Function at 0x4030a0
Capabilities:
Check os version
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1686c
call fcn.0041ce10
mov eax, dword [0x445504]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x16820], ebx
mov dword [ebp - 0x16844], eax
mov dword [0x454db0], edi
mov dword [ebp - 0x1685c], edi
mov byte [ebp - 0x16838], 0
call fcn.004057e6
push str.IsWow64Process
push str.kernel32
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x1682c], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
cmp esi, edi
je 0x40311d
lea eax, [ebp - 0x1682c]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
cmp dword [ebp - 0x1682c], edi
lea eax, [ebp - 0x7c]
jne 0x40312c
push 0x20
jmp 0x40312e
push 0x40
push 0x43f2b8
push eax
call fcn.00418d03
add esp, 0xc
call fcn.00408d8e
push ebx
mov dword [ebp - 0x16850], eax
mov byte [ebp - 0x2e], 9
mov byte [ebp - 0x2d], 0x7a
mov byte [ebp - 0x2c], 0x3e
mov byte [ebp - 0x2b], 0x2f
mov byte [ebp - 0x2a], 0x2e
mov byte [ebp - 0x29], 0xfa
mov byte [ebp - 0x28], 0xff
mov byte [ebp - 0x27], 0x1d
mov byte [ebp - 0x26], 0xf0
mov byte [ebp - 0x25], 0x9b
mov byte [ebp - 0x24], 0x19
mov byte [ebp - 0x23], 0x7c
mov byte [ebp - 0x22], 0x15
mov byte [ebp - 0x21], 0xb8
mov byte [ebp - 0x20], 0x1e
mov byte [ebp - 0x1f], 0x6d
mov byte [ebp - 0x1e], 0xc6
mov byte [ebp - 0x1d], 0x10
mov byte [ebp - 0x1c], 0x41
mov byte [ebp - 0x1b], 0x7e
mov byte [ebp - 0x1a], 0x5c
mov byte [ebp - 0x19], 0xed
mov byte [ebp - 0x18], 0x51
mov byte [ebp - 0x17], 0xb1
mov byte [ebp - 0x16], 0x19
mov byte [ebp - 0x15], 0x1c
mov byte [ebp - 0x14], 0x3c
mov byte [ebp - 0x13], 0xe2
mov byte [ebp - 0x12], 0x94
mov byte [ebp - 0x11], 0xd8
mov byte [ebp - 0x50], 0x59
mov byte [ebp - 0x4f], 0xbd
mov byte [ebp - 0x4e], 0xc9
mov byte [ebp - 0x4d], 0x52
mov byte [ebp - 0x4c], 0xaa
mov byte [ebp - 0x4b], 0x35
mov byte [ebp - 0x4a], 0xad
mov byte [ebp - 0x49], 0xbb
mov byte [ebp - 0x48], 0x10
mov byte [ebp - 0x47], 0xef
mov byte [ebp - 0x46], 0xde
mov byte [ebp - 0x45], 0x67
mov byte [ebp - 0x44], 0x2c
mov byte [ebp - 0x43], 0x47
mov byte [ebp - 0x42], 0xe0
mov byte [ebp - 0x41], 0xb5
mov byte [ebp - 0x40], 0xd4
mov byte [ebp - 0x3f], 0x82
mov byte [ebp - 0x3e], 0x1f
mov byte [ebp - 0x3d], 0x81
mov byte [ebp - 0x3c], 0x52
mov byte [ebp - 0x3b], 0xa1
mov byte [ebp - 0x3a], 2
mov byte [ebp - 0x39], 0x44
mov byte [ebp - 0x38], 0x2a
mov byte [ebp - 0x37], 0xeb
mov byte [ebp - 0x36], 0xaa
mov byte [ebp - 0x35], 0x7b
mov byte [ebp - 0x34], 0x79
mov byte [ebp - 0x33], 0x3b
mov byte [ebp - 0x32], 0x93
mov byte [ebp - 0x31], 0x45
mov byte [ebp - 0x30], 0xae
mov byte [ebp - 0x2f], 0xd2
call fcn.004183a0
cmp eax, 3
pop ecx
jb 0x403272
cmp byte [ebx], 0x5c
jne 0x40325e
cmp byte [ebx + 1], 0x5c
je 0x40326a
cmp byte [ebx + 1], 0x3a
jne 0x403272
cmp byte [ebx + 2], 0x5c
jne 0x403272
mov dword [ebp - 0x1684c], ebx
jmp 0x403298
mov edi, 0x400
push edi
call fcn.00418210
pop ecx
mov esi, eax
push edi
push esi
call fcn.0041a8d5
push ebx
call fcn.00409498
add esp, 0xc
mov ebx, esi
mov dword [ebp - 0x1684c], esi
push ebx
push str._Extractor__The_absolute_wrapper_path_is__s_n
call fcn.00409575
push dword [ebp - 0x16820]
push str._Extractor__The_executable_name_is__s_n
call fcn.00409575
push 0x800
call fcn.00418210
add esp, 0x14
mov esi, eax
push ebx
push esi
mov byte [esi], 0
call fcn.00418440
push esi
xor edi, edi
xor ebx, ebx
call fcn.004183a0
add esp, 0xc
test eax, eax
jle 0x4032f1
cmp byte [ebx + esi], 0x5c
jne 0x4032e5
mov edi, ebx
push esi
inc ebx
call fcn.004183a0
cmp ebx, eax
pop ecx
jl 0x4032dd
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x16820]
mov byte [edi + esi], 0
call fcn.00402f88
push str._Extractor__Found_Params_marker._Extracting_now..._n
mov dword [ebp - 0x16830], eax
call fcn.00409575
add esp, 0xc
mov esi, 0x30d40
push esi
call fcn.00418210
pop ecx
push esi
xor ebx, ebx
push ebx
push eax
mov dword [ebp - 0x16840], eax
call fcn.00419640
add esp, 0xc
push dword [ebp - 0x16830]
xor eax, eax
mov byte [ebp - 0x16811], bl
call fcn.004082db
mov dword [ebp - 0x1682c], eax
mov dword [esp], 0x43f348
call fcn.00409575
pop ecx
mov edi, 0x43f34c
push edi
call fcn.00409575
pop ecx
push dword [ebp - 0x1682c]
