Function at 0x492190
Capabilities:
Check for time delay via gettickcount
Check os version

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1344
call fcn.004a9b70
mov eax, dword [0x4c32cc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push str.VerifyData
mov esi, str.PART_1___BEGIN
call fcn.0047fb10
xor edi, edi
add esp, 4
cmp dword [0x4d2a60], edi
jne 0x4941c8
cmp dword [0x4d2b00], edi
je 0x4921e9
push str.VerifyData
mov esi, str.A_WinPatol_Msg_is_already_Open
call fcn.0047fb10
add esp, 4
jmp 0x4941c8
cmp dword [0x4d2a88], edi
je 0x492208
push str.VerifyData
mov esi, str.Currently_in_the_process_of_testing_for_a_change
call fcn.0047fb10
add esp, 4
jmp 0x4941c8
mov dword [0x4d2a88], 1
call fcn.0049ff10
cmp eax, 5
jge 0x49224b
push eax
push str.User_Busy_Mode___d
lea eax, [ebp - 0xc20]
push 0x100
push eax
call fcn.00402830
push str.VerifyData
lea esi, [ebp - 0xc20]
call fcn.0047fb10
add esp, 0x14
jmp 0x4941c2
cmp dword [0x4c7a94], edi
jne 0x492288
push str.VerifyData
mov esi, str.System_Tray_Initially_Failed_so_we_try_again
call fcn.0047fb10
add esp, 4
cmp dword [0x4d2b10], edi
je 0x492288
push 0x334
mov ecx, 0x65
xor ebx, ebx
call fcn.0049ef30
add esp, 4
mov dword [0x4c7a94], eax
xor edi, edi
push str.VerifyData
mov esi, str.PART_2__GET_TICKCOUNT
mov dword [0x4cd270], edi
mov dword [0x4cd38c], edi
call fcn.0047fb10
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 4
call ebx
mov ecx, eax
sub ecx, dword [0x4d19b4]
mov dword [0x4c79d8], eax
mov dword [0x4d19b4], eax
cmp ecx, 0x1f4
jae 0x49230d
push eax
push eax
push ecx
push str.Time_under_1000__Past___d___TimeStart___d___LastStart___d
lea ecx, [ebp - 0xc20]
push 0x100
push ecx
call fcn.00402830
push str.VerifyData:___Just_did_verify_so_wait_a_millisecond
lea esi, [ebp - 0xc20]
call fcn.0047fb10
add esp, 0x1c
mov dword [0x4d2a88], edi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a01d6
mov esp, ebp
pop ebp
ret
push 0x1f40001
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push edi
push str.Update
mov dword [ebp - 0x1344], eax
call fcn.0049a190
add esp, 8
mov dword [ebp - 0x1330], eax
cmp eax, edi
je 0x4923a1
call fcn.00498740
push str.Update
push str.SoftwareBillP_StudiosWinPatrolOptions
mov ecx, 0x4b7398
mov edx, 0x80000001
call fcn.0048e390
push edi
push str.XPUpdates
call fcn.0049a190
add esp, 0x10
cmp eax, edi
jle 0x49236b
mov dword [0x4d2a68], eax
cmp dword [0x4d2a68], edi
jle 0x492385
push str.VERIFY
mov esi, str.WinPatrol_PLUS_Activated
call fcn.0047fb10
add esp, 4
mov eax, str.XPUpdates
mov edi, str.SoftwareBillP_StudiosWinPatrolOptions
mov ebx, 0x80000001
call fcn.0048e230
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edi, edi
mov ecx, dword [0x4d2aa4]
mov dword [0x4d2a64], edi
cmp ecx, edi
jge 0x4923cb
push str.AlertCount
mov esi, str.Less_than_zero
call fcn.0047fb10
add esp, 4
xor ecx, ecx
mov dword [0x4d2aa4], ecx
mov eax, 1
cmp dword [0x4c6428], eax
jne 0x4923ef
cmp ecx, edi
jle 0x4923ef
cmp dword [0x4c642c], 6
je 0x4923ea
mov eax, 2
call fcn.004970d0
cmp dword [0x4d2aa4], edi
jge 0x49240f
push str.AlERTCOUNT
mov esi, str.Less_than_zero
call fcn.0047fb10
add esp, 4
mov dword [0x4d2aa4], edi
call ebx
push str.VerifyData
mov esi, str.PART_3__UNINSTALL_and_MISSING_RUN
mov dword [ebp - 0x1340], eax
call fcn.0047fb10
add esp, 4
cmp dword [0x4d2a68], edi
je 0x492443
call fcn.00497310
cmp dword [0x4cd37c], edi
je 0x492443
call fcn.0049f610
cmp dword [0x4c79d4], edi
je 0x492450
call fcn.0049fb40
push str.VerifyData
mov esi, str.PART_4___STARTUP
call fcn.0047fb10
add esp, 4
push 0x335
mov ecx, 0x12e
call fcn.00495c90
mov eax, dword [0x4d1bc4]
add esp, 4
cmp eax, edi
jle 0x492cc4
dec eax
mov dword [0x4d1bc4], eax
cmp eax, 1
jge 0x492cc4
mov edx, dword [0x4c729c]
push str.FileExists
mov esi, str.CheckforRunChanges
mov dword [0x4d1bc4], edx
call fcn.0047fb10
add esp, 4
call fcn.00495db0
test eax, eax
je 0x492cc4
call ebx
mov dword [ebp - 0x132c], edi
cmp dword [0x4cd38c], edi
jle 0x492cc4
nop
mov ebx, dword [ebp - 0x132c]
lea esi, [ebp - 0x190]
mov edi, ebx
call fcn.0048fb30
lea eax, [ebp - 0x318]
push eax
mov edi, esi
call fcn.0047f640
add esp, 4
mov esi, ebx
call fcn.0048fc60
push 0x20
lea ecx, [ebp - 0x318]
push ecx
push str.SoftwareBillP_StudiosWinPatrolRun
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
je 0x49252d
lea edx, [ebp - 0x24]
push edx
call fcn.004a02f9
add esp, 4
test eax, eax
jne 0x492570
mov eax, dword [ebp - 0x132c]
push eax
lea ebx, [ebp - 0x920]
call fcn.0048fac0
add esp, 4
push 0x20
