Function at 0x43259a
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Create thread
Get file size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x441dc4
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x455534]
xor eax, esp
mov dword [esp + 0x2d0], eax
push ebx
push esi
push edi
mov eax, dword [0x455534]
xor eax, esp
push eax
lea eax, [esp + 0x2e8]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0x18], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x8003
mov dword [esp + 0x40], eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x42afae
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push str.started
lea ecx, [esp + 0x144]
call fcn.004018b3
lea eax, [esp + 0x140]
push eax
mov dword [esp + 0x2f4], ebx
call fcn.0042560f
or dword [esp + 0x2f4], 0xffffffff
pop ecx
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [esp + 0x148]
call fcn.0040173a
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x457a68
call esi
push 0x457a84
call esi
push 4
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push ebx
push ebx
push edi
push ebx
call esi
push ebx
push ebx
push edi
push ebx
mov dword [0x457a64], eax
call esi
push ebx
push ebx
push edi
push ebx
mov dword [0x457a60], eax
call esi
push 0x42a4cb
push ebx
push 0x101
mov dword [0x457a5c], eax
call fcn.00425cfc
add esp, 0xc
call fcn.00422595
push ebx
lea eax, [esp + 0x134]
push eax
push 0x457a80
mov dword [esp + 0x13c], edi
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], ebx
mov dword [esp + 0x148], ebx
call sub.gdiplus.dll_GdiplusStartup
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], edi
call fcn.0043902a
lea ecx, [esp + 0x88]
push ecx
mov byte [esp + 0x2fc], 2
mov ecx, eax
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push 0x44968c
push eax
mov byte [esp + 0x2fc], 3
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 4
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 5
call fcn.0043cc15
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 6
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.antivirus
push eax
mov byte [esp + 0x2fc], 7
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 8
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 9
call fcn.0043cbd5
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0xa
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.antispyware
push eax
mov byte [esp + 0x2fc], 0xb
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0xc
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0xd
call fcn.0043cb95
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0xe
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.firewall
push eax
mov byte [esp + 0x2fc], 0xf
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x10
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x11
call fcn.0043c044
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x12
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.video
push eax
mov byte [esp + 0x2fc], 0x13
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x14
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x15
call fcn.00438fd4
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x16
call fcn.004256ce
add esp, 0xc
push eax
push str.memory
lea eax, [esp + 0x6c]
mov byte [esp + 0x2f8], 0x17
push eax
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x18
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x19
call fcn.00438d35
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x1a
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.harddisk
push eax
mov byte [esp + 0x2fc], 0x1b
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x1c
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x1d
call fcn.0043a750
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x1e
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.manufacturer
push eax
mov byte [esp + 0x2fc], 0x1f
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x20
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x21
call fcn.0043a5c8
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x22
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.baseBoard
push eax
mov byte [esp + 0x2fc], 0x23
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x24
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x25
call fcn.0043a440
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x26
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.disks
push eax
mov byte [esp + 0x2fc], 0x27
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x28
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x29
call fcn.00438b75
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x2a
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.display
push eax
mov byte [esp + 0x2fc], 0x2b
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x2c
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x2d
call fcn.00438af3
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x2e
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.virtDisplay
push eax
mov byte [esp + 0x2fc], 0x2f
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x30
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push str.HKEY_LOCAL_MACHINEHARDWAREDESCRIPTIONSystemSystemBiosVersion