push str._Processing__d_dynamic_properties_n
call fcn.00409575
push edi
call fcn.00409575
add esp, 0xc
cmp dword [ebp - 0x1682c], ebx
mov dword [ebp - 0x16824], ebx
jle 0x4035cf
push dword [ebp - 0x16830]
call fcn.004082c8
pop ecx
push esi
push dword [ebp - 0x16830]
mov ebx, eax
xor eax, eax
call fcn.0040827e
mov edi, eax
push edi
call fcn.004183a0
add esp, 0xc
cmp eax, 0x64
jbe 0x4033e4
lea eax, [ebp - 0x70]
push 0x63
push eax
push eax
call fcn.00419510
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
push ebx
push dword [ebp - 0x16824]
mov byte [ebp - 0xd], 0
push str._DynProps__Dynamic_Param__d:__s__s...__n
jmp 0x4033f1
push edi
push ebx
push dword [ebp - 0x16824]
push str._DynProps__Dynamic_Param__d:__s__s__n
call fcn.00409575
mov eax, dword [ebp - 0x16840]
add esp, 0x10
push edi
push ebx
call fcn.00408182
push str.update_url
push ebx
call fcn.00419940
add esp, 0x10
test eax, eax
jne 0x40342b
push edi
push str._DynProps__Dynamic_Update_URL:__s_n
mov dword [ebp - 0x16854], edi
call fcn.00409575
pop ecx
pop ecx
push str.match_versions
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x403449
push str.true
push edi
call fcn.00419940
pop ecx
pop ecx
push str.wrapper_autotest
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x403461
mov byte [ebp - 0x16838], 1
push str.show_no_ui
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x40348a
push str.true
push edi
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x40348a
mov byte [ebp - 0x16811], 1
push str.force_spawn
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x4034b2
push str.true
push edi
call fcn.00419940
neg eax
sbb eax, eax
pop ecx
inc eax
pop ecx
mov dword [0x454db8], eax
push str.splash_buffer
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x4034da
push edi
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x4034da
push edi
call fcn.004193b3
pop ecx
mov dword [0x454e50], eax
push str.splash_image
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x40355a
push edi
call fcn.004183a0
cmp eax, 0x64
pop ecx
jae 0x4034ff
push edi
push str._DynProps__Splash_Image_is__s_n
jmp 0x40351b
push 0x63
lea eax, [ebp - 0x70]
push edi
push eax
call fcn.00419510
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 0xd], 0
push str._DynProps__Splash_Image_is__s..._n
call fcn.00409575
pop ecx
pop ecx
push str._DynProps__Base64_decoding_image..._n
call fcn.00409575
pop ecx
push edi
call fcn.004183a0
pop ecx
push eax
push edi
lea eax, [ebp - 0x16858]
call fcn.00401401
push dword [ebp - 0x16858]
mov dword [ebp - 0x1685c], eax
push str._DynProps__Decode_complete__image_size_is__d__n
call fcn.00409575
add esp, 0x10
push str.jre_name
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x403592
mov byte [ebp - 0x2f90], al
lea eax, [ebp - 0x2f90]
push edi
push eax
call fcn.00418440
lea eax, [ebp - 0x2f90]
push eax
push str._DynProps__JRE_name_from_dynamic_launch_properties_is__s_n
call fcn.00409575
add esp, 0x10
push str.windows_app_id
push ebx
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x4035b7
push edi
push str._DynProps__Windows_APP_ID_is__s_n
call fcn.00409575
pop ecx
pop ecx
mov eax, edi
call fcn.0040290c
inc dword [ebp - 0x16824]
mov eax, dword [ebp - 0x16824]
cmp eax, dword [ebp - 0x1682c]
jl 0x403393
mov esi, dword [ebp - 0x16830]
call fcn.004065a0
push str.Processing_dynamic_properties
call fcn.0040974b
cmp byte [ebp + 0x14], 0
pop ecx
je 0x4035f6
push str._Extractor__This_is_an_elevated_run_purely_to_prepare_an_installation._Will_not_show_UI_or_launch_an_app_n
call fcn.00409575
pop ecx
push 0x43f348
call fcn.00409575
mov dword [esp], str.Extracting_wrapper_tail
call fcn.00409723
pop ecx
push dword [ebp - 0x16850]
push dword [ebp - 0x16820]
call fcn.0040300d
mov ebx, eax
push ebx
mov dword [ebp - 0x16850], ebx
call fcn.004082c8
add esp, 0xc
push ebx
mov dword [ebp - 0x16820], eax
call fcn.004082c8
pop ecx
push ebx
mov dword [ebp - 0x16834], eax
call fcn.004082c8
pop ecx
push ebx
mov dword [ebp - 0x16864], eax
call fcn.004082c8
pop ecx
push ebx
mov dword [ebp - 0x1683c], eax
call fcn.004082c8
mov dword [ebp - 0x1681c], eax
mov dword [esp], 0x2000
push ebx
xor eax, eax
call fcn.0040827e
push ebx
