Function at 0xc10fe0
Capabilities:
Copy file
Create directory
Download url
Get common file path
Get graphical window text
Receive data
Set current directory
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xc4883a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2840
call fcn.00c347f0
mov eax, dword [0xc57104]
xor eax, ebp
mov dword [ebp - 0x10], eax
push edi
mov dword [ebp - 0x27e8], ecx
mov dword [ebp - 0x550], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x27e8]
cmp dword [eax + 0x16c], 0
je 0xc1166c
cmp dword [0xc59240], 0
jne 0xc1113f
mov dword [ebp - 0x2420], 0
lea ecx, [ebp - 0x2420]
push ecx
push 0xf003f
push 0
push str.SoftwareMicrosoftInternet_ExplorerMain
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2424], eax
cmp dword [ebp - 0x2424], 0
jne 0xc110c3
mov dword [ebp - 0x2428], 0
cmp dword [ebp - 0x550], 0
je 0xc110ab
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x2428], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x2428]
mov dword [ebp - 0x2424], eax
mov ecx, dword [ebp - 0x2420]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x2424], 0
je 0xc110ed
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bf50
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1113a
push str.http:__www.pmang.com_
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.http:__www.pmang.com_
push 1
push 0
push str.Start_Page
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0xc1113a
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bee0
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1166c
cmp dword [0xc59240], 1
jne 0xc11247
mov dword [ebp - 0x242c], 0
lea ecx, [ebp - 0x242c]
push ecx
push 0xf003f
push 0
push str.SoftwareMicrosoftInternet_ExplorerMain
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2430], eax
cmp dword [ebp - 0x2430], 0
jne 0xc111cb
mov dword [ebp - 0x2434], 0
cmp dword [ebp - 0x550], 0
je 0xc111b3
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x2434], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x2434]
mov dword [ebp - 0x2430], eax
mov ecx, dword [ebp - 0x242c]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x2430], 0
je 0xc111f5
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bf50
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc11242
push str.http:__game.bugs.co.kr_
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.http:__game.bugs.co.kr_
push 1
push 0
push str.Start_Page
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0xc11242
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bee0
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1166c
cmp dword [0xc59240], 2
jne 0xc1134f
mov dword [ebp - 0x2438], 0
lea ecx, [ebp - 0x2438]
push ecx
push 0xf003f
push 0
push str.SoftwareMicrosoftInternet_ExplorerMain
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x243c], eax
cmp dword [ebp - 0x243c], 0
jne 0xc112d3
mov dword [ebp - 0x2440], 0
cmp dword [ebp - 0x550], 0
je 0xc112bb
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x2440], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x2440]
mov dword [ebp - 0x243c], eax
mov ecx, dword [ebp - 0x2438]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x243c], 0
je 0xc112fd
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bf50
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1134a
push str.http:__game.sbs.co.kr_
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.http:__game.sbs.co.kr_
push 1
push 0
push str.Start_Page
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0xc1134a
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bee0
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1166c
cmp dword [0xc59240], 3
jne 0xc11457
mov dword [ebp - 0x2444], 0
lea ecx, [ebp - 0x2444]
push ecx
push 0xf003f
push 0
push str.SoftwareMicrosoftInternet_ExplorerMain
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2448], eax
cmp dword [ebp - 0x2448], 0
jne 0xc113db
mov dword [ebp - 0x244c], 0
cmp dword [ebp - 0x550], 0
je 0xc113c3
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x244c], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x244c]
