Function at 0x71f5a1
Capabilities:
Get common file path
Get disk information
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov eax, 0x722fc7
call fcn.004d8f88
push ecx
mov eax, 0x27b0
call fcn.004d28e0
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc0], 0xf
mov dword [ebp - 0xc4], ebx
mov byte [ebp - 0xd4], bl
mov dword [ebp - 4], ebx
mov eax, dword [ebp + 0xc]
lea esi, [ebp - 0x27c0]
mov dword [edi + 0x2a70], eax
call fcn.0040101a
mov eax, 0x800
push eax
mov byte [ebp - 4], 1
lea esi, [edi + 0x126f]
push ebx
push esi
mov byte [ebp - 0x1698], bl
mov dword [ebp - 0x5c], eax
call fcn.004d1020
add esp, 0xc
cmp dword [edi + 0x2ab8], ebx
je 0x71f635
lea eax, [edi + 0x2aa8]
cmp dword [eax + 0x14], 0x10
jb 0x71f627
mov eax, dword [eax]
sub esi, eax
mov cl, byte [eax]
mov byte [esi + eax], cl
inc eax
cmp cl, bl
jne 0x71f629
jmp 0x71f653
lea eax, [ebp - 0x5c]
push eax
push esi
lea eax, [ebp - 0x98]
push eax
push str.campaign_check
push str.SoftwareNetsetterBundleInstallN
call fcn.0071a777
add esp, 0x14
cmp byte [edi + 0x126f], bl
jne 0x71f6ab
push str.ERROR__CheckCampaign:_Campaign_check_URL_is_empty._r_n
push bind
mov esi, edi
call fcn.007182d6
pop ecx
xor edi, edi
pop ecx
inc edi
push ebx
push 1
lea ecx, [ebp - 0x16b8]
call fcn.004010ac
lea esi, [ebp - 0x27c0]
call fcn.0040d2e8
push ebx
push 1
lea ecx, [ebp - 0xd4]
call fcn.004010ac
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0xc
add edi, 0x126e
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x71f6b1
mov eax, dword [ebp + 8]
push 0xd
pop ecx
mov esi, str._campaign_id_dtid_sos_type_dos_minor_dos_sp_d
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
add eax, 0x2b18
movsb byte es:[edi], byte [esi]
cmp dword [eax + 0x14], 0x10
jb 0x71f6d6
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x600]
push str.ver_smon__dmonver__stime__d
push eax
call fcn.004cc8e8
lea eax, [ebp - 0x600]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71f6f3
mov edi, dword [ebp + 8]
sub eax, edx
add edi, 0x126e
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x71f705
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x98]
push eax
and ecx, 3
push 0x7bb900
push str.SoftwareNetsetterBundleInstallN
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x5c], pe_nt_image_headers32
call fcn.0071a777
mov edx, dword [ebp + 8]
add esp, 0x14
test eax, eax
jne 0x71f791
lea edi, [edx + 0x126e]
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x71f755
mov esi, str.ip
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x500]
movsb byte es:[edi], byte [esi]
mov esi, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71f76c
sub eax, esi
lea edi, [edx + 0x126e]
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x71f77b
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [edx + 0x126e]
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x71f797
mov esi, str.exe_name
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [edx + 0x2ae0]
movsb byte es:[edi], byte [esi]
cmp dword [eax + 0x14], 0x10
jb 0x71f7b7
mov eax, dword [eax]
mov esi, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71f7b9
sub eax, esi
lea edi, [edx + 0x126e]
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x71f7c8
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x103
and ecx, 3
lea eax, [ebp - 0x1ef]
push ebx
rep movsb byte es:[edi], byte [esi]
push eax
mov byte [ebp - 0x1f0], bl
call fcn.004d1020
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1f0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x71f8a3
mov esi, 0x7bb918
lea eax, [ebp - 0x1f0]
push esi
push eax
call fcn.004cd0b0
pop ecx
pop ecx
test eax, eax
je 0x71f83d
lea eax, [ebp - 0x1f0]
push esi
push eax
call fcn.004cd0b0
pop ecx
pop ecx
mov byte [eax + 1], bl
push 0x104
lea eax, [ebp - 0x1f0]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x71f8a3
mov edi, dword [ebp + 8]
add edi, 0x126e
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x71f862
mov esi, str.fs
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1f0]
movsb byte es:[edi], byte [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71f879
mov edi, dword [ebp + 8]
sub eax, edx
add edi, 0x126e
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x71f88b
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp + 8]
lea eax, [esi + 0x35b8]
cmp dword [eax + 0x14], 0x10
jb 0x71f8b4
mov eax, dword [eax]
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x71f8c2