mov ecx, ebx
push ecx
push str.SoftwareBillP_StudiosWinPatrolRun
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
je 0x492799
lea edx, [ebp - 0x24]
push edx
call fcn.004a02f9
add esp, 4
cmp eax, 0x44f
jne 0x492791
mov esi, dword [ebp - 0x132c]
mov edi, 1
mov dword [0x4cd270], edi
call fcn.0048fc90
push esi
lea ebx, [ebp - 0x920]
mov dword [0x4c7290], eax
call fcn.0048fac0
add esp, 4
push esi
lea ebx, [ebp - 0xf28]
call fcn.0048fbf0
add esp, 4
lea eax, [ebp - 0x190]
push eax
mov edx, 0x7ffffffe
mov eax, 0x104
mov ecx, 0x4cc358
call fcn.00401000
xor ebx, ebx
cmp dword [0x4c644c], ebx
je 0x4925e1
cmp dword [0x4d2b24], ebx
je 0x492620
mov ecx, dword [0x4c78c4]
mov edx, dword [0x4cbe20]
push ebx
push 0x4782e0
push ecx
push 0xc0
push edx
mov dword [0x4d2b00], edi
mov dword [0x4cc988], esi
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov ecx, dword [0x4cc988]
mov dword [ebp - 0x1330], eax
mov dword [ebp - 0x132c], ecx
jmp 0x492626
mov eax, dword [ebp - 0x1330]
mov byte [0x4cc358], bl
cmp eax, 6
jne 0x4926d5
mov edx, dword [0x4c7290]
push edx
push 0x4b7c94
lea eax, [ebp - 0x24]
push 0x20
push eax
call fcn.00402830
add esp, 0x10
lea ecx, [ebp - 0x190]
push ecx
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0x318]
call fcn.00401000
lea edx, [ebp - 0x190]
push edx
lea edi, [ebp - 0x318]
call fcn.0047f640
add esp, 4
lea eax, [ebp - 0x190]
push eax
push str.SoftwareBillP_StudiosWinPatrolRun
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
cmp dword [0x4c7290], 0xa
lea eax, [ebp - 0x190]
jle 0x4926c0
mov ecx, 0x80000001
call fcn.0049bc70
mov dword [0x4d2b00], ebx
jmp 0x492c76
mov ecx, 0x80000002
call fcn.0049bc70
mov dword [0x4d2b00], ebx
jmp 0x492c76
cmp eax, 7
jne 0x492786
mov ecx, dword [0x4c7290]
push ecx
push 0x4b7c94
lea edx, [ebp - 0x24]
push 0x20
push edx
call fcn.00402830
add esp, 0x10
lea eax, [ebp - 0x190]
push eax
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0x318]
call fcn.00401000
lea ecx, [ebp - 0x190]
push ecx
lea edi, [ebp - 0x318]
call fcn.0047f640
add esp, 4
lea edx, [ebp - 0x190]
push edx
push str.SoftwareBillP_StudiosWinPatrolRun
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e390
push 0x20
lea eax, [ebp - 0x920]
push eax
push 0x4bb720
lea ecx, [ebp - 0x24]
mov edx, 0x80000002
call fcn.0048e050
add esp, 0x14
test eax, eax
jne 0x492786
mov ecx, dword [0x4c7290]
push ecx
lea edx, [ebp - 0xf28]
push edx
lea edx, [ebp - 0x190]
lea ecx, [ebp - 0x920]
call fcn.00489540
add esp, 8
mov dword [0x4d2b00], ebx
jmp 0x492c76
test eax, eax
jne 0x492c76
mov esi, dword [ebp - 0x132c]
call fcn.0048fc90
mov dword [0x4c7290], eax
lea eax, [ebp - 0x190]
push eax
mov edx, 0x7ffffffe
mov eax, 0x104
mov ecx, 0x4cc358
call fcn.00401000
push esi
lea ebx, [ebp - 0x920]
call fcn.0048fac0
add esp, 4
mov ecx, ebx
push ecx
mov edx, 0x7ffffffe
mov eax, 0x104
mov ecx, 0x4c72a0
call fcn.00401000
mov edx, str.McAfee_Application_Installer_Cleanup
mov ecx, ebx
call fcn.0047dee0
test eax, eax
jne 0x492c76
mov edx, str.McInst
mov ecx, ebx
call fcn.0047dee0
test eax, eax
jne 0x492c76
mov edx, 0x4bbc38
mov ecx, ebx
call fcn.0047dee0
test eax, eax
jne 0x492c76
cmp dword [0x4c6474], eax
je 0x492860
mov eax, dword [0x4c7290]
cmp eax, 2
je 0x492cc4
cmp eax, 3
je 0x492cc4
cmp eax, 0xc
je 0x492cc4
cmp eax, 0xd
je 0x492cc4
cmp eax, 0x16
je 0x492cc4
mov esi, dword [ebp - 0x132c]
push esi
lea ebx, [ebp - 0xf28]
call fcn.0048fbf0
add esp, 4
mov edx, ebx
push edx
mov edx, 0x7ffffffe
mov eax, 0x104
mov ecx, 0x4cd278
call fcn.00401000
call fcn.0048fc90
mov edi, str.SoftwareBillP_StudiosDetectedStartup
lea ebx, [ebp - 0x190]
mov dword [ebp - 0x1338], eax
call fcn.0049b470
push 0x20
lea eax, [ebp - 0x920]
push eax
push 0x4bb720
lea ecx, [ebp - 0x24]
mov edx, 0x80000002
call fcn.0048e050
add esp, 0xc
test eax, eax
jne 0x492c91
push 0x335
mov ecx, 0x12e
call fcn.00495c90
mov ecx, dword [0x4c7290]
add esp, 4
push ecx
push 0x4b7c94
lea edx, [ebp - 0x24]
push 0x20
mov edi, 1
push edx
mov dword [0x4cd270], edi
call fcn.00402830
add esp, 0x10
push 0x4cc358
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0xd28]
call fcn.00401000
push 0x4c72a0
mov edx, 0x7ffffffe
lea eax, [edi + 0x7f]
lea ecx, [ebp - 0x210]
call fcn.00401000
lea eax, [ebp - 0x24]
push eax
mov edx, 0x7ffffffe
lea eax, [edi + 0x1f]
lea ecx, [ebp - 0x44]
call fcn.00401000
mov edx, dword [0x4c6444]
lea ecx, [ebp - 0x133c]
push ecx
push edx
push 0
push str.SoftwareBillP_StudiosWinPatrolRejects
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4929bf