mov dword [ebp - 0x2448], eax
mov ecx, dword [ebp - 0x2444]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x2448], 0
je 0xc11405
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bf50
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc11452
push str.http:__isplus.joins.com_game_
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.http:__isplus.joins.com_game_
push 1
push 0
push str.Start_Page
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0xc11452
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bee0
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1166c
cmp dword [0xc59240], 4
jne 0xc1155f
mov dword [ebp - 0x2450], 0
lea ecx, [ebp - 0x2450]
push ecx
push 0xf003f
push 0
push str.SoftwareMicrosoftInternet_ExplorerMain
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2454], eax
cmp dword [ebp - 0x2454], 0
jne 0xc114e3
mov dword [ebp - 0x2458], 0
cmp dword [ebp - 0x550], 0
je 0xc114cb
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x2458], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x2458]
mov dword [ebp - 0x2454], eax
mov ecx, dword [ebp - 0x2450]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x2454], 0
je 0xc1150d
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bf50
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1155a
push str.http:__corn.maxmovie.com_game_main.asp
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.http:__corn.maxmovie.com_game_main.asp
push 1
push 0
push str.Start_Page
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0xc1155a
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bee0
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1166c
cmp dword [0xc59240], 5
jne 0xc1166c
mov dword [ebp - 0x245c], 0
lea ecx, [ebp - 0x245c]
push ecx
push 0xf003f
push 0
push str.SoftwareMicrosoftInternet_ExplorerMain
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2460], eax
cmp dword [ebp - 0x2460], 0
jne 0xc115eb
mov dword [ebp - 0x2464], 0
cmp dword [ebp - 0x550], 0
je 0xc115d3
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x2464], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x2464]
mov dword [ebp - 0x2460], eax
mov ecx, dword [ebp - 0x245c]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x2460], 0
je 0xc11615
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bf50
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0xc1166c
push str.http:__game.daum.net
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.http:__game.daum.net
push 1
push 0
push str.Start_Page
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0xc11662
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bee0
mov edx, dword [ebp - 0x27e8]
mov eax, dword [edx + 0x17c]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0xc581b0
call fcn.00c26130
mov ecx, dword [ebp - 0x27e8]
cmp dword [ecx + 0x2c], 0
je 0xc11ed7
mov dx, word [0xc4bb70]
mov word [ebp - 0xb74], dx
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xb72]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0xc4bb70]
mov word [ebp - 0x1084], ax
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1082]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov cx, word [0xc4bb70]
mov word [ebp - 0x21a4], cx
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x21a2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dx, word [0xc4bb70]
mov word [ebp - 0x1484], dx
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1482]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0xc4bb70]
mov word [ebp - 0x770], ax
xor ecx, ecx
mov dword [ebp - 0x76e], ecx
mov dword [ebp - 0x76a], ecx
mov dword [ebp - 0xb78], 0x400
lea edx, [ebp - 0x1884]
push edx
push 0x400
push 0xd
mov eax, dword [ebp - 0x27e8]
mov ecx, dword [eax + 0x30]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0xc4b588
lea edx, [ebp - 0x1884]
push edx
call fcn.00c33c10
add esp, 8
push 0x104
lea eax, [ebp - 0x198c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea ecx, [ebp - 0x1d9c]
push ecx
lea edx, [ebp - 0xc7c]
push edx
lea eax, [ebp - 0x1b94]
push eax
lea ecx, [ebp - 0xc80]
push ecx