mov eax, dword [eax]
mov dword [ebp + 0x10], eax
lea edi, [esi + 0xa6f]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x35b0]
push eax
push dword [ebp + 0xc]
lea eax, [esi + 0x126f]
push dword [esi + 0x35b4]
push dword [esi + 0x2b54]
push dword [esi + 0x2b3c]
push dword [esi + 0x2b38]
push dword [ebp + 0x10]
push dword [esi + 0x2a70]
push eax
push edi
call fcn.004cc8e8
add esp, 0x28
cmp dword [esi + 0x2a9c], ebx
je 0x71fc2b
lea eax, [esi + 0x2a8c]
cmp dword [eax + 0x14], 0x10
jb 0x71f926
mov eax, dword [eax]
lea ecx, [ebp - 0x58]
push ecx
push eax
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x71fc2b
push 0x104
lea eax, [ebp - 0x400]
push eax
push ebx
push dword [ebp - 0x58]
xor edi, edi
inc edi
mov dword [ebp - 0x38], edi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x71fbcc
mov eax, dword [ebp + 8]
add eax, 0x2a8c
cmp dword [eax + 0x14], 0x10
jb 0x71f972
mov eax, dword [eax]
lea edx, [ebp - 0x2f8]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x71f97a
lea edi, [ebp - 0x2f8]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x71f98b
mov esi, 0x7bb918
lea eax, [ebp - 0x400]
movsw word es:[edi], word [esi]
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71f9a2
lea edi, [ebp - 0x2f8]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x71f9b2
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2f8]
push eax
and ecx, 3
push reloc.WSOCK32.dll_bind
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x71fba2
push ebx
push ebx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x34]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x10], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x3c], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
test eax, eax
jne 0x71fb6f
cmp dword [ebp - 0x4c], ebx
je 0x71fb6f
mov eax, dword [ebp - 0x54]
cmp eax, ebx
je 0x71fb6f
cmp dword [ebp - 0x3c], ebx
je 0x71fb6f
mov esi, 0x7ccafa
inc eax
push esi
push eax
call fcn.004cc82c
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0x3c]
inc eax
push esi
push eax
call fcn.004cc82c
mov ecx, dword [ebp - 0x3c]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x54]
lea eax, [ecx + eax + 0xa]
push esi
push eax
call fcn.004cc82c
add esp, 0x18
mov dword [ebp - 0x30], eax
cmp dword [ebp + 0xc], ebx
je 0x71fb6f
cmp dword [ebp + 0x10], ebx
je 0x71fb6f
cmp eax, ebx
je 0x71fb6f
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x4c], ebx
jbe 0x71fb6f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp + 0x10]
lea eax, [ebp - 0x40]
push eax
push ebx
lea eax, [ebp - 0x44]
push eax
push dword [ebp + 0xc]
push dword [ebp - 0x50]
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cmp eax, ebx
jne 0x71fb60
cmp dword [ebp - 0x40], 1
jne 0x71fae5
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push str._s_s
jmp 0x71faf8
cmp dword [ebp - 0x40], 4
jne 0x71fb60
mov eax, dword [ebp + 0x10]
push dword [eax]
push dword [ebp + 0xc]
push str._s_d
push dword [ebp - 0x30]
call fcn.004cc8e8
mov eax, dword [ebp + 8]
add esp, 0x10
add eax, 0xa6f
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71fb0e
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x30]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71fb1f
sub eax, esi
add eax, edi
cmp eax, 0x800
jae 0x71fb60
mov eax, dword [ebp - 0x30]
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71fb36
mov edi, dword [ebp + 8]
sub eax, edx
add edi, 0xa6e
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x71fb48
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
inc dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x4c]
jb 0x71fa9d
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp + 0xc], ebx
je 0x71fb86
push dword [ebp + 0xc]
call fcn.004cd612
pop ecx
cmp dword [ebp + 0x10], ebx
je 0x71fb94
push dword [ebp + 0x10]
call fcn.004cd612
pop ecx
cmp dword [ebp - 0x30], ebx
je 0x71fba2
push dword [ebp - 0x30]
call fcn.004cd612
pop ecx
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x38]
push 0x104
lea ecx, [ebp - 0x400]
push ecx
push eax
push dword [ebp - 0x58]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x71f962
mov esi, dword [ebp + 8]
xor edi, edi
inc edi
push dword [ebp - 0x58]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esi + 0x2a8c]
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x71fbe7
mov eax, dword [eax]
push eax
push reloc.WSOCK32.dll_bind
lea ecx, [ebp - 0xb8]
call fcn.004c50f1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 3