push 0x4cc358
lea esi, [ebp - 0x133c]
call fcn.0048e640
add esp, 4
cmp eax, 2
jbe 0x4929bf
push 0x4c72a0
mov esi, 0x4cc358
call fcn.004877c0
mov ecx, dword [ebp - 0x1338]
add esp, 4
lea eax, [ebp - 0xf28]
push eax
push esi
mov edx, 0x4c72a0
call fcn.00489e90
add esp, 8
mov dword [ebp - 0x1330], 0xb
jmp 0x492a1e
cmp dword [0x4c644c], 0
je 0x4929d1
cmp dword [0x4d2b24], 0
je 0x492a1e
mov edx, dword [0x4c78c4]
mov eax, dword [0x4cbe20]
mov ecx, dword [ebp - 0x132c]
push 0
push 0x477500
push edx
push 0x83
push eax
mov dword [0x4d2b00], edi
mov dword [0x4cc988], ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov ecx, dword [0x4cc988]
mov dword [ebp - 0x1330], eax
mov dword [ebp - 0x132c], ecx
mov dword [0x4d2b00], 0
mov eax, dword [ebp - 0x1330]
sub eax, 6
je 0x492bd3
sub eax, edi
je 0x492b7f
sub eax, 4
jne 0x492c76
mov esi, dword [ebp - 0x132c]
call fcn.0048fc90
mov ebx, eax
push ebx
push 0x4b7c94
lea edx, [ebp - 0x24]
push 0x20
push edx
mov dword [ebp - 0x1338], ebx
call fcn.00402830
add esp, 0x10
lea eax, [ebp - 0xd28]
push eax
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0x318]
call fcn.00401000
lea ecx, [ebp - 0x190]
push ecx
lea edi, [ebp - 0x318]
call fcn.0047f640
lea edx, [ebp - 0x210]
add esp, 4
push edx
lea esi, [ebp - 0x190]
call fcn.004877c0
add esp, 4
lea eax, [ebp - 0xf28]
push eax
mov ecx, esi
push ecx
mov ecx, ebx
mov edx, 0x4c72a0
call fcn.00489e90
add esp, 8
mov eax, esi
mov edi, str.SoftwareBillP_StudiosWinPatrolRun
mov ebx, 0x80000001
call fcn.0048e230
lea eax, [ebp - 0x210]
call fcn.0048e230
mov eax, dword [0x4c6444]
lea edx, [ebp - 0x1334]
push edx
push eax
push 0
push str.SoftwareBillP_StudiosWinPatrolRejects
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x492b68
mov ecx, esi
push ecx
lea esi, [ebp - 0x1334]
call fcn.0048e640
add esp, 4
cmp eax, 2
jbe 0x492b68
push str.Repeating_program
lea esi, [ebp - 0x210]
call fcn.0047fb10
add esp, 4
push 0x20
mov edx, esi
push edx
push 0x4bb720
lea ecx, [ebp - 0x24]
lea edx, [ebx + 1]
call fcn.0048e050
add esp, 0xc
test eax, eax
jne 0x492c76
mov eax, dword [ebp - 0x1338]
push eax
lea ecx, [ebp - 0xf28]
push ecx
lea edx, [ebp - 0x190]
mov ecx, esi
call fcn.00489540
jmp 0x492c73
push 0x334
mov ecx, 0x65
call fcn.00495c90
add esp, 4
jmp 0x492c76
lea edx, [ebp - 0x210]
push edx
lea esi, [ebp - 0xd28]
call fcn.004877c0
add esp, 4
lea eax, [ebp - 0xf28]
push eax
mov ecx, esi
push ecx
mov ecx, dword [0x4c7290]
lea edx, [ebp - 0x210]
call fcn.00489e90
add esp, 8
mov eax, esi
mov edi, str.SoftwareBillP_StudiosWinPatrolRun
mov ebx, 0x80000001
call fcn.0048e230
lea eax, [ebp - 0x210]
call fcn.0048e230
jmp 0x492c76
mov esi, dword [ebp - 0x132c]
call fcn.0048fc90
push eax
push 0x4b7c94
lea edx, [ebp - 0x24]
push 0x20
push edx
call fcn.00402830
add esp, 0x10
lea eax, [ebp - 0xd28]
push eax
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0x318]
call fcn.00401000
lea ecx, [ebp - 0x190]
push ecx
lea edi, [ebp - 0x318]
call fcn.0047f640
add esp, 4
lea edx, [ebp - 0x190]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 4
jge 0x492c5a
push str.SETWINPATROLRUN
lea esi, [ebp - 0x190]
call fcn.0047fb10
lea eax, [ebp - 0x920]
add esp, 4
push eax
lea esi, [ebp - 0x24]
call fcn.0047fb10
add esp, 4
lea ecx, [ebp - 0x190]
push ecx
push str.SoftwareBillP_StudiosWinPatrolRun
lea ecx, [ebp - 0x44]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
mov eax, dword [ebp - 0x132c]
inc eax
mov dword [ebp - 0x132c], eax
cmp eax, dword [0x4cd38c]
jl 0x4924d0
jmp 0x492cc4
lea edx, [ebp - 0x920]
push edx
lea esi, [ebp - 0x318]
call fcn.004877c0
add esp, 4
lea eax, [ebp - 0xf28]
push eax
mov ecx, esi
push ecx
mov ecx, dword [ebp - 0x1338]
lea edx, [ebp - 0x920]
call fcn.00489e90
add esp, 8
push 0x338
mov ecx, 0x12e
mov ebx, 1
call fcn.00495c90
add esp, 4
push str.VerifyData
mov esi, str.PART_5__START_REGOPTIONS
call fcn.0047fb10
add esp, 4
cmp dword [0x4d2a68], 0
je 0x492d17
mov eax, dword [0x4cd380]
sub eax, ebx
mov dword [0x4cd380], eax
cmp eax, ebx
jge 0x492d17
mov edx, dword [0x4cc87c]
mov dword [0x4cd380], edx
call fcn.00494e50
push str.VerifyData
mov esi, str.PART_6
call fcn.0047fb10
mov eax, dword [0x4d16ac]
add esp, 4
test eax, eax
jle 0x492d4c
sub eax, ebx
mov dword [0x4d16ac], eax
cmp eax, ebx
jge 0x492d4c
mov eax, dword [0x4cc350]
mov dword [0x4d16ac], eax
call fcn.00494940
push str.VerifyData
mov esi, str.PART_7_HIDDEN
call fcn.0047fb10
mov eax, dword [0x4c7258]
add esp, 4
test eax, eax
jle 0x492d83
sub eax, ebx
mov dword [0x4c7258], eax