lea edx, [ebp - 0x198c]
push edx
call fcn.00c339cc
add esp, 0x14
lea eax, [ebp - 0xc80]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.00c0feb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1884]
push ecx
lea ecx, [ebp - 0x1da0]
call fcn.00c0feb0
mov byte [ebp - 4], 2
push 0xc4bb40
lea ecx, [ebp - 0x1da0]
call fcn.00c12890
mov dword [ebp - 0x1a90], eax
mov edx, dword [ebp - 0x1a90]
add edx, 1
push edx
push 0
lea eax, [ebp - 0x23d0]
push eax
lea ecx, [ebp - 0x1da0]
call fcn.00c12710
mov dword [ebp - 0x27ec], eax
mov ecx, dword [ebp - 0x27ec]
mov dword [ebp - 0x27f0], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x27f0]
push edx
lea ecx, [ebp - 0x1da0]
call fcn.00c12640
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x23d0]
call fcn.00c0fe60
mov eax, dword [ebp - 0x1da0]
mov dword [ebp - 0x249c], eax
mov ecx, dword [ebp - 0xb7c]
mov dword [ebp - 0x2498], ecx
mov edx, dword [ebp - 0x249c]
push edx
mov eax, dword [ebp - 0x2498]
push eax
call fcn.00c344dd
add esp, 8
neg eax
sbb eax, eax
inc eax
movzx ecx, al
test ecx, ecx
je 0xc119d0
mov dword [ebp - 0x24a0], 0
lea edx, [ebp - 0x24a0]
push edx
push 0xf003f
push 0
push str.SoftwareNeoWizPMangInstall
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x24a4], eax
cmp dword [ebp - 0x24a4], 0
jne 0xc118df
mov dword [ebp - 0x24a8], 0
cmp dword [ebp - 0x550], 0
je 0xc118c7
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x24a8], eax
mov dword [ebp - 0x550], 0
mov ecx, dword [ebp - 0x24a8]
mov dword [ebp - 0x24a4], ecx
mov edx, dword [ebp - 0x24a0]
mov dword [ebp - 0x550], edx
cmp dword [ebp - 0x24a4], 0
jne 0xc11922
mov eax, dword [ebp - 0x1da0]
mov dword [ebp - 0x24ac], eax
mov ecx, dword [ebp - 0x24ac]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
mov edx, dword [ebp - 0x24ac]
push edx
push 1
push 0
push str.DriveLetter
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0x24b0], 0
lea ecx, [ebp - 0x24b0]
push ecx
push 0xf003f
push 0
push str.softwareNeowizPmangInstall
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x24b4], eax
cmp dword [ebp - 0x24b4], 0
jne 0xc119a1
mov dword [ebp - 0x24b8], 0
cmp dword [ebp - 0x550], 0
je 0xc11989
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x24b8], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x24b8]
mov dword [ebp - 0x24b4], eax
mov ecx, dword [ebp - 0x24b0]
mov dword [ebp - 0x550], ecx
push str.INSTALL_DONE
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.INSTALL_DONE
push 1
push 0
push str.INSTALL_STATUS
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0xc11cef
push 9
lea eax, [ebp - 0x1884]
push eax
lea ecx, [ebp - 0x770]
push ecx
call fcn.00c346c0
add esp, 0xc
push 0
lea edx, [ebp - 0x770]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0x770]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0
lea ecx, [ebp - 0x1884]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0xc584c0
call fcn.00c332d0
add esp, 4
sub eax, 1
push eax
push 0xc584c0
lea edx, [ebp - 0xb74]
push edx
call fcn.00c346c0
add esp, 0xc
lea eax, [ebp - 0x1884]
push eax
call fcn.00c332d0
add esp, 4
sub eax, 1
push eax
lea ecx, [ebp - 0x1884]
push ecx
lea edx, [ebp - 0x1084]
push edx
call fcn.00c346c0
add esp, 0xc
lea eax, [ebp - 0x1084]
push eax
lea ecx, [ebp - 0xb74]
push ecx
mov ecx, dword [ebp - 0x27e8]
call fcn.00c10e40
mov dx, word [0xc4bb70]
mov word [ebp - 0x22c0], dx
xor eax, eax
mov dword [ebp - 0x22be], eax
mov dword [ebp - 0x22ba], eax
mov dword [ebp - 0x24bc], 0
lea ecx, [ebp - 0x24bc]
push ecx
push 0xf003f
push 0
push str.SoftwareNeoWizPMangInstall
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x24c0], eax
cmp dword [ebp - 0x24c0], 0
jne 0xc11b15
mov dword [ebp - 0x24c4], 0
cmp dword [ebp - 0x550], 0
je 0xc11afd
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x24c4], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x24c4]
mov dword [ebp - 0x24c0], eax
mov ecx, dword [ebp - 0x24bc]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x24c0], 0
jne 0xc11bca
push 1
lea edx, [ebp - 0x1884]
push edx
lea eax, [ebp - 0x22c0]
push eax
call fcn.00c346c0
add esp, 0xc
