Function at 0x44cdf0
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings
Create directory
Create process on windows
Create thread
Delete file
Delete registry value
Discover group policy via gpresult
Download url
Get hostname
Get proxy
Move file
Persist via app paths registry key
Query or enumerate registry value
Receive data
Schedule task via at
Self delete
Set registry value
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49d632
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x7de8
call fcn.0048e930
mov eax, dword [0x4e3ec8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov esi, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xe98], esi
mov dword [ebp - 0xf24], eax
mov dword [ebp - 0xeb4], ecx
mov dword [ebp - 0xea0], 0
mov edi, 1
mov dword [ebp - 4], edi
test ecx, ecx
je 0x44ce87
lea edx, [ebp - 0xe90]
push edx
call fcn.004482d0
push 0x4ae26b
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_2611]
lea ecx, [ebp - 0xe90]
test eax, eax
jne 0x44cea0
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp + 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp + 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
xor eax, eax
jmp 0x44d4be
push str.found
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
jne 0x44cebd
cmp byte [ebp + 0x10], 1
sete bl
jmp 0x459f8c
push str.notfound
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
jne 0x44cedd
cmp byte [ebp + 0x10], al
sete bl
jmp 0x459f8c
push str.foundandpushed
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
jne 0x44cf86
cmp byte [ebp + 0x10], al
jne 0x44cf6c
mov ecx, dword [ebp - 0xeb4]
lea eax, [ebp - 0x1140]
push eax
call fcn.00448300
lea ecx, [ebp - 0x1140]
push 0x4ae26b
push ecx
mov byte [ebp - 4], 3
call fcn.00401980
add esp, 8
test al, al
je 0x44cf4e
push 0
push ecx
lea edx, [ebp - 0x1140]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov ecx, dword [ebp - 0xf24]
push 0
call fcn.00429020
mov ecx, dword [ebp - 0xf24]
call fcn.00421720
lea ecx, [ebp - 0x1140]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x44d49e
push 0
push str.pressed
lea ecx, [ebp + 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
setns bl
jmp 0x459f8c
lea eax, [ebp - 0xe90]
push str.foundanddisabled
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x44d033
cmp byte [ebp + 0x10], 0
jne 0x44d019
lea ecx, [ebp - 0x1138]
push ecx
mov ecx, dword [ebp - 0xeb4]
call fcn.00448300
lea edx, [ebp - 0x1138]
push 0x4ae26b
push edx
mov byte [ebp - 4], 4
call fcn.00401980
add esp, 8
test al, al
je 0x44cffb
push 0
push ecx
lea eax, [ebp - 0x1138]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov ecx, dword [ebp - 0xf24]
push 0
call fcn.00429020
mov ecx, dword [ebp - 0xf24]
call fcn.00421720
lea ecx, [ebp - 0x1138]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x44d49e
push 0
push str.visible_unavailable
lea ecx, [ebp + 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
setns bl
jmp 0x459f8c
lea ecx, [ebp - 0xe90]
push str.checked
push ecx
call fcn.00401b00
add esp, 8
push 0
test al, al
je 0x44d065
push str.checked
lea ecx, [ebp + 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
setns bl
jmp 0x459f8c
push str.checkdesc
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44d131
push 0
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1010]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0x1010]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x184c]
push eax
lea ecx, [ebp - 0x1010]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1010]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x184c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x1010]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp + 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
lea ecx, [ebp - 0x1010]
setns bl
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.iswin10
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x44d14d
call fcn.00475490
jmp 0x459f8a
lea edx, [ebp - 0xe90]
push str.iswin64
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x44d16f
call fcn.00475270
jmp 0x459f8a
lea eax, [ebp - 0xe90]
push str.iswin10or81
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x44d1a0
call fcn.00475490
test al, al
jne 0x459f94
call fcn.00475420
test al, al
jmp 0x459f8e
lea ecx, [ebp - 0xe90]
push str.iswin81
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x44d1c2
call fcn.00475420
jmp 0x459f8a
lea edx, [ebp - 0xe90]
push str.isJavaInstalled
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x44d228
push 0
push edi
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.java
call dword [sym.imp.mfc100.dll_Ordinal_310]
call fcn.0047d800
add esp, 0x10
test al, al
jne 0x459f8a
push 0
push edi
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.java
call dword [sym.imp.mfc100.dll_Ordinal_310]
call fcn.0047d800
add esp, 0x10
jmp 0x459f8a
lea eax, [ebp - 0xe90]
push str.isjavainstalledjavatesting
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x44d27e
push 0x4ae26b
lea ecx, [ebp - 0x11d4]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x11d4]
push ecx
mov byte [ebp - 4], 7
call fcn.00484b20
add esp, 4
cmp eax, edi
lea ecx, [ebp - 0x11d4]
setge bl
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea edx, [ebp - 0xe90]
push str.isOSwindow7
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x44d2cc
lea eax, [ebp - 0x1268]
push eax
call fcn.00476bc0
lea ecx, [ebp - 0x1268]
push 0x4b488c
push ecx
call fcn.00401b00
add esp, 0xc
test al, al
lea ecx, [ebp - 0x1268]
setne bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea edx, [ebp - 0xe90]
push str.isjavaupdateenabled
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x44d2ee
call fcn.004754d0
jmp 0x459f8a
lea eax, [ebp - 0xe90]
push str.readfnmsanddetectifneedsminorupdate
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x44d339
lea ecx, [ebp - 0x1270]
push ecx
call fcn.00482ac0
lea edx, [ebp - 0x1270]
push str.minor
push edx
call fcn.00401b00
add esp, 0xc
lea ecx, [ebp - 0x1270]
mov bl, al
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea eax, [ebp - 0xe90]
push str.detectifgroupavailable
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x44d35b
call fcn.004828d0
jmp 0x459f8a
push 0
push str.isprinterinstalled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44d4dc
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xfa4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 8
push 0x4b0b4c
lea ecx, [ebp - 0xfa4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x14e0]
push edx
lea ecx, [ebp - 0xfa4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfa4]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14e0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
lea eax, [ebp - 0xfa4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.0047a330
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xfa4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov ecx, dword [ebp - 0xeb4]
lea eax, [ebp - 0x1128]
push eax
call fcn.004018a0
push 0x4ae26b
lea ecx, [ebp - 0x1128]
mov dword [ebp - 4], 0x2e0
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
je 0x44d47e
push 0
push ecx
lea edx, [ebp - 0x1128]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov ecx, dword [ebp - 0xf24]
push 0
call fcn.00429020
lea ecx, [ebp - 0x1128]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov ecx, dword [ebp - 0xf24]
call fcn.00421720
mov esi, eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp + 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp + 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0048e770
mov esp, ebp
pop ebp
ret 0x14
push str.isprinterdefault
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44d5c4
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xfb4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xa
push 0x4b0b4c
lea ecx, [ebp - 0xfb4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1794]
push edx
lea ecx, [ebp - 0xfb4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfb4]
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1794]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1280]
push eax
call fcn.00474100
add esp, 4
push 0
lea ecx, [ebp - 0xfb4]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x1280]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
lea ecx, [ebp - 0x1280]
sete bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfb4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.makeprinterdefault
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44d68a
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xfbc]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xc
push 0x4b0b4c
lea ecx, [ebp - 0xfbc]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x179c]
push edx
lea ecx, [ebp - 0xfbc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfbc]
mov byte [ebp - 4], 0xd
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x179c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push edi
push ecx
lea eax, [ebp - 0xfbc]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.0047a330
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xfbc]
jmp 0x44d425
push str.changePrinterAlignment
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44d6a3
call fcn.00486b70
jmp 0x459f8a
push 0
push str.isApplicationInstalled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44dc1e
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xea4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
lea edx, [ebp - 0xea4]
push edx
lea ecx, [ebp - 0xf20]
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc100.dll_Ordinal_300]
push 0
mov bl, 0xf
push str.exactmatch
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xea4]
test eax, eax
js 0x44d76a
push 0x4b4b94
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x1830]
push eax
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1830]
jmp 0x44d7a0
push 0x4b0b4c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1838]
push ecx
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1838]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.syngene_
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44d8bd
push 0
push 0x4b4b94
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xea4]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1840]
push edx
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1840]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xea4]
push eax
lea ecx, [ebp - 0xf20]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push 0
lea ecx, [ebp - 0xea4]
push ecx
lea edx, [ebp - 0x1848]
push str.wmic_product_get_name__Find__
push edx
call fcn.00401a70
add esp, 8
mov ecx, esp
mov dword [ebp - 0xe98], esp
push 0x4aed8c
push eax
push ecx
mov byte [ebp - 4], 0x13
call fcn.004019e0
lea edx, [ebp - 0x10c8]
add esp, 0xc
push edx
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x1848]
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10c8]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0
lea ecx, [ebp - 0xf20]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x10c8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0x10c8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xe90]
push eax
lea ecx, [ebp - 0xf20]
mov byte [ebp - 0xea0], 1
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x105c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
push str.exactmatch
lea ecx, [ebp - 0xf20]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x44d993
push 0x4b4b94
lea ecx, [ebp - 0xf20]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xf20]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1850]
push ecx
lea ecx, [ebp - 0xf20]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0x105c]
mov byte [ebp - 4], 0x17
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1850]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x4ae26b
push 0x4b0b4c
lea ecx, [ebp - 0x105c]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
lea edx, [ebp - 0x105c]
push str.exactmatch0
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x44d9e4
mov byte [ebp - 0xea0], 0
jmp 0x44d9e4
push 0x4b478c
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44d9e4
push 0x4b0b4c
lea eax, [ebp - 0xea4]
push eax
lea ecx, [ebp - 0x1858]
push ecx
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1858]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov esi, dword [ebp - 0xea0]
push 0
push esi
push 0
push ecx
lea edx, [ebp - 0xea4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.0047d800
add esp, 0x10
test al, al
jne 0x44da59
push 0
push esi
push edi
push ecx
lea eax, [ebp - 0xea4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.0047d800
add esp, 0x10
test al, al
jne 0x44da59
push edi
push esi
push 0
push ecx
lea edx, [ebp - 0xea4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.0047d800
add esp, 0x10
push 0
cmp al, 1
push str.version_
lea ecx, [ebp - 0xea4]
sete bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44dbf1
push 0
push 0x4b4b94
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xea4]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1860]
push eax
lea ecx, [ebp - 0xea4]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 0x19
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1860]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0xea4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x1148]
push eax
call fcn.0047fac0
lea ecx, [ebp - 0x1148]
push str.Not_Found
push ecx
mov byte [ebp - 4], 0x1a
call fcn.00401b00
add esp, 0x10
test al, al
je 0x44db6e
lea edx, [ebp - 0xea4]
push edx
lea eax, [ebp - 0x1870]
push str.Not_able_to_find_version_of__
push eax
call fcn.00401a70
push str._._Please_contact_help_desk._Click_on__NEXT_STEP_.
push eax
lea ecx, [ebp - 0x1868]
push ecx
mov byte [ebp - 4], 0x1b
call fcn.004019e0
add esp, 0x18
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1868]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1870]
call dword [sym.imp.mfc100.dll_Ordinal_901]
xor bl, bl
jmp 0x44dbe5
lea edx, [ebp - 0x1148]
push str.version_Change
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x44dbe3
lea eax, [ebp - 0xea4]
push eax
lea ecx, [ebp - 0x1880]
push 0x4aed8c
push ecx
call fcn.00401a70
push str.__version_is_not_compatable._Please_contact_help_desk._Click_on__NEXT_STEP_.
push eax
lea edx, [ebp - 0x1878]
push edx
mov byte [ebp - 4], 0x1d
call fcn.004019e0
add esp, 0x18
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1878]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1880]
call dword [sym.imp.mfc100.dll_Ordinal_901]
xor bl, bl
jmp 0x44dbe5
mov bl, 1
lea ecx, [ebp - 0x1148]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x105c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf20]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.killExplorer
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44dd70
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xfc4]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xfc4]
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1814]
push ecx
lea ecx, [ebp - 0xfc4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfc4]
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1814]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1150]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea edx, [ebp - 0xfc4]
push 0x4b16e8
push edx
mov byte [ebp - 4], 0x21
call fcn.00401b00
add esp, 8
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
test al, al
je 0x44dd18
push str.taskkill__F__IM_explorer.exe__T
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x17f8]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0x1150]
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17f8]
jmp 0x44dd49
push str.start__windir_explorer.exe
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x12e8]
push ecx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0x1150]
mov byte [ebp - 4], 0x23
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x12e8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1150]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfc4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.IsmcAfeeVSE
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44df92
push str.C:WindowsiAssistDATversion.txt
lea ecx, [ebp - 0x10c4]
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x10c4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
lea eax, [ebp - 0x10c4]
je 0x44df47
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0xf2c]
push ecx
call fcn.0048cd80
add esp, 8
push 0
push str.DAT_version
lea ecx, [ebp - 0xf2c]
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44deb0
lea ecx, [ebp - 0xf2c]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
cmp eax, 0xa
jl 0x44df26
push 0
push 0x4b0094
lea ecx, [ebp - 0xf2c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xf2c]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1158]
push edx
lea ecx, [ebp - 0xf2c]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
lea ecx, [ebp - 0x1158]
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea ecx, [ebp - 0x1158]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00448de0
add esp, 8
cmp byte [ebp - 0x28], 0x39
jne 0x44de83
mov bl, 1
lea ecx, [ebp - 0x1158]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf2c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10c4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push 0x4af974
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.Unable_to_find_DAT_Version
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x25
call fcn.0047c140
add esp, 0xc
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0xf2c]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.founded_data:
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x25
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0xf2c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10c4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.File_Not_found
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x24
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x10c4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.runvbscript
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44e0fd
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xfcc]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x2a
push 0x4b0b4c
lea ecx, [ebp - 0xfcc]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x15f8]
push edx
lea ecx, [ebp - 0xfcc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfcc]
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15f8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1780]
push eax
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea ecx, [ebp - 0x12f0]
push ecx
mov byte [ebp - 4], 0x2c
call fcn.004019e0
lea edx, [ebp - 0xfcc]
push edx
push eax
lea eax, [ebp - 0x1288]
push eax
mov byte [ebp - 4], 0x2d
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x12f0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1780]
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1288]
push ecx
lea edx, [ebp - 0x12f8]
push 0x4bb4ac
push edx
call fcn.00401a70
add esp, 0xc
push 0
push 0
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x12f8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x1288]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfcc]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.runscriptforclientspecific
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44e268
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x31
push 0x4b0b4c
lea ecx, [ebp - 0xfd4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1600]
push ecx
lea ecx, [ebp - 0xfd4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfd4]
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1600]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x1800]
push edx
call fcn.00405cd0
push 0x4b0cd8
push eax
lea eax, [ebp - 0x1300]
push eax
mov byte [ebp - 4], 0x33
call fcn.004019e0
lea ecx, [ebp - 0xfd4]
push ecx
push eax
lea edx, [ebp - 0x1290]
push edx
mov byte [ebp - 4], 0x34
call fcn.004018e0
add esp, 0x18
lea ecx, [ebp - 0x1300]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1800]
mov byte [ebp - 4], 0x37
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1290]
push eax
lea ecx, [ebp - 0x1308]
push 0x4bb4ac
push ecx
call fcn.00401a70
add esp, 0xc
push 0
push 0
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1308]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x1290]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfd4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.ShowApplicationDialog
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44e3b4
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1608]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1608]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x1310]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x39
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1310]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe90]
push 0x4ae26b
push ecx
call fcn.00401980
add esp, 8
test al, al
je 0x44e360
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], 0x3a
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 2
call fcn.00401840
push 0
lea ecx, [ebp - 0x4218]
call fcn.0045bc40
lea eax, [ebp - 0xe90]
push 0x4bddfc
push eax
mov byte [ebp - 4], 0x3b
call fcn.00401b00
add esp, 8
test al, al
je 0x44e390
mov byte [ebp - 0x3e3c], 1
lea ecx, [ebp - 0x4218]
call sub.mfc100.dll_Ordinal_3620