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x31
call fcn.0043bbba
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x32
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.bios
push eax
mov byte [esp + 0x2fc], 0x33
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x34
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
call fcn.00422e9e
push eax
lea ecx, [esp + 0xa0]
call fcn.00424c75
pop ecx
lea ecx, [esp + 0x80]
push ecx
mov ecx, eax
mov dword [esp + 0x2f4], 0x35
call fcn.004256ce
pop ecx
push eax
lea eax, [esp + 0x68]
push str.hddId
push eax
mov byte [esp + 0x2fc], 0x36
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x37
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
lea ecx, [esp + 0x140]
test eax, eax
je 0x43303e
push str.admintrue
call fcn.004018b3
mov dword [esp + 0x2f0], 0x38
jmp 0x433053
push str.adminfalse
call fcn.004018b3
mov dword [esp + 0x2f0], 0x39
lea eax, [esp + 0x140]
push eax
call fcn.0042560f
or dword [esp + 0x2f4], 0xffffffff
pop ecx
push ebx
push edi
lea ecx, [esp + 0x148]
call fcn.0040173a
push str..rar
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x3a
call fcn.00439409
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x3b
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.rar
push eax
mov byte [esp + 0x2fc], 0x3c
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x3d
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push str..torrent
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x3e
call fcn.00439409
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x3f
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push 0x4497ec
push eax
mov byte [esp + 0x2fc], 0x40
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x41
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x4497f8
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x42
call fcn.00439409
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
mov byte [esp + 0x2fc], 0x43
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.magnet
push eax
mov byte [esp + 0x2fc], 0x44
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x45
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push 0x44668c
lea esi, [esp + 0x144]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x2f8], 0x46
call fcn.00439612
mov byte [esp + 0x2f8], 0x47
lea ecx, [esp + 0x88]
push ecx
mov ecx, eax
call fcn.004256ce
add esp, 0xc
push eax
lea eax, [esp + 0x68]
push str.net
push eax
mov byte [esp + 0x2fc], 0x48
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x49
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
or dword [esp + 0x2f0], 0xffffffff
push ebx
push edi
lea esi, [esp + 0x148]
call fcn.0040115a
push ebx
call fcn.00428340
pop ecx
push ebx
push 0x429a7d
push 0xe
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
push edi
call fcn.00428340
lea esi, [esp + 0x144]
mov dword [esp], 0x44668c
call fcn.00401916
mov eax, esi
push eax
mov dword [esp + 0x2f4], 0x4a
call fcn.004293a0
or dword [esp + 0x2f4], 0xffffffff
pop ecx
push ebx
push edi
call fcn.0040115a
push 0x14c
call fcn.00410fd3
pop ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x2f0], 0x4b
cmp eax, ebx
je 0x4333b8
push 0x4e20
push 0x1388
push eax
call fcn.00435f29
mov dword [esp + 0x20], eax
jmp 0x4333bc
mov dword [esp + 0x20], ebx
or dword [esp + 0x2f0], 0xffffffff
push str.965e49065f683f77
lea ecx, [esp + 0x210]
call fcn.004018b3
push str.067c98449203f5d6
lea ecx, [esp + 0x144]
mov dword [esp + 0x2f4], 0x4c
call fcn.004018b3
lea eax, [esp + 0x20c]
push eax
lea eax, [esp + 0x144]
push eax
lea eax, [esp + 0x6c]
push eax
mov byte [esp + 0x2fc], 0x4d
call fcn.004265aa
add esp, 0xc
mov edx, eax
lea ecx, [esp + 0x228]
mov byte [esp + 0x2f0], 0x4e
call fcn.004358f2
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x148]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x214]
call fcn.0040173a
push ebx
lea ecx, [esp + 0x1f4]
mov dword [esp + 0x20c], 0xf
call fcn.00401801
lea eax, [esp + 0x9c]
push eax
mov byte [esp + 0x2f4], 0x53
call fcn.00428d19
pop ecx
lea ecx, [esp + 0x80]
push ecx
mov ecx, eax
mov byte [esp + 0x2f4], 0x54
call fcn.004256ce
pop ecx
mov edx, eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x2f0], 0x55
call fcn.00435a96
mov edx, eax
lea ecx, [esp + 0x180]
mov byte [esp + 0x2f0], 0x56
call fcn.004358f2
push ebx
push edi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x88]
call fcn.0040173a
mov byte [esp + 0x2f0], 0x5a
push ebx
push edi
lea esi, [esp + 0xa4]
call fcn.0040115a
push 0xffffffffffffffff
lea eax, [esp + 0xe0]
push str.0x004000e0
push eax
call fcn.00424901
add esp, 0xc
push 0xffffffffffffffff
mov edi, 0x456a50
push edi
xor ebx, ebx
mov byte [esp + 0x2f8], 0x5b
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0xe4]
mov byte [esp + 0x2f8], 0x5a
call fcn.0040115a
cmp dword [0x456a64], 0xa
jne 0x433571
push 2
push edi
lea esi, [esp + 0xe4]
call fcn.00401ae8
mov byte [esp + 0x2f0], 0x5c
push 0x449840
mov dword [esp + 0x1c], 1
call fcn.00403f05
mov byte [esp + 0x17], 1
test eax, eax
je 0x433575
mov byte [esp + 0x17], bl
mov dword [esp + 0x2f0], 0x5a
test byte [esp + 0x18], 1
je 0x43359b
and dword [esp + 0x18], 0xfffffffe
push ebx
push 1
lea esi, [esp + 0xe4]
call fcn.0040115a
