Function at 0x493e70
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5191d8
mov eax, dword fs:[0]
push eax
sub esp, 0x478
mov eax, dword [0x574be0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x428], edx
mov edi, ecx
mov dword [ebp - 0x424], edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x42c], eax
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x464], eax
push edi
lea ecx, [ebp - 0x418]
mov dword [ebp - 4], 0
call fcn.004204a0
push 0x5578e8
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 1
call fcn.004204a0
mov byte [ebp - 4], 2
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x44c], esi
lea eax, [ebp - 0x438]
push eax
lea edx, [ebp - 0x44c]
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 3
call fcn.00421890
lea ecx, [ebp - 0x418]
push ecx
mov edx, eax
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 4
call fcn.00421890
add esp, 8
push eax
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 5
call fcn.004222b0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x440]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x493f79
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x430]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x493f9c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x493fb9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x493fdc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x493fff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.doRsaDecode
lea ecx, [ebp - 0x418]
call fcn.004204a0
push str.doRsaDecode
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 6
call fcn.004204a0
push 0
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x438]
push eax
mov byte [ebp - 4], 7
call fcn.004219a0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494066
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494089
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x438], 0
call fcn.004999c0
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x460], eax
mov byte [ebp - 4], 8
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x434], esi
mov byte [ebp - 4], 9
test edi, edi
jne 0x4940f2
xor ecx, ecx
jmp 0x494106
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4940f7
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x460]
call fcn.00420c80
mov edi, dword [ebp - 0x460]
push 0x5c
mov eax, dword [edi - 0xc]
push edi
mov dword [ebp - 0x430], eax
call fcn.004ee500
add esp, 8
test eax, eax
jne 0x494136
or eax, 0xffffffff
jmp 0x49413a
sub eax, edi
sar eax, 1
mov ecx, dword [ebp - 0x430]
sub ecx, eax
dec ecx
push ecx
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x460]
call fcn.0042c5d0
mov byte [ebp - 4], 0xa
mov edx, dword [eax]
lea ecx, [esi - 0x10]
lea eax, [edx - 0x10]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x43c], ecx
cmp eax, ecx
je 0x4941d1
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x4941bc
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x4941bc
mov ecx, dword [ebp - 0x430]
call fcn.00420750
mov dword [ebp - 0x430], eax
mov ecx, ebx
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x4941b1
mov esi, dword [ebp - 0x43c]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x430]
lea esi, [eax + 0x10]
mov dword [ebp - 0x434], esi
jmp 0x4941d1
push dword [edx - 0xc]
lea ecx, [ebp - 0x434]
push edx
call fcn.00420c80
mov esi, dword [ebp - 0x434]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4941f4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi - 0xc]
push 0x2e
push esi
mov dword [ebp - 0x430], eax
call fcn.004ee500
add esp, 8
test eax, eax
jne 0x494211
or eax, 0xffffffff
jmp 0x494215
sub eax, esi
sar eax, 1
mov ecx, dword [ebp - 0x430]
sub ecx, eax
push ecx
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x434]
call fcn.0042c5d0
push 0x2e
push esi
mov byte [ebp - 4], 0xb
call fcn.004ee500
add esp, 8
test eax, eax
jne 0x494248
or eax, 0xffffffff
jmp 0x49424c
sub eax, esi
sar eax, 1
push eax
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x434]
call fcn.0042d6e0
mov byte [ebp - 4], 0xc
mov edx, dword [eax]
add esi, 0xfffffff0
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x4942bc
cmp dword [esi + 0xc], 0
jl 0x4942ad
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4942ad
call fcn.00420750
mov dword [ebp - 0x430], eax
mov ecx, ebx
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4942a2
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x430]
add eax, 0x10
mov dword [ebp - 0x434], eax
jmp 0x4942bc
push dword [edx - 0xc]
lea ecx, [ebp - 0x434]
push edx
call fcn.00420c80
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4942df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
call fcn.004ec160
push eax
mov dword [ebp - 0x458], edx
call fcn.004ee4f0
mov eax, dword [0x575ba4]
add esp, 8
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x430], esi
mov byte [ebp - 4], 0xd
call fcn.004ee4cd
push eax
lea edx, [ebp - 0x430]
lea ecx, [ebp - 0x41c]
call fcn.00421800
lea ecx, [ebp - 0x444]
push ecx
mov edx, eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xe
call fcn.00421890
add esp, 8
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
lea ecx, [ebp - 0x434]
push dword [eax - 0xc]
push eax
call fcn.00428940
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494379
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49439c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0xb
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4943b9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x434]