test eax, eax
lea ecx, [ebp - 0x4218]
sete bl
mov byte [ebp - 4], 2
call fcn.0045b730
jmp 0x459f8c
push str.checksizeof
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44e829
lea ecx, [ebp - 0xf1c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
fldz
push 0
fstp dword [ebp - 0xea0]
mov bl, 0x3c
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1788]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1788]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1318]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1318]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1064]
push eax
call fcn.00476b60
lea ecx, [ebp - 0xe90]
push 0x4bdde8
mov bl, 0x3f
push ecx
mov byte [ebp - 4], bl
call fcn.00401b00
add esp, 0xc
test al, al
je 0x44e507
lea ecx, [ebp - 0x1064]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea edx, [ebp - 0x1610]
push 0x4af5dc
push edx
call fcn.00401a70
push 0x4afb74
push eax
lea eax, [ebp - 0x1298]
push eax
mov byte [ebp - 4], 0x40
call fcn.004019e0
add esp, 0x18
lea ecx, [ebp - 0x1610]
mov byte [ebp - 4], 0x42
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1298]
push ecx
call fcn.00482e60
lea ecx, [ebp - 0x1298]
jmp 0x44e5eb
lea edx, [ebp - 0xe90]
push 0x4bdddc
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x44e57a
lea ecx, [ebp - 0x1064]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea eax, [ebp - 0x1320]
push 0x4af5dc
push eax
call fcn.00401a70
push 0x4afb80
push eax
lea ecx, [ebp - 0x12a0]
push ecx
mov byte [ebp - 4], 0x43
call fcn.004019e0
add esp, 0x18
lea ecx, [ebp - 0x1320]
mov byte [ebp - 4], 0x45
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0x12a0]
push edx
call fcn.00482e60
lea ecx, [ebp - 0x12a0]
jmp 0x44e5eb
lea eax, [ebp - 0xe90]
push 0x4bddd0
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x44e5fd
lea ecx, [ebp - 0x1064]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0x1808]
push 0x4af5dc
push ecx
call fcn.00401a70
push 0x4afb5c
push eax
lea edx, [ebp - 0x12a8]
push edx
mov byte [ebp - 4], 0x46
call fcn.004019e0
add esp, 0x18
lea ecx, [ebp - 0x1808]
mov byte [ebp - 4], 0x48
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x12a8]
push eax
call fcn.00482e60
lea ecx, [ebp - 0x12a8]
add esp, 4
fstp dword [ebp - 0xea0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
fld dword [ebp - 0xea0]
push ecx
fmul qword [0x4bddc8]
fstp dword [ebp - 0xea0]
fld dword [ebp - 0xea0]
fstp dword [esp]
call fcn.00448dc0
fstp st(0)
add esp, 4
fld dword [ebp - 0xea0]
fld st(0)
call fcn.0048e880
fld dword [0x4bddc4]
fcomp st(1)
mov ecx, eax
fnstsw ax
test ah, 0x41
jne 0x44e6f8
push ecx
fstp st(0)
lea ecx, [ebp - 0xf1c]
push 0x4b5008
push ecx
call dword [sym.imp.mfc100.dll_Ordinal_4283]
lea edx, [ebp - 0xe90]
push edx
lea eax, [ebp - 0x1790]
push str.Size_of
push eax
call fcn.00401a70
push str._is
push eax
lea ecx, [ebp - 0x1330]
push ecx
mov byte [ebp - 4], 0x49
call fcn.004019e0
lea edx, [ebp - 0xf1c]
push edx
push eax
lea eax, [ebp - 0x1618]
push eax
mov byte [ebp - 4], 0x4a
call fcn.004018e0
push 0x4bdd98
push eax
lea ecx, [ebp - 0x1328]
push ecx
mov byte [ebp - 4], 0x4b
call fcn.004019e0
add esp, 0x3c
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x4c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1328]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1618]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1330]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1790]
jmp 0x44e808
fmul qword [0x4bdd90]
sub esp, 8
lea edx, [ebp - 0xf1c]
fstp dword [ebp - 0xea0]
fld dword [ebp - 0xea0]
fstp qword [esp]
push 0x4bdd88
push edx
call dword [sym.imp.mfc100.dll_Ordinal_4283]
add esp, 0x10
push 0
push 0x4b4b84
lea ecx, [ebp - 0xf1c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
add eax, 3
push eax
lea eax, [ebp - 0x1338]
push eax
lea ecx, [ebp - 0xf1c]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf1c]
mov byte [ebp - 4], 0x4d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1338]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe90]
push ecx
lea edx, [ebp - 0x1348]
push str.Size_of
push edx
call fcn.00401a70
push str._is
push eax
lea eax, [ebp - 0x1810]
push eax
mov byte [ebp - 4], 0x4e
call fcn.004019e0
lea ecx, [ebp - 0xf1c]
push ecx
push eax
lea edx, [ebp - 0x1340]
push edx
mov byte [ebp - 4], 0x4f
call fcn.004018e0
push str._GB._click_on_NEXT_STEP
push eax
lea eax, [ebp - 0x1620]
push eax
mov byte [ebp - 4], 0x50
call fcn.004019e0
add esp, 0x30
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x51
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1620]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1340]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1810]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1348]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1064]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf1c]
jmp 0x44d425
push 0
push str.createRestorePoint
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44e994
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xfdc]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x52
push 0x4b0b4c
lea ecx, [ebp - 0xfdc]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1628]
push edx
lea ecx, [ebp - 0xfdc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfdc]
mov byte [ebp - 4], 0x53
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1628]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1798]
push eax
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea ecx, [ebp - 0x1350]
push ecx
mov byte [ebp - 4], 0x54
call fcn.004019e0
lea edx, [ebp - 0xfdc]
push edx
push eax
lea eax, [ebp - 0x12b0]
push eax
mov byte [ebp - 4], 0x55
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x1350]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1798]
mov byte [ebp - 4], 0x58
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12b0]
push ecx
lea edx, [ebp - 0x1358]
push 0x4bb4ac
push edx
call fcn.00401a70
add esp, 0xc
push 0
push 0
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1358]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x2ee0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x12b0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfdc]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.IsRegistryKeyExists
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44eb67
lea ecx, [ebp - 0xf00]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1168]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1160]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
mov bl, 0x5b
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1630]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xf00]
mov byte [ebp - 4], 0x5c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1630]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xf00]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1360]
push ecx
lea ecx, [ebp - 0xf00]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf00]
mov byte [ebp - 4], 0x5d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1360]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0094
lea ecx, [ebp - 0xf00]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea edx, [ebp - 0x1818]
push edx
lea ecx, [ebp - 0xf00]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1168]
mov byte [ebp - 4], 0x5e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1818]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf00]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1368]
push eax
lea ecx, [ebp - 0xf00]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [ebp - 0x1160]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1368]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0x1160]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x1168]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push eax
mov byte [ebp - 4], 0x60
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.0047e070
add esp, 8
lea ecx, [ebp - 0x1160]
mov bl, al
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1168]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf00]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.AssigningIP
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x44ebcf
lea ecx, [ebp - 0x2a30]
call fcn.0040a030
lea ecx, [ebp - 0x2a30]
mov byte [ebp - 4], 0x61
call sub.mfc100.dll_Ordinal_3620
cmp eax, edi
jne 0x44ebb4
lea ecx, [ebp - 0x2a30]
mov bl, 1
mov byte [ebp - 4], 2
call fcn.00409730
jmp 0x459f8c
cmp eax, 2
jne 0x44ebbb
xor bl, bl
lea ecx, [ebp - 0x2a30]
mov byte [ebp - 4], 2
call fcn.00409730
jmp 0x459f8c
push str.UserEnvironmentVariables
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x44ec35
lea ecx, [ebp - 0x26e0]
call fcn.00416250
lea ecx, [ebp - 0x26e0]
mov byte [ebp - 4], 0x62
call sub.mfc100.dll_Ordinal_3620
test eax, eax
jne 0x44ec1a
lea ecx, [ebp - 0x26e0]
mov bl, 1
mov byte [ebp - 4], 2
call fcn.00416320
jmp 0x459f8c
cmp eax, 2
jne 0x44ec21
xor bl, bl
lea ecx, [ebp - 0x26e0]
mov byte [ebp - 4], 2
call fcn.00416320
jmp 0x459f8c
push str.ShowRDPDialog
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44ed68
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xfe4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x63
push 0x4b0b4c
lea ecx, [ebp - 0xfe4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1638]
push edx
lea ecx, [ebp - 0xfe4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfe4]
mov byte [ebp - 4], 0x64
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1638]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.hidecertificatefix
lea ecx, [ebp - 0xfe4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x44ed2a
lea ecx, [ebp - 0x212c]
call fcn.00467050
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], 0x65
mov byte [ebp - 0x2074], 0
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], bl
call fcn.00466f00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xfe4]
jmp 0x44d425
lea ecx, [ebp - 0x1ffc]
call fcn.00467050
lea ecx, [ebp - 0x1ffc]
mov byte [ebp - 4], 0x66
mov byte [ebp - 0x1f44], 1
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x1ffc]
mov byte [ebp - 4], bl
call fcn.00466f00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xfe4]
jmp 0x44d425
push str.hostfileDlg
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44ef90
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xfec]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xfec]
mov byte [ebp - 4], 0x67
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1370]
push ecx
lea ecx, [ebp - 0xfec]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfec]
mov byte [ebp - 4], 0x68
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1370]
mov byte [ebp - 4], 0x67
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x1ecc]
mov byte [ebp - 0xe99], 0
call fcn.00432b70
lea edx, [ebp - 0xfec]
push str.NoDialog
push edx
mov byte [ebp - 4], 0x69
call fcn.00401b00
add esp, 8
test al, al
je 0x44ee3e
mov byte [ebp - 0x1e0c], 1
mov byte [ebp - 0xe99], 1
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x1820]
push ecx
mov ecx, eax
call fcn.00405ca0
mov esi, eax
lea edx, [ebp - 0x1380]
push edx
mov byte [ebp - 4], 0x6a
call fcn.00479050
push str.AnakageCoursesAnakageFilesSelfHealSolutions
push eax
lea eax, [ebp - 0x1640]
push eax
mov byte [ebp - 4], 0x6b
call fcn.004019e0
push esi
push eax
lea ecx, [ebp - 0x1378]
push ecx
mov byte [ebp - 4], 0x6c
call fcn.004018e0
add esp, 0x1c
mov esi, eax
mov byte [ebp - 4], 0x6d
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x48]
push edx
lea eax, [ebp - 0x17a0]
push esi
push eax
call fcn.004019e0
push str.Host.txt
push eax
lea ecx, [ebp - 0x1170]
push ecx
mov byte [ebp - 4], 0x6e
call fcn.004019e0
add esp, 0x18
lea ecx, [ebp - 0x17a0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1378]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1640]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1380]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1820]
mov byte [ebp - 4], 0x74
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0x1170]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x1ecc]
call fcn.004328f0
lea ecx, [ebp - 0x1170]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp byte [ebp - 0xe99], 0
jne 0x44ef60
lea ecx, [ebp - 0x1ecc]
call sub.mfc100.dll_Ordinal_3620
mov bl, 1
test eax, eax
jne 0x44ef59
jmp 0x44ef60
cmp eax, 2
jne 0x44ef60
xor bl, bl
lea ecx, [ebp - 0x1170]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1ecc]
mov byte [ebp - 4], 0x67
call fcn.00432400
lea ecx, [ebp - 0xfec]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.SelectZipFile
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44f293
lea ecx, [ebp - 0x1180]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push edi
push 0
push 0
push 0
push 6
push 0
push 0
push edi
lea ecx, [ebp - 0xe8c]
mov byte [ebp - 4], 0x75
call sub.mfc100.dll_Ordinal_422
lea ecx, [ebp - 0xe8c]
mov byte [ebp - 4], 0x76
call sub.mfc100.dll_Ordinal_3621
cmp eax, edi
jne 0x44f012
lea eax, [ebp - 0x1388]
push eax
lea ecx, [ebp - 0xe8c]
call sub.mfc100.dll_Ordinal_5627
push eax
lea ecx, [ebp - 0x1180]
mov byte [ebp - 4], 0x77
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1388]
mov byte [ebp - 4], 0x76
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1180]
push ecx
lea ecx, [ebp - 0xee4]
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0xee4]
mov byte [ebp - 4], 0x78
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0xee4]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea edx, [ebp - 0xee4]
push edx
lea ecx, [ebp - 0x13a0]
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0xee4]
mov byte [ebp - 4], 0x79
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push 0x5c
lea ecx, [ebp - 0xee4]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_11744]
mov ebx, eax
sub esi, ebx
sub esi, edi
push esi
lea eax, [ebp - 0x1178]
push eax
lea ecx, [ebp - 0xee4]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push ebx
lea ecx, [ebp - 0x1648]
push ecx
lea ecx, [ebp - 0xee4]
mov byte [ebp - 4], 0x7a
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xee4]
mov byte [ebp - 4], 0x7b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1648]
mov byte [ebp - 4], 0x7a
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str..zip
lea ecx, [ebp - 0x1178]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44f249
push 0
push 0x4b478c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0xff4]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x7c
push 0x4b0b4c
lea ecx, [ebp - 0xff4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0xff4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xff4]
mov byte [ebp - 4], 0x7d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1390]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1398]
push ecx
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea edx, [ebp - 0x1828]
push edx
mov byte [ebp - 4], 0x7e
call fcn.004019e0
lea ecx, [ebp - 0xff4]
push ecx
push eax
lea edx, [ebp - 0x12b8]
push edx
mov byte [ebp - 4], 0x7f
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x1828]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1398]
mov byte [ebp - 4], 0x82
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x4ae8b4
lea eax, [ebp - 0xee4]
push eax
lea ecx, [ebp - 0x1650]
push ecx
call fcn.004019e0
add esp, 8
mov edx, esp
mov dword [ebp - 0xe98], esp
lea ecx, [ebp - 0x1178]
push ecx
push eax
mov bl, 0x83
push edx
mov byte [ebp - 4], bl
call fcn.004018e0
add esp, 0xc
mov byte [ebp - 4], 0x84
push 0
push ecx
lea edx, [ebp - 0x12b8]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.00474370
add esp, 0xc
lea ecx, [ebp - 0x1650]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12b8]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xff4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x44f24b
xor bl, bl
lea ecx, [ebp - 0x1178]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x13a0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xee4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe8c]
mov byte [ebp - 4], 0x75
call sub.mfc100.dll_Ordinal_978
lea ecx, [ebp - 0x1180]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.controlAudioSettings
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44f30d
lea ecx, [ebp - 0xead]
call fcn.0040a120
push edi
lea ecx, [ebp - 0xead]
mov byte [ebp - 4], 0x85
call fcn.0040a130
push 0
push edi
lea ecx, [ebp - 0xead]
mov esi, eax
call fcn.0040a590
test esi, esi
je 0x44f2dd
cmp esi, edi
jne 0x44f2f7
test eax, eax
jne 0x44f2f7
lea ecx, [ebp - 0xead]
mov bl, 1
mov byte [ebp - 4], 2
call fcn.00466ef0
jmp 0x459f8c
lea ecx, [ebp - 0xead]
xor bl, bl
mov byte [ebp - 4], 2
call fcn.00466ef0
jmp 0x459f8c
push 0
push str.negativeControlAudioSettings
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44f387
lea ecx, [ebp - 0xeae]
call fcn.0040a120
push 0
lea ecx, [ebp - 0xeae]
mov byte [ebp - 4], 0x86
call fcn.0040a130
push edi
push edi
lea ecx, [ebp - 0xeae]
mov esi, eax
call fcn.0040a590
test esi, esi
je 0x44f357
cmp esi, edi
jne 0x44f371
test eax, eax
jne 0x44f371
lea ecx, [ebp - 0xeae]
mov bl, 1
mov byte [ebp - 4], 2
call fcn.00466ef0
jmp 0x459f8c
lea ecx, [ebp - 0xeae]
xor bl, bl
mov byte [ebp - 4], 2
call fcn.00466ef0
jmp 0x459f8c
push 0
push str.Determinedefaultprinter
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44f8fc
lea eax, [ebp - 0xffc]
push eax
call fcn.00479050
push str.printer.txt
lea ecx, [ebp - 0xffc]
push ecx
lea edx, [ebp - 0x17ac]
mov bl, 0x87
push edx
mov byte [ebp - 4], bl
call fcn.004019e0
add esp, 0x10
push eax
lea ecx, [ebp - 0xffc]
mov byte [ebp - 4], 0x88
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17ac]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.wmic_printer_get_default_name_portname
lea ecx, [ebp - 0x12c8]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
lea eax, [ebp - 0x12c8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0x89
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x12c0]
push ecx
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x107c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push edi
push 0x40
push 2
lea ecx, [ebp - 0xffc]
mov byte [ebp - 4], 0x8b
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x1a5c]
call fcn.0040ac40
lea ecx, [ebp - 0x12c0]
mov byte [ebp - 4], 0x8c
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea edx, [ebp - 0x1a5c]
push edx
call fcn.00449f60
add esp, 8
lea ecx, [ebp - 0x1a5c]
call fcn.0040abd0
push edi
push 0x40
push edi
lea ecx, [ebp - 0xffc]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x19b4]
call fcn.004088a0
lea ecx, [ebp - 0xa84]
call fcn.00406570
lea ecx, [ebp - 0x1074]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x106c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
cmp dword [ebp - 0x1950], 0
mov byte [ebp - 4], 0x90
je 0x44f68b
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0x19b4]
push ecx
call fcn.00408810
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add esp, 8
add ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_void____thiscall_std::ios_base::operator_void__void_const]
test eax, eax
je 0x44f68b
lea ecx, [ecx]
push 0
push str.TRUE
lea ecx, [ebp - 0xa84]
call fcn.0042c4a0
test eax, eax
jns 0x44f542
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0x19b4]
push ecx
call fcn.00408810
mov edx, dword [eax]
mov ecx, dword [edx + 4]
add esp, 8
add ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_void____thiscall_std::ios_base::operator_void__void_const]
test eax, eax
jne 0x44f500
jmp 0x44f68b
cmp dword [ebp - 0xa70], 0x10
mov eax, dword [ebp - 0xa84]
jae 0x44f557
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov bl, 0x91
lea ecx, [ebp - 0xec8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0
push 0x4ae8b4
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xec8]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x13a8]
push eax
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xec8]
mov byte [ebp - 4], 0x92
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13a8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0x20
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
mov esi, eax
push esi
lea ecx, [ebp - 0x1658]
push ecx
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1074]
mov byte [ebp - 4], 0x93
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1658]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x13b0]
push edx
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xec8]
mov byte [ebp - 4], 0x94
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13b0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xec8]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0x106c]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0xec8]
mov byte [ebp - 4], 0x90
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x19b4]
call fcn.00408670
push 0
push ecx
mov eax, esp
mov dword [ebp - 0xe98], esp
lea ecx, [ebp - 0x106c]
push ecx
push str.ping
push eax
call fcn.00401a70
lea edx, [ebp - 0xf5c]
add esp, 0xc
push edx
call fcn.0047d270
add esp, 0xc
push str.PORTPROMPT:
lea ecx, [ebp - 0x106c]
mov byte [ebp - 4], 0x95
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
js 0x44f6ef
push 0x4ae26b
lea ecx, [ebp - 0xf5c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push 0
push str.Ping_request_could_not_find
lea ecx, [ebp - 0xf5c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44f7c2
push 0
push str.Request_timed_out.