cmp eax, ebx
jge 0x492d83
mov ecx, dword [0x4c78c0]
mov dword [0x4c7258], ecx
call fcn.00495510
push str.VerifyData
mov esi, str.PART_8_ACTIVEX
call fcn.0047fb10
add esp, 4
cmp dword [0x4d2a68], 0
je 0x492dc3
mov eax, dword [0x4c723c]
test eax, eax
jle 0x492dc3
sub eax, ebx
mov dword [0x4c723c], eax
cmp eax, ebx
jge 0x492dc3
mov edx, dword [0x4c7abc]
mov dword [0x4c723c], edx
call fcn.00495850
push str.VerifyData
mov esi, str.PART_9_SYSTEM_AUTOUPDATES_HOSTS
call fcn.0047fb10
mov eax, dword [0x4cd1ec]
add esp, 4
test eax, eax
jle 0x492e06
sub eax, ebx
mov dword [0x4cd1ec], eax
cmp eax, ebx
jge 0x492e06
mov eax, dword [0x4cd384]
mov dword [0x4cd1ec], eax
call fcn.0049a060
test eax, eax
jne 0x492e01
call fcn.00496380
call fcn.00496b30
push str.VerifyData
mov esi, str.PART_10__START_PAGE
call fcn.0047fb10
mov eax, dword [0x4c7284]
add esp, 4
test eax, eax
jle 0x49352a
sub eax, ebx
mov dword [0x4c7284], eax
cmp eax, ebx
jge 0x49352a
mov ecx, dword [0x4cc9b4]
mov dword [0x4c7284], ecx
push 0x80
lea edx, [ebp - 0x3a0]
mov ecx, 0x26f
call fcn.00499890
add esp, 4
push 0x20
lea edx, [ebp - 0x68]
mov ecx, 0x270
call fcn.00499890
add esp, 4
push 0x200
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x3a0]
push eax
lea ecx, [ebp - 0x720]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
push str.Start_Page
lea esi, [ebp - 0x720]
call fcn.0047fb10
add esp, 4
push 0x200
push str.StartPage
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0xb20]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
mov ecx, esi
test eax, eax
jne 0x492ee4
push str.StartPage
push str.SoftwareBillP_StudiosWinPatrol
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x49308d
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push ecx
call esi
cmp byte [ebp + eax - 0x721], 0x2f
lea eax, [ebp + eax - 0x721]
jne 0x492f01
mov byte [eax], 0
lea edx, [ebp - 0xb20]
push edx
call esi
cmp byte [ebp + eax - 0xb21], 0x2f
lea eax, [ebp + eax - 0xb21]
jne 0x492f1e
mov byte [eax], 0
lea eax, [ebp - 0xb20]
push eax
lea ecx, [ebp - 0x720]
push ecx
call fcn.00483b10
test eax, eax
je 0x49308d
push 0x33d
mov ecx, 0x12e
call fcn.00495c90
add esp, 4
push 0x200
lea edx, [ebp - 0x1328]
mov ecx, 0x271
call fcn.00499890
add esp, 4
lea edx, [ebp - 0xb20]
push edx
lea eax, [ebp - 0x720]
push eax
lea ecx, [ebp - 0x1328]
push ecx
push 0x800
push 0x4cc9b8
call fcn.00402830
add esp, 0x14
push 0x200
mov edx, 0x4cbbe0
mov ecx, 0x270
call fcn.00499890
mov eax, dword [0x4c6468]
add esp, 4
mov dword [0x4cd270], ebx
test eax, eax
je 0x492fc5
cmp dword [0x4d2b24], 0
jne 0x492fc5
xor edx, edx
cmp eax, ebx
setne dl
lea esi, [edx + 6]
jmp 0x493021
push 0xc
mov dword [0x4d2a64], 0x17ae
call fcn.00499e00
mov ecx, dword [0x4c78c4]
mov edx, dword [0x4cbe20]
mov eax, dword [ebp - 0x132c]
add esp, 4
push 0
push 0x47cb10
push ecx
push 0xb8
push edx
mov dword [0x4d2b00], ebx
mov dword [0x4cc988], eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov esi, eax
mov eax, dword [0x4cc988]
mov dword [ebp - 0x132c], eax
mov dword [0x4d2b00], 0
cmp dword [0x4c6428], ebx
jne 0x493032
push esi
call fcn.004972a0
add esp, 4
cmp esi, 6
jne 0x493056
push str.StartPage
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x720]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x49308d
cmp esi, 7
jne 0x49307b
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x3a0]
push edx
lea ecx, [ebp - 0xb20]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x49308d
cmp esi, 9
jne 0x49308d
push 0x17ae
call fcn.0049a780
add esp, 4
push 0x80
lea edx, [ebp - 0x3a0]
mov ecx, 0x26f
call fcn.00499890
add esp, 4
push 0x20
lea edx, [ebp - 0x68]
mov ecx, 0x2a3
call fcn.00499890
add esp, 4
push 0x200
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
lea ecx, [ebp - 0x720]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
push 0x200
push str.SearchPage
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0xb20]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
push str.Search_Page
lea esi, [ebp - 0x720]
mov edi, eax
call fcn.0047fb10
add esp, 4
test edi, edi
je 0x493281
mov edx, esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push edx
call esi
cmp byte [ebp + eax - 0x721], 0x2f
lea eax, [ebp + eax - 0x721]
jne 0x493138
mov byte [eax], 0
lea eax, [ebp - 0xb20]
push eax
call esi
cmp byte [ebp + eax - 0xb21], 0x2f
lea eax, [ebp + eax - 0xb21]
jne 0x493155
mov byte [eax], 0
lea ecx, [ebp - 0xb20]
push ecx
lea edx, [ebp - 0x720]
push edx
call fcn.00483b10
test eax, eax
je 0x4932d7
push 0x33d
