Function at 0x447a7e
Capabilities:
Contain obfuscated stackstrings
Hide graphical window

Disassembly:
push 0x2f4
mov eax, 0x48b465
call fcn.0045e53f
push 5
push 0x66
xor eax, eax
mov dword [ebp - 0x2c0], eax
mov edi, dword [0x4b5b94]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0x8d2
push dword [0x4b5b64]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2c4], edi
call ebx
lea ecx, [ebp - 0x278]
call fcn.00404d1d
cmp dword [ebp - 0x278], 5
lea ecx, [ebp - 0x260]
je 0x448fa4
call fcn.0041baf2
lea ecx, [ebp - 0x2b4]
call fcn.00404d1d
cmp dword [ebp - 0x2a8], 5
lea ecx, [ebp - 0x29c]
jl 0x448fa4
call fcn.0041baf2
lea ecx, [ebp - 0x128]
call fcn.00404db5
push str.UniAccessAgent_Net_Installer
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], 4
call fcn.0041b66b
mov byte [ebp - 4], 5
lea edx, [ebp - 0x108]
cmp dword [ebp - 0xf4], 8
lea ecx, [ebp - 0x124]
cmovae edx, dword [ebp - 0x108]
cmp dword [ebp - 0x110], 8
cmovae ecx, dword [ebp - 0x124]
call fcn.00441710
mov ebx, 0x4b5c30
test eax, eax
je 0x447bce
push 0xa
push eax
lea ecx, [ebp - 0x48]
call fcn.0041b292
push str.FirewallOpen_res
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 6
call fcn.0041b66b
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xb8]
mov ecx, ebx
push eax
push 0x31e
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0xb8]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 5
call fcn.0041baf2
lea edx, [edi + 0x224]
lea ecx, [edi + 0x208]
call fcn.00411f35
lea ecx, [ebp - 0x2c]
call fcn.00404bf3
push eax
lea ecx, [edi + 0x240]
mov byte [ebp - 4], 8
call fcn.0041b7fa
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041baf2
lea esi, [edi + 0x25c]
mov byte [ebp - 0x2b5], 0
lea edx, [ebp - 0x2b5]
mov ecx, esi
call fcn.00447680
cmp byte [ebp - 0x2b5], 0
jne 0x447c2d
mov ecx, esi
call fcn.0041d4e1
lea ecx, [ebp - 0x2c]
call fcn.00404db5
push eax
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 9
call fcn.0041b7fa
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
call fcn.00405306
push eax
lea ecx, [edi + 0x28]
mov byte [ebp - 4], 0xa
call fcn.0041b7fa
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041baf2
push str.08A6D228_353A_4AB0_B89F_0B1C04351B6E_VIP
lea ecx, [ebp - 0xb8]
call fcn.0041b66b
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [edi + 0x128]
call fcn.0041e1ec
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 5
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
call fcn.0041dbd7
push eax
lea ecx, [edi + 0x1ec]
mov byte [ebp - 4], 0xc
call fcn.0041b7fa
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.0041baf2
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0xf
push 0x66
push 0x8d2
push dword [0x4b5b64]
call esi
mov ecx, edi
mov byte [ebp - 0x2b5], 0
call fcn.00445f18
test eax, eax
je 0x447d65
push 0xa
push eax
lea ecx, [ebp - 0x48]
call fcn.0041b292
push str.prepare_cust_ini_from_section_failed_iRet
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
call fcn.0041b66b
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xb8]
mov ecx, ebx
push eax
push 0x338
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0xb8]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
call fcn.00447184
jmp 0x448f8e
push 0x14
push 0x66
push 0x8d2
push dword [0x4b5b64]
call esi
mov ecx, edi
call fcn.004471b9
xor ebx, ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2d8], ebx
mov dword [ebp - 0x2d4], ebx
mov dword [ebp - 0x2d0], ebx
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2e8], ebx
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x2e0], ebx
mov byte [ebp - 4], 0x11
cmp dword [edi + 0xe4], ebx
je 0x447dd3
lea eax, [edi + 0xd0]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.004042a7
push 0x4a0b14
lea ecx, [ebp - 0xb8]
call fcn.0041b66b
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [edi + 0xb4]
call fcn.0041d7f3
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x11
call fcn.0041baf2
mov esi, dword [ebp - 0x2e8]
mov dword [ebp - 0x2fc], 0x1c
cmp esi, dword [ebp - 0x2e4]
je 0x447e53
push 0x1c
pop edi
push esi
push dword [ebp - 0x2cc]
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.004490ac
add esi, edi
cmp esi, dword [ebp - 0x2e4]
jne 0x447e2a
mov edi, dword [ebp - 0x2c4]
lea ecx, [ebp - 0xf0]
call fcn.0041b057
mov byte [ebp - 4], 0x13
cmp dword [edi + 0x170], ebx
je 0x447ef7
lea esi, [edi + 0x17c]
cmp dword [esi + 0x10], ebx
je 0x447ef7
lea eax, [edi + 0x15c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041b6c8
push 0x1c
pop eax
mov byte [ebp - 4], al
call fcn.00405256
test al, al
je 0x447ea0
push esi
lea ecx, [ebp - 0x44]
call fcn.0041e1ec
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.004042a7
cmp dword [ebp - 0xdc], 0