cmp byte [esp + 0x17], bl
je 0x43360e
push 0xffffffffffffffff
push edi
push 2
pop ebx
lea esi, [esp + 0x100]
call fcn.00401ae8
mov ebx, eax
mov byte [esp + 0x2f0], 0x5d
call fcn.0042354f
push 0xffffffffffffffff
push dword [eax]
lea eax, [esp + 0xe4]
push eax
call fcn.00424901
add esp, 0xc
push 0xffffffffffffffff
push edi
xor ebx, ebx
mov byte [esp + 0x2f8], 0x5e
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0xe4]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x100]
mov byte [esp + 0x2f8], 0x5a
call fcn.0040115a
push 0x449854
lea eax, [esp + 0x44]
push edi
push eax
call fcn.00403c02
add esp, 0xc
lea ecx, [esp + 0x180]
push ecx
push eax
lea eax, [esp + 0xc8]
push eax
mov byte [esp + 0x2fc], 0x5f
call fcn.00403c48
add esp, 0xc
push str.rnd
push eax
lea eax, [esp + 0x100]
push eax
mov byte [esp + 0x2fc], 0x60
call fcn.00403c02
add esp, 0xc
lea ecx, [esp + 0x228]
push ecx
push eax
lea eax, [esp + 0xe4]
push eax
mov byte [esp + 0x2fc], 0x61
call fcn.00403c48
add esp, 0xc
mov edi, dword [esp + 0x20]
mov edx, eax
mov ecx, edi
mov byte [esp + 0x2f0], 0x62
call fcn.00435b8e
push ebx
push 1
lea esi, [esp + 0xe4]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x100]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0xc8]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x2f8], 0x5a
call fcn.0040115a
lea eax, [esp + 0x140]
push eax
call fcn.00437385
mov byte [esp + 0x2f0], 0x63
cmp dword [esp + 0x154], ebx
jne 0x433725
lea ecx, [esp + 0x40]
mov eax, edi
call fcn.004358a3
sub esp, 0x1c
mov byte [esp + 0x30c], 0x64
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
push str.cant_get_info:
push ecx
call fcn.00403c93
add esp, 0xc
call fcn.0042aef9
push str.ETag
lea esi, [esp + 0xfc]
call fcn.00401916
mov eax, esi
push eax
lea eax, [esp + 0x210]
push eax
mov ecx, edi
mov byte [esp + 0x2f8], 0x65
call fcn.00436036
push ebx
push 1
mov byte [esp + 0x2f8], 0x67
call fcn.0040115a
mov edi, 0x456a88
cmp dword [esp + 0x220], ebx
je 0x4338a9
lea edx, [esp + 0x20c]
lea ecx, [esp + 0x80]
call fcn.0043599a
push str.doM0b9lsEfwTznkEcOLYrFjZ5rhX2bhk
push eax
lea eax, [esp + 0x6c]
push eax
mov byte [esp + 0x2fc], 0x68
call fcn.0040455a
add esp, 0xc
lea ecx, [esp + 0xc0]
push ecx
mov ecx, eax
mov byte [esp + 0x2f4], 0x69
call fcn.00425b69
pop ecx
mov edx, eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x2f0], 0x6a
call fcn.004358f2
push 0xffffffffffffffff
push edi
xor ebx, ebx
mov byte [esp + 0x2f8], 0x6b
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0x48]
call fcn.0040115a
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [esp + 0xc8]
call fcn.0040173a
push ebx
push esi
lea ecx, [esp + 0x6c]
call fcn.0040173a
push ebx
push esi
lea ecx, [esp + 0x88]
mov byte [esp + 0x2f8], 0x67
call fcn.0040173a
mov edx, edi
lea ecx, [esp + 0x9c]
call fcn.0043599a
push eax
lea eax, [esp + 0xc4]
push 0x4498bc
push eax
mov byte [esp + 0x2fc], 0x6c
call fcn.0040450f
add esp, 0xc
push 0x4498b8
push eax
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x2fc], 0x6d
call fcn.0040455a
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x2fc], 0x6e
call fcn.00401522
push ebx
push esi
lea ecx, [esp + 0x48]
call fcn.0040173a
push ebx
push esi
lea ecx, [esp + 0xc8]
call fcn.0040173a
push ebx
push esi
lea ecx, [esp + 0xa4]
mov byte [esp + 0x2f8], 0x67
call fcn.0040173a
lea eax, [esp + 0xc0]
push eax
call fcn.004267ff
pop ecx
push eax
lea eax, [esp + 0x44]
push str.guid
push eax
mov byte [esp + 0x2fc], 0x6f
call fcn.0040450f
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [esp + 0x1f8]
mov byte [esp + 0x2f8], 0x70
call fcn.0040442e
push ebx
push 1
lea ecx, [esp + 0x48]
call fcn.0040173a
push ebx
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x2f8], 0x67
call fcn.0040173a
sub esp, 0x1c
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401424
lea ecx, [esp + 0x1d4]
call fcn.0043742b
add esp, 0x1c
push ebx
lea esi, [esp + 0x160]
mov byte [esp + 0x2f4], 0x71
call fcn.00409a80
lea eax, [esp + 0x244]
push eax
mov byte [esp + 0x2f4], 0x72
call fcn.0040c720
mov byte [esp + 0x2f0], 0x73
cmp dword [esp + 0x1d0], 0x10
mov eax, dword [esp + 0x1bc]
jae 0x43397b
lea eax, [esp + 0x1bc]
push eax
lea ecx, [esp + 0xfc]
call fcn.004018b3
lea eax, [esp + 0x15c]
push eax
lea eax, [esp + 0xfc]
lea ecx, [esp + 0x248]
mov byte [esp + 0x2f4], 0x74
call fcn.0040c800
neg al
sbb al, al
push ebx
inc al
push 1
lea ecx, [esp + 0x100]
mov byte [esp + 0x1f], al
mov byte [esp + 0x2f8], 0x73
call fcn.0040173a
cmp byte [esp + 0x17], bl
je 0x4339ea
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push str.cant_parse_get_json
call fcn.00401916
jmp 0x433720
cmp byte [esp + 0x164], 7
je 0x433a04
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push str.get_root_is_not_object
jmp 0x4339e0
push 0x44668c
lea esi, [esp + 0xe0]
call fcn.00401916
push 0x449928
lea ecx, [esp + 0xfc]
mov byte [esp + 0x2f4], 0x75
call fcn.004018b3
mov eax, esi
push eax
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x164]
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x300], 0x76
call fcn.0042c35f
add esp, 0x10
push 0xffffffffffffffff
mov edi, 0x4569c4
push edi
xor ebx, ebx
mov byte [esp + 0x2f8], 0x77
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0x48]