mov dword [ebp - 0x16818], eax
call fcn.004082c8
add esp, 0xc
push ebx
mov dword [ebp - 0x16860], eax
call fcn.004082c8
pop ecx
push ebx
mov dword [ebp - 0x16848], eax
call fcn.004082c8
pop ecx
push ebx
mov dword [ebp - 0x16828], eax
call fcn.004082c8
mov esi, eax
mov dword [esp], 0x1388
push ebx
xor eax, eax
mov dword [ebp - 0x16868], esi
call fcn.0040827e
mov edi, eax
push 2
push ebx
xor eax, eax
mov dword [ebp - 0x1682c], edi
call fcn.0040827e
add esp, 0x10
test esi, esi
mov dword [ebp - 0x16830], eax
je 0x4036fa
push esi
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x4036fa
push esi
push str._Extractor__Required_Java_version__s_n
call fcn.00409575
pop ecx
pop ecx
cmp dword [ebp - 0x16830], 0
je 0x40371e
push dword [ebp - 0x16830]
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x40371e
push str._Extractor__Skipping_System_JRE_n
call fcn.00409575
pop ecx
push 0x43e324
push edi
call fcn.00419940
test eax, eax
pop ecx
pop ecx
jne 0x40373d
mov edi, dword [ebp - 0x16854]
push edi
push str._Extractor__Will_use_Dynamic_Update_URL:__s_n
jmp 0x403743
push edi
push str._Extractor__Will_use_Static_Update_URL:__s_n
call fcn.00409575
cmp byte [ebp - 0x16811], 0
pop ecx
mov dword [ebp - 0x16824], edi
pop ecx
jne 0x4037a4
cmp dword [ebp - 0x16828], 0
je 0x40379d
push dword [ebp - 0x16828]
call fcn.004183a0
test eax, eax
pop ecx
je 0x40379d
xor edi, edi
cmp dword [ebp + 0xc], edi
jle 0x40379d
mov eax, dword [ebp - 0x16844]
push dword [eax + edi*4]
push dword [ebp - 0x16828]
call fcn.00419940
test eax, eax
pop ecx
pop ecx
je 0x40399a
inc edi
cmp edi, dword [ebp + 0xc]
jl 0x403779
mov byte [ebp - 0x16811], 0
movzx eax, byte [ebp - 0x16811]
push eax
push str._Extractor__Is_silent_install_is__d_n
call fcn.00409575
push str.Extracting_tail
call fcn.0040974b
add esp, 0xc
push str._Extractor__Setting_up_static_properties_n
call fcn.00409575
mov edi, dword [ebp - 0x16840]
pop ecx
push dword [ebp - 0x1682c]
mov eax, edi
push str.update_url
call fcn.0040815a
push dword [ebp - 0x16848]
mov eax, edi
push str.install_type
call fcn.0040815a
push dword [ebp - 0x1681c]
mov eax, edi
push str.min_splash_ms
call fcn.0040815a
push dword [ebp - 0x16818]
mov eax, edi
push str.jwsig_public_key
call fcn.0040815a
push dword [ebp - 0x16860]
mov eax, edi
push str.can_override_splash
call fcn.0040815a
push dword [ebp - 0x16820]
mov eax, edi
push str.app_name
call fcn.0040815a
push dword [ebp - 0x16834]
mov eax, edi
push str.wrapper_app_version
call fcn.0040815a
push dword [ebp - 0x1683c]
mov eax, edi
push str.wrapper_gu_version
call fcn.0040815a
add esp, 0x40
push dword [ebp - 0x16828]
mov eax, edi
push str.silent_parameter
call fcn.0040815a
push esi
push str.java_version
mov eax, edi
call fcn.0040815a
push dword [ebp - 0x16830]
mov eax, edi
push str.skip_system_jre
call fcn.0040815a
add esp, 0x18
cmp byte [ebp - 0x16811], 0
je 0x4038b7
push str.true
push str.show_no_ui
mov eax, edi
call fcn.0040815a
pop ecx
pop ecx
cmp dword [ebp - 0x16818], 0
je 0x4039a6
push dword [ebp - 0x16818]
call fcn.004183a0
test eax, eax
pop ecx
push dword [ebp - 0x16818]
jbe 0x4039b2
call fcn.004183a0
mov esi, eax
shr esi, 1
inc esi
pop ecx
inc esi
push esi
call fcn.00418210
pop ecx
push esi
push 0
push eax
mov dword [ebp - 0x1681c], eax
call fcn.00419640
add esp, 0xc
push dword [ebp - 0x16818]
push esi
push dword [ebp - 0x1681c]
call fcn.00408f99
add esp, 0xc
push eax
push str._Extractor__Processed_public_key_of_length__d_n
mov dword [ebp - 0x16828], eax
call fcn.00409575
push dword [ebp - 0x16818]
push str._Extractor__Hex:__s_n
call fcn.00409575
push 0x31
pop ecx
mov esi, 0x4367b0
mov edi, 0x454e80
push 0x24
rep movsd dword es:[edi], dword [esi]
call fcn.00418210
add esp, 0x14
mov esi, eax
push esi
push dword [ebp - 0x16828]
push dword [ebp - 0x1681c]
call fcn.0040c160
add esp, 0xc
test eax, eax
je 0x403981
push str.ERROR___unable_to_import_public_key._n
call fcn.004182d3
pop ecx
push esi
call fcn.00418133
pop ecx
xor esi, esi
push esi
push str._Extractor__Public_Key:__08X_n
mov dword [0x454db0], esi
call fcn.00409575
mov edi, dword [ebp - 0x16840]
jmp 0x4039c8
mov byte [ebp - 0x16811], 1
jmp 0x4037a4
push str._Extractor__Public_key_empty__no_public_key__n