lea ecx, [ebp - 0x22c0]
push ecx
lea ecx, [ebp - 0x22c4]
call fcn.00c0feb0
mov byte [ebp - 4], 4
mov edx, 0xc4bb40
test edx, edx
jne 0xc11b65
mov dword [ebp - 0x27f4], 0
jmp 0xc11b76
push 0xc4bb40
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x27f4], eax
push 0xc4bb40
mov eax, dword [ebp - 0x27f4]
push eax
lea ecx, [ebp - 0x22c4]
call fcn.00c0ff70
lea ecx, [ebp - 0x22c0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
lea edx, [ebp - 0x22c0]
push edx
push 1
push 0
push str.DriveLetter
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x22c4]
call fcn.00c0fe60
lea ecx, [ebp - 0xc80]
push ecx
push str._sNEOWIZ
lea edx, [ebp - 0x22b4]
push edx
call fcn.00c33974
add esp, 0xc
push str.CleanPMang.exe
lea eax, [ebp - 0x22b4]
push eax
push str._s_s
lea ecx, [ebp - 0x21a4]
push ecx
call fcn.00c33974
add esp, 0x10
push str.CleanPMang.exe
push str.Neowiz
lea edx, [ebp - 0x22c0]
push edx
push str._s:_s_s
lea eax, [ebp - 0x1484]
push eax
call fcn.00c33974
add esp, 0x14
push 0
lea ecx, [ebp - 0x1484]
push ecx
lea edx, [ebp - 0x21a4]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 0x21a8], eax
mov dword [ebp - 0x24d8], 0
lea eax, [ebp - 0x24d8]
push eax
push 0xf003f
push 0
push str.softwareNeowizPmangInstall
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x24dc], eax
cmp dword [ebp - 0x24dc], 0
jne 0xc11cc5
mov dword [ebp - 0x24e0], 0
cmp dword [ebp - 0x550], 0
je 0xc11cad
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x24e0], eax
mov dword [ebp - 0x550], 0
mov edx, dword [ebp - 0x24e0]
mov dword [ebp - 0x24dc], edx
mov eax, dword [ebp - 0x24d8]
mov dword [ebp - 0x550], eax
push str.FIRST_EXECUTE
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.FIRST_EXECUTE
push 1
push 0
push str.INSTALL_STATUS
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea edx, [ebp - 0x1884]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
lea eax, [ebp - 0x1884]
push eax
push 1
push 0
push str.Root
mov ecx, dword [ebp - 0x550]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
cmp dword [0xc58264], 0x10
jb 0xc11d34
mov edx, dword [0xc58250]
mov dword [ebp - 0x27f8], edx
jmp 0xc11d3e
mov dword [ebp - 0x27f8], 0xc58250
mov eax, dword [ebp - 0x27f8]
push eax
lea ecx, [ebp - 0x1884]
push ecx
call fcn.00c33c10
add esp, 8
lea edx, [ebp - 0x1884]
push edx
lea ecx, [ebp - 0x23ec]
call fcn.00c01920
mov byte [ebp - 4], 5
mov dword [ebp - 0x23f0], 0
push 1
lea eax, [ebp - 0x23ec]
push eax
lea ecx, [ebp - 0x23f0]
push ecx
mov ecx, 0xc590c0
call fcn.00c1ed20
mov byte [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x23ec]
call fcn.00c01f20
push str.2729A0B7_23AD_48a9_9FBE_56452FE63D1C
push str.SoftwareNeowizShared_s
lea edx, [ebp - 0x1a8c]
push edx
call fcn.00c33974
add esp, 0xc
mov dword [ebp - 0x2504], 0
lea eax, [ebp - 0x2504]
push eax
push 0xf003f
push 0
lea ecx, [ebp - 0x1a8c]
push ecx
push bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x2508], eax
cmp dword [ebp - 0x2508], 0
jne 0xc11e3b
mov dword [ebp - 0x250c], 0
cmp dword [ebp - 0x550], 0
je 0xc11e23
mov edx, dword [ebp - 0x550]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x250c], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x250c]
mov dword [ebp - 0x2508], eax
mov ecx, dword [ebp - 0x2504]
mov dword [ebp - 0x550], ecx
cmp dword [ebp - 0x2508], 0
jne 0xc11e9a
push str.PMAgent.exe
push str.PMAgent
lea edx, [ebp - 0x1084]
push edx
push 0xc4bd64
lea eax, [ebp - 0x1c9c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x1c9c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
lea edx, [ebp - 0x1c9c]
push edx
push 1
push 0
push str.location
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0xc11eb9
push 0
push str.Pmang_WebGame_Downloader_ver_2.0
push 0xc4bd2c
mov ecx, dword [ebp - 0x27e8]
mov edx, dword [ecx + 0x17c]
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1da0]
call fcn.00c0fe60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb7c]
call fcn.00c0fe60
mov ecx, 0xc581b0
call fcn.00c24c40
push 0xc58214
mov ecx, 0xc590c0
call fcn.00c1e800
mov ax, word [0xc4bb70]
mov word [ebp - 0x22c], ax