call fcn.0040115a
push ebx
push 1
lea ecx, [esp + 0x100]
call fcn.0040173a
push ebx
push 1
lea esi, [esp + 0xe4]
mov byte [esp + 0x2f8], 0x73
call fcn.0040115a
cmp dword [0x4569d8], ebx
jne 0x433aba
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push 0x44992c
jmp 0x4339e0
push str.size
lea ecx, [esp + 0xe0]
call fcn.004018b3
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0x160]
push eax
mov byte [esp + 0x2f8], 0x78
call fcn.0042c319
pop ecx
pop ecx
push ebx
push 1
lea ecx, [esp + 0xe4]
mov dword [0x4579c8], eax
mov dword [0x4579cc], edx
mov byte [esp + 0x2f8], 0x73
call fcn.0040173a
push 0x446800
lea esi, [esp + 0x84]
call fcn.00401916
push 0x44995c
lea esi, [esp + 0xa0]
mov byte [esp + 0x2f4], 0x79
call fcn.00401916
push 0x449960
lea esi, [esp + 0xfc]
mov byte [esp + 0x2f4], 0x7a
call fcn.00401916
push str.name
lea ecx, [esp + 0xe0]
mov byte [esp + 0x2f4], 0x7b
call fcn.004018b3
mov eax, esi
push eax
lea eax, [esp + 0xe0]
push eax
lea eax, [esp + 0x164]
push eax
lea eax, [esp + 0xcc]
push eax
mov byte [esp + 0x300], 0x7c
call fcn.0042c35f
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x98]
mov ecx, eax
mov byte [esp + 0x308], 0x7d
call fcn.00424825
add esp, 0x18
push 0xffffffffffffffff
push 0x4569e0
xor ebx, ebx
mov byte [esp + 0x2f8], 0x7e
call fcn.004010d2
push ebx
push 1
lea esi, [esp + 0x48]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0xc8]
call fcn.0040115a
push ebx
push 1
lea ecx, [esp + 0xe4]
call fcn.0040173a
push ebx
push 1
lea esi, [esp + 0x100]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0xa4]
call fcn.0040115a
push ebx
push 1
lea esi, [esp + 0x88]
mov byte [esp + 0x2f8], 0x73
call fcn.0040115a
push str.fakefile
lea ecx, [esp + 0x68]
call fcn.004018b3
push ebx
lea eax, [esp + 0x68]
push eax
lea eax, [esp + 0x164]
push eax
mov byte [esp + 0x2fc], 0x7f
call fcn.0042c28f
add esp, 0xc
push ebx
push 1
lea ecx, [esp + 0x6c]
mov esi, eax
mov byte [esp + 0x2f8], 0x73
call fcn.0040173a
cmp esi, ebx
je 0x433c7b
mov dword [0x457b70], 1
cmp dword [0x4569d8], 7
jbe 0x433cd0
push 7
push edi
xor ebx, ebx
lea esi, [esp + 0xc8]
call fcn.00401ae8
mov byte [esp + 0x2f0], 0x80
or dword [esp + 0x18], 2
mov edx, eax
lea ecx, [esp + 0x40]
call fcn.00423a5b
mov dword [esp + 0x2f0], 0x81
or dword [esp + 0x18], 4
push str.magnet:
call fcn.00403f05
mov byte [esp + 0x17], 1
test eax, eax
je 0x433cd5
mov byte [esp + 0x17], 0
test byte [esp + 0x18], 4
je 0x433ced
and dword [esp + 0x18], 0xfffffffb
push ebx
push 1
lea esi, [esp + 0x48]
call fcn.0040115a
mov dword [esp + 0x2f0], 0x73
test byte [esp + 0x18], 2
je 0x433d13
and dword [esp + 0x18], 0xfffffffd
push ebx
push 1
lea esi, [esp + 0xc8]
call fcn.0040115a
cmp byte [esp + 0x17], 0
je 0x433d34
push 0xffffffffffffffff
push 0x45698c
xor ebx, ebx
mov eax, edi
mov dword [0x457b70], 2
call fcn.004010d2
cmp dword [0x4569d8], 7
jbe 0x433d89
push 7
push edi
xor ebx, ebx
lea esi, [esp + 0xc8]
call fcn.00401ae8
mov byte [esp + 0x2f0], 0x82
or dword [esp + 0x18], 8
mov edx, eax
lea ecx, [esp + 0x40]
call fcn.00423a5b
mov dword [esp + 0x2f0], 0x83
or dword [esp + 0x18], 0x10
push str.file:__
call fcn.00403f05
mov byte [esp + 0x17], 1
test eax, eax
je 0x433d8e
mov byte [esp + 0x17], 0
test byte [esp + 0x18], 0x10
je 0x433da6
and dword [esp + 0x18], 0xffffffef
push ebx
push 1
lea esi, [esp + 0x48]
call fcn.0040115a
mov dword [esp + 0x2f0], 0x73
test byte [esp + 0x18], 8
je 0x433dc7
push ebx
push 1
lea esi, [esp + 0xc8]
call fcn.0040115a
cmp byte [esp + 0x17], 0
je 0x433e0d
push 0xffffffffffffffff
push edi
push 7
pop ebx
lea esi, [esp + 0x48]
mov dword [0x457b70], 3
call fcn.00401ae8
push 0xffffffffffffffff
push 0x45698c
xor ebx, ebx
mov byte [esp + 0x2f8], 0x84
call fcn.004010d2
push ebx
push 1
mov byte [esp + 0x2f8], 0x73
call fcn.0040115a
mov eax, dword [0x457b70]
cmp eax, ebx
je 0x433ebb
cmp eax, 3
jne 0x433e99
cmp dword [0x4569a4], 8
mov eax, dword [0x456990]
jae 0x433e32
mov eax, 0x456990
push 0x8000080
push 3
push 7
push 0x80
push eax
call fcn.00422d23
add esp, 0x14
cmp eax, 0xffffffff
je 0x433e8f
lea ecx, [esp + 0x24]
push ecx
push eax
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x433e6e
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0x28]
cmp eax, ebx
jl 0x433e99
jg 0x433e7e
cmp dword [esp + 0x24], ebx
jbe 0x433e99
mov ecx, dword [esp + 0x24]
mov dword [0x4579c8], ecx
mov dword [0x4579cc], eax
jmp 0x433e99
mov dword [0x457b70], 1
cmp dword [0x4579cc], ebx
jg 0x433ebb
jl 0x433eab
cmp dword [0x4579c8], ebx
ja 0x433ebb
mov dword [0x4579c8], 0x47b760
mov dword [0x4579cc], ebx
mov esi, str.checks
mov eax, esi
lea ecx, [esp + 0x15c]
call fcn.0040ab20
test al, al
je 0x433f1f
push esi
lea ebx, [esp + 0x160]
call fcn.0040a800
cmp byte [eax + 8], 6
jne 0x434161
push esi
call fcn.0040a800
mov edx, eax
lea ecx, [esp + 0x40]
call fcn.00428de6
push 0xffffffffffffffff
push 0
lea esi, [esp + 0x1f8]
mov byte [esp + 0x2f8], 0x85
call fcn.0040442e
push 0
push 1
lea ecx, [esp + 0x48]
call fcn.0040173a
xor edi, edi
xor ebx, ebx
inc edi
lea eax, [esp + 0x244]
call fcn.00404bd5
lea eax, [esp + 0x15c]
mov byte [esp + 0x2f0], 0x71
call fcn.00409cc0
push ebx
push edi
lea ecx, [esp + 0x1c0]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0x214]