push eax
mov edx, 0x57c2ac
lea ecx, [ebp - 0x43c]
call fcn.00422130
add esp, 4
mov byte [ebp - 4], 0x10
mov edx, dword [eax]
mov eax, dword [ebp - 0x428]
lea ecx, [edx - 0x10]
mov esi, dword [eax]
sub esi, 0x10
cmp ecx, esi
je 0x49443a
cmp dword [esi + 0xc], 0
jl 0x49442b
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x49442b
call fcn.00420750
mov dword [ebp - 0x430], eax
mov ecx, ebx
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x49441e
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x428]
add eax, 0x10
mov dword [ecx], eax
jmp 0x49443a
push dword [edx - 0xc]
mov ecx, dword [ebp - 0x428]
push edx
call fcn.00420c80
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49445d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 3
push 0
push 1
push 1
push dword [ebp - 0x424]
call esi
mov dword [ebp - 0x430], eax
cmp eax, 0xffffffff
jne 0x49467d
push str.doRsaDecode_CreateFile_source_
lea ecx, [ebp - 0x438]
call fcn.004204a0
mov byte [ebp - 4], 0x11
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x440], esi
lea eax, [ebp - 0x438]
push eax
lea edx, [ebp - 0x440]
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x12
call fcn.00421890
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x430]
call fcn.00421800
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x14
call fcn.004222b0
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x430]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494525
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494548
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x11
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494565
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494588
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x15
call fcn.004204a0
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x438]
push eax
mov byte [ebp - 4], 0x16
call fcn.004219a0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4945ee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494611
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494634
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494657
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4948c4
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4948c4
mov eax, dword [ebp - 0x428]
push 0
push 0x80
push 4
push 0
push 1
push 2
push dword [eax]
call esi
mov dword [ebp - 0x43c], eax
cmp eax, 0xffffffff
jne 0x494a87
push str.doRsaDecode_CreateFile_destination_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x17
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x43c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x43c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x18
call fcn.00421890
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x19
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x41c]
call fcn.00421800
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004222b0
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494741
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494764
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x17
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494781
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4947a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x1b
call fcn.004204a0
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x1c
call fcn.004219a0
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49480a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49482d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494850
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494873
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494890
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x430]
call esi
mov eax, dword [ebp - 0x438]
test eax, eax
je 0x4948b1
push eax
call fcn.00498eb0
add esp, 4
mov eax, dword [ebp - 0x440]
test eax, eax
je 0x4948c4
push eax
call fcn.004998e0
add esp, 4
push str.iRetVal
lea ecx, [ebp - 0x440]
call fcn.004204a0
mov byte [ebp - 4], 0x52
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x440]
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x53
call fcn.00421890
mov byte [ebp - 4], 0x54
mov edi, dword [ebp - 0x44c]
push edi
mov edx, eax
lea ecx, [ebp - 0x448]
call fcn.00421800
add esp, 8
push eax
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0x55
call fcn.004222b0
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494958
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0x450]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49497b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x52
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494998
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x440]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4949bb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.doRsaDecode
lea ecx, [ebp - 0x440]
call fcn.004204a0
push str.doRsaDecode
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x56
call fcn.004204a0
push 0
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x44c]
push eax
mov byte [ebp - 4], 0x57
call fcn.004219a0
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x44c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494a22
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x440]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494a45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x464]
add esi, 0xfffffff0