lea ecx, [ebp - 0xf5c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44f7c2
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xf5c]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.Printer_ping_sucess
mov byte [ebp - 4], 0x99
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x95
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x1074]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0x13b8]
push str.Your_printouts_will_go_to__
push ecx
call fcn.00401a70
push str.__Change_your_default_printer_if_this_is_not_correct
push eax
lea edx, [ebp - 0x12dc]
push edx
mov byte [ebp - 4], 0x9a
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x107c]
mov byte [ebp - 4], 0x9b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x12dc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x13b8]
jmp 0x44f85a
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xf5c]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.Printer_ping_failed
mov byte [ebp - 4], 0x96
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x95
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x1074]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0x13c0]
push str.Your_printouts_will_go_to__
push ecx
call fcn.00401a70
push str._._It_is_not_connecting._Please_connect_to_VPN_or_LAN._If_you_still_cannot_connect_please_contact_your_IT_support
push eax
lea edx, [ebp - 0x1660]
push edx
mov byte [ebp - 4], 0x97
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x107c]
mov byte [ebp - 4], 0x98
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1660]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x13c0]
mov byte [ebp - 4], 0x95
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x107c]
push eax
mov ecx, 0x4e54f4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0xf5c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x106c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1074]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xa84]
call fcn.00406590
lea ecx, [ebp - 0x19b4]
mov byte [ebp - 4], 0x8c
call fcn.00408ab0
lea ecx, [ebp - 0x1a5c]
mov byte [ebp - 4], 0x8b
call fcn.0040adf0
lea ecx, [ebp - 0x107c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12c0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12c8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xffc]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.McafeeMonitor
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44fa49
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1004]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x9c
push 0x4b0b4c
lea ecx, [ebp - 0x1004]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x17b4]
push edx
lea ecx, [ebp - 0x1004]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1004]
mov byte [ebp - 4], 0x9d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17b4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1668]
push eax
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea ecx, [ebp - 0x13c8]
push ecx
mov byte [ebp - 4], 0x9e
call fcn.004019e0
lea edx, [ebp - 0x1004]
push edx
push eax
lea eax, [ebp - 0x12d0]
push eax
mov byte [ebp - 4], 0x9f
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x13c8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1668]
mov byte [ebp - 4], 0xa2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
lea edx, [ebp - 0x12d0]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x13d0]
push eax
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x13d0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12d0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1004]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.RefreshSnowAgent
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44fbd6
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x100c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xa3
push 0x4b0b4c
lea ecx, [ebp - 0x100c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x181c]
push edx
lea ecx, [ebp - 0x100c]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x100c]
mov byte [ebp - 4], 0xa4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x181c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1670]
push eax
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea ecx, [ebp - 0x13d8]
push ecx
mov byte [ebp - 4], 0xa5
call fcn.004019e0
lea edx, [ebp - 0x100c]
push edx
push eax
lea eax, [ebp - 0x11a4]
push eax
mov byte [ebp - 4], 0xa6
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x13d8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1670]
mov byte [ebp - 4], 0xa9
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
lea edx, [ebp - 0x11a4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x12d8]
push eax
call fcn.0047d270
add esp, 0xc
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
mov bl, 0xaa
push 0x4af974
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0xab
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
lea edx, [ebp - 0x12d8]
push edx
push str.RefreshSnowAgent:
push ecx
call fcn.00401a70
add esp, 0xc
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x12d8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11a4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x100c]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.RefreshSCCM
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44fd63
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1014]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xac
push 0x4b0b4c
lea ecx, [ebp - 0x1014]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x13e0]
push ecx
lea ecx, [ebp - 0x1014]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1014]
mov byte [ebp - 4], 0xad
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13e0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0x13e8]
push edx
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea eax, [ebp - 0x17bc]
push eax
mov byte [ebp - 4], 0xae
call fcn.004019e0
lea ecx, [ebp - 0x1014]
push ecx
push eax
lea edx, [ebp - 0x11ac]
push edx
mov byte [ebp - 4], 0xaf
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x17bc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x13e8]
mov byte [ebp - 4], 0xb2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
mov eax, esp
mov dword [ebp - 0xe98], esp
lea ecx, [ebp - 0x11ac]
push ecx
push str.powershell__ExecutionPolicy_ByPass__File
push eax
call fcn.00401a70
lea edx, [ebp - 0x128c]
add esp, 0xc
push edx
call fcn.0047d270
add esp, 0xc
push 0xffffffffffffffff
push ecx
mov bl, 0xb3
mov byte [ebp - 4], bl
mov ecx, esp
mov dword [ebp - 0xe98], esp
lea eax, [ebp - 0x128c]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.RefreshSCCM:
mov byte [ebp - 4], 0xb4
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x128c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11ac]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1014]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.DeleteRegistryKey
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x44fe2e
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xf70]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xb5
push 0x4b0b4c
lea ecx, [ebp - 0xf70]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1678]
push edx
lea ecx, [ebp - 0xf70]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf70]
mov byte [ebp - 4], 0xb6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1678]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea eax, [ebp - 0xf70]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.0047a6c0
add esp, 4
lea ecx, [ebp - 0xf70]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.DeletecacheFiles
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44ff24
lea ecx, [ebp - 0x1188]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x12b4]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x11b4]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1874]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x11b4]
push ecx
lea edx, [ebp - 0x12b4]
push edx
lea eax, [ebp - 0x1188]
push eax
mov byte [ebp - 4], 0xba
call fcn.00475100
lea ecx, [ebp - 0x1188]
push ecx
lea edx, [ebp - 0x13f0]
push 0x4af5dc
push edx
call fcn.00401a70
push str.AppDataLocalMicrosoftWindowsINetCache
push eax
lea eax, [ebp - 0x1244]
push eax
mov byte [ebp - 4], 0xbb
call fcn.004019e0
add esp, 0x24
lea ecx, [ebp - 0x13f0]
mov byte [ebp - 4], 0xbd
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1244]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
lea ecx, [ebp - 0x1244]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1874]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11b4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12b4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1188]
jmp 0x44d425
push 0
push str.ipPing
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4500c5
push str.10.5.140.198
lea ecx, [ebp - 0x124c]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_310]
push str.10.5.140.199
lea ecx, [ebp - 0x11bc]
mov byte [ebp - 4], 0xbe
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
lea edx, [ebp - 0x124c]
push edx
push str.ping__n_2
push ecx
mov byte [ebp - 4], 0xbf
call fcn.00401a70
lea eax, [ebp - 0xed8]
add esp, 0xc
push eax
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0xed8]
mov byte [ebp - 4], 0xc0
call dword [sym.imp.mfc100.dll_Ordinal_7832]
push 0
push str.could_not_find_host
lea ecx, [ebp - 0xed8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44fff3
push 0
push str.general_failure
lea ecx, [ebp - 0xed8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44fff3
push 0
push str.destination_host_unreachable
lea ecx, [ebp - 0xed8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x450098
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
lea edx, [ebp - 0x11bc]
push edx
push str.ping__n_2
push ecx
call fcn.00401a70
lea eax, [ebp - 0x13f8]
add esp, 0xc
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xed8]
mov byte [ebp - 4], 0xc1
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13f8]
mov byte [ebp - 4], 0xc0
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xed8]
call dword [sym.imp.mfc100.dll_Ordinal_7832]
push 0
push str.could_not_find_host
lea ecx, [ebp - 0xed8]
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x450096
push 0
push str.general_failure
lea ecx, [ebp - 0xed8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x450096
push 0
push str.destination_host_unreachable
lea ecx, [ebp - 0xed8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x450098
xor bl, bl
lea ecx, [ebp - 0xed8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11bc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x124c]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea ecx, [ebp - 0xe90]
push str.DelRegistryKeyAndSubKey
push ecx
call fcn.00401b00
add esp, 8
push 0
lea ecx, [ebp - 0xe90]
test al, al
je 0x450199
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0xfac]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xc2
push 0x4b0b4c
lea ecx, [ebp - 0xfac]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x1680]
push eax
lea ecx, [ebp - 0xfac]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfac]
mov byte [ebp - 4], 0xc3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1680]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0xfac]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.0047e3d0
add esp, 4
lea ecx, [ebp - 0xfac]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.createRestorePoint
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4502fc
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1000]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xc4
push 0x4b0b4c
lea ecx, [ebp - 0x1000]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1400]
push ecx
lea ecx, [ebp - 0x1000]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1000]
mov byte [ebp - 4], 0xc5
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1400]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0x1408]
push edx
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea eax, [ebp - 0x17c4]
push eax
mov byte [ebp - 4], 0xc6
call fcn.004019e0
lea ecx, [ebp - 0x1000]
push ecx
push eax
lea edx, [ebp - 0x11c4]
push edx
mov byte [ebp - 4], 0xc7
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x17c4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1408]
mov byte [ebp - 4], 0xca
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x11c4]
push eax
lea ecx, [ebp - 0x1688]
push 0x4bb4ac
push ecx
call fcn.00401a70
add esp, 0xc
push 0
push 0
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1688]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x2ee0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x11c4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1000]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.isFirefoxinstalled
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4503a6
push str.C:Program_FilesMozilla_Firefox_firefox.exe
lea ecx, [ebp - 0x1084]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1084]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0xcb
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x45038f
push str.C:Program_Files__x86_Mozilla_Firefox_firefox.exe
lea ecx, [ebp - 0x1084]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
lea eax, [ebp - 0x1084]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
lea ecx, [ebp - 0x1084]
setne bl
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea ecx, [ebp - 0x1084]
mov bl, 1
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.isGooglechromeinstalled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x450458
push str.C:Program_Files__x86_GoogleChromeApplicationchrome.exe
lea ecx, [ebp - 0x108c]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x108c]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0xcc
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x450441
push str.C:Program_FilesGoogleChromeApplicationchrome.exe
lea ecx, [ebp - 0x108c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
lea eax, [ebp - 0x108c]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
lea ecx, [ebp - 0x108c]
setne bl
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea ecx, [ebp - 0x108c]
mov bl, 1
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.isOfficeInstalled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45054b
lea ecx, [ebp - 0x1294]
push ecx
mov ecx, dword [ebp - 0xeb4]
xor bl, bl
call fcn.00448330
lea ecx, [ebp - 0x109c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea edx, [ebp - 0x1294]
push str.skype
push edx
mov byte [ebp - 4], 0xce
call fcn.00401b00
add esp, 8
lea ecx, [ebp - 0x109c]
test al, al
je 0x4504bc
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jmp 0x4504c1
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea ecx, [ebp - 0x1094]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x1094]
push eax
push ecx
lea edx, [ebp - 0x109c]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0xcf
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00484540
add esp, 8
test eax, eax
jne 0x45051e
lea ecx, [ebp - 0x1094]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea ecx, [ebp - 0x1094]
call dword [sym.imp.mfc100.dll_Ordinal_7322]
test al, al
jne 0x45051e
mov bl, 1
lea ecx, [ebp - 0x1094]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x109c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1294]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.openSilently
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x450633
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xf78]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0xd0
push 0x4b0b4c
lea ecx, [ebp - 0xf78]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1410]
push ecx
lea ecx, [ebp - 0xf78]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf78]
mov byte [ebp - 4], 0xd1
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1410]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
lea edx, [ebp - 0xf78]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x1824]
push eax
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x1824]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf78]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.checkDotNetIsInstalled
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4506b7
lea ecx, [ebp - 0x1418]
push ecx
push 0x20006
push 0
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_v4Full
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x44d42b
cmp dword [ebp - 0x1418], eax
je 0x44d42b
push 0x4bd7b0
push str.SOFTWAREMicrosoftNET_Framework_SetupNDP_v4Full
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0047a780
add esp, 0xc
mov dword [ebp - 0xe98], eax
fild dword [ebp - 0xe98]
test eax, eax
jns 0x4506a1
fadd qword [0x4bd7a8]
fcomp qword [str.ffffff]
fnstsw ax
test ah, 0x41
jne 0x44d42b
jmp 0x459f94
push 0
push str.isMSIInstaller
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4507bd
mov ecx, dword [ebp - 0xeb4]
lea edx, [ebp - 0x11cc]
push edx
mov bl, 1
call fcn.00448330
lea ecx, [ebp - 0x10a4]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x11cc]
push str.skype
push eax
mov byte [ebp - 4], 0xd3
call fcn.00401b00
add esp, 8
lea ecx, [ebp - 0x10a4]
test al, al
je 0x45071b
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsLync.EXEPath
jmp 0x450720
push str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp_PathsOUTLOOK.EXEPath
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea ecx, [ebp - 0xfc8]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xfc8]
push ecx
push ecx
lea edx, [ebp - 0x10a4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0xd4
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00484540
add esp, 8
test eax, eax
jne 0x45078e
lea ecx, [ebp - 0xfc8]
call dword [sym.imp.mfc100.dll_Ordinal_7832]
lea ecx, [ebp - 0xfc8]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0
push str.root
lea ecx, [ebp - 0xfc8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x450790
xor bl, bl
lea ecx, [ebp - 0xfc8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10a4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11cc]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.isWPSInstalled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45085d
push str.C:Program_Files__x86_WPS_InteractiveWPS_Interactive.exe
lea ecx, [ebp - 0x10ac]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea eax, [ebp - 0x10ac]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xd5
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x450843
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x10ac]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea edx, [ebp - 0x10ac]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
lea ecx, [ebp - 0x10ac]
sete bl
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.isWePresentInstalled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4509c5
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1690]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xd6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1690]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x1420]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xd7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1420]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea edx, [ebp - 0xe90]
push edi
push edx
call fcn.00405d10
add esp, 8
test al, al
je 0x450940
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.C:Program_Files__x86_MirrorOpMirrorOp.exe
lea ecx, [ebp - 0x10b4]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea eax, [ebp - 0x10b4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xd8
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x4509ab
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x10b4]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea edx, [ebp - 0x10b4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
lea ecx, [ebp - 0x10b4]
sete bl
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.isFileExists
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x450ad4
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x17cc]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xd9
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17cc]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x1428]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xda
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1428]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x459f8a
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
mov dword [ebp - 0xe98], esp
lea eax, [ebp - 0xe90]
mov ecx, esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
jmp 0x459f8a
push str.BrowserCleanup
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x450eb3
lea ecx, [ebp - 0xf64]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xe90]
push ecx
lea ecx, [ebp - 0xee0]
mov byte [ebp - 4], 0xdb
call dword [sym.imp.mfc100.dll_Ordinal_300]
push 0
mov bl, 0xdc
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1698]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xdd
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1698]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x40
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
test eax, eax
jns 0x450b88
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea eax, [ebp - 0x1430]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xde
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1430]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.highlightclose
lea ecx, [ebp - 0xee0]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x450c8a
push 0
push 0x4b4b94
lea ecx, [ebp - 0xee0]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xee0]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1854]
push ecx
lea ecx, [ebp - 0xee0]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xee0]
mov byte [ebp - 4], 0xdf
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1854]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xee0]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1438]
push edx
lea ecx, [ebp - 0xee0]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xee0]
mov byte [ebp - 4], 0xe0
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1438]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xee0]
push eax
lea ecx, [ebp - 0xf64]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0xe90]
push str.InternetExplorer
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x450d0a
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push 0
lea ecx, [ebp - 0x3d4c]
call fcn.00439de0
push ecx
lea eax, [ebp - 0xf64]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xe1
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x3d4c]
call fcn.00448eb0
lea ecx, [ebp - 0x3d4c]
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x3d4c]
mov esi, eax
mov byte [ebp - 4], bl
call fcn.00438fc0
jmp 0x450e8d
lea ecx, [ebp - 0xe90]
push str.GoogleChrome
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x450d8a
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push 0
lea ecx, [ebp - 0x36dc]
call fcn.00439de0
push ecx
lea eax, [ebp - 0xf64]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xe2
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x36dc]
call fcn.00448eb0
lea ecx, [ebp - 0x36dc]
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x36dc]
mov esi, eax
mov byte [ebp - 4], bl
call fcn.00438fc0
jmp 0x450e8d
lea ecx, [ebp - 0xe90]
push str.MozillaFirefox
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x450e0a
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push 0
lea ecx, [ebp - 0x33a4]
call fcn.00439de0
push ecx
lea eax, [ebp - 0xf64]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xe3
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x33a4]
call fcn.00448eb0
lea ecx, [ebp - 0x33a4]
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x33a4]
mov esi, eax
mov byte [ebp - 4], bl
call fcn.00438fc0
jmp 0x450e8d
lea ecx, [ebp - 0xe90]
push str.Microsoft_Edge
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x450e87
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push 0
lea ecx, [ebp - 0x3a14]
call fcn.00439de0
push ecx
lea eax, [ebp - 0xf64]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xe4
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x3a14]
call fcn.00448eb0
lea ecx, [ebp - 0x3a14]
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x3a14]
mov esi, eax
mov byte [ebp - 4], bl
call fcn.00438fc0
jmp 0x450e8d
mov esi, dword [ebp - 0x1278]