call fcn.0040115a
push ebx
push edi
lea ecx, [esp + 0x148]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0x188]
mov byte [esp + 0x2f8], 0x53
call fcn.0040115a
mov edx, 0x456a88
lea ecx, [esp + 0xc0]
call fcn.0043599a
push eax
lea eax, [esp + 0x44]
push 0x4499b0
push eax
mov byte [esp + 0x2fc], 0x86
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x87
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x48]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0xc8]
mov byte [esp + 0x2f8], 0x53
call fcn.0040173a
push ebx
push ebx
push ebx
push 0x42a8b7
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0xbc], eax
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x28], 8
mov dword [esp + 0x2c], 0xc000
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x3c]
push ebx
lea esi, [esp + 0x118]
mov dword [esp + 0x38], eax
call fcn.00409a80
mov byte [esp + 0x2f0], 0x88
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x64]
call fcn.00423a1f
mov esi, eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x180]
mov byte [esp + 0x2f0], 0x89
call fcn.004358d7
push str.delay
mov byte [esp + 0x2f4], 0x8a
push eax
lea eax, [esp + 0xc8]
push eax
call fcn.00403c02
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x2fc], 0x8b
call fcn.00403c48
add esp, 0xc
push eax
mov eax, dword [esp + 0x24]
mov byte [esp + 0x2f4], 0x8c
call fcn.00435b79
push ebx
push edi
lea esi, [esp + 0x48]
call fcn.0040115a
push ebx
push edi
lea esi, [esp + 0xc8]
call fcn.0040115a
push ebx
push edi
lea esi, [esp + 0x188]
call fcn.0040115a
push ebx
push edi
lea esi, [esp + 0x6c]
mov byte [esp + 0x2f8], 0x88
call fcn.0040115a
sub esp, 0x1c
lea eax, [esp + 0x20c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401424
lea ecx, [esp + 0x5c]
call fcn.00437503
add esp, 0x1c
mov ecx, dword [esp + 0x20]
push eax
lea eax, [esp + 0x144]
push eax
mov byte [esp + 0x2f8], 0x8d
call fcn.00437176
push ebx
push edi
lea ecx, [esp + 0x48]
mov byte [esp + 0x2f8], 0x8f
call fcn.0040173a
cmp dword [esp + 0x154], ebx
jne 0x43416b
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0xc0]
call fcn.004358a3
sub esp, 0x1c
mov byte [esp + 0x30c], 0x90
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
push str.cant_get_form_data:
jmp 0x433717
xor edi, edi
inc edi
xor ebx, ebx
jmp 0x433f24
sub esp, 0x1c
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401424
lea ecx, [esp + 0x1d4]
call fcn.0043742b
add esp, 0x1c
lea eax, [esp + 0x244]
push eax
mov byte [esp + 0x2f4], 0x91
call fcn.0040c720
mov byte [esp + 0x2f0], 0x92
cmp dword [esp + 0x1d0], 0x10
mov eax, dword [esp + 0x1bc]
jae 0x4341c5
lea eax, [esp + 0x1bc]
push eax
lea ecx, [esp + 0x184]
call fcn.004018b3
lea eax, [esp + 0x114]
push eax
lea eax, [esp + 0x184]
lea ecx, [esp + 0x248]
mov byte [esp + 0x2f4], 0x93
call fcn.0040c800
neg al
sbb al, al
push ebx
inc al
push edi
lea ecx, [esp + 0x188]
mov byte [esp + 0x1f], al
mov byte [esp + 0x2f8], 0x92
call fcn.0040173a
cmp byte [esp + 0x17], 0
je 0x43422f
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push str.cant_parse_post_json
jmp 0x4339e0
cmp byte [esp + 0x11c], 7
je 0x43424c
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push str.post_root_is_not_object
jmp 0x4339e0
mov esi, str.bigben
push esi
lea ecx, [esp + 0x184]
call fcn.004018b3
push ebx
lea eax, [esp + 0x184]
push eax
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x2fc], 0x94
call fcn.0042c28f
add esp, 0xc
push ebx
push edi
lea ecx, [esp + 0x188]
mov dword [esp + 0x3c], eax
mov byte [esp + 0x2f8], 0x92
call fcn.0040173a
cmp dword [esp + 0x34], ebx
je 0x434305
push esi
lea ecx, [esp + 0x184]
call fcn.004018b3
lea eax, [esp + 0x180]
push eax
mov byte [esp + 0x2f4], 0x95
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x188]
mov byte [esp + 0x2f8], 0x92
call fcn.0040173a
push edi
mov eax, 0x4569c4
call fcn.00423206
pop ecx
test al, al
jne 0x434300
push 0x10
push 0x449a58
push 0x449a68
push dword [0x457a4c]
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004289fb
push 0xffffffffffffffff
push dword [0x457a64]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0x457a64]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea ecx, [esp + 0x114]
call fcn.0042eadb
lea eax, [esp + 0x244]
call fcn.00404bd5
push ebx
push edi
lea ecx, [esp + 0x1c0]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x148]
call fcn.0040173a
push ebx
lea ecx, [esp + 0x160]
mov dword [esp + 0x178], 0xf
call fcn.00401801
mov byte [esp + 0x2f0], 0x96
mov eax, dword [0x457bec]
sub eax, dword [0x457be8]
push 0x24
cdq
pop ecx
idiv ecx
mov dword [esp + 0x20], ebx
test eax, eax
jbe 0x43448b
push dword [esp + 0x20]
mov esi, 0x457bdc
mov dword [esp + 0x30], ebx
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
test eax, eax
jbe 0x43446c
push dword [esp + 0x2c]
mov esi, 0x457bdc
push dword [esp + 0x24]
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
mov edx, eax
add edx, 0x70
lea ecx, [esp + 0xc0]
call fcn.0043599a
push 0x449aac
push eax
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x2fc], 0x97
call fcn.0040455a
add esp, 0xc
push 0xffffffffffffffff
push ebx
lea esi, [esp + 0x164]
mov byte [esp + 0x2f8], 0x98
call fcn.0040442e
push ebx
push edi