jne 0x447edf
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041c1c5
add eax, 4
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0xec]
call fcn.0041e1ec
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x2b5], 1
mov byte [ebp - 4], 0x13
call fcn.0041baf2
jmp 0x4480e0
push str.lva_setup_
lea ecx, [ebp - 0xb8]
call fcn.0041b66b
mov byte [ebp - 4], 0x14
call fcn.00405256
test al, al
je 0x447f3c
push str.lva_setup64_
lea ecx, [ebp - 0x48]
call fcn.0041b66b
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0xb4]
call fcn.0041e1ec
lea ecx, [ebp - 0x48]
call fcn.0041baf2
mov eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0x2d0]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x4480cf
lea eax, [edi + 0x10c]
mov dword [ebp - 0x2c0], eax
lea eax, [edi + 0x80]
mov dword [ebp - 0x2bc], eax
xor edi, edi
lea ecx, [ebp - 0x48]
call fcn.0041b057
push str..exe
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.0041b66b
push str._uai_download_downloadAgent.htm_filedownload_uai_
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x17
call fcn.0041b66b
push 0x49b6a4
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x18
call fcn.0041b66b
push str.http:__
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x19
call fcn.0041b66b
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x1a
mov esi, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x44]
push eax
call fcn.00408695
lea eax, [esi + 4]
add eax, edi
lea ecx, [ebp - 0x44]
push eax
call fcn.00408695
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x44]
call fcn.00408695
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0x44]
call fcn.00408695
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea ecx, [ebp - 0xd4]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.0041baf2
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.004042a7
cmp dword [ebp - 0xdc], 0
jne 0x4480a4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041c1c5
add eax, 4
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0xec]
call fcn.0041e1ec
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
mov eax, dword [ebp - 0x2cc]
inc ebx
sub eax, dword [ebp - 0x2d0]
push 0x1c
pop ecx
cdq
add edi, ecx
idiv ecx
cmp ebx, eax
jb 0x447f70
mov edi, dword [ebp - 0x2c4]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x13
call fcn.0041baf2
xor ebx, ebx
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
push ebx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xf0]
call fcn.0041cd67
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.0041baf2
push 0x50
pop ecx
push 0x62
pop eax
test bl, bl
cmove ecx, eax
push ecx
push 0x66
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x64]
call fcn.00405306
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x1e
push ecx
mov edx, eax
lea ecx, [ebp - 0x80]
call fcn.0041ddb9
pop ecx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x20
call fcn.0041baf2
xor ebx, ebx
cmp dword [edi + 0x1a8], ebx
je 0x448221
cmp dword [edi + 0x1c4], ebx
je 0x448221
push str.LVASetupTmp_
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x21
call fcn.004051d4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x22
push ecx
mov edx, eax
lea ecx, [ebp - 0x48]
call fcn.0041ddb9
pop ecx
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.0041baf2
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041c1c5
add eax, 4
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x25
call fcn.0041baf2
push ebx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041d3a9
test eax, eax
je 0x448219
push ebx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x48]
call fcn.0041c27a
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.0040612a
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x25
call fcn.0041baf2
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0041e1ec
lea ecx, [ebp - 0x48]
call fcn.0041baf2
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
mov word [ebp - 0x2ec], 1
mov dword [ebp - 0x2f8], 0x4a1028
push 1
mov ecx, edi
mov byte [ebp - 4], 0x28
call fcn.0044747b
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x2dc]
sub eax, ecx
push 0xffffffffffffff9c
pop ebx
push 0x1c
cdq
pop esi
idiv esi
and dword [ebp - 0x2c0], 0
test eax, eax
je 0x448e74
xor eax, eax
mov dword [ebp - 0x2c4], eax
add eax, ecx
lea ecx, [ebp - 0x48]
push eax
call fcn.0041b6c8
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041b66b
push str.try_to_download
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2a
call fcn.0041b66b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x64]
mov esi, 0x4b5c30
push eax
lea eax, [ebp - 0x48]
mov ecx, esi
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x393