test esi, esi
lea ecx, [ebp - 0xee0]
sete bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf64]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.MoveDataDlg
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x450fdd
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x16a0]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xe5
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16a0]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea edx, [ebp - 0x1440]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xe6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1440]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x4dc4]
call fcn.0045c860
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xe7
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x4dc4]
call fcn.00448560
lea ecx, [ebp - 0x4dc4]
call sub.mfc100.dll_Ordinal_3620
cmp eax, edi
jne 0x450fc2
lea ecx, [ebp - 0x4dc4]
mov bl, 1
mov byte [ebp - 4], 2
call fcn.0045ca80
jmp 0x459f8c
cmp eax, 2
jne 0x450fc9
xor bl, bl
lea ecx, [ebp - 0x4dc4]
mov byte [ebp - 4], 2
call fcn.0045ca80
jmp 0x459f8c
push str.SystemSlowRepairDlg
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4510ff
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x17d4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xe8
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17d4]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea edx, [ebp - 0x1448]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xe9
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1448]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x2e48]
call fcn.0040dd00
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0xea
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x2e48]
call fcn.00448f10
lea ecx, [ebp - 0x2e48]
call sub.mfc100.dll_Ordinal_3620
cmp eax, edi
jne 0x4510e4
lea ecx, [ebp - 0x2e48]
mov bl, 1
mov byte [ebp - 4], 2
call fcn.0040dde0
jmp 0x459f8c
cmp eax, 2
jne 0x4510eb
xor bl, bl
lea ecx, [ebp - 0x2e48]
mov byte [ebp - 4], 2
call fcn.0040dde0
jmp 0x459f8c
push str.move_data
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4517cb
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x16a8]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xeb
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16a8]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea edx, [ebp - 0x1450]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xec
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1450]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov ecx, dword [ebp - 0xeb4]
lea eax, [ebp - 0xed0]
push eax
call fcn.004482d0
push 0
mov bl, 0xed
push str.move_data
lea ecx, [ebp - 0xed0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4511f9
push 0
push 0x4b4b94
lea ecx, [ebp - 0xed0]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
lea ecx, [ebp - 0xed0]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x182c]
push ecx
lea ecx, [ebp - 0xed0]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xed0]
mov byte [ebp - 4], 0xee
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x182c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xed0]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1458]
push edx
lea ecx, [ebp - 0xed0]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xed0]
mov byte [ebp - 4], 0xef
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1458]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1254]
push eax
call fcn.00476b60
add esp, 4
lea ecx, [ebp - 0x1254]
mov byte [ebp - 4], 0xf0
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0xec0]
push 0x4af5dc
push ecx
call fcn.00401a70
add esp, 0xc
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea edx, [ebp - 0xe90]
push 0x4b4758
mov ebx, 0xf2
push edx
mov byte [ebp - 4], bl
call fcn.00401b00
add esp, 8
test al, al
je 0x4512eb
push str.D:BackUp_
jmp 0x451308
lea eax, [ebp - 0xe90]
push 0x4b474c
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x451314
push str.E:BackUp_
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
lea edx, [ebp - 0xea8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x45134f
push 0
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push eax
call esi
jmp 0x451355
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0xed0]
push 0x4bdde8
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x4514e3
push 0x4afb74
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0x16b0]
push ecx
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0xf3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16b0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.Desktop_BackUp
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea edx, [ebp - 0x1460]
push edx
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xea8]
mov byte [ebp - 4], 0xf4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1460]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea eax, [ebp - 0xea8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x451426
push 0
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call esi
push ecx
lea edx, [ebp - 0xea8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0xec0]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push eax
mov byte [ebp - 4], 0xf5
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.00480770
add esp, 8
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.00475760
add esp, 4
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push 0x4af974
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0xea8]
push ecx
lea edx, [ebp - 0x17dc]
push str.moveDesktop_ContentTo
push edx
mov byte [ebp - 4], 0xf6
call fcn.00401a70
add esp, 8
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str._result
push eax
push ecx
mov byte [ebp - 4], 0xf7
call fcn.004019e0
add esp, 0xc
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x17dc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x451798
lea edx, [ebp - 0xed0]
push 0x4bdddc
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x451671
push 0x4afb80
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea eax, [ebp - 0x1468]
push eax
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0xf9
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1468]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.Downloads_BackUp
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0x16b8]
push ecx
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xea8]
mov byte [ebp - 4], 0xfa
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16b8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0xea8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x4515b4
push 0
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call esi
push ecx
lea eax, [ebp - 0xea8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea edx, [ebp - 0xec0]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push edx
mov byte [ebp - 4], 0xfb
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.00480770
add esp, 8
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.00475760
add esp, 4
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push 0x4af974
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0xea8]
push eax
lea ecx, [ebp - 0x1470]
push str.moveDownload_ContentTo
push ecx
mov byte [ebp - 4], 0xfc
call fcn.00401a70
add esp, 8
mov edx, esp
mov dword [ebp - 0xea0], esp
push str._result
push eax
push edx
mov byte [ebp - 4], 0xfd
call fcn.004019e0
add esp, 0xc
mov byte [ebp - 4], 0xfe
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x1470]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x451798
lea eax, [ebp - 0xed0]
push 0x4bddd0
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x451798
push 0x4afb5c
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0x186c]
push ecx
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xec0]
mov byte [ebp - 4], 0xff
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x186c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.Documents_backup
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea edx, [ebp - 0x1478]
push edx
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xea8]
mov dword [ebp - 4], 0x100
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1478]
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea eax, [ebp - 0xea8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x451745
push 0
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call esi
push ecx
lea edx, [ebp - 0xea8]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0xec0]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push eax
mov dword [ebp - 4], 0x101
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov dword [ebp - 4], ebx
call fcn.00480770
add esp, 8
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.00475760
add esp, 4
lea ecx, [ebp - 0xea8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xec0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1254]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xed0]
jmp 0x44d425
push str.isDriveExists
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4519c3
push 0x4b478c
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x16c0]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x102
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x16c0]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea edx, [ebp - 0x1480]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x103
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1480]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.drive_to_find_if_exist_or_not
mov dword [ebp - 4], 0x104
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov dword [ebp - 4], esi
call fcn.0047c140
add esp, 0xc
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.wmic_logicaldisk_where_drivetype3_get_deviceid
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0xf44]
push ecx
call fcn.0047d270
add esp, 0xc
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0xf44]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov dword [ebp - 4], 0x105
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.Number_of_logical_drives_in_machine
mov byte [ebp - 4], 6
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 5
call fcn.0047c140
add esp, 0xc
push 0x4ae8b4
push str.DeviceID
lea ecx, [ebp - 0xf44]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
lea ecx, [ebp - 0xf44]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xf44]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.drive_id_after_removing_deviceId_string
mov byte [ebp - 4], 7
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 5
call fcn.0047c140
add esp, 0xc
push 0
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0xf44]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4519ab
mov bl, 1
lea ecx, [ebp - 0xf44]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.softwareinstall
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x451c5a
lea ecx, [ebp - 0x1198]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov dword [ebp - 4], 0x108
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x10bc]
push ecx
mov ecx, eax
call fcn.0040f1e0
push 0
push 0x4ae8b4
lea ecx, [ebp - 0x10bc]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x451a51
push eax
lea edx, [ebp - 0x17e4]
push edx
lea ecx, [ebp - 0x10bc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1198]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17e4]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x451a64
lea eax, [ebp - 0x10bc]
push eax
lea ecx, [ebp - 0x1198]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1488]
push ecx
mov ecx, dword [ebp - 0xeb4]
call fcn.00448330
push str.showProgressDlg
mov ecx, eax
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
call fcn.00401b00
add esp, 8
lea ecx, [ebp - 0x1488]
mov bl, al
mov byte [ebp - 4], 9
call dword [sym.imp.mfc100.dll_Ordinal_901]
test bl, bl
je 0x451ad4
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.showProgressDlg
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0xc
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 9
call fcn.00401840
call fcn.004764f0
lea ecx, [ebp - 0x1190]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x119c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xf34]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea edx, [ebp - 0xf34]
push edx
lea eax, [ebp - 0x119c]
push eax
lea ecx, [ebp - 0x1190]
push ecx
lea edx, [ebp - 0x16c8]
mov bl, 0xf
push edx
mov byte [ebp - 4], bl
call fcn.00476a80
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.iAssistStatus.ll
push eax
push ecx
mov byte [ebp - 4], 0x10
call fcn.004019e0
add esp, 0xc
call fcn.0047ca90
add esp, 0x10
lea ecx, [ebp - 0x16c8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.success
lea ecx, [ebp - 0x1190]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_7832]
push eax
call fcn.00401b00
test al, al
setne bl
add esp, 4
lea edx, [ebp - 0xf34]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x451bea
cmp bl, 1
jne 0x451c12
push 0
push str.Program_Files__x86_
lea ecx, [ebp - 0xf34]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x451bca
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0xf34]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea eax, [ebp - 0xf34]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
jmp 0x451bef
cmp bl, 1
jne 0x451c12
cmp al, 1
jne 0x451c12
push edi
push 0
push 0
lea ecx, [ebp - 0xf34]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xf34]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x119c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1190]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10bc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1198]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.addAutoConfigScriptAddress
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x451e03
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1490]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x111
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov ebx, 2
lea ecx, [ebp - 0x1490]
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea edx, [ebp - 0x1834]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x112
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1834]
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xe90]
push eax
lea ecx, [ebp - 0x1018]
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x1018]
mov dword [ebp - 4], 0x113
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea ecx, [ebp - 0xf80]
push ecx
push 0x20006
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x451de2
cmp dword [ebp - 0xf80], eax
je 0x451de2
lea ecx, [ebp - 0x1018]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x1018]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
mov edx, dword [ebp - 0xf80]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push eax
push edi
push 0
push str.AutoConfigURL
push edx
call esi
mov ecx, dword [ebp - 0xf80]
push 4
lea eax, [ebp - 0x1498]
push eax
push 4
xor edi, edi
push edi
push str.AutoDetect
push ecx
mov dword [ebp - 0x1498], edi
call esi
mov eax, dword [ebp - 0xf80]
push 4
lea edx, [ebp - 0x16d0]
push edx
push 4
push edi
push str.ProxyEnable
push eax
mov dword [ebp - 0x16d0], edi
call esi
mov ecx, dword [ebp - 0xf80]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1018]
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.isWiFiConnected
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x451e60
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.netsh_wlan_show_interface_name_airtelhive_
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x12d4]
push edx
call fcn.0047d270
add esp, 0xc
push 0
push str.State_:_connected
lea ecx, [ebp - 0x12d4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
lea ecx, [ebp - 0x12d4]
sete bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.RegisterAppForStartup
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45207f
lea ecx, [ebp - 0xefc]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1130]
mov dword [ebp - 4], 0x114
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1134]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x14a0]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xefc]
mov byte [ebp - 4], 0x17
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14a0]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xefc]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x17ec]
push ecx
lea ecx, [ebp - 0xefc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xefc]
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17ec]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0094
lea ecx, [ebp - 0xefc]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea edx, [ebp - 0x14a8]
push edx
lea ecx, [ebp - 0xefc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1130]
mov byte [ebp - 4], 0x19
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14a8]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xefc]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x16d8]
push eax
lea ecx, [ebp - 0xefc]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x1134]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16d8]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1130]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x125c]
call dword [sym.imp.mfc100.dll_Ordinal_290]
lea ecx, [ebp - 0x125c]
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc100.dll_Ordinal_1446]
lea ecx, [ebp - 0x1134]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x11dc]
call dword [sym.imp.mfc100.dll_Ordinal_290]
lea ecx, [ebp - 0x11dc]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc100.dll_Ordinal_1446]
push eax
push esi
call fcn.004767f0
add esp, 8
lea ecx, [ebp - 0x11dc]
call dword [sym.imp.mfc100.dll_Ordinal_900]
lea ecx, [ebp - 0x125c]
call dword [sym.imp.mfc100.dll_Ordinal_900]
lea ecx, [ebp - 0x1134]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1130]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xefc]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.RestartUserMachine
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x45215b
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xff0]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xff0]
mov dword [ebp - 4], 0x11d
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x14b0]
push edx
lea ecx, [ebp - 0xff0]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xff0]
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14b0]
mov byte [ebp - 4], 0x1d
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xff0]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
push eax
call fcn.00476950
add esp, 8
push 0x15f90
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xff0]
jmp 0x44d425
push str.WriteDownloadURL
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x45231a
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x185c]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x11f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov ebx, 2
lea ecx, [ebp - 0x185c]
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x14b8]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x120
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14b8]
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea edx, [ebp - 0x16e0]
push edx
call fcn.00479050
push str.AnakageCoursesSoftwares
push eax
lea eax, [ebp - 0x10d4]
push eax
mov dword [ebp - 4], 0x121
call fcn.004019e0
add esp, 0x10
lea ecx, [ebp - 0x16e0]
mov byte [ebp - 4], 0x23
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14c0]
push ecx
call fcn.00479050
push str.AnakageCoursesSoftwares_softwareURL.ll
push eax
lea edx, [ebp - 0x11e4]
push edx
mov byte [ebp - 4], 0x24
call fcn.004019e0
add esp, 0x10
lea ecx, [ebp - 0x14c0]
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10d4]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
push 0
lea ecx, [ebp - 0x10d4]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp eax, edi
jne 0x4522fa
push 0x4b170c
lea ecx, [ebp - 0x11e4]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x4522fa
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push esi
call dword [sym.imp.MSVCR100.dll_fprintf]
push esi
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 0xc
lea ecx, [ebp - 0x11e4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10d4]
mov dword [ebp - 4], ebx
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.DownloadSoftware
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x452c3b
lea ecx, [ebp - 0xecc]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x187c]
mov dword [ebp - 4], 0x127
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xf14]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x113c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xfd0]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
mov bl, 0x2b
push 0x4b4b94
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45242d
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x17f4]
push ecx
mov ecx, esi
call fcn.0044a360
push eax
lea ecx, [ebp - 0xf14]
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17f4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x2f
lea ecx, [ebp - 0xf14]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
lea ecx, [ebp - 0xf14]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x14c8]
push edx
lea ecx, [ebp - 0xf14]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xfd0]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14c8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x4524d1
push 0
push 0x28
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4143]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x16e8]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xecc]
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16e8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xecc]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x14d0]
push ecx
lea ecx, [ebp - 0xecc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xecc]
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14d0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xecc]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea ecx, [ebp - 0xf14]
call dword [sym.imp.mfc100.dll_Ordinal_7322]
test al, al
je 0x452591
lea edx, [ebp - 0xecc]
push edx
lea ecx, [ebp - 0x113c]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push ecx
lea eax, [ebp - 0xecc]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x183c]
push ecx
call fcn.0047fc30
add esp, 8
push eax
lea ecx, [ebp - 0xecc]
mov byte [ebp - 4], 0x30
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x183c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x2f
lea ecx, [ebp - 0xecc]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
lea ecx, [ebp - 0xecc]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x14d8]
push edx
lea ecx, [ebp - 0xecc]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xfd0]
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14d8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x10dc]
push eax
call fcn.00476a50
add esp, 4
lea ecx, [ebp - 0x10dc]
push ecx
lea ecx, [ebp - 0xf3c]
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0xf3c]
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
lea ecx, [ebp - 0xf3c]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [ebp - 0xfd0]
push edx
lea eax, [ebp - 0xf3c]
push eax
lea ecx, [ebp - 0xee8]
push ecx
call fcn.004018e0
add esp, 0xc
lea ecx, [ebp - 0xee8]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push ecx
lea edx, [ebp - 0xee8]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x45268c
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push 0x4af974
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.Start_of_utils::downloadSoftwares_deleting_old_.zip_files
mov byte [ebp - 4], 0x35
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x34
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0xee8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0xfd0]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
push 0x140
mov byte [ebp - 4], 0x36
call fcn.0040d160
mov ecx, eax
mov dword [ebp - 0xe94], ecx
mov byte [ebp - 4], 0x37
test ecx, ecx
je 0x4526c8
push 0
call fcn.00410f00
mov ebx, eax
jmp 0x4526ca
xor ebx, ebx
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
mov byte [ebp - 4], 0x36
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xea0], esp
push str.DownloadSoftware_condition__:_Started_the_thread_for_running_Download_Progress_Dialog
mov byte [ebp - 4], 0x38