call fcn.00409575
jmp 0x4039c9
call fcn.004183a0
test eax, eax
pop ecx
ja 0x4039ca
push 0
push str._Extractor__Public_key_length__d__no_public_key__n
call fcn.00409575
pop ecx
pop ecx
mov ecx, dword [ebp - 0x16848]
call fcn.004099a8
push eax
push str._Extractor__Shared_dir_is__s_n
mov dword [ebp - 0x16848], eax
call fcn.00409575
mov esi, dword [ebp - 0x16824]
push esi
push str._Extractor__Update_URL_is_currently__s_n
call fcn.00409575
push esi
call fcn.004183a0
add esp, 0x14
test eax, eax
jle 0x403a13
add eax, esi
cmp byte [eax - 1], 0x2f
je 0x403a13
mov byte [eax], 0x2f
mov byte [eax + 1], 0
push esi
push str._Extractor__Update_URL_is_now__s_n
call fcn.00409575
push str.JWrapper_
push dword [ebp - 0x16848]
lea eax, [ebp - 0x1408]
call fcn.00409517
push dword [ebp - 0x16820]
lea eax, [ebp - 0x1408]
push eax
call fcn.00418440
lea eax, [ebp - 0x1408]
push eax
push str._Extractor__Master_folder_is__s_n
call fcn.00409575
lea eax, [ebp - 0x1408]
push eax
call fcn.004012de
add esp, 0x24
lea eax, [ebp - 0x1408]
push str.JWApps
push eax
lea eax, [ebp - 0x16810]
call fcn.00409517
lea eax, [ebp - 0x16810]
push str.JreNameOverride
push eax
lea eax, [ebp - 0x15488]
call fcn.00409517
lea eax, [ebp - 0x15488]
push 0x43e9b8
push eax
call fcn.004194a6
mov esi, eax
add esp, 0x18
test esi, esi
je 0x403b48
push str._JREOverride__Processing_JRE_Override_file__JreNameOverride__n
call fcn.00409575
mov dword [esp], 0x1f4
push esi
call fcn.004081aa
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x1681c], eax
je 0x403b18
push eax
call fcn.004183a0
cmp eax, 1
pop ecx
jne 0x403afa
mov eax, dword [ebp - 0x1681c]
cmp byte [eax], 0x2d
jne 0x403afa
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__Ignoring_JRE_name____keeping__s_n
jmp 0x403b54
push dword [ebp - 0x1681c]
call fcn.004183a0
test eax, eax
pop ecx
jne 0x403b18
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__Ignoring_empty_JRE_name__keeping__s_n
jmp 0x403b54
push dword [ebp - 0x1681c]
lea eax, [ebp - 0x2f90]
push eax
mov byte [ebp - 0x2f90], 0
call fcn.00418440
push esi
call fcn.0041aeb3
add esp, 0xc
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__JRE_name_overriden_to__s_n
jmp 0x403b54
lea eax, [ebp - 0x2f90]
push eax
push str._JREOverride__No_JRE_name_override__will_continue_to_use__s_n
call fcn.00409575
pop ecx
pop ecx
lea eax, [ebp - 0x1408]
push str.JWAppsSharedConfig
push eax
lea eax, [ebp - 0x14100]
call fcn.00409517
lea eax, [ebp - 0x14100]
push eax
call fcn.00409479
add esp, 0xc
push dword [ebp - 0x1683c]
mov byte [ebp - 0x16812], 1
call fcn.004183a0
test eax, eax
pop ecx
jne 0x403bab
push str._Extractor__No_GenericUpdater_embedded__we_are_just_a_launcher_n
call fcn.00409575
mov byte [ebp - 0x16812], 0
jmp 0x403bbc
push dword [ebp - 0x1683c]
push str._Extractor__GenericUpdater_version_is__s_n
call fcn.00409575
pop ecx
pop ecx
push dword [ebp - 0x16834]
call fcn.004183a0
test eax, eax
pop ecx
jne 0x403bd9
push str._Extractor__ONLINE_wrapper:_No_App_embedded__GU_will_download_and_run_n
call fcn.00409575
jmp 0x403bea
push dword [ebp - 0x16834]
push str._Extractor__OFFLINE_wrapper:_App_version_is__s_n
call fcn.00409575
pop ecx
pop ecx
push str._Extractor__Checking_for_a_latest_valid_GU_n
call fcn.00409575
lea eax, [ebp - 0x1408]
mov dword [esp], str.JWrapper
push eax
call fcn.004098c8
mov dword [ebp - 0x16828], eax
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x1408]
push eax
call fcn.004098c8
add esp, 0x10
test eax, eax
mov dword [ebp - 0x16818], eax
je 0x403d40
push str.java.exe
push 0x43da84
push eax
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0x1c08]
call fcn.00409553
lea esi, [ebp - 0x1c08]
call fcn.00409117
push str.javaw.exe
mov esi, eax
push 0x43da84
push dword [ebp - 0x16818]
neg esi
lea eax, [ebp - 0x1408]
sbb esi, esi
push eax
lea eax, [ebp - 0x1c08]
neg esi
call fcn.00409553
add esp, 0x20
test esi, esi
je 0x403ca6
lea esi, [ebp - 0x1c08]
call fcn.00409117
test eax, eax
je 0x403ca6
mov dword [ebp - 0x1681c], 1
jmp 0x403cad
and dword [ebp - 0x1681c], 0
push str.rt.jar
push 0x43da6c
push dword [ebp - 0x16818]
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0x1c08]
call fcn.00409553