mov ecx, 0x12e
call fcn.00495c90
add esp, 4
push 0x200
lea edx, [ebp - 0x1328]
mov ecx, 0x2a4
call fcn.00499890
add esp, 4
lea eax, [ebp - 0xb20]
push eax
lea ecx, [ebp - 0x720]
push ecx
lea edx, [ebp - 0x1328]
push edx
push 0x800
push 0x4cc9b8
call fcn.00402830
add esp, 0x14
push 0x200
mov edx, 0x4cbbe0
mov ecx, 0x2a3
call fcn.00499890
mov eax, dword [0x4c6468]
add esp, 4
mov dword [0x4cd270], ebx
test eax, eax
je 0x4931fc
cmp dword [0x4d2b24], 0
jne 0x4931fc
xor ecx, ecx
cmp eax, ebx
setne cl
lea esi, [ecx + 6]
jmp 0x493259
push 0xd
mov dword [0x4d2a64], 0x17af
call fcn.00499e00
mov eax, dword [0x4c78c4]
mov ecx, dword [0x4cbe20]
mov edx, dword [ebp - 0x132c]
add esp, 4
push 0
push 0x47cb10
push eax
push 0xb8
push ecx
mov dword [0x4d2b00], ebx
mov dword [0x4cc988], edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov edx, dword [0x4cc988]
mov esi, eax
mov dword [ebp - 0x132c], edx
mov dword [0x4d2b00], 0
push 0x334
mov ecx, 0x65
call fcn.00495c90
add esp, 4
cmp dword [0x4c6428], ebx
jne 0x49327c
push esi
call fcn.004972a0
add esp, 4
cmp esi, 6
jne 0x4932a0
push str.SearchPage
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x720]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x4932d7
cmp esi, 7
jne 0x4932c5
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
lea ecx, [ebp - 0xb20]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x4932d7
cmp esi, 9
jne 0x4932d7
push 0x17af
call fcn.0049a780
add esp, 4
push 0x80
lea edx, [ebp - 0x3a0]
mov ecx, 0x3f8
call fcn.00499890
add esp, 4
push 0x200
lea edx, [ebp - 0x3a0]
push str.Source
push edx
lea ecx, [ebp - 0x720]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
push 0x200
push str.SourcePage
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0xb20]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
push str.Source_Page
lea esi, [ebp - 0x720]
mov edi, eax
call fcn.0047fb10
add esp, 4
test edi, edi
jne 0x49336c
push str.SourcePage
push str.SoftwareBillP_StudiosWinPatrol
mov ecx, esi
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x49352a
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp - 0x720]
push eax
call esi
cmp byte [ebp + eax - 0x721], 0x2f
lea eax, [ebp + eax - 0x721]
jne 0x49338f
mov byte [eax], 0
lea ecx, [ebp - 0xb20]
push ecx
call esi
cmp byte [ebp + eax - 0xb21], 0x2f
lea eax, [ebp + eax - 0xb21]
jne 0x4933ac
mov byte [eax], 0
lea edx, [ebp - 0xb20]
push edx
lea eax, [ebp - 0x720]
push eax
call fcn.00483b10
test eax, eax
je 0x493518
push 0x33d
mov ecx, 0x12e
call fcn.00495c90
add esp, 4
push 0x200
lea edx, [ebp - 0x1328]
mov ecx, 0x3f9
call fcn.00499890
add esp, 4
lea ecx, [ebp - 0xb20]
push ecx
lea edx, [ebp - 0x720]
push edx
lea eax, [ebp - 0x1328]
push eax
push 0x800
push 0x4cc9b8
call fcn.00402830
add esp, 0x14
push 0x200
mov edx, 0x4cbbe0
mov ecx, 0x3e8
call fcn.00499890
mov eax, dword [0x4c6468]
add esp, 4
mov dword [0x4cd270], ebx
test eax, eax
je 0x493453
cmp dword [0x4d2b24], 0
jne 0x493453
xor ecx, ecx
cmp eax, ebx
setne cl
lea esi, [ecx + 6]
jmp 0x49349a
mov eax, dword [0x4c78c4]
mov ecx, dword [0x4cbe20]
mov edx, dword [ebp - 0x132c]
push 0
push 0x47cb10
push eax
push 0xb8
push ecx
mov dword [0x4d2a64], 0x17b0
mov dword [0x4d2b00], ebx
mov dword [0x4cc988], edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov esi, eax
mov dword [0x4d2b00], 0
push 0x334
mov ecx, 0x65
call fcn.00495c90
add esp, 4
cmp dword [0x4c6428], ebx
jne 0x4934bd
push esi
call fcn.004972a0
add esp, 4
cmp esi, 6
jne 0x4934e1
push str.SourcePage
push str.SoftwareBillP_StudiosWinPatrol
lea ecx, [ebp - 0x720]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x493518
cmp esi, 7
jne 0x493506
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x3a0]
push eax
lea ecx, [ebp - 0xb20]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
jmp 0x493518
cmp esi, 9
jne 0x493518
push 0x17b0
call fcn.0049a780
add esp, 4
push str.END_OF_LOOP
mov esi, str.Compare_7c
call fcn.0047fb10
add esp, 4
cmp dword [0x4d2afc], 0
mov ecx, dword [0x4c6448]
mov edx, dword [0x4c6444]
mov ebx, 0xf003f
mov edi, 0x20019
mov dword [ebp - 0x1334], ecx
mov dword [ebp - 0x133c], edx
mov dword [0x4c6448], ebx
mov dword [0x4c6444], edi
je 0x493575
mov dword [0x4c6444], 0x20119
mov dword [0x4c6448], 0xf013f
push str.VerifyData
mov esi, str.PART_11__FILETYPES
call fcn.0047fb10
mov eax, dword [0x4c7274]
mov ecx, dword [0x4cd38c]
add esp, 4
push eax
push ecx
push str.FILE_TYPE_CHECKING_:__giFileTypeCount_d___giFileTypeCount_d_
lea edx, [ebp - 0x520]
push 0x100