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x36
call fcn.0047c140
add esp, 0xc
push 0
push 0
push 0
push 0
push ebx
push 0x448c10
call sub.mfc100.dll_Ordinal_1854
lea ecx, [ebp - 0xf88]
mov edi, eax
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov byte [ebp - 4], 0x39
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x118c]
push eax
call fcn.004339a0
lea ecx, [ebp - 0x118c]
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc100.dll_Ordinal_7322]
test al, al
jne 0x4528ed
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x1264]
push edx
call fcn.004339d0
push 0x4b0094
lea eax, [ebp - 0x118c]
push eax
lea ecx, [ebp - 0x16f0]
push ecx
mov byte [ebp - 4], 0x3b
call fcn.004019e0
add esp, 0xc
lea edx, [ebp - 0x1264]
push edx
push eax
lea eax, [ebp - 0x11ec]
push eax
mov byte [ebp - 4], 0x3c
call fcn.004018e0
add esp, 0xc
lea ecx, [ebp - 0x16f0]
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0x11ec]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov ecx, dword [ebp - 0xe98]
lea eax, [ebp - 0x129c]
push eax
call fcn.0044a200
mov byte [ebp - 4], 0x3f
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x1020]
push edx
call fcn.00433910
push 0
push 0x4bd374
lea ecx, [ebp - 0x1020]
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push 0x4b4b94
lea eax, [ebp - 0x129c]
push eax
lea ecx, [ebp - 0x17fc]
push ecx
call fcn.004019e0
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x41
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
add esi, 2
push esi
lea ecx, [ebp - 0x1020]
call dword [sym.imp.mfc100.dll_Ordinal_7178]
lea ecx, [ebp - 0x17fc]
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str._api_download_software_name
lea edx, [ebp - 0x1020]
push edx
lea eax, [ebp - 0x16f8]
push eax
call fcn.004019e0
add esp, 0xc
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x113c]
push ecx
push eax
lea edx, [ebp - 0x14e8]
push edx
call fcn.004018e0
add esp, 0xc
push eax
lea ecx, [ebp - 0xf88]
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14e8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x16f8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1020]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x129c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11ec]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1264]
mov byte [ebp - 4], 0x3a
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x45295f
lea ecx, [ebp - 0xf14]
call dword [sym.imp.mfc100.dll_Ordinal_7322]
test al, al
jne 0x452912
lea eax, [ebp - 0xf14]
push eax
lea ecx, [ebp - 0xf88]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
jmp 0x45295f
lea ecx, [ebp - 0xecc]
push ecx
lea ecx, [ebp - 0xf88]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.DownloadSoftware_condition__:_Started_the_download
mov byte [ebp - 4], 0x44
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x3a
call fcn.0047c140
add esp, 0xc
xor esi, esi
push esi
push esi
lea ecx, [ebp - 0xee8]
call dword [sym.imp.mfc100.dll_Ordinal_6207]
push eax
lea ecx, [ebp - 0xf88]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push esi
call sub.urlmon.dll_URLDownloadToFileA
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
mov ecx, ebx
mov byte [ebx + 0x13c], 1
call fcn.00410d70
mov dword [ebp - 0x11f4], esi
cmp edi, esi
je 0x452a17
mov eax, dword [edi + 0x2c]
lea edx, [ebp - 0x11f4]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
cmp dword [ebp - 0x11f4], 0x103
jne 0x452a14
mov ecx, dword [edi + 0x2c]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.DownloadSoftware_condition__:_Killed_the_thread
mov byte [ebp - 4], 0x45
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x3a
call fcn.0047c140
mov edx, dword [edi + 0x2c]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x2c], esi
lea ecx, [ebp - 0x118c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf88]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov dword [ebp - 4], 0x134
push ecx
lea eax, [ebp - 0xee8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x452bb8
push 0
push str..xlsx
lea ecx, [ebp - 0xee8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x452ab9
push str.sTemp.csv
lea ecx, [ebp - 0x10dc]
push ecx
lea edx, [ebp - 0x14f0]
push edx
call fcn.004019e0
add esp, 0xc
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0xee8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_rename]
add esp, 8
lea ecx, [ebp - 0x14f0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str..zip
lea ecx, [ebp - 0xee8]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x452bcf
push ecx
lea eax, [ebp - 0xee8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea edx, [ebp - 0xf3c]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0x49
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], 0x34
call fcn.00473730
add esp, 8
jmp 0x452bcf
lea ecx, [ebp - 0xf3c]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
xor bl, bl
lea ecx, [ebp - 0xee8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf3c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10dc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfd0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x113c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x187c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xecc]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.DownloadSoftwareProgressBar
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x452d7a
push 0x28
call dword [sym.imp.mfc100.dll_Ordinal_4143]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0x29
lea ecx, [ebp - 0xf4c]
mov dword [ebp - 4], 0x14a
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x14f8]
push ecx
lea ecx, [ebp - 0xf4c]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf4c]
mov byte [ebp - 4], 0x4b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov bl, 0x4a
lea ecx, [ebp - 0x14f8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf4c]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0
lea ecx, [ebp - 0x1d90]
call fcn.00410f00
push ecx
lea edx, [ebp - 0xf4c]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0x4c
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x1d90]
call fcn.00401840
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
push 0
push 0
push 0
lea ecx, [ebp - 0x1d90]
call sub.mfc100.dll_Ordinal_3620
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
push 0
push 0
call esi
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x1d90]
push eax
call fcn.00410d00
push eax
push 0
push 0
call esi
lea ecx, [ebp - 0x1d90]
mov byte [ebp - 4], bl
call fcn.00410b40
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xf4c]
jmp 0x44d425
push str.CheckComputerNameAndLoggedInUserName
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x452f61
lea ecx, [ebp - 0x1700]
push ecx
lea edx, [ebp - 0x57c]
push edx
mov dword [ebp - 0x1700], 0x101
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [ebp - 0x57c]
push eax
lea ecx, [ebp - 0x10b0]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0xf90]
push ecx
mov dword [ebp - 4], 0x14d
call fcn.00476b60
add esp, 4
lea ecx, [ebp - 0xf90]
mov byte [ebp - 4], 0x4e
call dword [sym.imp.mfc100.dll_Ordinal_7837]
lea edx, [ebp - 0xf90]
push edx
lea eax, [ebp - 0x10b0]
push eax
call fcn.00411a50
add esp, 8
lea ecx, [ebp - 0x10b0]
push ecx
push str.Your_Computer_Name__
test al, al
je 0x452ea8
lea edx, [ebp - 0x1708]
push edx
call fcn.00401a70
push str.__and_User_Name__
push eax
lea eax, [ebp - 0x1508]
push eax
mov byte [ebp - 4], 0x4f
call fcn.004019e0
lea ecx, [ebp - 0xf90]
push ecx
push eax
lea edx, [ebp - 0x1804]
push edx
mov byte [ebp - 4], 0x50
call fcn.004018e0
push str.__are_different._Do_you_want_to_change_Computer_Name_same_as_User_Name_to_resolve_this_error_
push eax
lea eax, [ebp - 0x1500]
push eax
mov byte [ebp - 4], 0x51
call fcn.004019e0
add esp, 0x30
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x52
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1500]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1804]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1508]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1708]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
jmp 0x452f3d
lea edx, [ebp - 0x1710]
push edx
call fcn.00401a70
push str.__and_User_Name__
push eax
lea eax, [ebp - 0x1518]
push eax
mov byte [ebp - 4], 0x53
call fcn.004019e0
lea ecx, [ebp - 0xf90]
push ecx
push eax
lea edx, [ebp - 0x1844]
push edx
mov byte [ebp - 4], 0x54
call fcn.004018e0
push str.__are_same._Click_on_NEXT_STEP
push eax
lea eax, [ebp - 0x1510]
push eax
mov byte [ebp - 4], 0x55
call fcn.004019e0
add esp, 0x30
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x56
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1510]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1844]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1518]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1710]
call dword [sym.imp.mfc100.dll_Ordinal_901]
xor bl, bl
lea ecx, [ebp - 0xf90]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10b0]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.addSSL2ToJava
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4531fa
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1520]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x157
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1520]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea edx, [ebp - 0x180c]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x158
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x180c]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xf68]
push 0x4c9950
push eax
call fcn.00476e10
add esp, 8
push str.SunJavaDeploymentdeployment.properties
lea ecx, [ebp - 0xf68]
mov dword [ebp - 4], 0x159
call dword [sym.imp.mfc100.dll_Ordinal_1483]
lea ecx, [ebp - 0x18f0]
call sub.mfc100.dll_Ordinal_423
lea ecx, [ebp - 0x1028]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov bl, 0x5b
push 0
lea ecx, [ebp - 0xf68]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x18f0]
call sub.mfc100.dll_Ordinal_4188
test eax, eax
je 0x4531c5
push 0x4b1720
lea ecx, [ebp - 0xf68]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x45312a
mov edi, dword [sym.imp.MSVCR100.dll_fgets]
push esi
lea ecx, [ebp - 0xa68]
push 0x3e8
push ecx
call edi
add esp, 0xc
test eax, eax
je 0x45312a
lea ecx, [ecx]
lea edx, [ebp - 0xa68]
push edx
lea ecx, [ebp - 0x1528]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push eax
lea ecx, [ebp - 0x1028]
mov byte [ebp - 4], 0x5c
call dword [sym.imp.mfc100.dll_Ordinal_1479]
lea ecx, [ebp - 0x1528]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x4b1700
lea ecx, [ebp - 0x1028]
call dword [sym.imp.mfc100.dll_Ordinal_1483]
push esi
lea eax, [ebp - 0xa68]
push 0x3e8
push eax
call edi
add esp, 0xc
test eax, eax
jne 0x4530d0
mov edi, dword [sym.imp.MSVCR100.dll_fclose]
push esi
call edi
add esp, 4
push 0
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x1028]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x4531c1
push 0x4b47d4
lea ecx, [ebp - 0xf68]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
mov esi, eax
add esp, 8
test esi, esi
je 0x4531b0
push 0x4b1700
lea ecx, [ebp - 0xe90]
push ecx
lea edx, [ebp - 0x1718]
push edx
call fcn.004019e0
add esp, 0xc
push esi
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_fputs]
add esp, 8
lea ecx, [ebp - 0x1718]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push esi
call edi
add esp, 4
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov bl, 1
jmp 0x4531c7
xor bl, bl
lea ecx, [ebp - 0x1028]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x18f0]
mov byte [ebp - 4], 0x59
call sub.mfc100.dll_Ordinal_979
lea ecx, [ebp - 0xf68]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.runScriptFileDownloaded
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4534ef
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1530]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x15d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1530]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea ecx, [ebp - 0x116c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
mov ecx, dword [ebp - 0xeb4]
lea edx, [ebp - 0xf08]
push edx
mov dword [ebp - 4], 0x15e
call fcn.004482d0
push 0
push str.runScriptFileDownloaded
lea ecx, [ebp - 0xf08]
mov byte [ebp - 4], 0x5f
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4532df
push 0
push 0x4b4b94
lea ecx, [ebp - 0xf08]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
lea ecx, [ebp - 0xf08]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1864]
push eax
lea ecx, [ebp - 0xf08]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xf08]
mov byte [ebp - 4], 0x60
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1864]
mov byte [ebp - 4], 0x5f
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xf08]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x10e4]
push ecx
lea ecx, [ebp - 0xf08]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push 0
push str.true
lea ecx, [ebp - 0x10e4]
mov byte [ebp - 4], 0x61
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
push ecx
lea edx, [ebp - 0x116c]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
test eax, eax
js 0x4533aa
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x10e4]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push eax
mov byte [ebp - 4], 0x62
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], 0x61
call fcn.00485c20
add esp, 0xc
test al, al
je 0x4533d6
jmp 0x4533d4
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.False
mov byte [ebp - 4], 0x63
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x61
call fcn.00485c20
add esp, 0xc
mov bl, 1
mov ecx, dword [ebp - 0xeb4]
lea eax, [ebp - 0x1538]
push eax
call fcn.00448330
push str.showProgressDlg
mov ecx, eax
mov byte [ebp - 4], 0x64
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
call fcn.00401b00
add esp, 8
lea ecx, [ebp - 0x1538]
mov byte [ebp - 0xe99], al
mov byte [ebp - 4], 0x61
call dword [sym.imp.mfc100.dll_Ordinal_901]
cmp byte [ebp - 0xe99], 0
je 0x4534bf
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.showProgressDlg
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x65
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 0x61
call fcn.00401840
call fcn.004764f0
test eax, eax
jne 0x4534bf
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.Taskkill__IM_IAssistHelper.exe__F
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x1540]
push ecx
call fcn.0047d270
add esp, 0xc
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.Taskkill__IM_IAssistHelper64.exe__F
mov byte [ebp - 4], 0x66
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x1720]
push edx
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x1720]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1540]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10e4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf08]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x116c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.RunTroubleshooter
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4539a1
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x17a4]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x167
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x17a4]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x1548]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x168
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1548]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0xe90]
push 0x4ae26b
push edx
call fcn.00401980
add esp, 8
test al, al
je 0x4535e2
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x1728]
push ecx
mov ecx, eax
call fcn.004018a0
lea ecx, [ebp - 0x1728]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.test
lea ecx, [ebp - 0xf0c]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0xe90]
push str.Audio_Troubleshooter
push edx
mov dword [ebp - 4], 0x169
call fcn.00401b00
add esp, 8
test al, al
je 0x45365c
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.Audio_Troubleshooter
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
lea ecx, [ebp - 0x23a4]
call fcn.0040e9b0
lea ecx, [ebp - 0x23a4]
mov byte [ebp - 4], 0x6a
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x23a4]
mov dword [ebp - 0xea0], eax
mov byte [ebp - 4], 0x69
call fcn.0040e310
jmp 0x453962
lea eax, [ebp - 0xe90]
push str.Maintenance_Troubleshooter
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x4536a4
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.msdt.exe__id_MaintenanceDiagnostic
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x1550]
push ecx
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x1550]
jmp 0x45395c
lea edx, [ebp - 0xe90]
push str.Disk_Troubleshooter
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x4536ec
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.cleanmgr
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x17a8]
push eax
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x17a8]
jmp 0x45395c
lea ecx, [ebp - 0xe90]
push str.Networking_Troubleshooter
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x45374e
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.Networking_Troubleshooter
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
lea ecx, [ebp - 0x2268]
call fcn.0040e9b0
lea ecx, [ebp - 0x2268]
mov byte [ebp - 4], 0x6b
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x2268]
mov dword [ebp - 0xea0], eax
mov byte [ebp - 4], 0x69
call fcn.0040e310
jmp 0x453962
lea edx, [ebp - 0xe90]
push str.IE_Security_Troubleshooter
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x4537a7
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.msdt.exe__id_IESecurityDiagnostic
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x1558]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x6c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1558]
jmp 0x45395c
lea ecx, [ebp - 0xe90]
push str.Printer_Troubleshooter
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x453800
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.msdt.exe__id_PrinterDiagnostic
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x1730]
push edx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x6d
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1730]
jmp 0x45395c
lea eax, [ebp - 0xe90]
push str.Power_Troubleshooter
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x453859
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.msdt.exe__id_PowerDiagnostic
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x1560]
push ecx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x6e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1560]
jmp 0x45395c
lea edx, [ebp - 0xe90]
push str.Search_Troubleshooter
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x4538b2
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.msdt.exe__id_SearchDiagnostic
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x17b0]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x6f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17b0]
jmp 0x45395c
lea ecx, [ebp - 0xe90]
push str.Hardware_Troubleshooter
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x453908
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.msdt.exe__id_DeviceDiagnostic
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x1568]
push edx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x70
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1568]
jmp 0x45395c
lea eax, [ebp - 0xe90]
push str.Bluetooth_Troubleshooter
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x453962
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.msdt.exe__id_BluetoothDiagnostic
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x1738]
push ecx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xf0c]
mov byte [ebp - 4], 0x71
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1738]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0xf0c]
push 0x4ae26b
push edx
call fcn.00401980
add esp, 8
test al, al
jne 0x453987
cmp dword [ebp - 0xea0], 0
jne 0x453987
mov bl, 1
jmp 0x453989
xor bl, bl
lea ecx, [ebp - 0xf0c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.isExeAlreadyRunning
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x453a84
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1570]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x172
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1570]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x17b8]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x173
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17b8]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00481f00
add esp, 8
cmp al, 1
sete bl
jmp 0x459f8c
push str.SilentSolutionExecution
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x453fbb
lea ecx, [ebp - 0x120c]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x12a4]
mov dword [ebp - 4], 0x174
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1204]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x76
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea eax, [ebp - 0xf18]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xf18]
mov byte [ebp - 4], 0x77
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1578]
push ecx
lea ecx, [ebp - 0xf18]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf18]
mov byte [ebp - 4], 0x78
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1578]
mov byte [ebp - 4], 0x77
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf18]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
push str.c:WindowsIAssist
lea ecx, [ebp - 0x126c]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x15a0]
push edx
mov byte [ebp - 4], 0x79
call fcn.00479050
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x80
lea eax, [ebp - 0x178]
push eax
push 0
mov byte [ebp - 4], 0x7a
call edi
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea edx, [ebp - 0x178]
push edx
lea ecx, [ebp - 0xf50]
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x7b
call dword [sym.imp.WINMM.dll_timeGetTime]
lea eax, [esi - 0x80]
cmp eax, 0x80
ja 0x453c3f
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x126c]
push ecx
lea ecx, [ebp - 0xf50]
mov byte [eax + 0x155], 0
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea edx, [ebp - 0x1740]
push edx
call fcn.0047c560
add esp, 4
test eax, eax
setne al
test al, al
je 0x453c1e
push esi
call fcn.0047c820
add esp, 4
jmp 0x453e22
mov eax, dword [ebp - 0x1740]
push eax
lea ecx, [ebp - 0x1580]
push ecx
call fcn.00477810
add esp, 8
lea ecx, [ebp - 0x1580]
jmp 0x453e1c
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x11fc]
push edx
call fcn.00405ca0
push 0
push 0x4ba7b4
lea ecx, [ebp - 0x11fc]
mov byte [ebp - 4], 0x7c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x453ca8
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x17c0]
push ecx
mov ecx, eax
call fcn.00433940
push 0
push str.English
mov ecx, eax
mov dword [ebp - 0xea0], 1
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov byte [ebp - 0xe99], 0
test eax, eax
js 0x453caf
mov byte [ebp - 0xe99], 1
test byte [ebp - 0xea0], 1
je 0x453cc4
lea ecx, [ebp - 0x17c0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
cmp byte [ebp - 0xe99], 0
je 0x453dc2
push 0x100
lea edx, [ebp - 0x178]
push edx
push 0
call edi
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x12bc]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push str.iAssist64.exe
lea ecx, [ebp - 0x12bc]
mov byte [ebp - 4], 0x7d
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x453d6a
push str.IAssistHelper64.exe
lea ecx, [ebp - 0xf50]
push ecx
lea edx, [ebp - 0x1588]
push edx
call fcn.004019e0
add esp, 0xc
push 0
push 0
lea ecx, [ebp - 0xf18]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov ecx, esi
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1588]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12bc]
jmp 0x453e0c
push str.IAssistHelper.exe
lea eax, [ebp - 0xf50]
push eax
lea ecx, [ebp - 0x1748]
push ecx
call fcn.004019e0
add esp, 0xc
push 0
push 0
lea ecx, [ebp - 0xf18]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov ecx, esi
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1748]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12bc]
jmp 0x453e0c
push str.IAssistHelper.exe
lea edx, [ebp - 0xf50]
push edx
lea eax, [ebp - 0x1590]
push eax
call fcn.004019e0
add esp, 0xc
push 0
push 0
lea ecx, [ebp - 0xf18]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov ecx, esi