lea ecx, [esp + 0x48]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0xc8]
mov byte [esp + 0x2f8], 0x96
call fcn.0040173a
push dword [esp + 0x20]
inc dword [esp + 0x30]
mov esi, 0x457bdc
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
cmp dword [esp + 0x2c], eax
jb 0x4343bd
mov eax, dword [0x457bec]
sub eax, dword [0x457be8]
push 0x24
cdq
pop ecx
idiv ecx
inc dword [esp + 0x20]
cmp dword [esp + 0x20], eax
jb 0x434390
mov eax, dword [esp + 0x170]
cmp eax, ebx
je 0x4344a3
dec eax
lea ecx, [esp + 0x15c]
call fcn.00404f2d
lea eax, [esp + 0x15c]
push eax
lea eax, [esp + 0x44]
push str.products
push eax
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x99
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x48]
call fcn.0040173a
push ebx
push edi
lea ecx, [esp + 0x164]
mov byte [esp + 0x2f8], 0x88
call fcn.0040173a
mov eax, dword [0x457b34]
push edi
call fcn.00422703
call fcn.00422831
push ebx
push ebx
push dword [0x457b78]
push 0x42b1fe
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [0x45685c], 0xa
mov dword [esp + 0x3c], eax
jne 0x4345f3
push str.closed
lea ecx, [esp + 0x184]
call fcn.004018b3
lea eax, [esp + 0x180]
push eax
mov byte [esp + 0x2f4], 0x9a
call fcn.0042560f
pop ecx
push ebx
push edi
lea ecx, [esp + 0x188]
mov byte [esp + 0x2f8], 0x88
call fcn.0040173a
push edi
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x44], esp
push str._close_install_
call fcn.00401916
call fcn.0042ab7e
add esp, 0x20
push 0xffffffffffffffff
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [esp + 0x3c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [0x457a80]
call sub.gdiplus.dll_GdiplusShutdown
lea eax, [esp + 0x114]
mov byte [esp + 0x2f0], 0x53
call fcn.00409cc0
push ebx
push edi
lea ecx, [esp + 0x1f8]
call fcn.0040173a
push ebx
push edi
lea esi, [esp + 0x230]
call fcn.0040115a
xor eax, eax
mov ecx, dword [esp + 0x2e8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2d0]
xor ecx, esp
call fcn.00410f21
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, 0x457a68
push edi
call esi
push dword [0x457a5c]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [esp + 0xbc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, str.checks2
mov eax, edi
lea ecx, [esp + 0x114]
call fcn.0040ab20
test al, al
je 0x434652
push edi
lea ebx, [esp + 0x118]
call fcn.0040a800
cmp byte [eax + 8], 6
jne 0x434652
mov byte [0x457b74], 1
lea ecx, [esp + 0x114]
call fcn.0042cd5c
xor edi, edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0x42c401
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1000
mov dword [esp + 0xc0], eax
call fcn.00410cae
mov dword [esp + 0xbc], eax
xor eax, eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x1f0], 7
mov dword [esp + 0x1ec], edi
mov word [esp + 0x1dc], ax
mov byte [esp + 0x2f4], 0x9b
mov dword [esp + 0x30], edi
mov dword [esp], 0x457a84
call esi
lea esi, [esp + 0x24]
mov edi, 0x457bdc
mov byte [esp + 0x17], 1
call fcn.004052b3
mov ecx, dword [eax]
mov eax, dword [eax + 4]
lea esi, [esp + 0x18]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], eax
mov ebx, edi
call fcn.00405297
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
test ecx, ecx
je 0x434705
cmp ecx, dword [esp + 0x34]
je 0x43470a
call fcn.004114ae
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x38]
je 0x434773
lea esi, [esp + 0x24]
call fcn.004053ef
mov edi, eax
lea esi, [esp + 0x40]
call fcn.00404c0b
cmp byte [esp + 0x5c], 0
je 0x434739
cmp dword [esp + 0x60], 0x1f40
jl 0x43475b
lea esi, [esp + 0x44]
call fcn.00405698
push dword [esp + 0x44]
call fcn.00410f30
pop ecx
lea esi, [esp + 0x24]
call fcn.00405374
mov ecx, dword [esp + 0x24]
jmp 0x4346fb
lea esi, [esp + 0x44]
mov byte [esp + 0x17], 0
call fcn.00405698
push dword [esp + 0x44]
call fcn.00410f30
pop ecx
mov eax, dword [0x457bec]
sub eax, dword [0x457be8]
push 0x24
cdq
pop ecx
idiv ecx
xor edi, edi
test eax, eax
jbe 0x4349f8
push edi
mov esi, ebx
call fcn.004052cf
and dword [esp + 0x18], 0
cmp byte [eax + 0x1c], 0
push edi
jne 0x434849
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
test eax, eax
jbe 0x4349de
push 0x449aec
push dword [esp + 0x1c]
mov esi, ebx
push edi
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
add eax, 0x70
push eax
lea eax, [esp + 0x48]
push eax
call fcn.00403c02
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [esp + 0x1dc]
mov byte [esp + 0x2f8], 0x9c
call fcn.004028e7
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x2f8], 0x9b
call fcn.0040115a
inc dword [esp + 0x18]
push edi
mov esi, ebx
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
cmp dword [esp + 0x18], eax
jb 0x4347c6
jmp 0x4349de
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
cmp byte [esp + 0x17], 0
je 0x4348f7
test eax, eax
jbe 0x4349de
push 0x449aec
push dword [esp + 0x1c]
mov esi, ebx
push edi
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
add eax, 0x70
push eax
lea eax, [esp + 0x48]
push eax
call fcn.00403c02
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [esp + 0x1dc]
mov byte [esp + 0x2f8], 0x9d
call fcn.004028e7
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x2f8], 0x9b
call fcn.0040115a
inc dword [esp + 0x18]
push edi
mov esi, ebx
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