push edx
call fcn.00402830
add esp, 0x14
push str.VerifyFileTypes
lea esi, [ebp - 0x520]
call fcn.0047fb10
mov eax, dword [0x4c7274]
add esp, 4
test eax, eax
jle 0x4935ec
dec eax
mov dword [0x4c7274], eax
cmp eax, 1
jge 0x4935ec
cmp dword [0x4d1ccc], 0
jne 0x4935e7
mov eax, dword [0x4d1df8]
mov dword [0x4c7274], eax
call fcn.00494200
cmp dword [0x4d2afc], 0
mov dword [0x4c6448], ebx
mov dword [0x4c6444], edi
je 0x493615
mov dword [0x4c6444], 0x20119
mov dword [0x4c6448], 0xf013f
push str.VerifyData
mov esi, str.PART_12_SCHEDULED_TASKS
call fcn.0047fb10
mov eax, dword [0x4c74a0]
add esp, 4
test eax, eax
jle 0x493910
dec eax
mov dword [0x4c74a0], eax
cmp eax, 1
jge 0x493910
mov ecx, dword [0x4cd1f8]
mov dword [0x4c74a0], ecx
call fcn.004907d0
cmp eax, 1
jne 0x493910
call fcn.00490a70
push eax
push str.Scheduled_Tasks:__d
lea edx, [ebp - 0x520]
push 0x100
push edx
mov dword [0x4cd38c], eax
call fcn.00402830
push str.GetScheduledTasks
lea esi, [ebp - 0x520]
call fcn.0047fb10
xor ebx, ebx
add esp, 0x14
mov dword [ebp - 0x132c], ebx
cmp dword [0x4cd38c], ebx
jle 0x493910
jmp 0x4936b6
mov ebx, dword [ebp - 0x132c]
lea esi, [ebp - 0x190]
mov edi, ebx
call fcn.0048fb30
lea eax, [ebp - 0x318]
push eax
mov edi, esi
call fcn.0047f640
add esp, 4
push ebx
mov ebx, 0x4c72a0
call fcn.0048fac0
add esp, 4
push 0x20
push ebx
push str.SoftwareBillP_StudiosWinPatrolTasks
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
je 0x493712
lea ecx, [ebp - 0x24]
push ecx
call fcn.004a02f9
add esp, 4
test eax, eax
jne 0x4938f7
push 0x4c72a0
push str._ST_REGISTRY_MISSING_FOR_TASK_:__s
lea edx, [ebp - 0x520]
push 0x100
push edx
call fcn.00402830
push str.GetScheduledTasks
lea esi, [ebp - 0x520]
call fcn.0047fb10
add esp, 0x14
lea eax, [ebp - 0x190]
push eax
mov edx, 0x7ffffffe
mov eax, 0x104
mov ecx, 0x4cc358
mov dword [0x4c7290], 0
call fcn.00401000
mov edi, str.SoftwareBillP_StudiosDetectedTasks
lea ebx, [ebp - 0x190]
call fcn.0049b470
push 0x337
mov ecx, 0x12e
call fcn.00495c90
mov eax, dword [0x4c645c]
xor edi, edi
add esp, 4
mov dword [0x4cd270], 1
cmp eax, edi
je 0x4937b1
cmp dword [0x4d2b24], edi
jne 0x4937b1
xor ecx, ecx
cmp eax, 1
setne cl
lea esi, [ecx + 6]
jmp 0x4937f9
mov eax, dword [0x4c78c4]
mov ecx, dword [0x4cbe20]
mov edx, dword [ebp - 0x132c]
push edi
push 0x4793d0
push eax
push 0x8a
push ecx
mov dword [0x4d2b00], 1
mov dword [0x4cc988], edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov edx, dword [0x4cc988]
mov esi, eax
mov dword [ebp - 0x132c], edx
mov dword [0x4d2b00], edi
push 0x334
mov ecx, 0x65
call fcn.00495c90
add esp, 4
cmp dword [0x4c6428], 1
mov dword [0x4d2b00], edi
jne 0x493823
push esi
call fcn.004972a0
add esp, 4
mov eax, dword [ebp - 0x132c]
push eax
mov ebx, 0x4c72a0
call fcn.0048fac0
add esp, 4
cmp esi, 7
jne 0x493857
call fcn.00490e60
mov eax, ebx
mov edi, str.SoftwareBillP_StudiosWinPatrolTasks
mov ebx, 0x80000001
call fcn.0048e230
jmp 0x4938f7
cmp esi, 6
jne 0x4938f7
mov esi, dword [ebp - 0x132c]
call fcn.0048fc90
push eax
push 0x4b7c94
lea ecx, [ebp - 0x24]
push 0x20
push ecx
call fcn.00402830
push 0x4c72a0
push str.SoftwareBillP_StudiosWinPatrolTasks
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e390
add esp, 0x18
push 0x4c72a0
push str.SoftwareBillP_StudiosWinPatrolTasks
test eax, eax
jne 0x4938b7
push str._ST_FAILED_TO_SET__HKEY_CURRENT_USER_:__s_::__s
push 0x100
lea edx, [ebp - 0x520]
push edx
jmp 0x4938c8
push str._ST_SUCCESSFULLY_SET__HKEY_CURRENT_USER_:__s_::__s
push 0x100
lea eax, [ebp - 0x520]
push eax
call fcn.00402830
add esp, 0x14
push str.GetScheduledTasks
lea esi, [ebp - 0x520]
call fcn.0047fb10
add esp, 4
push 6
mov edx, 0x4cc358
mov ecx, 0x4c72a0
call fcn.0048c5e0
add esp, 4
mov eax, dword [ebp - 0x132c]
inc eax
mov dword [ebp - 0x132c], eax
cmp eax, dword [0x4cd38c]
jl 0x4936b0
mov ecx, dword [ebp - 0x1334]
mov edx, dword [ebp - 0x133c]
push str.VerifyData
mov esi, str.PART_13__WININIT
mov dword [0x4c6448], ecx
mov dword [0x4c6444], edx
call fcn.0047fb10
add esp, 4
lea eax, [ebp - 0x3b0]
push eax
mov dword [ebp - 0x3b0], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [ebp - 0x3a0], 2
je 0x493a24
mov eax, dword [0x4c79d0]
test eax, eax
jle 0x493a24
mov ebx, 1
sub eax, ebx
mov dword [0x4c79d0], eax
cmp eax, ebx
jge 0x493a24
push eax
push str.WinInit_Count:__d
lea ecx, [ebp - 0x520]
push 0x100
push ecx
call fcn.00402830
push str.WinInit_Check
lea esi, [ebp - 0x520]
call fcn.0047fb10
add esp, 0x14
cmp dword [0x4d2b18], ebx
jle 0x4939ba
cmp dword [0x4d2b24], 0