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x494a69
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004e9eea
mov esp, ebp
pop ebp
ret
push 0xf7
push str._____BEGIN_RSA_PUBLIC_KEY______nMIGHAoGBANyWsWNMh4EW0i9RQRnLC8CG8zVhDlnrl644H9FhpCrIrHO1AosuzR3_nyvrDyKIy4rM18gih9myLXiOq2uGtXxSzkpJB1iaL6E5AwMMmXeVU5m_n6Sftz_nyiGzLqpgWFFi_YThn2LSQUDr6RFlQgnAgI3IhHXLWlioPzLJFWJAgED_n_____END_RSA_PUBLIC_KEY______n
call fcn.00499a60
add esp, 8
mov dword [ebp - 0x440], eax
test eax, eax
jne 0x494c6e
push str.doRsaDecode_BIO_new_mem_buf_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x1d
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x1e
call fcn.00421890
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x1f
call fcn.004222b0
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494b23
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x1d
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494b40
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494b63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x42c]
mov ecx, esi
call fcn.00495c90
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x20
call fcn.004204a0
push 2
push esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x21
call fcn.004219a0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494bd1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494bf4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494c17
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494c3a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495c79
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x494896
push 0
push 0
push 0
push eax
call fcn.00499ed0
add esp, 0x10
mov dword [ebp - 0x438], eax
test eax, eax
jne 0x494e52
push str.doRsaDecode_PEM_read_bio_RSAPublicKey_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x22
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x23
call fcn.00421890
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x24
call fcn.004222b0
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494d07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x22
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494d24
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494d47
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x42c]
mov ecx, esi
call fcn.00495c90
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x25
call fcn.004204a0
push 2
push esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x26
call fcn.004219a0
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494db5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494dd8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494dfb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494e1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495c79
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x494896
push eax
call fcn.00498fd0
add esp, 4
mov dword [ebp - 0x420], eax
test eax, eax
jne 0x495030
push str.doRsaDecode_RSA_size_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x27
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x28
call fcn.00421890
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x29
call fcn.004222b0
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494ee5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x27
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494f02
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494f25
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x42c]
mov ecx, esi
call fcn.00495c90
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x2a
call fcn.004204a0
push 2
push esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x2b
call fcn.004219a0
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494f93
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494fb6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494fd9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x494ffc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495c79
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x494896
push eax
call fcn.004eaae6
xor cl, cl
xor esi, esi
mov edx, eax
add esp, 4
mov dword [ebp - 0x424], edx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x428], esi
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x46c], esi
mov dword [ebp - 0x468], esi
mov byte [ebp - 4], 0x2c
xor eax, eax
lea ecx, [ecx]
push dword [ebp - 0x420]
inc eax
push 0
push edx
mov dword [ebp - 0x41c], eax
call fcn.004efe90
add esp, 0xc
lea eax, [ebp - 0x474]
push 0
push eax
push dword [ebp - 0x420]
push dword [ebp - 0x424]
push dword [ebp - 0x430]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x495920
mov edx, dword [ebp - 0x474]
test edx, edx
je 0x4954d4
mov ecx, dword [ebp - 0x418]
mov eax, dword [ebp - 0x420]
movzx ecx, cl
cmp edx, eax
mov edx, 1
cmovb ecx, edx
sub esi, dword [ebp - 0x470]
mov dword [ebp - 0x418], ecx
lea ecx, [eax - 0xb]
mov eax, dword [ebp - 0x41c]
imul eax, ecx
mov dword [ebp - 0x428], ecx
push eax
lea ecx, [ebp - 0x470]
call fcn.0042c6d0
mov eax, dword [ebp - 0x470]
push 1
push dword [ebp - 0x438]
add eax, esi
push eax
push dword [ebp - 0x424]
push dword [ebp - 0x420]
call fcn.00499020
add esp, 0x14
cmp eax, 0xffffffff
je 0x495174
cmp eax, dword [ebp - 0x428]
jae 0x495142
add eax, esi
push eax
lea ecx, [ebp - 0x470]
call fcn.0042c6d0
mov ecx, dword [ebp - 0x418]
test cl, cl
jne 0x495169
mov esi, dword [ebp - 0x46c]
mov eax, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x428], esi