cmp dword [esp + 0x18], eax
jb 0x434874
jmp 0x4349de
test eax, eax
jbe 0x4349de
call fcn.00422e5f
push 0xf
cdq
pop ecx
idiv ecx
mov eax, dword [esp + 0x2c]
push dword [esp + 0x18]
mov esi, ebx
push edi
add edx, eax
mov dword [esp + 0x3c], edx
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
mov ecx, dword [esp + 0x34]
add dword [esp + 0x2c], 0x3c
push 0
push 0
push dword [esp + 0x20]
mov esi, ebx
push edi
mov dword [eax + 0x13c], ecx
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
push eax
push 0x430e1a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push dword [esp + 0x18]
mov esi, ebx
push edi
mov dword [esp + 0x3c], eax
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
push dword [esp + 0x18]
mov ecx, dword [esp + 0x38]
push edi
mov esi, ebx
mov dword [eax + 0x100], ecx
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
mov edx, dword [esp + 0x20]
mov eax, dword [eax + 0x100]
mov ecx, dword [esp + 0xb8]
inc dword [esp + 0x20]
inc dword [esp + 0x18]
push edi
mov esi, ebx
mov dword [ecx + edx*4], eax
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
cmp dword [esp + 0x18], eax
jb 0x4348ff
mov eax, dword [0x457bec]
sub eax, dword [0x457be8]
push 0x24
cdq
pop ecx
idiv ecx
inc edi
cmp edi, eax
jb 0x43478e
mov edi, dword [esp + 0x2c]
push 0x457a84
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
imul edi, edi, 0x3e8
mov esi, eax
mov eax, dword [esp + 0x1e8]
add esi, edi
mov dword [esp + 0x34], esi
test eax, eax
je 0x434a33
dec eax
lea ecx, [esp + 0x1d4]
call fcn.00401a23
lea edx, [esp + 0x1d4]
lea ecx, [esp + 0xc0]
call fcn.0043599a
push eax
lea eax, [esp + 0x44]
push str.unchecked
push eax
mov byte [esp + 0x2fc], 0x9e
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0x9f
call fcn.0042560f
pop ecx
push 0
push 1
lea ecx, [esp + 0x48]
call fcn.0040173a
push 0
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x2f8], 0x9b
call fcn.0040173a
mov edi, 0x457a84
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x457c04]
sub eax, dword [0x457c00]
push 0x24
cdq
pop ecx
idiv ecx
mov ebx, 0x457bf4
test eax, eax
je 0x434c60
push 0
lea ecx, [esp + 0x160]
mov dword [esp + 0x178], 0xf
call fcn.00401801
mov byte [esp + 0x2f0], 0xa0
mov eax, dword [0x457c04]
sub eax, dword [0x457c00]
push 0x24
cdq
pop ecx
idiv ecx
and dword [esp + 0x2c], 0
test eax, eax
jbe 0x434bfa
push dword [esp + 0x2c]
and dword [esp + 0x1c], 0
mov esi, ebx
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
test eax, eax
jbe 0x434bd7
push dword [esp + 0x18]
mov esi, ebx
push dword [esp + 0x30]
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
mov edx, eax
add edx, 0x70
lea ecx, [esp + 0xc0]
call fcn.0043599a
push 0x449aac
push eax
lea eax, [esp + 0x48]
push eax
mov byte [esp + 0x2fc], 0xa1
call fcn.0040455a
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [esp + 0x164]
mov byte [esp + 0x2f8], 0xa2
call fcn.0040442e
push 0
push 1
lea ecx, [esp + 0x48]
call fcn.0040173a
push 0
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x2f8], 0xa0
call fcn.0040173a
push dword [esp + 0x2c]
inc dword [esp + 0x1c]
mov esi, ebx
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, 0x144
idiv ecx
cmp dword [esp + 0x18], eax
jb 0x434b29
mov eax, dword [0x457c04]
sub eax, dword [0x457c00]
push 0x24
cdq
pop ecx
idiv ecx
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], eax
jb 0x434afe
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x170]
test eax, eax
je 0x434c12
dec eax
lea ecx, [esp + 0x15c]
call fcn.00404f2d
lea eax, [esp + 0x15c]
push eax
lea eax, [esp + 0x44]
push str.products2
push eax
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0xa3
call fcn.0042560f
pop ecx
push 0
push 1
lea ecx, [esp + 0x48]
call fcn.0040173a
push 0
push 1
lea ecx, [esp + 0x164]
mov byte [esp + 0x2f8], 0x9b
call fcn.0040173a
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x457b34]
push 1
call fcn.00422703
call fcn.00422831
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub esi, eax
jns 0x434c86
xor esi, esi
jmp 0x434c93
mov eax, esi
xor edx, edx
mov ecx, 0x3e8
div ecx
mov esi, eax
and dword [esp + 0x1b0], 0
xor eax, eax
mov dword [esp + 0x1b4], 7
mov word [esp + 0x1a0], ax
push edi
mov byte [esp + 0x2f4], 0xa4
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x457c04]
sub eax, dword [0x457c00]
push 0x24
cdq
pop ecx
idiv ecx
test eax, eax
je 0x4350b2
mov dword [esp + 0x34], esi
lea esi, [esp + 0x24]
mov edi, ebx
mov byte [esp + 0x17], 1
call fcn.004052b3
mov ecx, dword [eax]
mov eax, dword [eax + 4]
lea esi, [esp + 0x18]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
call fcn.00405297
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
test ecx, ecx
je 0x434d19
cmp ecx, dword [esp + 0x2c]
je 0x434d1e
call fcn.004114ae
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x30]
je 0x434d87
lea esi, [esp + 0x24]
call fcn.004053ef
mov edi, eax
lea esi, [esp + 0x40]
call fcn.00404c0b
cmp byte [esp + 0x5c], 0
je 0x434d4d
cmp dword [esp + 0x60], 0x1f40
jl 0x434d6f
lea esi, [esp + 0x44]
call fcn.00405698
push dword [esp + 0x44]
call fcn.00410f30
pop ecx
lea esi, [esp + 0x24]
call fcn.00405374
mov ecx, dword [esp + 0x24]
jmp 0x434d0f
lea esi, [esp + 0x44]
mov byte [esp + 0x17], 0