je 0x493a24
mov edx, dword [0x4c7270]
mov dword [0x4c79d0], edx
mov dword [0x4cd270], ebx
call fcn.00480340
test eax, eax
je 0x493a24
push 0x200
lea edx, [ebp - 0x318]
mov ecx, 0x1c
mov dword [0x4c79d0], 0x270f
call fcn.00499890
movzx eax, word [0x4d1e04]
add esp, 4
push eax
push 0x40034
push 0x4cd200
lea ecx, [ebp - 0x318]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxExA]
cmp eax, 6
jne 0x493a24
xor ebx, ebx
call fcn.00480340
push str.VerifyData
mov esi, str.PART_14_SERVIVES
call fcn.0047fb10
mov eax, dword [0x4cd1d0]
add esp, 4
test eax, eax
jle 0x493d5e
dec eax
mov dword [0x4cd1d0], eax
cmp eax, 1
jge 0x493d5e
mov edx, dword [0x4c7a98]
mov dword [0x4cd1d0], edx
call fcn.00495f50
test eax, eax
je 0x493d5e
push 0
call fcn.0048a810
xor edi, edi
add esp, 4
mov dword [ebp - 0x132c], edi
cmp dword [0x4cd38c], edi
jle 0x493d5e
lea esp, [esp]
push edi
lea ebx, [ebp - 0x920]
call fcn.0048fac0
add esp, 4
push 0x20
mov eax, ebx
push eax
push str.SoftwareBillP_StudiosWinPatrolServices
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
je 0x493ad1
lea ecx, [ebp - 0x24]
push ecx
call fcn.004a02f9
add esp, 4
test eax, eax
jne 0x493d4b
mov esi, edi
call fcn.0048fc90
lea esi, [ebp - 0x190]
mov dword [0x4c7290], eax
call fcn.0048fb30
lea edx, [ebp - 0x318]
push edx
mov edi, esi
call fcn.0047f640
add esp, 4
mov eax, esi
push eax
mov edx, 0x7ffffffe
mov eax, 0x104
mov ecx, 0x4cc358
call fcn.00401000
lea ecx, [ebp - 0x920]
push ecx
mov edx, 0x7ffffffe
mov eax, 0x104
mov ecx, 0x4c72a0
call fcn.00401000
mov esi, dword [ebp - 0x132c]
push esi
lea ebx, [ebp - 0x920]
call fcn.0048fac0
add esp, 4
call fcn.0048fc90
push eax
push 0x4b7c94
lea edx, [ebp - 0x24]
push 0x20
push edx
call fcn.00402830
mov edi, str.SoftwareBillP_StudiosDetectedServices
lea ebx, [ebp - 0x190]
call fcn.0049b470
push 0x335
mov ecx, 0x12e
call fcn.00495c90
add esp, 0x14
mov ebx, 1
push 0x4cc358
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0xd28]
mov dword [0x4cd270], ebx
call fcn.00401000
push 0x4c72a0
mov edx, 0x7ffffffe
lea eax, [ebx + 0x7f]
lea ecx, [ebp - 0x210]
call fcn.00401000
lea eax, [ebp - 0x24]
push eax
mov edx, 0x7ffffffe
lea eax, [ebx + 0x1f]
lea ecx, [ebp - 0x44]
call fcn.00401000
mov edx, dword [0x4c6444]
lea ecx, [ebp - 0x1334]
push ecx
push edx
push 0
push str.SoftwareBillP_StudiosWinPatrolRejects
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x493c5a
push 0x4cc358
lea esi, [ebp - 0x1334]
call fcn.0048e640
add esp, 4
cmp eax, 2
jbe 0x493c5a
push 0x4c72a0
mov esi, 0x4cc358
call fcn.004877c0
add esp, 4
push 0x4c72a0
call fcn.00491620
add esp, 4
mov ecx, 0x4c72a0
call fcn.00491560
push 0x4c72a0
push str.SoftwareBillP_StudiosWinPatrolServices
lea ecx, [ebp - 0x24]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
mov ecx, 0x4c72a0
call fcn.00491560
lea edi, [ebx + 6]
jmp 0x493cda
mov eax, dword [0x4c6454]
test eax, eax
je 0x493c78
cmp dword [0x4d2b24], 0
jne 0x493c78
xor ecx, ecx
cmp eax, ebx
setne cl
lea edi, [ecx + 6]
jmp 0x493cda
mov eax, dword [0x4c78c4]
mov ecx, dword [0x4cbe20]
mov edx, dword [ebp - 0x132c]
push 0
push 0x478750
push eax
push 0xab
push ecx
mov dword [0x4d2b00], ebx
mov dword [0x4cc988], edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov esi, dword [0x4cc988]
mov edi, eax
mov dword [ebp - 0x132c], esi
call fcn.0048fc90
push eax
push 0x4b7c94
lea edx, [ebp - 0x24]
push 0x20
push edx
call fcn.00402830
add esp, 0x10
mov dword [0x4d2b00], 0
push 0x334
mov ecx, 0x65
call fcn.00495c90
add esp, 4
cmp dword [0x4c6428], ebx
jne 0x493cfd
push edi
call fcn.004972a0
add esp, 4
sub edi, 6
je 0x493d29
sub edi, ebx
jne 0x493d45
lea eax, [ebp - 0x210]
push eax
call fcn.00491620
add esp, 4
lea ecx, [ebp - 0x210]
call fcn.00491560
lea ecx, [ebp - 0x210]
push ecx
jmp 0x493d30
lea edx, [ebp - 0x210]
push edx
push str.SoftwareBillP_StudiosWinPatrolServices
lea ecx, [ebp - 0x44]
mov edx, 0x80000001
call fcn.0048e390
add esp, 8
mov edi, dword [ebp - 0x132c]
inc edi
mov dword [ebp - 0x132c], edi
cmp edi, dword [0x4cd38c]
jl 0x493a90
push str.VerifyData
mov esi, str.PART_15__NUTS
call fcn.0047fb10
mov eax, dword [0x4cd1fc]
add esp, 4
test eax, eax
jle 0x493dbe
mov esi, 1
sub eax, esi
mov dword [0x4cd1fc], eax
cmp eax, esi
jge 0x493dbe
call fcn.0047e2a0
mov ecx, dword [0x4c7bc4]
dec eax
mov dword [0x4cd1fc], ecx
cmp eax, 5
ja case.0x493da0.1
jmp dword [eax*4 + 0x4941e0]
mov dword [0x4c6424], 3
jmp 0x493dbe
mov dword [0x4c6424], esi
call fcn.00402890
push str.VerifyData
mov esi, str.PART_16__COOKIES