call fcn.004c5af3
push ebx
push edi
lea ecx, [ebp - 0xb4]
call fcn.004010ac
mov dword [ebp - 4], edi
jmp 0x71fc2b
lea edi, [esi + 0xa6f]
push edi
push str.Installer:_Checking_for_campaign_status:__s_r_n
push bind
call fcn.007182d6
add esp, 0xc
mov eax, str.surveytrue
cmp byte [esi + 0x35a8], bl
jne 0x71fc56
mov eax, str.surveyfalse
push eax
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x80], 0xf
mov dword [ebp - 0x84], ebx
mov byte [ebp - 0x94], bl
call fcn.004019e8
mov eax, edi
mov byte [ebp - 4], 5
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71fc7e
mov ecx, dword [ebp - 0x84]
sub eax, edi
add ecx, eax
cmp ecx, 0x800
jae 0x71fcd2
cmp dword [ebp - 0x80], 0x10
mov eax, dword [ebp - 0x94]
jae 0x71fca9
lea eax, [ebp - 0x94]
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x71fcab
sub eax, edx
lea edi, [esi + 0xa6e]
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x71fcba
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 8]
add eax, 0xa6f
push eax
lea edi, [ebp - 0x1698]
call fcn.007199c2
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp + 0xc]
push eax
mov eax, edi
push eax
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x34]
call fcn.007199db
push dword [ebp - 0xc4]
lea eax, [ebp - 0xe00]
push str.Content_Type:_application_x_www_form_urlencoded_r_nContent_Length:__d_r_n_r_n
push eax
mov dword [ebp - 0xdc], 0x7b7330
mov dword [ebp - 0xd8], ebx
call fcn.004cc8e8
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x44]
sub eax, 0x50
add esp, 0xc
neg eax
sbb eax, eax
and eax, 0x801000
mov dword [ebp + 0x10], 0xfa0
mov dword [ebp + 0xc], ebx
mov dword [ebp - 0x40], eax
jmp 0x71fd4a
mov eax, dword [ebp - 0x40]
cmp dword [ebp + 0xc], ebx
jbe 0x71fd83
mov edi, dword [ebp + 0x10]
xor edx, edx
mov ecx, 0x3e8
mov eax, edi
div ecx
mov esi, dword [ebp + 8]
push eax
push str.Installer:_CheckCampaign:_Sleeping_for__d_seconds_r_n
push bind
call fcn.007182d6
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [edi + edi]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xc0], 0x10
mov ecx, dword [ebp - 0xd4]
jae 0x71fd98
lea ecx, [ebp - 0xd4]
lea edx, [ebp - 0xdc]
push edx
push eax
push dword [ebp - 0xc4]
lea eax, [ebp - 0xe00]
push ecx
push dword [ebp - 0x48]
push eax
push str.POST
push dword [ebp - 0x38]
lea eax, [ebp - 0x27c0]
push dword [ebp - 0x44]
push dword [ebp - 0x34]
call fcn.00717cad
cmp eax, ebx
jne 0x71ff16
mov edi, dword [ebp + 8]
push str.Installer:_POST_REQUEST:_r_n
push bind
mov esi, edi
call fcn.007182d6
lea eax, [ebp - 0xe00]
push eax
push str._s_r_n
push bind
call fcn.007182d6
mov eax, dword [ebp - 0xd4]
add esp, 0x14
cmp dword [ebp - 0xc0], 0x10
jae 0x71fe14
lea eax, [ebp - 0xd4]
push eax
push str._s_r_n
push bind
call fcn.007182d6
add esp, 0xc
push str._________r_n
push bind
call fcn.007182d6
mov eax, dword [ebp - 0x27b8]
pop ecx
pop ecx
cmp eax, 2
jae 0x71fe68
mov eax, dword [ebp - 0x27c0]
cmp byte [eax], 0x31
je 0x71ff41
push str.Installer:_Campaign_is_no_longer_active_r_n
push bind
call fcn.007182d6
pop ecx
pop ecx
jmp 0x71ff2c
cmp eax, 4
jbe 0x71ff2c
add eax, 0xfffffffc
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x27c0]
mov dword [ebp + 0xc], eax
cmp dword [edi + 0x35ac], ebx
je 0x71fea1
push eax
push dword [ebp - 0x1810]
push str.CheckCampaign_HTTP_code:__d__response:__s_r_n
push bind
call fcn.007182d6
add esp, 0x10
push dword [ebp + 0x10]
add dword [ebp + 0xc], 4
push dword [ebp + 0xc]
lea ecx, [ebp - 0x78]
call fcn.00401752
mov byte [ebp - 4], 6
push 0xe
push str.UpgradePackage
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
lea esi, [edi + 0x31a8]
push eax
mov ecx, 0x400
mov byte [ebp - 4], 7
mov dword [ebp + 0x10], esi
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
mov eax, esi
cmp byte [eax], bl
je 0x71ff67
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.004010ac
jmp 0x71ff52
mov esi, dword [ebp + 8]
push eax
push str.Installer:_failed_to_make_http_request._Returned_value:__d_r_n
push bind
call fcn.007182d6
add esp, 0xc
inc dword [ebp + 0xc]
cmp dword [ebp + 0xc], 5
jb 0x71fd47
xor edi, edi
inc edi
jmp 0x71ffd9
push str.Installer:_Campaign_is_still_active_r_n
push bind
call fcn.007182d6
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.004010ac
xor edi, edi
jmp 0x71f671
push 6
push str.Status
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
push 0xa
pop ecx
lea esi, [ebp - 0xe8]
mov byte [ebp - 4], 8