add esp, 0x10
lea esi, [ebp - 0x1c08]
call fcn.00409117
test eax, eax
jne 0x403d25
push 0x43da6c
push 0x43da68
push dword [ebp - 0x16818]
lea eax, [ebp - 0x1408]
push eax
mov eax, esi
call fcn.00409553
push str.rt.jar
call fcn.00409498
add esp, 0x14
cmp dword [ebp - 0x1681c], 0
je 0x403d1e
call fcn.00409117
test eax, eax
jne 0x403d40
and dword [ebp - 0x1681c], 0
cmp dword [ebp - 0x1681c], 0
jne 0x403d40
push str._Extractor__The_existing_JRE_is_broken._Instructing_the_wrapper_to_update._n
call fcn.00409575
and dword [ebp - 0x16818], 0
pop ecx
cmp dword [ebp - 0x16828], 0
je 0x403e7c
cmp dword [ebp - 0x16818], 0
je 0x403e7c
push dword [ebp - 0x16828]
push str._Extractor__Latest_GU_version_exists:__s_n
call fcn.00409575
push dword [ebp - 0x16818]
push str._Extractor__Existing_JRE_exists:__s_n
call fcn.00409575
push dword [ebp - 0x16828]
call fcn.00409b63
add esp, 0x14
push dword [ebp - 0x1683c]
mov esi, eax
call fcn.004193a2
cmp byte [ebp - 0x16812], 0
pop ecx
je 0x403dad
cmp eax, esi
jle 0x403dad
push str._Extractor__Our_GU_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403e81
push str._Extractor__Latest_GUversion_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00409575
cmp byte [ebp - 0x16812], 0
pop ecx
je 0x403e18
push dword [ebp - 0x16834]
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x403e18
push dword [ebp - 0x16820]
lea eax, [ebp - 0x1408]
push eax
call fcn.004098c8
test eax, eax
pop ecx
pop ecx
je 0x403e75
push eax
call fcn.00409b63
pop ecx
push dword [ebp - 0x16834]
mov esi, eax
call fcn.004193a2
cmp eax, esi
pop ecx
jle 0x403e0d
push str._Extractor__Our_App_version_is_newer_than_existing_latest_version_so_will_extract_and_run_n
jmp 0x403e81
push str._Extractor__Latest_App_version_is_newer_or_same_as_our_version_so_will_just_run_n
call fcn.00409575
pop ecx
push str._Extractor__Running_without_extraction_now_n
call fcn.00409575
pop ecx
call fcn.00405818
mov esi, ebx
call fcn.004065a0
cmp byte [ebp + 0x14], 0
jne 0x403e6e
push dword [ebp - 0x1684c]
mov ecx, dword [ebp - 0x16828]
push 0
push dword [ebp - 0x16854]
lea eax, [ebp - 0x1408]
push dword [ebp - 0x1682c]
lea edx, [ebp - 0x2f90]
push dword [ebp - 0x16844]
push dword [ebp + 0xc]
push edi
push eax
call fcn.00401b5d
add esp, 0x20
push 0
call fcn.0041907e
push str._Extractor__No_app_version_found_and_we_are_offline_so_will_extract_n
jmp 0x403e81
push str._Extractor__No_latest_GU_or_JRE_version_exists__will_check_tail_for_online_offline_info_n
call fcn.00409575
cmp dword [ebp - 0x16818], 0
pop ecx
jne 0x403e97
push str._Extractor__Note:_No_latest_JRE_version_exists_n
jmp 0x403e9c
push str._Extractor__Note:_Latest_JRE_version_does_exist_n
call fcn.00409575
cmp dword [ebp - 0x16828], 0
pop ecx
jne 0x403eb2
push str._Extractor__Note:_No_latest_GU_version_exists_n
jmp 0x403eb7
push str._Extractor__Note:_Latest_GU_version_does_exist_n
call fcn.00409575
cmp byte [ebp - 0x16812], 0
pop ecx
jne 0x403ed5
push str._Extractor__Unable_to_run__we_are_just_a_launcher__n
call fcn.00409575
pop ecx
push 1
jmp 0x403e70
lea eax, [ebp - 0x1408]
push eax
call fcn.00409479
pop ecx
push dword [ebp - 0x1683c]
lea eax, [ebp - 0x1408]
push str.JWrapper
push eax
lea esi, [ebp - 0x7db0]
call fcn.00401937
lea eax, [ebp - 0x1408]
add esp, 0xc
push eax
lea esi, [ebp - 0x56a0]
call fcn.00401977
pop ecx
push dword [ebp - 0x16834]
lea eax, [ebp - 0x1408]
push dword [ebp - 0x16820]
lea esi, [ebp - 0xdf58]
push eax
call fcn.00401937
lea eax, [ebp - 0x1408]
add esp, 0xc
push eax
lea esi, [ebp - 0xa4c0]
call fcn.00401977
pop ecx
lea eax, [ebp - 0x7db0]
push eax
push str._Extractor__GU_folder_is__s_n
call fcn.00409575
lea eax, [ebp - 0x56a0]
push eax
push str._Extractor__GU_temp_is__s_n
call fcn.00409575
lea eax, [ebp - 0x56a0]
push eax
call fcn.00409479
add esp, 0x14
test eax, eax
je 0x403f88
push str._Extractor__Unable_to_create_GU_Temp_folder___assuming_elevation_required_n
jmp 0x403ecb
lea eax, [ebp - 0x56a0]
push str.lzma.exe
push eax
lea eax, [ebp - 0xb848]
call fcn.00409517
lea eax, [ebp - 0xb848]
push eax
push str._Extractor__LZMA_path_is__s_n
call fcn.00409575
lea eax, [ebp - 0x56a0]
push eax
push ebx
call fcn.00408396
lea eax, [ebp - 0xb848]