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1590]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x11fc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x17c8]
push ecx
mov ecx, dword [ebp - 0xeb4]
call fcn.00448330
push str.showProgressDlg
mov ecx, eax
mov byte [ebp - 4], 0x7e
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
call fcn.00401b00
add esp, 8
lea ecx, [ebp - 0x17c8]
mov byte [ebp - 0xe99], al
mov byte [ebp - 4], 0x7b
call dword [sym.imp.mfc100.dll_Ordinal_901]
cmp byte [ebp - 0xe99], 0
je 0x453f1a
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.showProgressDlg
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x7f
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 0x7b
call fcn.00401840
call fcn.004764f0
test eax, eax
jne 0x453f1a
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.Taskkill__IM_IAssistHelper.exe__F
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x1750]
push edx
call fcn.0047d270
add esp, 0xc
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.Taskkill__IM_IAssistHelper64.exe__F
mov byte [ebp - 4], 0x80
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x1598]
push eax
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x1598]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1750]
mov byte [ebp - 4], 0x7b
call dword [sym.imp.mfc100.dll_Ordinal_901]
call dword [sym.imp.WINMM.dll_timeGetTime]
lea ecx, [ebp - 0x1204]
push ecx
lea edx, [ebp - 0x12a4]
push edx
lea eax, [ebp - 0x120c]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ba010
lea edx, [ebp - 0xf50]
push edx
push ecx
call fcn.004019e0
add esp, 0xc
call fcn.0047ca90
add esp, 0x10
lea ecx, [ebp - 0xf50]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x15a0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x126c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1204]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12a4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x120c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.isbitlockerenabled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x454120
lea ecx, [ebp - 0x1078]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1214]
mov dword [ebp - 4], 0x181
call dword [sym.imp.mfc100.dll_Ordinal_316]
push str.c:WindowsIAssist
lea ecx, [ebp - 0x1274]
mov byte [ebp - 4], 0x82
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x17d0]
push eax
mov byte [ebp - 4], 0x83
call fcn.00479050
add esp, 4
push 0x80
lea ecx, [ebp - 0x478]
push ecx
push 0
mov byte [ebp - 4], 0x84
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [ebp - 0x478]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea eax, [ebp - 0x478]
push eax
lea ecx, [ebp - 0x10ec]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x1274]
push ecx
lea ecx, [ebp - 0x10ec]
mov byte [ebp - 4], 0x85
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push 0x4e54a4
lea edx, [ebp - 0x1214]
push edx
lea eax, [ebp - 0x1078]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ba010
lea edx, [ebp - 0x10ec]
push edx
push ecx
call fcn.004019e0
add esp, 0xc
call fcn.0047ca90
lea eax, [ebp - 0x1078]
push str.DLocked
push eax
call fcn.00401b00
add esp, 0x18
test al, al
jne 0x4540d6
lea ecx, [ebp - 0x1078]
push str.Success
push ecx
call fcn.00401b00
add esp, 8
test al, al
jne 0x4540d6
xor bl, bl
jmp 0x4540d8
mov bl, 1
lea ecx, [ebp - 0x10ec]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x17d0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1274]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1214]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1078]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.runcustomsolution
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4545d4
lea ecx, [ebp - 0x1144]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xf40]
mov dword [ebp - 4], 0x186
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov ecx, dword [ebp - 0xeb4]
lea edx, [ebp - 0xef0]
push edx
mov byte [ebp - 4], 0x87
call fcn.00448330
push 0
mov bl, 0x88
push 0x4b478c
lea ecx, [ebp - 0xef0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xef0]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x15a8]
push eax
lea ecx, [ebp - 0xef0]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xef0]
mov byte [ebp - 4], 0x89
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15a8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b4b94
lea ecx, [ebp - 0xef0]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea ecx, [ebp - 0x1758]
push ecx
lea ecx, [ebp - 0xef0]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1144]
mov byte [ebp - 4], 0x8a
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1758]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xef0]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x15b0]
push edx
lea ecx, [ebp - 0xef0]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xf40]
mov byte [ebp - 4], 0x8b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15b0]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xf40]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x17d8]
push eax
lea ecx, [ebp - 0xf40]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf40]
mov byte [ebp - 4], 0x8c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17d8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b478c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xf98]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x8d
push 0x4b0b4c
lea ecx, [ebp - 0xf98]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x15b8]
push edx
lea ecx, [ebp - 0xf98]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf98]
mov byte [ebp - 4], 0x8e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15b8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x17e0]
push ecx
mov ecx, eax
call fcn.00405ca0
mov esi, eax
lea edx, [ebp - 0x15c0]
push edx
mov byte [ebp - 4], 0x8f
call fcn.004810a0
push str.AnakageFilesSelfHealSolutions
push eax
lea eax, [ebp - 0x1760]
push eax
mov byte [ebp - 4], 0x90
call fcn.004019e0
push esi
push eax
lea ecx, [ebp - 0x10a0]
push ecx
mov byte [ebp - 4], 0x91
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x1760]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x15c0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x17e0]
mov byte [ebp - 4], 0x95
call dword [sym.imp.mfc100.dll_Ordinal_901]
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x48]
push edx
lea eax, [ebp - 0x10a0]
push eax
lea ecx, [ebp - 0x15d0]
push ecx
call fcn.004019e0
push 0x4b0cd8
push eax
lea edx, [ebp - 0x1768]
push edx
mov byte [ebp - 4], 0x96
call fcn.004019e0
lea ecx, [ebp - 0xf98]
push ecx
push eax
lea edx, [ebp - 0x15c8]
push edx
mov byte [ebp - 4], 0x97
call fcn.004018e0
add esp, 0x24
push eax
lea ecx, [ebp - 0x10a0]
mov byte [ebp - 4], 0x98
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15c8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1768]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x15d0]
mov byte [ebp - 4], 0x95
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1030]
push eax
call fcn.00479050
push str.information.txt
lea ecx, [ebp - 0x1030]
push ecx
lea edx, [ebp - 0x17e8]
mov bl, 0x99
push edx
mov byte [ebp - 4], bl
call fcn.004019e0
add esp, 0x10
push eax
lea ecx, [ebp - 0x1030]
mov byte [ebp - 4], 0x9a
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x17e8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push edi
push 0x40
push 2
lea ecx, [ebp - 0x1030]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x1b04]
call fcn.0040ac40
lea ecx, [ebp - 0xf40]
mov byte [ebp - 4], 0x9b
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.Is64Required
push 0x4b1700
lea ecx, [ebp - 0x10a0]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea eax, [ebp - 0x1b04]
push str.ScriptPath
push eax
call fcn.00449f60
add esp, 8
push eax
call fcn.00449f60
add esp, 8
push eax
call fcn.00449f60
add esp, 8
push eax
call fcn.00449f60
add esp, 8
push eax
call fcn.00449f60
add esp, 8
lea ecx, [ebp - 0x1b04]
call fcn.0040abd0
push str.true
lea ecx, [ebp - 0x1144]
call dword [sym.imp.mfc100.dll_Ordinal_7832]
push eax
call fcn.00401b00
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
test al, al
je 0x454546
call dword [sym.imp.mfc100.dll_Ordinal_310]
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
mov byte [ebp - 4], 0x9c
push 0x4bce48
jmp 0x454560
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
mov byte [ebp - 4], 0x9d
push 0x4bce44
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x9b
call fcn.00485a00
add esp, 0xc
lea ecx, [ebp - 0x1b04]
mov byte [ebp - 4], bl
call fcn.0040adf0
lea ecx, [ebp - 0x1030]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10a0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf98]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xef0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf40]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1144]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.processrunning
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4546b4
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xfd8]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xfd8]
mov dword [ebp - 4], 0x19e
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x15d8]
push edx
lea ecx, [ebp - 0xfd8]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfd8]
mov byte [ebp - 4], 0x9f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15d8]
mov byte [ebp - 4], 0x9e
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xfd8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00481f00
add esp, 8
test al, al
lea ecx, [ebp - 0xfd8]
setne bl
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.RunCommand
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4547e8
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1770]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1a0
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1770]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea edx, [ebp - 0x15e0]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1a1
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15e0]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x10f4]
push ecx
call fcn.0047d270
add esp, 0xc
push 0
push str.not_recognized
lea ecx, [ebp - 0x10f4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x4547d5
push 0
push str.____empty_
lea ecx, [ebp - 0x10f4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x4547d5
lea ecx, [ebp - 0x10f4]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea ecx, [ebp - 0x10f4]
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.doesfilepathexists
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4548c4
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x17f0]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1a2
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x17f0]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea eax, [ebp - 0x15e8]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1a3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15e8]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
jmp 0x459f8a
push str.skypeDialog
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x45492d
lea ecx, [ebp - 0x4570]
call fcn.00469b60
lea ecx, [ebp - 0x4570]
mov dword [ebp - 4], 0x1a4
call sub.mfc100.dll_Ordinal_3620
cmp eax, edi
jne 0x45490f
lea ecx, [ebp - 0x4570]
mov bl, 1
mov dword [ebp - 4], 2
call fcn.00469c60
jmp 0x459f8c
cmp eax, 2
jne 0x454916
xor bl, bl
lea ecx, [ebp - 0x4570]
mov dword [ebp - 4], 2
call fcn.00469c60
jmp 0x459f8c
push str.ProxyDialogForClient
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x454b6a
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1778]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1a5
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1778]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x15f0]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1a6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15f0]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x12e4]
push edx
call fcn.00405ca0
lea eax, [ebp - 0xe90]
push 0x4ae26b
push eax
mov dword [ebp - 4], 0x1a7
call fcn.00401980
add esp, 8
test al, al
je 0x454a4f
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], 0xa8
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 0xa7
call fcn.00401840
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xa9
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x12e0]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xaa
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x12e0]
mov byte [ebp - 4], 0xa9
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x1c50]
call fcn.00408c00
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xab
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x1c50]
call fcn.00448440
push ecx
lea eax, [ebp - 0x12cc]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x1c50]
call fcn.00420000
lea ecx, [ebp - 0x1c50]
call sub.mfc100.dll_Ordinal_3620
test eax, eax
lea ecx, [ebp - 0x1c50]
sete bl
mov byte [ebp - 4], 0xa9
call fcn.00408cb0
lea ecx, [ebp - 0x12cc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12e4]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.MakeAdobeRederDefault
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x454c4b
lea ecx, [ebp - 0x1184]
push ecx
push 0x20006
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts.pdfUserChoice
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.02AIRV7bRz8
lea ecx, [ebp - 0x114c]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_310]
push str.AcroExch.Document.DC
lea ecx, [ebp - 0x10fc]
mov dword [ebp - 4], 0x1ac
call dword [sym.imp.mfc100.dll_Ordinal_310]
test esi, esi
jne 0x454c2d
cmp dword [ebp - 0x1184], esi
je 0x454c2d
lea ecx, [ebp - 0x114c]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x114c]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
mov edx, dword [ebp - 0x1184]
push eax
push edi
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push str.Hash
push edx
call esi
lea ecx, [ebp - 0x10fc]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x10fc]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov eax, dword [ebp - 0x1184]
push edi
push 0
push str.Progid
push eax
call esi
lea ecx, [ebp - 0x10fc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x114c]
jmp 0x44d425
push 0
push str.getdllfolderlocation
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x454d1b
lea ecx, [ebp - 0x12f4]
push ecx
call fcn.00476b60
push eax
lea edx, [ebp - 0x12ec]
push 0x4af5dc
push edx
mov dword [ebp - 4], 0x1ad
call fcn.00401a70
push str._appdataLocalMicrosoftTeamsMeetingAddinmeeting_addin_install_logs.txt
push eax
lea eax, [ebp - 0x121c]
push eax
mov byte [ebp - 4], 0xae
call fcn.004019e0
add esp, 0x1c
lea ecx, [ebp - 0x12ec]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12f4]
mov byte [ebp - 4], 0xb1
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0x121c]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
mov ecx, 0x4e54f4
test al, al
jne 0x454cf6
push str.Microsoft_Teams_is_not_installed._Please_install_it_so_that_you_can_enable_its_add_in_in_Outlook._Click_on_NEXT_STEP.
call dword [sym.imp.mfc100.dll_Ordinal_1316]
xor bl, bl
jmp 0x454d03
push str.Microsoft_Teams_Meeting_Add_in_is_already_in_outlook._Click_on_NEXT_STEP.
call dword [sym.imp.mfc100.dll_Ordinal_1316]
mov bl, 1
lea ecx, [ebp - 0x121c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.forcecloseexe
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x454e65
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1b2
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x12fc]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1224]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
lea ecx, [ebp - 0x127c]
mov dword [ebp - 4], 0x1b3
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
lea edx, [ebp - 0x1224]
push edx
lea eax, [ebp - 0x130c]
push str.taskkill__F__IM
push eax
mov byte [ebp - 4], 0xb4
call fcn.00401a70
add esp, 8
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4bcbe0
push eax
push ecx
mov byte [ebp - 4], 0xb5
call fcn.004019e0
lea edx, [ebp - 0x1304]
add esp, 0xc
push edx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0x127c]
mov byte [ebp - 4], 0xb6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1304]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x130c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x127c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1224]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.isDriveLocked
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45501a
lea ecx, [ebp - 0x1080]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1038]
mov dword [ebp - 4], 0x1b7
call dword [sym.imp.mfc100.dll_Ordinal_316]
push str.c:WindowsIAssist
lea ecx, [ebp - 0x12ac]
mov byte [ebp - 4], 0xb8
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x1314]
push eax
mov byte [ebp - 4], 0xb9
call fcn.00479050
add esp, 4
push 0x80
lea ecx, [ebp - 0x378]
push ecx
push 0
mov byte [ebp - 4], 0xba
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [ebp - 0x378]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x1104]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x12ac]
push ecx
lea ecx, [ebp - 0x1104]
mov byte [ebp - 4], 0xbb
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push 0x4e54a4
lea edx, [ebp - 0x1038]
push edx
lea eax, [ebp - 0x1080]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ba010
lea edx, [ebp - 0x1104]
push edx
push ecx
call fcn.004019e0
add esp, 0xc
call fcn.0047ca90
lea eax, [ebp - 0x1080]
push str.DLocked
push eax
call fcn.00401b00
add esp, 0x18
test al, al
je 0x454f8c
lea ecx, [ebp - 0x1038]
push ecx
mov ecx, 0x4e54f4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push edi
push 0
push 0x4ae26b
push str.explorer.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov bl, 1
jmp 0x454fd2
lea edx, [ebp - 0x1080]
push str.Success
push edx
call fcn.00401b00
add esp, 8
test al, al
je 0x454fd2
lea eax, [ebp - 0x1038]
push eax
mov ecx, 0x4e54f4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push edi
push 0
push str.C:WinBDERecoveryKey
push str.explorer.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
xor bl, bl
lea ecx, [ebp - 0x1104]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1314]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12ac]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1038]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1080]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.isDriveEncryptedLocked
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x455193
lea ecx, [ebp - 0x1154]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x110c]
mov dword [ebp - 4], 0x1bc
call dword [sym.imp.mfc100.dll_Ordinal_316]
push str.c:WindowsIAssist
lea ecx, [ebp - 0x122c]
mov byte [ebp - 4], 0xbd
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x131c]
push ecx
mov byte [ebp - 4], 0xbe
call fcn.00479050
add esp, 4
push 0x80
lea edx, [ebp - 0x278]
push edx
push 0
mov byte [ebp - 4], 0xbf
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea ecx, [ebp - 0x278]
push ecx
lea ecx, [ebp - 0x1174]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x122c]
push edx
lea ecx, [ebp - 0x1174]
mov byte [ebp - 4], 0xc0
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push 0x4e54a4
lea eax, [ebp - 0x110c]
push eax
lea ecx, [ebp - 0x1154]
push ecx
push ecx
mov edx, esp
mov dword [ebp - 0xe94], esp
push 0x4ba010
lea eax, [ebp - 0x1174]
push eax
push edx
call fcn.004019e0
add esp, 0xc
call fcn.0047ca90
lea ecx, [ebp - 0x1154]
push str.DLocked
push ecx
call fcn.00401b00
add esp, 0x18
test al, al
je 0x455149
lea edx, [ebp - 0x110c]
push edx
mov ecx, 0x4e54f4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push edi
push 0
push 0x4ae26b
push str.explorer.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov bl, 1
jmp 0x45514b
xor bl, bl
lea ecx, [ebp - 0x1174]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x131c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x122c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x110c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1154]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.pstfilecreated
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4554b2
lea ecx, [ebp - 0x1284]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1c1
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xf28]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xf28]
mov byte [ebp - 4], 0xc2
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1324]
push ecx
lea ecx, [ebp - 0xf28]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf28]
mov byte [ebp - 4], 0xc3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1324]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1040]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea edx, [ebp - 0xf28]
push str.pstFileclientspecific.vbs
mov bl, 0xc4
push edx
mov byte [ebp - 4], bl
call fcn.00401b00
add esp, 8
test al, al
je 0x4552e7
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x133c]
push ecx
mov ecx, eax
call fcn.00405cd0
push 0x4b0cd8
push eax
lea edx, [ebp - 0x1334]
push edx
mov byte [ebp - 4], 0xc5
call fcn.004019e0
lea ecx, [ebp - 0xf28]
push ecx
push eax
lea edx, [ebp - 0x132c]
push edx
mov byte [ebp - 4], 0xc6
call fcn.004018e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 0xc7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x132c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1334]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x133c]
jmp 0x455353
lea eax, [ebp - 0x1354]
push eax
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea ecx, [ebp - 0x134c]
push ecx
mov byte [ebp - 4], 0xc8
call fcn.004019e0
lea edx, [ebp - 0xf28]
push edx
push eax
lea eax, [ebp - 0x1344]
push eax
mov byte [ebp - 4], 0xc9
call fcn.004018e0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x1040]
mov byte [ebp - 4], 0xca
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1344]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x134c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1354]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x1040]
push ecx
lea edx, [ebp - 0x1364]
push str.CScript
push edx
call fcn.00401a70
push 0x4ae8b4
push eax
lea eax, [ebp - 0x135c]
push eax
mov byte [ebp - 4], 0xcb
call fcn.004019e0
add esp, 0x14
mov ecx, esp
mov dword [ebp - 0xe94], esp
lea edx, [ebp - 0x1284]
push edx
push eax
push ecx
mov byte [ebp - 4], 0xcc
call fcn.004018e0
lea eax, [ebp - 0xf04]
add esp, 0xc
push eax
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x135c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 0xcf
lea ecx, [ebp - 0x1364]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf04]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push 0
push str.All_rights_reserved.
lea ecx, [ebp - 0xf04]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_4144]
sub esi, eax
sub esi, 0x14
push esi
lea ecx, [ebp - 0x136c]
push ecx
lea ecx, [ebp - 0xf04]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xf04]
mov byte [ebp - 4], 0xd0
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x136c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf04]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea ecx, [ebp - 0xf04]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push ecx
lea edx, [ebp - 0xf04]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
push 0xbb8
mov bl, al
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xf04]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1040]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf28]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1284]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.doesfileexists
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x45585e
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1374]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1d1
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1374]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x137c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x1d2
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x137c]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.selectfileforuse
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4557f9
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x13a4]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push str.PST_File_.pst_.pstOST_File_.ost_.ostAll_files__._.
