf4c]
call fcn.0040c724
mov byte [ebp - 4], 0xbb
push dword [0x498d58]
lea ecx, [ebp - 0xf4c]
call fcn.0040ca1b
mov byte [ebp - 4], 0xb8
lea ecx, [ebp - 0xf4c]
call fcn.0040c76b
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x880]
call fcn.00401580
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xfb0]
call fcn.0041c3c0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb24]
call fcn.00401580
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xfa0]
call fcn.00415364
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8e0]
call fcn.00401580
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
mov byte [ebp - 4], 1
xor esi, esi
jmp 0x43c7da
lea ecx, [ebp - 0xfb0]
call fcn.0041cc1b
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x880]
call fcn.00401580
push dword [0x499584]
lea eax, [ebp - 0xf38]
push str.Setup_returning__d
push eax
mov dword [ebp - 0xf38], str.Setup.cpp
mov dword [ebp - 0xf34], 0x1e7
call fcn.00411370
mov esi, dword [0x499584]
add esp, 0xc
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xfb0]
call fcn.0041c3c0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb24]
call fcn.00401580
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xfa0]
call fcn.00415364
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8e0]
call fcn.00401580
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
jmp 0x43c7d6
cmp dword [ebp - 0x9e8], 8
lea eax, [ebp - 0x9fc]
cmovae eax, dword [ebp - 0x9fc]
push 1
push eax
call fcn.004400c0
mov esi, eax
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa00]
call fcn.00401580
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0xac0]
call fcn.00401580
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xa60]
call fcn.00401580
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xa90]
call fcn.00401580
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x8b0]
call fcn.00401580
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x910]
call fcn.00401580
push 0x4b
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0xf58]
call fcn.0040c76b
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x9d0]
call fcn.00401580
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x940]
call fcn.00401580
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa30]
call fcn.00401580
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb24]
call fcn.00401580
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xfa0]
call fcn.00415364
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8e0]
call fcn.00401580
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a0]
call fcn.00401580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf7c]
call fcn.004111f6
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb54]
call fcn.00401580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf2c]
call fcn.00439073
or dword [ebp - 4], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, esi
call fcn.004422a8
ret 0x10