call fcn.00409798
lea eax, [ebp - 0x56a0]
push eax
push ebx
call fcn.00408396
mov esi, str.nativesplash.png
lea eax, [ebp - 0x56a0]
push esi
push eax
lea eax, [ebp - 0x1bd8]
call fcn.00409517
add esp, 0x28
lea eax, [ebp - 0x1bd8]
movsx ecx, byte [eax]
cmp ecx, 0x2f
jne 0x404001
mov byte [eax], 0x5c
inc eax
test ecx, ecx
jne 0x403ff6
lea eax, [ebp - 0x1bd8]
push eax
push dword [ebp - 0x16858]
push dword [ebp - 0x1685c]
push dword [ebp - 0x16860]
call fcn.00402ad3
lea eax, [ebp - 0x56a0]
push eax
push ebx
call fcn.00408396
lea eax, [ebp - 0x56a0]
push eax
push ebx
call fcn.00408396
lea eax, [ebp - 0x56a0]
push eax
push ebx
call fcn.00408396
push str._Extractor__Extracted_GU_and_GU_Version_n
call fcn.00409575
add esp, 0x2c
lea eax, [ebp - 0x7db0]
push eax
push str._Extractor__Renaming_GU_folder_to__s_n
call fcn.00409575
lea eax, [ebp - 0x7db0]
lea edi, [ebp - 0x56a0]
call fcn.00401549
push str._Extractor__Recreating_GU_location_n
call fcn.00409575
add esp, 0xc
lea eax, [ebp - 0x7db0]
push eax
mov eax, edi
push eax
mov byte [ebp - 0x56a0], 0
call fcn.00418440
lea eax, [ebp - 0x7db0]
push str.lzma.exe
push eax
lea eax, [ebp - 0xb848]
call fcn.00409517
lea eax, [ebp - 0xb848]
push eax
push str._Extractor__LZMA_path_is__s_n
call fcn.00409575
lea eax, [ebp - 0x7db0]
push str.cacerts
push eax
lea eax, [ebp - 0x119f0]
call fcn.00409517
lea eax, [ebp - 0x119f0]
push eax
push str._Extractor__CACerts_override_path_is__s_n
call fcn.00409575
mov eax, edi
push str.verpatch.exe
push eax
lea eax, [ebp - 0x12d78]
call fcn.00409517
lea eax, [ebp - 0x7db0]
push esi
push eax
lea eax, [ebp - 0xf2e0]
call fcn.00409517
lea eax, [ebp - 0xf2e0]
push eax
push str._Extractor__Native_Splash_PNG_path_is__s_n
call fcn.00409575
add esp, 0x40
push str._Extractor__Configuring_splash_n
call fcn.00409575
pop ecx
call fcn.004011ed
test al, al
je 0x40414f
lea eax, [ebp - 0xf2e0]
push eax
call fcn.00404d0d
pop ecx
mov ecx, eax
call fcn.00407251
push str._Extractor__Showing_splash_n
call fcn.00409575
cmp byte [ebp - 0x16811], 0
pop ecx
jne 0x40416e
cmp byte [ebp + 0x14], 0
jne 0x40416e
call fcn.0040583f
push 0xffffffffffffffff
call fcn.0040586a
mov dword [esp], str._Extractor__Setting_up_a_JRE_n
call fcn.00409575
pop ecx
push dword [ebp - 0x16864]
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x4042cd
mov ebx, str.Extracting_Offline_JRE
push ebx
call fcn.00409723
mov dword [esp], str._Extractor__We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00409575
pop ecx
push dword [ebp - 0x16824]
lea eax, [ebp - 0x56a0]
push eax
lea ecx, [ebp - 0x2f90]
call fcn.004027df
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x6a28]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.00409479
pop ecx
push dword [ebp - 0x16864]
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x9138]
call fcn.00401937
add esp, 0xc
push str._Extractor__Offline_installer___no_need_to_download_JRE__will_extract_n
call fcn.00409575
lea eax, [ebp - 0x6a28]
mov dword [esp], str.JRE.p2
push eax
lea eax, [ebp - 0x4318]
call fcn.00409517
lea eax, [ebp - 0x6a28]
push eax
call fcn.00401289
add esp, 0xc
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.00409575
push str._Extractor__Extracting_JRE_archive..._n
call fcn.00409575
add esp, 0xc
lea eax, [ebp - 0x6a28]
push eax
push dword [ebp - 0x16850]
call fcn.00408396
lea eax, [ebp - 0x2f90]
push eax
push str._Extractor__Extracted_JRE__s_n
call fcn.00409575
push str._Extractor__Regenerating_jsa..._n
call fcn.00409575
lea eax, [ebp - 0x6a28]
add esp, 0x14
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406e0b
mov edi, eax
push esi
push edi
call fcn.00406e64
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406e39
call fcn.00406e93
push edi
call fcn.00418133
add esp, 0xc
push ebx
call fcn.0040974b
mov ebx, dword [ebp - 0x16850]
jmp 0x404710
push str.Setting_up_online_JRE
call fcn.00409723
cmp dword [ebp - 0x16830], 0
pop ecx
mov byte [ebp - 0x70], 0
je 0x404302
push dword [ebp - 0x16830]
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x404302
push str._Extractor__Online_installer___no_stored_JRE._Skipping_system_JRE._n
call fcn.00409575
pop ecx
jmp 0x404354