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, esi
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041baf2
xor esi, esi
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
lea ecx, [ebp - 0x80]
call fcn.00406abf
mov eax, dword [edi + 0x278]
cmp eax, 1
je 0x448338
cmp eax, 3
jne 0x4483ad
push dword [edi + 0x27c]
lea eax, [ebp - 0x2f8]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x48]
call fcn.0043d68e
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
pop ecx
test ebx, ebx
jne 0x44838b
cmp byte [ebp - 0x2b5], al
jne 0x4487d8
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447813
mov ebx, eax
test ebx, ebx
je 0x44882b
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x4487d8
cmp ebx, 0xfffffc15
je 0x44830e
cmp dword [edi + 0x278], 3
je 0x44830e
push 0xa
push ebx
lea ecx, [ebp - 0xd4]
call fcn.0041b292
push str._ret
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x2c
call fcn.0041b66b
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x2d
call fcn.0041b66b
push str.BeeDownload_Failed_Try_ZDownloadWithIE_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2e
call fcn.0041b66b
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3ba
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x29
call fcn.0041baf2
lea eax, [ebp - 0x2f8]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x48]
call fcn.00418524
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
test ebx, ebx
jne 0x4484d3
cmp byte [ebp - 0x2b5], al
jne 0x4487d8
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447813
mov ebx, eax
test ebx, ebx
je 0x44882b
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x4487d8
push str._to
lea ecx, [ebp - 0x64]
call fcn.0041b66b
push str.ZDownloadWithIE_Failed_Try_WinHttp_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.0041b66b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x64]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x48]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3c7
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.00406abf
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x48]
push eax
push ecx
call fcn.00447717
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
test ebx, ebx
jne 0x4485ad
cmp byte [ebp - 0x2b5], al
jne 0x4487d8
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447813
mov ebx, eax
test ebx, ebx
je 0x44882b
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x4487d8
push str._to
lea ecx, [ebp - 0x64]
call fcn.0041b66b
push str.WinHttp_Failed_Try_WinINet_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call fcn.0041b66b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x64]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x48]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3d5
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x29
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.00406abf
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x48]
push eax
push ecx
call fcn.00447717
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
test ebx, ebx
jne 0x448687
cmp byte [ebp - 0x2b5], al
jne 0x4487d8
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447813
mov ebx, eax
test ebx, ebx
je 0x44882b
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x4487d8
cmp dword [edi + 0x278], 2
jne 0x44830e
lea eax, [ebp - 0x2f8]
push 0x9914
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x48]
call fcn.0043d68e
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
pop ecx
test ebx, ebx
jne 0x4486ef
cmp byte [ebp - 0x2b5], al
jne 0x4487d8
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00447813
mov ebx, eax
test ebx, ebx
je 0x44882b
mov esi, dword [ebp - 0x2bc]
cmp esi, 5
jg 0x4487d8
push 0xa
push ebx
lea ecx, [ebp - 0xd4]
call fcn.0041b292
push str._ret
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x34
call fcn.0041b66b
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x35
call fcn.0041b66b
push str.BeeDownload_Failed_Try_ZDownloadWithIE_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.0041b66b
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x9c]
mov ecx, 0x4b5c30
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3f0
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, 0x4b5c30
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x29
call fcn.0041baf2
jmp 0x44830e
test ebx, ebx
je 0x44882b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.0041baf2
mov ecx, dword [ebp - 0x2dc]
push 0x1c
pop eax
add dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2d8]
sub eax, ecx
mov esi, dword [ebp - 0x2c0]
cdq
inc esi
idiv dword [ebp - 0x2fc]
mov dword [ebp - 0x2c0], esi
cmp esi, eax
mov eax, dword [ebp - 0x2c4]
jb 0x44827b
mov esi, 0x4b5c30
jmp 0x4488e2
push str._OK.