jmp 0x495070
mov ecx, dword [ebp - 0x46c]
jmp 0x4954da
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.doRsaDecode_RSA_public_decrypt_
mov byte [ebp - 4], 0x36
test eax, 0xffff0000
jne 0x4951b7
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x4951c9
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x4951c9
push 0x1f
push str.doRsaDecode_RSA_public_decrypt_
lea ecx, [ebp - 0x420]
call fcn.00420c80
mov byte [ebp - 4], 0x37
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x420]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x38
call fcn.00421890
add esp, 4
mov byte [ebp - 4], 0x39
mov eax, dword [eax]
mov dword [ebp - 0x448], eax
lea ecx, [eax - 0x10]
mov dword [ebp - 0x418], ecx
mov ecx, dword [ebp - 0x42c]
mov edx, dword [ecx]
sub edx, 0x10
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x418], edx
je 0x4952a3
cmp dword [edx + 0xc], 0
lea edi, [edx + 0xc]
mov dword [ebp - 0x428], edi
mov edi, dword [ebp - 0x460]
jl 0x49529a
mov eax, dword [ebp - 0x418]
mov eax, dword [eax]
cmp eax, dword [edx]
jne 0x495294
mov ecx, dword [ebp - 0x418]
call fcn.00420750
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x428]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495281
mov eax, dword [ebp - 0x450]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x42c]
add eax, 0x10
mov dword [ecx], eax
jmp 0x4952a3
mov eax, dword [ebp - 0x448]
push dword [eax - 0xc]
push eax
call fcn.00420c80
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x458]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4952c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x37
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4952e3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495306
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.004efe90
add esp, 0xc
lea eax, [ebp - 0x414]
push eax
call fcn.0049b0d0
push eax
call fcn.0049b0a0
mov eax, dword [ebp - 0x42c]
add esp, 8
mov eax, dword [eax]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x495353
mov eax, dword [ecx]
call dword [eax + 0x10]
mov edx, eax
test edx, edx
jne 0x495362
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0x10]
mov edx, eax
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
jne 0x495377
push 0x80004005
call fcn.0041fba0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x420], esi
lea eax, [ebp - 0x414]
mov byte [ebp - 4], 0x3a
test eax, 0xffff0000
jne 0x4953bc
movzx ecx, ax
call fcn.0041fcd0
test eax, eax
je 0x4953ce
lea edx, [ebp - 0x414]
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x4953c8
push eax
lea ecx, [ebp - 0x420]
call fcn.00420650
mov esi, dword [ebp - 0x420]
mov ecx, dword [ebp - 0x42c]
mov byte [ebp - 4], 0x3b
push dword [esi - 0xc]
push esi
call fcn.00428940
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2c
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4953fe
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x428], eax
mov eax, str._tWinMain
mov byte [ebp - 4], 0x3c
test eax, 0xffff0000
jne 0x495441
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x495453
push esi
push eax
lea ecx, [ebp - 0x428]
call fcn.00420bb0
jmp 0x495453
push 9
push str._tWinMain
lea ecx, [ebp - 0x428]
call fcn.00420c80
mov byte [ebp - 4], 0x3d
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.WebInstallerMain
mov byte [ebp - 4], 0x3e
test eax, 0xffff0000
jne 0x49549a
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x4954ac
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x4954ac
push 0x10
push str.WebInstallerMain
lea ecx, [ebp - 0x420]
call fcn.00420c80
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x420]
push eax
mov byte [ebp - 4], 0x3f
call fcn.004219a0
mov byte [ebp - 4], 0x3d
jmp 0x495bae
mov ecx, dword [ebp - 0x428]
mov esi, dword [ebp - 0x470]
sub ecx, esi
mov dword [ebp - 0x428], ecx
test cl, 3
jne 0x4957b5
mov eax, ecx
shr eax, 2
cmp byte [ecx + esi - 1], 0x3d
lea eax, [eax + eax*2]
mov dword [ebp - 0x418], eax
jne 0x49550d
dec eax
mov dword [ebp - 0x418], eax
cmp byte [ecx + esi - 2], 0x3d
jne 0x49551b
dec eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
push eax
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x46
call fcn.0042c6d0
mov edx, dword [ebp - 0x428]
lea eax, [ebp - 0x458]
push eax
push dword [ebp - 0x418]
mov ecx, esi
push dword [ebp - 0x480]
call fcn.00420130
add esp, 0xc
test al, al
jne 0x495688
push str.doRsaDecode_Decode
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x47
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x48
call fcn.00421890
add esp, 4
mov esi, dword [ebp - 0x42c]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x49
call fcn.004222b0
lea ecx, [ebp - 0x458]
call fcn.004205e0
lea ecx, [ebp - 0x41c]
call fcn.004205e0
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x46
call fcn.004205e0
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x4a
call fcn.004204a0
mov byte [ebp - 4], 0x4b
push 2
push esi
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.004219a0
lea ecx, [ebp - 0x41c]
call fcn.004205e0
lea ecx, [ebp - 0x420]
call fcn.004205e0
lea ecx, [ebp - 0x480]
call fcn.0042c6a0
lea ecx, [ebp - 0x470]
call fcn.0042c6a0
lea ecx, [ebp - 0x444]
call fcn.004205e0
lea ecx, [ebp - 0x434]
call fcn.004205e0
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0
call fcn.004205e0
jmp 0x495c66
mov ecx, dword [ebp - 0x480]
mov eax, dword [ebp - 0x47c]
push 0
lea edx, [ebp - 0x474]
push edx