lea ecx, [ebp - 0x12c4]
mov dword [ebp - 4], 0x1d3
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x1194]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x1384]
push 0x4c9940
push eax
mov byte [ebp - 4], 0xd5
call fcn.00476e10
push str.MicrosoftOutlook_
push eax
lea ecx, [ebp - 0x1234]
push ecx
mov byte [ebp - 4], 0xd6
call fcn.004019e0
add esp, 0x14
lea ecx, [ebp - 0x1384]
mov byte [ebp - 4], 0xd8
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1904]
call sub.mfc100.dll_Ordinal_421
push edi
push 0
push 0
lea ecx, [ebp - 0x12c4]
mov byte [ebp - 4], 0xd9
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push 0x1000
lea ecx, [ebp - 0x1234]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.Outlook.pst
push edi
lea ecx, [ebp - 0xc88]
call sub.mfc100.dll_Ordinal_422
mov bl, 0xda
lea ecx, [ebp - 0xc88]
mov byte [ebp - 4], bl
call sub.mfc100.dll_Ordinal_3621
cmp eax, edi
je 0x4556c1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4b0094
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.selectfileforuse_error_code
mov byte [ebp - 4], 0xdb
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
jmp 0x4556f3
lea edx, [ebp - 0x138c]
push edx
lea ecx, [ebp - 0xc88]
call sub.mfc100.dll_Ordinal_5627
push eax
lea ecx, [ebp - 0x1194]
mov byte [ebp - 4], 0xdc
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x138c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1194]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea eax, [ebp - 0x1114]
push eax
call fcn.004801e0
lea ecx, [ebp - 0x1114]
push 0x4ae26b
push ecx
mov byte [ebp - 4], 0xdd
call fcn.00401980
add esp, 0x10
test al, al
je 0x455783
lea edx, [ebp - 0x1114]
push edx
lea eax, [ebp - 0x139c]
push str.Size_of_the_selected_file_is___
push eax
call fcn.00401a70
push 0x4bca78
push eax
lea ecx, [ebp - 0x1394]
push ecx
mov byte [ebp - 4], 0xde
call fcn.004019e0
add esp, 0x18
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0xdf
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1394]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x139c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x455793
push str.Not_able_to_find_the_size_of_file_please_provide_valid_input_and_click_on__NEXT_STEP_
mov ecx, 0x4e54f4
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea ecx, [ebp - 0x1114]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xc88]
mov byte [ebp - 4], 0xd9
call sub.mfc100.dll_Ordinal_978
lea ecx, [ebp - 0x1904]
mov byte [ebp - 4], 0xd8
call sub.mfc100.dll_Ordinal_977
lea ecx, [ebp - 0x1234]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1194]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x12c4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x13a4]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
mov bl, al
add esp, 4
test bl, bl
jne 0x459f94
push 0
push str.Program_Files__x86_
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459f8c
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
mov dword [ebp - 0xe94], esp
jmp 0x450ab8
push str.antivirusCheckAndDelete
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x455b35
push 0x4ae26b
lea ecx, [ebp - 0xfa0]
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
push str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea ecx, [ebp - 0x123c]
mov dword [ebp - 4], 0x1e0
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
lea edx, [ebp - 0x123c]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xe1
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x111c]
push eax
call fcn.0047d270
add esp, 0xc
push 0
push str.Avast_Antivirus
lea ecx, [ebp - 0x111c]
mov byte [ebp - 4], 0xe2
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4559ea
push str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea ecx, [ebp - 0x10c0]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x10c0]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xe3
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x45595e
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.del_C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe__s__q
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x13ac]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xfa0]
mov byte [ebp - 4], 0xe4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13ac]
jmp 0x4559d2
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x10c0]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea edx, [ebp - 0x10c0]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x4559da
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.del_C:_Program_Files__AVAST_Software_AvastAvastUI.exe__s__q
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x13b4]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xfa0]
mov byte [ebp - 4], 0xe5
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13b4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
lea ecx, [ebp - 0x10c0]
mov byte [ebp - 4], 0xe2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.AVG_Antivirus
lea ecx, [ebp - 0x111c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x455b05
push str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea ecx, [ebp - 0x1048]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1048]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xe6
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x455a7d
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.del_C:_Program_Files__x86___AVG_AntivirusAVGUI.exe__s__q
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x13bc]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xfa0]
mov byte [ebp - 4], 0xe7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13bc]
jmp 0x455af1
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x1048]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea edx, [ebp - 0x1048]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x455af9
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.del_C:_Program_Files__AVG_AntivirusAVGUI.exe__s__q
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x13c4]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xfa0]
mov byte [ebp - 4], 0xe8
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13c4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
lea ecx, [ebp - 0x1048]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x111c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x123c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfa0]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.CheckWiFiSignalStrength
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x455d35
push str.netsh_interface_show_interface_findstr_WiFi
lea ecx, [ebp - 0x1088]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
lea edx, [ebp - 0x1088]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov dword [ebp - 4], 0x1e9
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0xec4]
push eax
call fcn.0047d270
add esp, 0xc
push 0
mov bl, 0xea
push str.Connected
lea ecx, [ebp - 0xec4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jle 0x455d0f
push str.netsh_wlan_show_interface_findstr_Signal
lea ecx, [ebp - 0x1088]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push 0
push ecx
lea edx, [ebp - 0x1088]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x13cc]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xec4]
mov byte [ebp - 4], 0xeb
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13cc]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0
push 0x4bc79c
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x13d4]
push ecx
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xec4]
mov byte [ebp - 4], 0xec
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13d4]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0094
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xec4]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x13dc]
push edx
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xec4]
mov byte [ebp - 4], 0xed
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13dc]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call dword [sym.imp.MSVCR100.dll_atoi]
add esp, 4
cmp eax, 0x32
jl 0x455d0f
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.IPCONFIG__FLUSHDNS
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x13e4]
push eax
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x13e4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x455d11
xor bl, bl
lea ecx, [ebp - 0xec4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1088]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.avgcheck
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x455e72
push 0x4ae26b
lea ecx, [ebp - 0x13ec]
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
push str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea ecx, [ebp - 0x11a8]
mov dword [ebp - 4], 0x1ee
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
lea edx, [ebp - 0x11a8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xef
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x11a0]
push eax
call fcn.0047d270
add esp, 0xc
push 0
push str.AVG_Antivirus
lea ecx, [ebp - 0x11a0]
mov byte [ebp - 4], 0xf0
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x455e42
push str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea ecx, [ebp - 0x1050]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1050]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xf1
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
je 0x455e34
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x1050]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea eax, [ebp - 0x1050]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x455e36
mov bl, 1
lea ecx, [ebp - 0x1050]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11a0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11a8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x13ec]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.antivirusCheck
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456151
push 0x4ae26b
lea ecx, [ebp - 0xff8]
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
push str.WMIC__Node:localhost__Namespace:_rootSecurityCenter2_Path_AntiVirusProduct_Get_displayName
lea ecx, [ebp - 0x11b0]
mov dword [ebp - 4], 0x1f2
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
lea edx, [ebp - 0x11b0]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xf3
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x115c]
push eax
call fcn.0047d270
add esp, 0xc
push 0
push str.Avast_Antivirus
lea ecx, [ebp - 0x115c]
mov byte [ebp - 4], 0xf4
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456006
push str.C:Program_Files__x86_AVAST_SoftwareAvastAvastUI.exe
lea ecx, [ebp - 0x10a8]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x10a8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0xf5
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x455f7a
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.C:_Program_Files__x86___AVAST_Software_AvastAvastUI.exe
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x13f4]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xff8]
mov byte [ebp - 4], 0xf6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13f4]
jmp 0x455fee
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x10a8]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea edx, [ebp - 0x10a8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x455ff6
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.C:_Program_Files__AVAST_Software_AvastAvastUI.exe
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x13fc]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xff8]
mov byte [ebp - 4], 0xf7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x13fc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
lea ecx, [ebp - 0x10a8]
mov byte [ebp - 4], 0xf4
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.AVG_Antivirus
lea ecx, [ebp - 0x115c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456121
push str.C:Program_Files__x86_AVGAntivirusAVGUI.exe
lea ecx, [ebp - 0x1058]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1058]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], pe_nt_image_headers32
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x456099
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.C:_Program_Files__x86___AVG_AntivirusAVGUI.exe
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x1404]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xff8]
mov byte [ebp - 4], 0xf9
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1404]
jmp 0x45610d
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x1058]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea edx, [ebp - 0x1058]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x456115
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.C:_Program_Files__AVG_AntivirusAVGUI.exe
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x140c]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xff8]
mov byte [ebp - 4], 0xfa
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x140c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
lea ecx, [ebp - 0x1058]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x115c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11b0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xff8]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.CheckVirtualMemorySize
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45654c
lea ecx, [ebp - 0x1124]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov dword [ebp - 4], 0x1fb
call fcn.0047f350
mov esi, eax
push esi
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push 0x4bc658
mov byte [ebp - 4], 0xfc
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0xfb
call fcn.0047c140
shl esi, 0xa
mov dword [ebp - 0xe98], esi
fild dword [ebp - 0xe98]
add esp, 0xc
fmul qword [0x4bc650]
call fcn.0048e880
lea ecx, [ebp - 0xfe0]
mov ebx, eax
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xfa8]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push ebx
mov ebx, dword [sym.imp.mfc100.dll_Ordinal_4283]
lea ecx, [ebp - 0xfe0]
push 0x4b5008
push ecx
mov byte [ebp - 4], 0xfe
call ebx
push esi
lea edx, [ebp - 0xfa8]
push 0x4b5008
push edx
call ebx
lea eax, [ebp - 0xfa8]
push eax
lea ecx, [ebp - 0x141c]
push str.c:pagefile.sys
push ecx
call fcn.00401a70
push 0x4ae8b4
push eax
lea edx, [ebp - 0x1414]
push edx
mov byte [ebp - 4], 0xff
call fcn.004019e0
lea ecx, [ebp - 0xfe0]
push ecx
push eax
lea edx, [ebp - 0x11c0]
push edx
mov dword [ebp - 4], 0x200
call fcn.004018e0
add esp, 0x3c
lea ecx, [ebp - 0x1414]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x141c]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
lea ecx, [ebp - 0x1124]
call dword [sym.imp.mfc100.dll_Ordinal_1315]
push str.PagingFiles
lea ecx, [ebp - 0x11b8]
call dword [sym.imp.mfc100.dll_Ordinal_306]
push reloc.OLEAUT32.dll_SysReAllocString
push ecx
lea eax, [ebp - 0x11b8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
mov byte [ebp - 4], 4
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea edx, [ebp - 0x1124]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 5
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0xef8]
push eax
mov byte [ebp - 4], 4
call fcn.0047f400
add esp, 0x10
mov bl, 6
lea ecx, [ebp - 0xef8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x11c0]
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
jne 0x4563bd
lea ecx, [ebp - 0xfa8]
push ecx
lea edx, [ebp - 0x143c]
push str.System_virtual_memory_is_already_at_optimum_initial_size__
push edx
call fcn.00401a70
push str._MB__maximum_size__
push eax
lea eax, [ebp - 0x1434]
push eax
mov byte [ebp - 4], 7
call fcn.004019e0
lea ecx, [ebp - 0xfe0]
push ecx
push eax
lea edx, [ebp - 0x142c]
push edx
mov byte [ebp - 4], 8
call fcn.004018e0
push str._MB._Click_on__NEXT_STEP_.
push eax
lea eax, [ebp - 0x1424]
push eax
mov byte [ebp - 4], 9
call fcn.004019e0
add esp, 0x30
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1424]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x142c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1434]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x143c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
jmp 0x4564f8
push 0
push 0x20
lea ecx, [ebp - 0xef8]
call dword [sym.imp.mfc100.dll_Ordinal_4143]
lea ecx, [ebp - 0xef8]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1444]
push ecx
lea ecx, [ebp - 0xef8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xef8]
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1444]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x20
lea ecx, [ebp - 0xef8]
call dword [sym.imp.mfc100.dll_Ordinal_4143]
push eax
lea edx, [ebp - 0x144c]
push edx
lea ecx, [ebp - 0xef8]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xef8]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x144c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xfa8]
push eax
lea ecx, [ebp - 0x146c]
push str.System_virtual_memory_has_been_set_to_optimum_initial_size__
push ecx
call fcn.00401a70
push str._MB___maximum_size__
push eax
lea edx, [ebp - 0x1464]
push edx
mov byte [ebp - 4], 0xd
call fcn.004019e0
lea ecx, [ebp - 0xfe0]
push ecx
push eax
lea edx, [ebp - 0x145c]
push edx
mov byte [ebp - 4], 0xe
call fcn.004018e0
push str._MB._Click_on__NEXT_STEP_.