push str._Extractor__Online_installer___no_stored_JRE__will_check_for_compatible_system_JRE_n
call fcn.00409575
pop ecx
push dword [ebp - 0x1684c]
lea eax, [ebp - 0x6a28]
push dword [ebp - 0x16854]
push dword [ebp - 0x1682c]
push dword [ebp - 0x16844]
push dword [ebp + 0xc]
push dword [ebp - 0x16840]
push eax
lea eax, [ebp - 0x1408]
push eax
push dword [ebp - 0x16868]
lea eax, [ebp - 0x70]
push dword [ebp - 0x16838]
push eax
call fcn.00402b57
add esp, 0x2c
lea eax, [ebp - 0x70]
push eax
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x40438b
push str._Extractor__We_are_copying_the_JRE._We_want_to_query_the_JRE_version_to_enable_proxy_detection._n
call fcn.00409575
pop ecx
push dword [ebp - 0x16824]
lea eax, [ebp - 0x56a0]
push eax
lea ecx, [ebp - 0x2f90]
call fcn.004027df
pop ecx
jmp 0x4046ba
push str._JREDownload__Failed_to_pick_up_any_existing_system_JRE__will_download_n
call fcn.00409575
pop ecx
call fcn.004027b7
mov dword [ebp - 0x16838], eax
mov edi, str.JWrapper_
lea eax, [ebp - 0x56a0]
push edi
push eax
lea eax, [ebp - 0xcbd0]
call fcn.00409517
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0xcbd0]
push eax
call fcn.00418440
mov esi, str._version.txt
lea eax, [ebp - 0xcbd0]
push esi
push eax
call fcn.00418440
push dword [ebp - 0x16824]
lea eax, [ebp - 0x4318]
push eax
mov byte [ebp - 0x4318], 0
call fcn.00418440
lea eax, [ebp - 0x4318]
push edi
push eax
call fcn.00418440
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x4318]
push eax
call fcn.00418440
lea eax, [ebp - 0x4318]
push esi
push eax
call fcn.00418440
lea eax, [ebp - 0x4318]
push str._time
push eax
call fcn.00418440
add esp, 0x40
push dword [ebp - 0x16838]
lea eax, [ebp - 0x4318]
push eax
call fcn.00418440
push dword [ebp - 0x16838]
call fcn.00418133
add esp, 0xc
cmp byte [ebp - 0x16811], 0
jne 0x40446c
cmp byte [ebp + 0x14], 0
jne 0x40446c
call fcn.0040583f
lea eax, [ebp - 0x4318]
push eax
push str._JREDownload__Fetching_JRE_Version_from__s_n
call fcn.00409575
lea eax, [ebp - 0xcbd0]
push eax
push str._JREDownload__Saving_into__s_n
call fcn.00409575
lea eax, [ebp - 0xcbd0]
push eax
lea eax, [ebp - 0x4318]
push eax
call fcn.00407e16
add esp, 0x18
test eax, eax
je 0x40490e
push 0xffffffffffffffff
call fcn.0040586a
pop ecx
lea eax, [ebp - 0xcbd0]
push eax
push str._JREDownload__JRE_version_downloaded_OK___s__n
call fcn.00409575
lea eax, [ebp - 0xcbd0]
push 0x43e9b8
push eax
call fcn.004194a6
mov edi, eax
add esp, 0x10
test edi, edi
jne 0x4044f2
call fcn.00418639
push dword [eax]
push str._JREDownload___Unable_to_open_version_file____d__n
call fcn.00409575
pop ecx
pop ecx
push str._JREDownload__Extracting_version:
xor esi, esi
call fcn.00409575
pop ecx
jmp 0x404536
push dword [ebp - 0x16820]
push 0x440528
call fcn.00409575
cmp dword [ebp - 0x16820], 0xd
pop ecx
pop ecx
je 0x404554
mov eax, dword [ebp - 0x16820]
cmp eax, 0xa
je 0x404554
cmp eax, 0x20
je 0x404554
cmp esi, 0x32
mov byte [ebp + esi - 0x70], al
jge 0x40454a
inc esi
push edi
call fcn.0041af2f
cmp eax, 0xffffffff
mov dword [ebp - 0x16820], eax
pop ecx
jne 0x404501
jmp 0x40455f
push str._n_JREDownload__Version_invalid__too_long__n
jmp 0x403ecb
push str._n_JREDownload__Spaces_in_version_file__assuming_EOF_n
call fcn.00409575
pop ecx
push 0x43f348
call fcn.00409575
test edi, edi
pop ecx
je 0x404575
push edi
call fcn.0041aeb3
pop ecx
lea eax, [ebp - 0x70]
push eax
push str._JREDownload__JRE_Version_is__s_n
mov byte [ebp + esi - 0x70], 0
call fcn.00409575
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x6a28]
call fcn.00401977
mov eax, esi
add esp, 0xc
push eax
call fcn.00409479
pop ecx
push dword [ebp - 0x16824]
lea eax, [ebp - 0x4318]
push eax
mov byte [ebp - 0x4318], 0
call fcn.00418440
lea eax, [ebp - 0x4318]
push str.JWrapper_
push eax
call fcn.00418440
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x4318]
push eax
call fcn.00418440
lea eax, [ebp - 0x4318]
push 0x43e0fc
push eax
call fcn.00418440
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x4318]
push eax
call fcn.00418440
lea eax, [ebp - 0x4318]
push str._archive.p2.l2
push eax
call fcn.00418440
mov eax, esi
push eax
call fcn.00401289
add esp, 0x34
cmp byte [ebp - 0x16811], 0
mov dword [0x454db4], eax