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
mov al, byte [ebp - 0xe8]
cmp al, 0x31
je 0x71fff4
cmp al, 0x33
je 0x71fff4
cmp al, 0x35
je 0x71fff4
cmp al, 0x32
je 0x71ffeb
cmp al, 0x34
je 0x71ffeb
cmp al, 0x36
je 0x71ffeb
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x78]
call fcn.004010ac
push ebx
push edi
lea ecx, [ebp - 0x94]
call fcn.004010ac
jmp 0x71f671
mov byte [edi + 0x3190], 1
jmp 0x71fffa
mov byte [edi + 0x3190], bl
push 0xc
push str.Landing_Page
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
lea esi, [edi + 0x3088]
push eax
mov ecx, pe_nt_image_headers32
mov byte [ebp - 4], 9
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 4
push str.BIDC
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
push 0x17
lea esi, [edi + 0x954]
pop ecx
mov byte [ebp - 4], 0xa
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 3
push 0x7bbaa4
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0xb
call fcn.0071f4e8
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x7200c9
mov eax, dword [eax]
push eax
call fcn.004cd3f7
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov dword [edi + 0x2a74], eax
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 0xf
pop esi
push 4
push str.left
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0xc
call fcn.0071f4e8
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x720131
mov eax, dword [eax]
push eax
call fcn.004cd3f7
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov dword [edi + 0x2a78], eax
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 5
push str.width
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0xd
call fcn.0071f4e8
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x720196
mov eax, dword [eax]
push eax
call fcn.004cd3f7
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov dword [edi + 0x2a7c], eax
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 6
push str.height
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0xe
call fcn.0071f4e8
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x7201fb
mov eax, dword [eax]
push eax
call fcn.004cd3f7
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov dword [edi + 0x2a80], eax
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 8
push str.minimize
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0xf
call fcn.0071f4e8
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x720260
mov eax, dword [eax]
push eax
call fcn.004cd3f7
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov dword [edi + 0x2a84], eax
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 5
push str.sleep
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0x10
call fcn.0071f4e8
add esp, 0xc
cmp dword [eax + 0x14], 0x10
jb 0x7202c5
mov eax, dword [eax]
push eax
call fcn.004cd3f7
pop ecx
mov ecx, dword [ebp + 8]
push ebx
mov dword [ecx + 0x2a88], eax
push 1
lea ecx, [ebp - 0xb4]
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 0xf
pop edi
push 0xc
push str.Package_Name
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
mov esi, dword [ebp + 0x10]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
mov ecx, 0x400
mov byte [ebp - 4], 0x11
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push edi
push str.Preinstall_Page
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
add esi, 0x1a6f
push eax
mov ecx, 0x800
mov byte [ebp - 4], 0x12
mov dword [ebp + 0x10], esi
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 0xe
push str.Uninstall_Page
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
add esi, 0x226f
push eax
mov ecx, 0x800
mov byte [ebp - 4], 0x13
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004010ac
push 0xb
xor eax, eax
mov byte [ebp + 0xc], bl
lea edi, [ebp + 0xd]
push str.POST_ACTION
lea ecx, [ebp - 0x2c]
stosb byte es:[edi], al
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.00401974
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x78]
push eax
push 2
pop ecx
lea esi, [ebp + 0xc]
mov byte [ebp - 4], 0x14
call fcn.0071f530
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.004010ac
cmp byte [ebp + 0xc], 0x31
jne 0x71ff09
mov eax, dword [ebp + 0x10]
push ebx
lea ecx, [ebp - 0x78]
push 1
cmp byte [eax], bl
jne 0x720444
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.004010ac
or edi, 0xffffffff
jmp 0x71f671
call fcn.004010ac
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.004010ac
push 0xfffffffffffffffe
pop edi
jmp 0x71f671