lea ecx, [ebp - 0x9c]
call fcn.0041b66b
push str._to
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x38
call fcn.0041b66b
push str.download
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.0041b66b
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x80]
mov esi, 0x4b5c30
push eax
lea eax, [ebp - 0x64]
mov ecx, esi
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3f9
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, esi
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.0041baf2
test ebx, ebx
jne 0x448e74
push 2
mov ecx, edi
call fcn.0044747b
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
push ebx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041cd67
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.0041baf2
test bl, bl
je 0x448a6b
lea ecx, [ebp - 0x23c]
call fcn.0041765f
push str.MsiExec.exe__qn__i
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x42
call fcn.0041b66b
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x80]
call fcn.0041bbb0
push eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x64]
call fcn.0041ddb9
pop ecx
add eax, 4
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x238]
call fcn.0041e1ec
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x42
call fcn.0041baf2
lea ecx, [ebp - 0xd4]
call fcn.004050de
add eax, 4
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x214]
call fcn.0041e1ec
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x42
call fcn.0041baf2
or dword [ebp - 0x21c], 0xffffffff
lea eax, [edi + 0x198]
push eax
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x220], 5
call fcn.0041e1ec
lea eax, [edi + 0x1b4]
push eax
lea ecx, [ebp - 0x190]
call fcn.0041e1ec
lea eax, [edi + 0x1d0]
push eax
lea ecx, [ebp - 0x174]
call fcn.0041e1ec
lea ecx, [ebp - 0x23c]
call fcn.00417f0b
mov ebx, eax
lea eax, [ebp - 0xb8]
push ecx
push eax
lea ecx, [ebp - 0x23c]
call fcn.004176c5
push eax
push 0x41b
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, esi
mov byte [ebp - 4], 0x4a
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, esi
call fcn.004083e1
lea ecx, [ebp - 0xb8]
call fcn.0041baf2
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x28
call fcn.00412c77
jmp 0x448cb6
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041bbb0
push 0x49c188
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.0041b66b
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea eax, [edi + 0x48]
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.0041baf2
push str._NoQueryBox
lea ecx, [ebp - 0x64]
call fcn.0041b66b
xor ebx, ebx
mov byte [ebp - 4], 0x4d
push ebx
lea eax, [ebp - 0x64]
push eax
lea ecx, [edi + 0x44]
call fcn.0041d33b
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x4b
mov esi, eax
call fcn.0041baf2
cmp esi, 0xffffffff
jne 0x448b3a
push str._NoQueryBox
lea ecx, [ebp - 0x9c]
call fcn.0041b66b
push 0x49c188
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
call fcn.0041b66b
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x4b
call fcn.0041baf2
cmp dword [0x4b5b90], 0
je 0x448b75
push str.__q__s
lea ecx, [ebp - 0xd4]
call fcn.0041b66b
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x44]
call fcn.00408695
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x4b
call fcn.0041baf2
push ebx
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_ShowWindow]
push 2
push 0x64
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x23c]
call fcn.0041765f
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x238]
call fcn.0041e1ec
push ebx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041c27a
add eax, 4
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0x214]
call fcn.0041e1ec
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x51
call fcn.0041baf2
lea eax, [edi + 0x198]
mov dword [ebp - 0x220], 5
push eax
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x21c], ebx
call fcn.0041e1ec
lea eax, [edi + 0x1b4]
push eax
lea ecx, [ebp - 0x190]
call fcn.0041e1ec
lea eax, [edi + 0x1d0]
push eax
lea ecx, [ebp - 0x174]
call fcn.0041e1ec
lea ecx, [ebp - 0x23c]
call fcn.00417f0b
mov ebx, eax
lea eax, [ebp - 0x144]
push ecx
push eax
lea ecx, [ebp - 0x23c]
call fcn.004176c5
push eax
push 0x435
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov esi, 0x4b5c30
mov byte [ebp - 4], 0x53
push 3
mov ecx, esi