jne 0x404639
cmp byte [ebp + 0x14], 0
jne 0x404639
call fcn.0040583f
lea eax, [ebp - 0x6a28]
push eax
push str._JREDownload__Extracting_JRE_archive_to__s_n
call fcn.00409575
lea eax, [ebp - 0x6a28]
push eax
lea eax, [ebp - 0x4318]
push eax
call fcn.00407efd
add esp, 0x10
test eax, eax
jne 0x40466e
push str._JREDownload__Failed_to_download_and_extract_JRE_archive._n
jmp 0x403ecb
push str._JREDownload__Regenerating_jsa..._n
call fcn.00409575
pop ecx
lea eax, [ebp - 0x6a28]
push eax
call fcn.00401234
pop ecx
mov esi, eax
call fcn.00406e0b
mov edi, eax
push esi
push edi
call fcn.00406e64
mov edx, str._Xshare:dump
mov ecx, edi
call fcn.00406e39
call fcn.00406e93
push edi
call fcn.00418133
add esp, 0xc
push str._JREDownload__Downloaded_JRE_is_now_ready._n
call fcn.00409575
pop ecx
lea eax, [ebp - 0x70]
push eax
call fcn.004183a0
test eax, eax
pop ecx
jne 0x4046d8
push str._JREDownload__Failed_to_detect_or_download_a_JRE__no_jre_version__n
call fcn.00409626
jmp 0x403ed0
lea eax, [ebp - 0x70]
push eax
push str._JREDownload__Finalising_setup_of_new_JRE__s_n
call fcn.00409575
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x2f90]
push eax
lea eax, [ebp - 0x1408]
push eax
lea esi, [ebp - 0x9138]
call fcn.00401937
add esp, 0x14
push str.Setting_up_online_JRE
call fcn.0040974b
pop ecx
lea eax, [ebp - 0x9138]
lea edi, [ebp - 0x6a28]
call fcn.00401549
lea eax, [ebp - 0x9138]
push eax
push str._Extractor__Renamed_JRE_folder_to__s_n
call fcn.00409575
push str._Extractor__JRE_setup._Overriding_cacerts._n
call fcn.00409575
lea eax, [ebp - 0x9138]
add esp, 0xc
push eax
lea edi, [ebp - 0x119f0]
call fcn.00402e9a
lea eax, [ebp - 0x14100]
mov dword [esp], str.DetectedProxy
push eax
lea eax, [ebp - 0x10668]
call fcn.00409517
push str._Extractor__Saving_proxy_configuration_n
call fcn.00409575
add esp, 0xc
cmp dword [0x454da4], 0
je 0x40479a
push str._Proxy__Saving_proxy_settings_now._n
call fcn.00409575
pop ecx
lea eax, [ebp - 0x10668]
push eax
call fcn.004062d6
jmp 0x4047a4
push str._Proxy__No_working_proxy_was_found__so_no_proxy_to_be_saved._n
call fcn.00409575
pop ecx
lea eax, [ebp - 0x9138]
push eax
call fcn.00401289
pop ecx
push eax
push str._Extractor__UP200_path_is__s_n
mov dword [0x454db4], eax
call fcn.00409575
push dword [ebp - 0x16834]
call fcn.004183a0
add esp, 0xc
test eax, eax
jbe 0x404852
push str._Extractor__Offline_installer___app_to_extract._n
call fcn.00409575
pop ecx
lea eax, [ebp - 0xdf58]
push eax
push str._Extractor__APP_folder_is__s_n
call fcn.00409575
lea eax, [ebp - 0xa4c0]
push eax
push str._Extractor__APP_temp_is__s_n
call fcn.00409575
lea eax, [ebp - 0xa4c0]
push eax
call fcn.00409479
add esp, 0x14
test eax, eax
je 0x40481e
push str.Unable_to_create_App_Temp_folder_n
jmp 0x4046ce
push str._Extractor__Extracting_App..._n
call fcn.00409575
pop ecx
lea eax, [ebp - 0xa4c0]
push eax
push ebx
call fcn.00408396
lea eax, [ebp - 0xa4c0]
push eax
push ebx
call fcn.00408396
push str._Extractor__Setting_permissions..._n
call fcn.00409575
add esp, 0x14
jmp 0x40485d
push str._Extractor__Online_installer___no_app_to_extract_n
call fcn.00409575
pop ecx
push dword [ebp - 0x16834]
call fcn.004183a0
test eax, eax
pop ecx
jbe 0x404891
lea eax, [ebp - 0xdf58]
lea edi, [ebp - 0xa4c0]
call fcn.00401549
lea eax, [ebp - 0xdf58]
push eax
push str._Extractor__Renaming_App_folder_to__s_n
call fcn.00409575
pop ecx
pop ecx
lea eax, [ebp - 0x1408]
push str.JWrapper
push eax
call fcn.004098c8
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x4048b4
push str.No_latest_App_version_even_after_download__n
jmp 0x4046ce
call fcn.00405818
push edi
push str._Extractor__Will_now_run_latest_GU__s_n
call fcn.00409575
pop ecx
pop ecx
mov esi, ebx
call fcn.004065a0
cmp byte [ebp + 0x14], 0
jne 0x403e6e
push dword [ebp - 0x1684c]
lea eax, [ebp - 0x1408]
push 0
push dword [ebp - 0x16854]
lea edx, [ebp - 0x2f90]
push dword [ebp - 0x1682c]
mov ecx, edi
push dword [ebp - 0x16844]
push dword [ebp + 0xc]
push dword [ebp - 0x16840]
push eax
jmp 0x403e66
cmp byte [ebp - 0x16811], 0
jne 0x404922
cmp byte [ebp + 0x14], 0
jne 0x404922
call fcn.00405818
push str._JREDownload__Failed_to_download_JRE_version_file_n
jmp 0x4046ce