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x22a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov cx, word [0xc4bb70]
mov word [ebp - 0x764], cx
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x762]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dx, word [0xc4bb70]
mov word [ebp - 0x54c], dx
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x54a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ax, word [0xc4bb70]
mov word [ebp - 0x444], ax
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x442]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp dword [0xc58248], 0x10
jb 0xc11f81
mov ecx, dword [0xc58234]
mov dword [ebp - 0x27fc], ecx
jmp 0xc11f8b
mov dword [ebp - 0x27fc], 0xc58234
mov edx, dword [ebp - 0x27fc]
push edx
lea eax, [ebp - 0x33c]
push eax
call fcn.00c33c00
add esp, 8
push str._icon.ico
lea ecx, [ebp - 0x33c]
push ecx
call fcn.00c33c10
add esp, 8
lea edx, [ebp - 0x33c]
push edx
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
push 0
push 0
push 0x104
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x33c]
push ecx
push 0
call sub.urlmon.dll_URLDownloadToCacheFileA
push 0xc584c0
lea edx, [ebp - 0x11c]
push edx
call fcn.00c33c00
add esp, 8
push str.Common_
lea eax, [ebp - 0x11c]
push eax
call fcn.00c33c10
add esp, 8
cmp dword [0xc58264], 0x10
jb 0xc1201f
mov ecx, dword [0xc58250]
mov dword [ebp - 0x2800], ecx
jmp 0xc12029
mov dword [ebp - 0x2800], 0xc58250
mov edx, dword [ebp - 0x2800]
push edx
lea eax, [ebp - 0x11c]
push eax
call fcn.00c33c10
add esp, 8
push str..ico
lea ecx, [ebp - 0x11c]
push ecx
call fcn.00c33c10
add esp, 8
push 0
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x65c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
cmp dword [0xc58374], 0x10
jb 0xc12080
mov ecx, dword [0xc58360]
mov dword [ebp - 0x2804], ecx
jmp 0xc1208a
mov dword [ebp - 0x2804], 0xc58360
mov edx, dword [ebp - 0x2804]
push edx
lea eax, [ebp - 0x764]
push eax
call fcn.00c33c00
add esp, 8
push 0xc4bd08
lea ecx, [ebp - 0x54c]
push ecx
call fcn.00c33c10
add esp, 8
lea edx, [ebp - 0x764]
push edx
lea eax, [ebp - 0x54c]
push eax
call fcn.00c33c10
add esp, 8
cmp dword [0xc5822c], 0x10
jb 0xc120e1
mov ecx, dword [0xc58218]
mov dword [ebp - 0x2808], ecx
jmp 0xc120eb
mov dword [ebp - 0x2808], 0xc58218
mov edx, dword [ebp - 0x2808]
push edx
lea ecx, [ebp - 0x120]
call fcn.00c0feb0
mov byte [ebp - 4], 6
push 0xc4b588
lea ecx, [ebp - 0x120]
call fcn.00c12890
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
add eax, 1
push eax
lea ecx, [ebp - 0x23f4]
push ecx
lea ecx, [ebp - 0x120]
call fcn.00c126c0
mov dword [ebp - 0x280c], eax
mov edx, dword [ebp - 0x280c]
mov dword [ebp - 0x2810], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2810]
push eax
lea ecx, [ebp - 0x120]
call fcn.00c12640
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23f4]
call fcn.00c0fe60
push str.http:__pmang.sayclub.com_game_top.nwz_ssn
lea ecx, [ebp - 0x444]
push ecx
call fcn.00c33c10
add esp, 8
mov edx, dword [ebp - 0x120]
mov eax, dword [edx - 8]
mov dword [ebp - 0x2664], eax
mov ecx, dword [ebp - 0x2664]
add ecx, 1
push ecx
lea ecx, [ebp - 0x120]
call fcn.00c107a0
push eax
lea edx, [ebp - 0x444]
push edx
call fcn.00c33c10
add esp, 8
mov ecx, 0xc581b0
call fcn.00c25a80
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, 0xc581b0
call fcn.00c25600
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x23f8], esp
lea edx, [ebp - 0x11c]
push edx
call fcn.00c01920
mov dword [ebp - 0x2814], eax
mov eax, dword [ebp - 0x2814]
mov dword [ebp - 0x2818], eax
mov byte [ebp - 4], 8
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x23fc], esp
lea edx, [ebp - 0x444]
push edx
call fcn.00c01920
mov dword [ebp - 0x281c], eax
mov eax, dword [ebp - 0x281c]
mov dword [ebp - 0x2820], eax
mov byte [ebp - 4], 9
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2400], esp
lea edx, [ebp - 0x22c]
push edx
call fcn.00c01920
mov dword [ebp - 0x2824], eax
mov byte [ebp - 4], 6
mov ecx, 0xc581b0
call fcn.00c28360
push 0x104
push 0
lea eax, [ebp - 0x22c]
push eax
call fcn.00c33270
add esp, 0xc