sub eax, ecx
push eax
push ecx
push dword [ebp - 0x43c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x49578a
push str.doRsaDecode_WriteFile_destination_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x4c
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x4d
call fcn.00421890
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x4e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, esi
lea ecx, [ebp - 0x458]
call fcn.00421800
add esp, 4
mov esi, dword [ebp - 0x42c]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x4f
call fcn.004222b0
lea ecx, [ebp - 0x458]
call fcn.004205e0
lea ecx, [ebp - 0x448]
call fcn.004205e0
lea ecx, [ebp - 0x41c]
call fcn.004205e0
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x46
call fcn.004205e0
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x50
call fcn.004204a0
mov byte [ebp - 4], 0x51
jmp 0x49561c
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x44c], 0
test eax, eax
je 0x4957a7
push eax
call fcn.004ea2dd
add esp, 4
test esi, esi
je 0x495c03
push esi
jmp 0x495bfb
push str.doRsaDecode_GetDecodeSize_
lea ecx, [ebp - 0x41c]
call fcn.004204a0
mov byte [ebp - 4], 0x40
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x41c]
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x41
call fcn.00421890
mov byte [ebp - 4], 0x42
push dword [ebp - 0x428]
mov edx, eax
lea ecx, [ebp - 0x448]
call fcn.00421800
add esp, 8
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x43
call fcn.004222b0
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495848
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x450]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49586b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x40
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495888
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4958ab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x44
call fcn.004204a0
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x41c]
push eax
mov byte [ebp - 4], 0x45
call fcn.004219a0
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495911
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x418]
jmp 0x495bd7
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.doRsaDecode_ReadFile_source_
mov byte [ebp - 4], 0x2d
test eax, 0xffff0000
jne 0x495963
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x495975
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x495975
push 0x1c
push str.doRsaDecode_ReadFile_source_
lea ecx, [ebp - 0x420]
call fcn.00420c80
mov byte [ebp - 4], 0x2e
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x420]
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0x2f
call fcn.00421890
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x30
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x418]
call fcn.00421800
add esp, 4
mov ecx, dword [ebp - 0x42c]
mov byte [ebp - 4], 0x31
mov ebx, dword [eax]
mov edx, dword [ecx]
lea eax, [ebx - 0x10]
sub edx, 0x10
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x41c], edx
cmp eax, edx
je 0x495a54
cmp dword [edx + 0xc], 0
lea eax, [edx + 0xc]
mov dword [ebp - 0x450], eax
jl 0x495a4b
mov eax, dword [ebx - 0x10]
cmp eax, dword [edx]
jne 0x495a4b
mov ecx, dword [ebp - 0x448]
call fcn.00420750
mov edx, dword [ebp - 0x450]
or ebx, 0xffffffff
mov dword [ebp - 0x448], eax
mov ecx, ebx
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x495a3e
mov eax, dword [ebp - 0x41c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x42c]
add eax, 0x10
mov dword [ecx], eax
jmp 0x495a57
push dword [ebx - 0xc]
push ebx
call fcn.00420c80
or ebx, 0xffffffff
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495a7a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x428]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495a9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2e
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495aba
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495add
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x428], eax
mov eax, str._tWinMain
mov byte [ebp - 4], 0x32
test eax, 0xffff0000
jne 0x495b20
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x495b32
push esi
push eax
lea ecx, [ebp - 0x428]
call fcn.00420bb0
jmp 0x495b32
push 9
push str._tWinMain
lea ecx, [ebp - 0x428]
call fcn.00420c80
mov byte [ebp - 4], 0x33
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.WebInstallerMain
mov byte [ebp - 4], 0x34
test eax, 0xffff0000
jne 0x495b79
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x495b8b
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x495b8b
push 0x10
push str.WebInstallerMain
lea ecx, [ebp - 0x420]
call fcn.00420c80
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x420]
push eax
mov byte [ebp - 4], 0x35
call fcn.004219a0
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495bcd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x428]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495bf0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x470]
test eax, eax
je 0x495c03
push eax
call fcn.004ea2dd
add esp, 4
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495c26
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495c49
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x495c66
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x424]
test eax, eax
je 0x495c79
push eax
call fcn.004eaae1
add esp, 4
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x494896