call fcn.0047fb10
add esp, 4
cmp dword [0x4c6424], 3
jne 0x493e0a
lea ecx, [ebp - 0x318]
call fcn.00403450
test eax, eax
je 0x493e0a
call fcn.00404840
test eax, eax
je 0x493e0a
mov eax, str.UpdateCookieFile
mov edi, str.SoftwareBillP_StudiosWinPatrolOptions
mov ebx, 0x80000001
call fcn.0048e230
call fcn.0048de00
mov eax, dword [0x4d1dfc]
test eax, eax
jle 0x493f4a
dec eax
mov dword [0x4d1dfc], eax
cmp eax, 1
jge 0x493f4a
mov edx, dword [0x4c726c]
xor esi, esi
mov dword [0x4d1dfc], edx
call fcn.00402890
cmp dword [0x4cd38c], esi
jle 0x493f4a
lea edi, [esi + 1]
jmp 0x493e50
push esi
lea ebx, [ebp - 0x318]
call fcn.0048fac0
add esp, 4
push 0x40
mov eax, ebx
push eax
push str.SoftwareBillP_StudiosWinPatrolCookies
lea ecx, [ebp - 0x88]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
je 0x493e8f
add esi, edi
cmp esi, dword [0x4cd38c]
jl 0x493e50
jmp 0x493f4a
push 0x33a
mov ecx, 0x12e
call fcn.00495c90
lea ecx, [ebp - 0x88]
add esp, 4
push ecx
call fcn.004a02f9
add esp, 4
push 0x200
lea edx, [ebp - 0x318]
mov ecx, 0x10
mov dword [0x4c7290], eax
call fcn.00499890
add esp, 4
cmp dword [0x4d2b18], 0
mov dword [0x4d2b00], edi
mov dword [0x4cd270], edi
je 0x493ef2
cmp dword [0x4d2b24], 0
jne 0x493ef2
mov esi, 7
jmp 0x493f1f
push 2
call fcn.00499e00
movzx edx, word [0x4d1e04]
add esp, 4
push edx
push 0x40034
push 0x4cd200
lea eax, [ebp - 0x318]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxExA]
mov esi, eax
push 0x334
mov ecx, 0x65
call fcn.00495c90
add esp, 4
mov dword [0x4d2b00], 0
cmp esi, 6
jne 0x493f4a
mov ecx, str._COOKIES
call fcn.00482e00
push 0x334
mov ecx, 0x65
call fcn.00495c90
add esp, 4
cmp dword [0x4c6428], 1
jne 0x493f9d
mov eax, dword [0x4d2aa4]
test eax, eax
jns 0x493f8c
push str.AlERTCOUNT
mov esi, str.Less_than_zero
call fcn.0047fb10
add esp, 4
mov dword [0x4d2aa4], 0
jmp 0x493f9d
jle 0x493f9d
dec eax
mov dword [0x4d2aa4], eax
jne 0x493f9d
xor eax, eax
call fcn.004970d0
push str.VerifyData
mov esi, str.PART_17__CLEANUP_STRUCTS
call fcn.0047fb10
add esp, 4
cmp dword [0x4cd38c], 0
je 0x493fbd
call fcn.0048fcc0
cmp dword [0x4cd388], 0
je 0x493fcb
call fcn.0048ddc0
push str.VerifyData
mov esi, str.PART_18__VERIFY_TIME
call fcn.0047fb10
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esp, 4
call ebx
sub eax, dword [ebp - 0x1340]
lea ecx, [ebp - 0xc20]
push eax
push str._Verify_Changes_Total_Time____d_
push 0x100
push ecx
call fcn.00402830
push 0x4bb120
lea esi, [ebp - 0xc20]
call fcn.0047fb10
add esp, 0x14
push str.VerifyData
mov esi, str.PART_19__INIT_TASK_LIST
call fcn.0047fb10
add esp, 4
cmp dword [0x4d19bc], 0
je 0x494054
call fcn.00486d10
xor edi, edi
cmp dword [0x4cd38c], edi
jle 0x494054
nop
lea esi, [ebp - 0x420]
call fcn.0048fb30
inc edi
cmp edi, dword [0x4cd38c]
jl 0x494040
xor edx, edx
xor edi, edi
cmp dword [0x4c7260], edi
push str.VerifyData
sete dl
mov esi, str.PART_20__UPDATE_TRAY_ICON
mov dword [0x4c7260], edx
call fcn.0047fb10
add esp, 4
push 0x80
push str.TrayIcon
push str.SoftwareBillP_StudiosWinPatrolOptions
lea ecx, [ebp - 0x3a0]
mov edx, 0x80000001
call fcn.0048e050
add esp, 0xc
test eax, eax
jle 0x4940b0
lea eax, [ebp - 0x3a0]
push eax
call fcn.004a02f9
add esp, 4
jmp 0x4940b5
mov eax, 0x65
push 0x334
mov ecx, eax
call fcn.00495c90
add esp, 4
call ebx
mov dword [0x4cc34c], eax
sub eax, dword [0x4d19b4]
lea ecx, [ebp - 0xc20]
push eax
push str.Total_VerifyData_Time____d_
push 0x100
push ecx
mov dword [0x4cd1f4], eax
call fcn.00402830
push 0x4bb120
lea esi, [ebp - 0xc20]
call fcn.0047fb10
add esp, 0x14
cmp dword [0x4cd1f4], 0x3e8
jbe 0x494118
mov edx, dword [0x4cc34c]
mov dword [0x4d19b4], edx
push str.VerifyData
mov esi, str.PART_21_TEST_NEW_VERSION
call fcn.0047fb10
add esp, 4
cmp dword [0x4d2b28], 1
jne 0x494179
cmp dword [0x4d2b2c], edi
jne 0x494179
mov eax, dword [0x4c78c4]
mov ecx, dword [0x4cbe20]
push edi
push 0x47c660
push eax
push 0xc3
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp dword [0x4d2aa4], edi
jge 0x494179
push str.AlERTCOUNT
mov esi, str.Less_than_zero
call fcn.0047fb10
add esp, 4
mov dword [0x4d2aa4], edi
cmp dword [0x4d2b34], edi
je 0x4941a3
push 0xe
call fcn.00499e00
add esp, 4
push str.VerifyData
mov esi, str.QUICKSCAN_DONE
mov dword [0x4d2b34], edi
call fcn.0047fb10
add esp, 4
push str.VerifyData
mov esi, str.PART_21_DONE
call fcn.0047fb10
mov edx, dword [ebp - 0x1344]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [0x4d2a88], edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.004a01d6
mov esp, ebp
pop ebp
ret