mov ecx, dword [ebp - 0x27e8]
cmp dword [ecx + 0x170], 0
je 0xc124af
cmp dword [0xc59240], 0
jne 0xc1237f
mov edx, dword [ebp - 0x27e8]
cmp dword [edx + 0x174], 1
jne 0xc122dd
push 0x104
push 0
lea eax, [ebp - 0x23cc]
push eax
call fcn.00c33270
add esp, 0xc
push 0
push 0x10
lea ecx, [ebp - 0x23cc]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea edx, [ebp - 0x23cc]
push edx
mov ecx, 0xc581b0
call fcn.00c27860
jmp 0xc1237a
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, 0xc581b0
call fcn.00c25570
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2404], esp
lea edx, [ebp - 0x11c]
push edx
call fcn.00c01920
mov dword [ebp - 0x2828], eax
mov eax, dword [ebp - 0x2828]
mov dword [ebp - 0x282c], eax
mov byte [ebp - 4], 0xa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2408], esp
lea edx, [ebp - 0x444]
push edx
call fcn.00c01920
mov dword [ebp - 0x2830], eax
mov eax, dword [ebp - 0x2830]
mov dword [ebp - 0x2834], eax
mov byte [ebp - 4], 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x240c], esp
lea edx, [ebp - 0x22c]
push edx
call fcn.00c01920
mov dword [ebp - 0x2838], eax
mov byte [ebp - 4], 6
mov ecx, 0xc581b0
call fcn.00c28360
jmp 0xc124af
cmp dword [0xc59240], 1
jne 0xc123be
push 0xc4bcd0
lea eax, [ebp - 0x22c]
push eax
mov ecx, 0xc581b0
call fcn.00c25570
push str.bugs_game.ico
push str.http:__game.bugs.co.kr_
push 0xc4bcb0
push 0
mov ecx, 0xc581b0
call fcn.00c26dd0
jmp 0xc124af
cmp dword [0xc59240], 2
jne 0xc123fd
push str.SBS
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, 0xc581b0
call fcn.00c25570
push str.sbs_game.ico
push str.http:__game.sbs.co.kr_
push 0xc4bc84
push 0
mov ecx, 0xc581b0
call fcn.00c26dd0
jmp 0xc124af
cmp dword [0xc59240], 3
jne 0xc12439
push 0xc4bc74
lea edx, [ebp - 0x22c]
push edx
mov ecx, 0xc581b0
call fcn.00c25570
push str.is_game.ico
push str.http:__isplus.joins.com_game_
push 0xc4bc54
push 0
mov ecx, 0xc581b0
call fcn.00c26dd0
jmp 0xc124af
cmp dword [0xc59240], 4
jne 0xc12475
push 0xc4bc44
lea eax, [ebp - 0x22c]
push eax
mov ecx, 0xc581b0
call fcn.00c25570
push str.max_game.ico
push str.http:__corn.maxmovie.com_game_main.asp
push 0xc4bc20
push 0
mov ecx, 0xc581b0
call fcn.00c26dd0
jmp 0xc124af
cmp dword [0xc59240], 5
jne 0xc124af
push 0xc4bc14
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, 0xc581b0
call fcn.00c25570
push str.daum_game.ico
push str.http:__game.daum.net
push 0xc4bbf4
push 0
mov ecx, 0xc581b0
call fcn.00c26dd0
cmp dword [0xc59240], 5
jne 0xc124c2
mov ecx, 0xc581b0
call fcn.00c27390
mov edx, dword [ebp - 0x27e8]
cmp dword [edx + 0x174], 1
jne 0xc12572
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, 0xc581b0
call fcn.00c25570
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2410], esp
lea edx, [ebp - 0x11c]
push edx
call fcn.00c01920
mov dword [ebp - 0x283c], eax
mov eax, dword [ebp - 0x283c]
mov dword [ebp - 0x2840], eax
mov byte [ebp - 4], 0xc
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2414], esp
lea edx, [ebp - 0x444]
push edx
call fcn.00c01920
mov dword [ebp - 0x2844], eax
mov eax, dword [ebp - 0x2844]
mov dword [ebp - 0x2848], eax
mov byte [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2418], esp
lea edx, [ebp - 0x22c]
push edx
call fcn.00c01920
mov dword [ebp - 0x284c], eax
mov byte [ebp - 4], 6
mov ecx, 0xc581b0
call fcn.00c28360
mov dword [ebp - 0x27d8], 0
cmp dword [ebp - 0x550], 0
je 0xc125a2
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x27d8], eax
mov dword [ebp - 0x550], 0
push 1
mov ecx, dword [ebp - 0x27e8]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
push 0
push 0
push 0x2000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov dword [ebp - 0x241c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call fcn.00c0fe60
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x27e4], 0
cmp dword [ebp - 0x550], 0
je 0xc12618
mov eax, dword [ebp - 0x550]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x27e4], eax
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x241c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00c32666
mov esp, ebp
pop ebp
ret 0x10