call fcn.00405698
push dword [esp + 0x44]
call fcn.00410f30
pop ecx
mov eax, dword [0x457c04]
sub eax, dword [0x457c00]
push 0x24
cdq
pop ecx
idiv ecx
and dword [esp + 0x18], 0
test eax, eax
jbe 0x435033
mov edi, 0x144
push dword [esp + 0x18]
mov esi, ebx
call fcn.004052cf
and dword [esp + 0x2c], 0
cmp byte [eax + 0x1c], 0
push dword [esp + 0x18]
jne 0x434e6f
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, edi
idiv ecx
test eax, eax
jbe 0x435014
push 0x449aec
push dword [esp + 0x30]
mov esi, ebx
push dword [esp + 0x20]
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
add eax, 0x70
push eax
lea eax, [esp + 0x48]
push eax
call fcn.00403c02
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [esp + 0x1a4]
mov byte [esp + 0x2f8], 0xa5
call fcn.004028e7
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x2f8], 0xa4
call fcn.0040115a
push dword [esp + 0x18]
inc dword [esp + 0x30]
mov esi, ebx
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, edi
idiv ecx
cmp dword [esp + 0x2c], eax
jb 0x434de5
jmp 0x435014
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, edi
idiv ecx
cmp byte [esp + 0x17], 0
je 0x434f21
test eax, eax
jbe 0x435014
push 0x449aec
push dword [esp + 0x30]
mov esi, ebx
push dword [esp + 0x20]
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
add eax, 0x70
push eax
lea eax, [esp + 0x48]
push eax
call fcn.00403c02
add esp, 0xc
push 0xffffffffffffffff
push 0
lea esi, [esp + 0x1a4]
mov byte [esp + 0x2f8], 0xa6
call fcn.004028e7
push 0
push 1
lea esi, [esp + 0x48]
mov byte [esp + 0x2f8], 0xa4
call fcn.0040115a
push dword [esp + 0x18]
inc dword [esp + 0x30]
mov esi, ebx
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, edi
idiv ecx
cmp dword [esp + 0x2c], eax
jb 0x434e97
jmp 0x435014
test eax, eax
jbe 0x435014
call fcn.00422e5f
push 0xf
cdq
pop ecx
idiv ecx
push dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
push dword [esp + 0x1c]
mov esi, ebx
add edx, eax
mov dword [esp + 0x2c], edx
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
mov ecx, dword [esp + 0x24]
add dword [esp + 0x34], 0x3c
push 0
push 0
push dword [esp + 0x34]
mov esi, ebx
push dword [esp + 0x24]
mov dword [eax + 0x13c], ecx
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
push eax
push 0x430e1a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push dword [esp + 0x2c]
mov esi, ebx
push dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
push dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push dword [esp + 0x1c]
mov esi, ebx
mov dword [eax + 0x100], ecx
call fcn.004052cf
mov esi, eax
add esi, 4
call fcn.0040519c
mov edx, dword [esp + 0x20]
mov eax, dword [eax + 0x100]
mov ecx, dword [esp + 0xb8]
push dword [esp + 0x18]
inc dword [esp + 0x24]
inc dword [esp + 0x30]
mov esi, ebx
mov dword [ecx + edx*4], eax
call fcn.004052cf
mov ecx, eax
mov eax, dword [ecx + 0x14]
sub eax, dword [ecx + 0x10]
add ecx, 4
cdq
mov ecx, edi
idiv ecx
cmp dword [esp + 0x2c], eax
jb 0x434f29
mov eax, dword [0x457c04]
sub eax, dword [0x457c00]
push 0x24
cdq
pop ecx
idiv ecx
inc dword [esp + 0x18]
cmp dword [esp + 0x18], eax
jb 0x434daa
mov eax, dword [esp + 0x1b0]
test eax, eax
je 0x43504b
dec eax
lea ecx, [esp + 0x19c]
call fcn.00401a23
lea edx, [esp + 0x19c]
lea ecx, [esp + 0xc0]
call fcn.0043599a
push eax
lea eax, [esp + 0x44]
push str.unchecked2
push eax
mov byte [esp + 0x2fc], 0xa7
call fcn.0040450f
add esp, 0xc
push eax
mov byte [esp + 0x2f4], 0xa8
call fcn.0042560f
pop ecx
push 0
push 1
lea ecx, [esp + 0x48]
call fcn.0040173a
push 0
push 1
lea ecx, [esp + 0xc8]
mov byte [esp + 0x2f8], 0xa4
call fcn.0040173a
mov edi, 0x457a84
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [0x457a60]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [esp + 0xbc]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [0x457a0c]
call fcn.004114be
pop ecx
push dword [0x457a08]
call fcn.00410f30
mov esi, dword [sym.imp.USER32.dll_KillTimer]
pop ecx
push dword [0x4579fc]
push dword [0x457a00]
call esi
mov eax, dword [0x4579f8]
push dword [0x4579f0]
mov eax, dword [eax + 4]
push eax
call esi
xor esi, esi
cmp dword [esp + 0x1e8], esi
je 0x435145
push 1
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x44], esp
lea ecx, [esp + 0x1f4]
push ecx
push str._unchecked_install_products
push eax
call fcn.00403c93
add esp, 0xc
call fcn.0042ab7e
add esp, 0x20
cmp dword [esp + 0x1b0], esi
je 0x435177
push 1
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x44], esp
lea ecx, [esp + 0x1bc]
push ecx
push str._unchecked_install_products2
push eax
call fcn.00403c93
add esp, 0xc
call fcn.0042ab7e
add esp, 0x20
push 0xffffffffffffffff
push 1
push dword [esp + 0xc0]
push dword [esp + 0x2c]
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push dword [esp + 0xb8]
call fcn.00410f30
pop ecx
push 0xffffffffffffffff
push dword [esp + 0x40]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [esp + 0x3c]
call edi
push str.closed
lea ecx, [esp + 0x184]
call fcn.004018b3
lea eax, [esp + 0x180]
push eax
mov byte [esp + 0x2f4], 0xa9
call fcn.0042560f
pop ecx
push esi
push 1
lea ecx, [esp + 0x188]
mov byte [esp + 0x2f8], 0xa4
call fcn.0040173a
push dword [0x457a80]
call sub.gdiplus.dll_GdiplusShutdown
jmp 0x434300