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, esi
call fcn.004083e1
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x51
call fcn.0041baf2
cmp dword [ebp - 0x15c], 0
jne 0x448c9c
push 4
mov ecx, edi
call fcn.0044747b
jmp 0x448c9f
or ebx, 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.00412c77
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x28
call fcn.0041baf2
test ebx, ebx
je 0x448d0d
push 5
mov ecx, edi
call fcn.0044747b
push str.insatll_failed
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x54
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
push 0x444
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, esi
call fcn.004083e1
lea ecx, [ebp - 0x2c]
jmp 0x448f3a
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x80]
call fcn.0041cd67
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.0041baf2
test bl, bl
je 0x448e1e
push 0x5f
push 0x66
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [ebp - 0x300]
push str.UaaClient.exe
lea ecx, [ebp - 0x9c]
call fcn.0041b66b
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9c]
or ebx, 1
mov dword [ebp - 0x2c0], ebx
call fcn.004473bd
test eax, eax
jne 0x448db1
push 0x49c928
lea ecx, [ebp - 0x64]
call fcn.0041b66b
mov dword [ebp - 4], 0x59
lea ecx, [ebp - 0x64]
or ebx, 2
mov dword [ebp - 0x2c0], ebx
call fcn.004473bd
mov byte [ebp - 0x2b5], 0
test eax, eax
je 0x448db8
mov byte [ebp - 0x2b5], 1
test bl, 2
je 0x448dc8
lea ecx, [ebp - 0x64]
and ebx, 0xfffffffd
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0x28
and ebx, 0xfffffffe
call fcn.0041baf2
cmp byte [ebp - 0x2b5], 0
jne 0x448df6
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x448d55
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x80]
call fcn.004066a7
test al, al
je 0x448e15
lea ecx, [ebp - 0x80]
call fcn.00406abf
push 4
mov ecx, edi
call fcn.0044747b
push 0
push 0
push 0x10
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.insalled_end
lea ecx, [ebp - 0x64]
call fcn.0041b66b
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
push eax
push 0x463
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, esi
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, esi
call fcn.004083e1
lea ecx, [ebp - 0x64]
call fcn.0041baf2
jmp 0x448f44
push 3
mov ecx, edi
call fcn.0044747b
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041b187
push str._vt_all_url_to_down
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.0041b66b
push 0xa
push ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.0041b292
push str.get_down_url_failed
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3d
call fcn.0041b66b
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x64]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x404
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0xd4]
call fcn.0041baf2
call fcn.00447184
lea ecx, [ebp - 0x80]
mov dword [ebp - method.std::_Facet_base.virtual_4], vtable.HProcess::HFileDownloadCallBack.0
call fcn.0041baf2
lea ecx, [ebp - 0xf0]
call fcn.0041baf2
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x5b
call fcn.00404329
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x5c
call fcn.00404329
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x5d
call fcn.00404329
lea ecx, [ebp - 0x10c]
call fcn.0041baf2
lea ecx, [ebp - 0x128]
jmp 0x4490a1
call fcn.0041baf2
cmp dword [0x4b5b90], 0
jne 0x449053
push 0x49fdf0
lea ecx, [ebp - 0x9c]
call fcn.0041b66b
and dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
push str.MSG_MUST_OS_NOT_SUPPORT
call fcn.0041b66b
lea edx, [ebp - 0x9c]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd4]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x144]
call fcn.00444ed7
add esi, 4
cmp dword [esi + 0x14], 8
jb 0x44900b
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x449016
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x144]
call fcn.0041baf2
lea ecx, [ebp - 0xd4]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
push 0
push 0
push 0x10
push dword [0x4b5b64]
call ebx
push str.os_not_support
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
push 3
pop eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], eax
push ecx
push 0x314
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b5c30
push eax
mov ecx, ebx
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
call fcn.0045e4e9
ret