push eax
lea eax, [ebp - 0x1454]
push eax
mov byte [ebp - 4], 0xf
call fcn.004019e0
add esp, 0x30
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1454]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x145c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1464]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x146c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
xor bl, bl
lea ecx, [ebp - 0xef8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11b8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11c0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfa8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfe0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1124]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.IsLaptop
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x4565cb
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.hostname
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x117c]
push ecx
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x117c]
mov dword [ebp - 4], 0x211
call dword [sym.imp.mfc100.dll_Ordinal_7832]
push 0
push str.syglap
lea ecx, [ebp - 0x117c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
lea ecx, [ebp - 0x117c]
setns bl
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.IsAdminRequiredForSolution
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456890
lea ecx, [ebp - 0xfb0]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x212
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1474]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov bl, 0x12
lea ecx, [ebp - 0x1474]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea eax, [ebp - 0x147c]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x147c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe90]
push str.InstallService.bat
push ecx
call fcn.00401b00
add esp, 8
test al, al
je 0x45679e
lea edx, [ebp - 0xe90]
push edx
lea ecx, [ebp - 0xfb0]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea eax, [ebp - 0x149c]
push eax
call fcn.0047c560
lea ecx, [ebp - 0x148c]
push ecx
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea edx, [ebp - 0x1484]
push edx
mov byte [ebp - 4], 0x15
call fcn.004019e0
lea ecx, [ebp - 0xfb0]
push ecx
push eax
lea edx, [ebp - 0x11c8]
push edx
mov byte [ebp - 4], 0x16
call fcn.004018e0
add esp, 0x20
lea ecx, [ebp - 0x1484]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x148c]
mov byte [ebp - 4], 0x19
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x11c8]
push eax
lea ecx, [ebp - 0x1494]
push str.cmd.exe__k
push ecx
call fcn.00401a70
add esp, 0xc
push 0
push 0
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.cmd.exe
push str.runas
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1494]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xbb8
call esi
lea edx, [ebp - 0x149c]
push edx
call fcn.0047c560
add esp, 4
test eax, eax
setne al
test al, al
je 0x456774
lea ecx, [ebp - 0x11c8]
jmp 0x456872
lea eax, [ebp - 0xe90]
push str.DeleteService.bat
push eax
call fcn.00401b00
add esp, 8
test al, al
je 0x456878
lea ecx, [ebp - 0xe90]
push ecx
lea ecx, [ebp - 0xfb0]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea edx, [ebp - 0x14ac]
push edx
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea eax, [ebp - 0x14a4]
push eax
mov byte [ebp - 4], 0x1a
call fcn.004019e0
lea ecx, [ebp - 0xfb0]
push ecx
push eax
lea edx, [ebp - 0x11d0]
push edx
mov byte [ebp - 4], 0x1b
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x14a4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14ac]
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x11d0]
push eax
lea ecx, [ebp - 0x14b4]
push str.cmd.exe__k
push ecx
call fcn.00401a70
add esp, 0xc
push 0
push 0
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.cmd.exe
push str.runas
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x14b4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11d0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfb0]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.RunBatchFileInAdminMode
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4569dd
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x14bc]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x21f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x14bc]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea eax, [ebp - 0x14c4]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x220
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14c4]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14d4]
push ecx
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea edx, [ebp - 0x14cc]
push edx
mov dword [ebp - 4], 0x221
call fcn.004019e0
lea ecx, [ebp - 0xe90]
push ecx
push eax
lea edx, [ebp - 0x11d8]
push edx
mov byte [ebp - 4], 0x22
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x14cc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14d4]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0
push 0
lea ecx, [ebp - 0x11d8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.runas
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x11d8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push str.renameSipProfileDeleteFiles
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456afb
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov esi, dword [ebp - 0xeb4]
push ecx
mov eax, esp
mov dword [ebp - 0xe98], esp
push eax
mov ecx, esi
mov dword [ebp - 4], 0x223
call fcn.00448330
lea ecx, [ebp - 0x1090]
mov edi, 2
push ecx
mov dword [ebp - 4], edi
call fcn.0047bfa0
lea edx, [ebp - 0x1090]
push 0x4ae26b
push edx
mov dword [ebp - 4], 0x224
call fcn.00401980
add esp, 0x14
test al, al
je 0x456a73
push ecx
lea eax, [ebp - 0x1090]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00480500
add esp, 4
lea ecx, [ebp - 0x112c]
push ecx
mov ecx, esi
call fcn.004484d0
lea edx, [ebp - 0x112c]
push 0x4ae26b
push edx
mov byte [ebp - 4], 0x25
call fcn.00401980
add esp, 8
test al, al
je 0x456adb
lea eax, [ebp - 0x112c]
push eax
lea ecx, [ebp - 0x1090]
push ecx
lea edx, [ebp - 0x14dc]
push edx
call fcn.004018e0
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.00475760
add esp, 4
lea ecx, [ebp - 0x14dc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x112c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1090]
mov dword [ebp - 4], edi
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.lyncVersionDetection
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x456c4d
push 0x4b478c
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xf30]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xf30]
mov dword [ebp - 4], 0x227
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x14e4]
push ecx
lea ecx, [ebp - 0xf30]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf30]
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14e4]
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0x1060]
push edx
call fcn.004856f0
add esp, 4
push 0
push str.16.0
lea ecx, [ebp - 0x1060]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456bd4
push str.lync2016
lea eax, [ebp - 0xf30]
push eax
jmp 0x456c1c
push 0
push str.15.0
lea ecx, [ebp - 0x1060]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456bf9
push str.lync2013
lea ecx, [ebp - 0xf30]
push ecx
jmp 0x456c1c
push 0
push str.14.0
lea ecx, [ebp - 0x1060]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x456c29
push str.lync2010
lea edx, [ebp - 0xf30]
push edx
call fcn.00401b00
add esp, 8
test al, al
setne bl
lea ecx, [ebp - 0x1060]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf30]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.GetIPAndhostname
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x457005
lea ecx, [ebp - 0x11e8]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x11e0]
mov dword [ebp - 4], 0x229
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1098]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1068]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0x1098]
push eax
lea ecx, [ebp - 0x11e0]
push ecx
lea edx, [ebp - 0x11e8]
push edx
mov byte [ebp - 4], 0x2c
call fcn.00475100
add esp, 0xc
call fcn.00476420
push eax
lea ecx, [ebp - 0x1068]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea eax, [ebp - 0x14ec]
push eax
lea ecx, [ebp - 0x680]
push ecx
push 2
mov dword [ebp - 0x14ec], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameExA]
lea edx, [ebp - 0x680]
push edx
lea ecx, [ebp - 0xfb8]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0xfb8]
push 0x4ae26b
push eax
mov byte [ebp - 4], 0x2d
call fcn.00401b00
add esp, 8
test al, al
je 0x456d2a
push str.WORK_GROUP
lea ecx, [ebp - 0xfb8]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea ecx, [ebp - 0x1098]
push ecx
lea edx, [ebp - 0x1514]
push str.Your_Host_Name___Ip_Address___Domain_Name_respectively_is
push edx
call fcn.00401a70
push 0x4bc36c
push eax
lea eax, [ebp - 0x150c]
push eax
mov byte [ebp - 4], 0x2e
call fcn.004019e0
lea ecx, [ebp - 0x1068]
push ecx
push eax
lea edx, [ebp - 0x1504]
push edx
mov byte [ebp - 4], 0x2f
call fcn.004018e0
push 0x4bc36c
push eax
lea eax, [ebp - 0x14fc]
push eax
mov byte [ebp - 4], 0x30
call fcn.004019e0
lea ecx, [ebp - 0xfb8]
push ecx
push eax
lea edx, [ebp - 0x14f4]
push edx
mov byte [ebp - 4], 0x31
call fcn.004018e0
add esp, 0x3c
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14f4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14fc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1504]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x150c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1514]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.WMIC_BIOS_GET_SERIALNUMBER
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0x10b8]
push eax
call fcn.0047d270
add esp, 0xc
push 0
push 0x4b1700
lea ecx, [ebp - 0x10b8]
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0x10b8]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1008]
push ecx
lea ecx, [ebp - 0x10b8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
mov byte [ebp - 4], 0x34
push 0
push 0x4ae8b4
lea ecx, [ebp - 0x1008]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x151c]
push edx
lea ecx, [ebp - 0x1008]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1008]
mov byte [ebp - 4], 0x35
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x151c]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x1098]
push eax
lea ecx, [ebp - 0x1554]
push str.Your_Hostname___Ip_Address___Domain_Name_respectively_is
push ecx
call fcn.00401a70
push 0x4bc36c
push eax
lea edx, [ebp - 0x154c]
push edx
mov byte [ebp - 4], 0x36
call fcn.004019e0
lea ecx, [ebp - 0x1068]
push ecx
push eax
lea edx, [ebp - 0x1544]
push edx
mov byte [ebp - 4], 0x37
call fcn.004018e0
push 0x4bc36c
push eax
lea eax, [ebp - 0x153c]
push eax
mov byte [ebp - 4], 0x38
call fcn.004019e0
lea ecx, [ebp - 0xfb8]
push ecx
push eax
lea edx, [ebp - 0x1534]
push edx
mov byte [ebp - 4], 0x39
call fcn.004018e0
push str._and_Serial_Number_is
push eax
lea eax, [ebp - 0x152c]
push eax
mov byte [ebp - 4], 0x3a
call fcn.004019e0
add esp, 0x48
lea ecx, [ebp - 0x1008]
push ecx
push eax
lea edx, [ebp - 0x1524]
push edx
mov byte [ebp - 4], 0x3b
call fcn.004018e0
add esp, 0xc
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x3c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1524]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x152c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1534]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x153c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1544]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x154c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1554]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1008]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10b8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfb8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1068]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1098]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11e0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x11e8]
jmp 0x44d425
push 0
push str.officeVersionDetection
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4571e2
push 0x4b478c
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xeec]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xeec]
mov dword [ebp - 4], 0x23d
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x155c]
push ecx
lea ecx, [ebp - 0xeec]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xeec]
mov byte [ebp - 4], 0x3e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x155c]
mov byte [ebp - 4], 0x3d
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0xf54]
push edx
call fcn.0047c3d0
add esp, 4
push 0
push str.16.0
lea ecx, [ebp - 0xf54]
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4570db
push str.2016
jmp 0x457141
push 0
push str.15.0
lea ecx, [ebp - 0xf54]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x457100
push str.2013
lea ecx, [ebp - 0xeec]
push ecx
jmp 0x457148
push 0
push str.14.0
lea ecx, [ebp - 0xf54]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x457125
push str.2010
lea edx, [ebp - 0xeec]
push edx
jmp 0x457148
push 0
push str.12.0
lea ecx, [ebp - 0xf54]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x457155
push str.2007
lea eax, [ebp - 0xeec]
push eax
call fcn.00401b00
add esp, 8
test al, al
setne bl
push 0xffffffffffffffff
push str._:_Detected_version
lea ecx, [ebp - 0xeec]
push ecx
lea edx, [ebp - 0x1564]
push edx
call fcn.004019e0
add esp, 8
mov ecx, esp
mov dword [ebp - 0xe94], esp
lea edx, [ebp - 0xf54]
push edx
push eax
push ecx
mov byte [ebp - 4], 0x40
call fcn.004018e0
add esp, 8
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.officeVersionDetection_condition:
mov byte [ebp - 4], 0x41
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x40
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x1564]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf54]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xeec]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.verifyFromPrinterList
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x457295
xor bl, bl
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x1164]
push ecx
mov ecx, eax
call fcn.004484d0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.wmic_printer_get_name
mov dword [ebp - 4], 0x242
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x11f0]
push edx
call fcn.0047d270
add esp, 0xc
push 0x22
lea ecx, [ebp - 0x1164]
mov byte [ebp - 4], 0x43
call dword [sym.imp.mfc100.dll_Ordinal_11461]
push 0
lea ecx, [ebp - 0x1164]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x11f0]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
setns al
test al, al
je 0x457271
mov bl, 1
lea ecx, [ebp - 0x11f0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1164]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.matchreg
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4575ac
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x156c]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x244
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x156c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1574]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x245
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1574]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1070]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
push 0x4b0094
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x246
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea edx, [ebp - 0x157c]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x1070]
mov byte [ebp - 4], 0x47
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x157c]
mov byte [ebp - 4], 0x46
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1584]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x48
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1584]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfc0]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
mov byte [ebp - 4], 0x49
push 0x4b0094
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea ecx, [ebp - 0x158c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xfc0]
mov byte [ebp - 4], 0x4a
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x158c]
mov byte [ebp - 4], 0x49
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1594]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0x4b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1594]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11f8]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea eax, [ebp - 0xfc0]
push 0x4ae26b
push eax
mov byte [ebp - 4], 0x4c
call fcn.00401b00
add esp, 8
test al, al
jne 0x4574c7
call fcn.00475270
test al, al
lea eax, [ebp - 0xfc0]
je 0x4574cd
lea eax, [ebp - 0x1070]
push eax
lea ecx, [ebp - 0x11f8]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0xfe8]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xfe8]
push ecx
push ecx
lea edx, [ebp - 0x1070]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0x4d
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00484540
add esp, 8
test eax, eax
jne 0x457570
lea eax, [ebp - 0xe90]
push eax
lea ecx, [ebp - 0xfe8]
push ecx
call fcn.0040d1c0
mov bl, al
add esp, 8
test bl, bl
jne 0x457570
lea edx, [ebp - 0xfe8]
push edx
push ecx
lea eax, [ebp - 0xfc0]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00484540
add esp, 8
test eax, eax
jne 0x457570
lea ecx, [ebp - 0xe90]
push ecx
lea edx, [ebp - 0xfe8]
push edx
call fcn.0040d1c0
add esp, 8
mov bl, al
lea ecx, [ebp - 0xfe8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x11f8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xfc0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1070]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.RunScriptForMozilla
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x457844
lea ecx, [ebp - 0xf60]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsProxyServer
lea ecx, [ebp - 0x1200]
mov dword [ebp - 4], 0x24e
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea eax, [ebp - 0xf60]
push eax
push ecx
lea edx, [ebp - 0x1200]
mov ecx, esp
mov dword [ebp - 0xe94], esp
mov bl, 0x4f
push edx
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00484540
add esp, 8
push 0x4ae26b
push str.:4145
lea ecx, [ebp - 0xf60]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
lea ecx, [ebp - 0xf60]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xf60]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.Proxy_address_read_from_registry_to_be_set_in_Mozilla_Proxy
mov byte [ebp - 4], 0x50
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
push 0
push 0x4b478c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0xf6c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
xor esi, esi
push esi
mov bl, 0x51
push 0x4b0b4c
lea ecx, [ebp - 0xf6c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x159c]
push edx
lea ecx, [ebp - 0xf6c]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf6c]
mov byte [ebp - 4], 0x52
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x159c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x15ac]
push eax
call fcn.004810a0
push str.AnakageFilesVBScripts_
push eax
lea ecx, [ebp - 0x15a4]
push ecx
mov byte [ebp - 4], 0x53
call fcn.004019e0
lea edx, [ebp - 0xf6c]
push edx
push eax
lea eax, [ebp - 0x10cc]
push eax
mov byte [ebp - 4], 0x54
call fcn.004018e0
add esp, 0x1c
lea ecx, [ebp - 0x15a4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 0x57
lea ecx, [ebp - 0x15ac]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x38
lea ecx, [ebp - 0x18d0]
push esi
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x10cc]
mov dword [ebp - 0x18d4], 0x3c
mov dword [ebp - 0x18d0], 0x40
mov dword [ebp - 0x18cc], esi
mov dword [ebp - 0x18c8], esi
call dword [sym.imp.mfc100.dll_Ordinal_1448]
lea ecx, [ebp - 0xf60]
mov dword [ebp - 0x18c4], eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
lea edx, [ebp - 0x18d4]
push edx
mov dword [ebp - 0x18c0], eax
mov dword [ebp - 0x18bc], esi
mov dword [ebp - 0x18b8], esi
mov dword [ebp - 0x18b4], esi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
mov eax, dword [ebp - 0x189c]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push edi
push ecx
lea edx, [ebp - 0x10cc]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0x58
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.00474370
add esp, 0xc
lea ecx, [ebp - 0x10cc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf6c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1200]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf60]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.symantecUpdatePolicy
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x457b63
push 0x4b478c
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea eax, [ebp - 0x15b4]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x259
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x15b4]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x15bc]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x25a
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15bc]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionpublic_opstateLatestVirusDefsDate
lea ecx, [ebp - 0x1208]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0xeac]
mov dword [ebp - 4], 0x25b
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea edx, [ebp - 0xeac]
push edx
push ecx
lea eax, [ebp - 0x1208]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
mov byte [ebp - 4], 0x5c
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00484540
add esp, 8
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0xeac]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.last_updated_date_read_from_registry
mov byte [ebp - 4], 0x5d
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x5c
call fcn.0047c140
add esp, 8
lea ecx, [ebp - 0xeac]
mov eax, esp
mov dword [ebp - 0xe94], esp
push ecx
push str.Symantec_is_up_to_date.Current_Virus_Definition_is
push eax
call fcn.00401a70
add esp, 0xc
mov byte [ebp - 4], 0x5e
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 0x5c
call fcn.00420000
push 0x2d
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
lea ecx, [ebp - 0xeac]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea edx, [ebp - 0x15c4]
push edx
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
mov edi, dword [sym.imp.MSVCR100.dll_atoi]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x15c4]
mov dword [ebp - 0xea0], eax
call dword [sym.imp.mfc100.dll_Ordinal_901]
push esi
lea eax, [ebp - 0x15cc]
push eax
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xeac]
mov byte [ebp - 4], 0x5f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15cc]
mov byte [ebp - 4], 0x5c
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x2d
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_4143]
lea ecx, [ebp - 0xeac]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea ecx, [ebp - 0x15d4]
push ecx
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call edi
add esp, 4
lea ecx, [ebp - 0x15d4]
mov dword [ebp - 0xe98], eax
call dword [sym.imp.mfc100.dll_Ordinal_901]
push esi
lea edx, [ebp - 0x15dc]
push edx
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xeac]
mov byte [ebp - 4], 0x60
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x15dc]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x1894]
push eax
call dword [sym.imp.MSVCR100.dll__time64]
lea ecx, [ebp - 0x1894]
push ecx
call dword [sym.imp.MSVCR100.dll__localtime64]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x14]
add eax, 0x76c
add esp, 0xc
inc ecx
cmp esi, eax
jne 0x457b3f
sub ecx, dword [ebp - 0xe98]
cmp ecx, 1
jg 0x457b3f
sub edx, dword [ebp - 0xea0]
cmp edx, 7
jle 0x457b3f
xor bl, bl
lea ecx, [ebp - 0xeac]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1208]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.symantecManualUpdate
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x458107
lea edx, [ebp - 0x15e4]
xor bl, bl
push edx
mov dword [ebp - 4], 0x261
mov byte [ebp - 0xe99], bl
call fcn.004810a0
add esp, 4
push str.AnakageFilesVBScriptsSymantecManualUpdate.bat
push eax
lea eax, [ebp - 0x1210]
push eax
mov byte [ebp - 4], 0x62
call fcn.004019e0
add esp, 0xc
lea ecx, [ebp - 0x15e4]
mov byte [ebp - 4], 0x64
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1210]
mov ecx, esp
mov dword [ebp - 0xe98], esp
push edx
mov byte [ebp - 4], 0x65
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], 0x64
call fcn.0047cff0
add esp, 0xc
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x188c]
push eax
call dword [sym.imp.MSVCR100.dll__time64]
lea ecx, [ebp - 0x188c]
push ecx
call dword [sym.imp.MSVCR100.dll__localtime64]
push eax
push str._m_d_Y
lea edx, [ebp - 0x78]
push 0x50
push edx
call dword [sym.imp.MSVCR100.dll_strftime]
add esp, 0x18
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x101c]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push str..Log
lea ecx, [ebp - 0x101c]
mov byte [ebp - 4], 0x66
call dword [sym.imp.mfc100.dll_Ordinal_1483]
lea ecx, [ebp - 0x101c]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea ecx, [ebp - 0x10e8]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xf48]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push str.HKEY_LOCAL_MACHINESOFTWARESymantecSymantec_Endpoint_ProtectionCurrentVersionPRODUCTVERSION
lea ecx, [ebp - 0x10e8]
mov byte [ebp - 4], 0x68
call dword [sym.imp.mfc100.dll_Ordinal_1316]
lea ecx, [ebp - 0xf48]
push ecx
push ecx
lea edx, [ebp - 0x10e8]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00484540
add esp, 8
push str..105
lea ecx, [ebp - 0xf48]
call dword [sym.imp.mfc100.dll_Ordinal_1483]
lea ecx, [ebp - 0xf48]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xf48]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.Symantec_Version_from_registry
mov byte [ebp - 4], 0x69
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x68
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0xf48]
push ecx
lea edx, [ebp - 0x15fc]
push str._C:ProgramDataSymantecSymantec_Endpoint_Protection_
push edx
call fcn.00401a70
add esp, 0xc
push str.DataLogsAV_
push eax
lea eax, [ebp - 0x15f4]
push eax
mov byte [ebp - 4], 0x6a
call fcn.004019e0
add esp, 0xc
lea ecx, [ebp - 0x101c]
push ecx
push eax
lea edx, [ebp - 0x15ec]
push edx
mov byte [ebp - 4], 0x6b
call fcn.004018e0
add esp, 0xc
push 0x4aed8c
push eax
lea eax, [ebp - 0x10e0]
push eax
mov byte [ebp - 4], 0x6c
call fcn.004019e0
add esp, 0xc
lea ecx, [ebp - 0x15ec]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x15f4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x15fc]
mov byte [ebp - 4], 0x70
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0x10e0]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.Symantec_log_file_name
mov byte [ebp - 4], 0x71
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x70
call fcn.0047c140
add esp, 0xc
push 0x4ae26b
lea ecx, [ebp - 0xef4]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push 0
push ecx
mov eax, esp
mov dword [ebp - 0xe94], esp
lea ecx, [ebp - 0x10e0]
push ecx
push str.more
push eax
mov byte [ebp - 4], 0x72
call fcn.00401a70
lea edx, [ebp - 0x1604]
add esp, 0xc
push edx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xef4]
mov byte [ebp - 4], 0x73
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1604]
mov byte [ebp - 4], 0x72
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0xffffffffffffffff
push ecx
lea eax, [ebp - 0xef4]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.Symantec_log_content
mov byte [ebp - 4], 0x74
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x72
call fcn.0047c140
add esp, 0xc
push str.Risks:_0
lea ecx, [ebp - 0x10d8]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x10d0]
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov byte [ebp - 4], 0x76
mov dword [ebp - 0xea0], 0
jmp 0x457eb0
push 0
lea ecx, [ebp - 0x10d8]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0xef4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov edi, eax
cmp edi, 0xffffffff
jne 0x457f93
cmp dword [ebp - 0xea0], 0
jle 0x457ff4
push 0
mov bl, 1
push str.Files
lea ecx, [ebp - 0xef4]
mov byte [ebp - 0xe99], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x160c]
push ecx
lea ecx, [ebp - 0xef4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0x10d0]
mov byte [ebp - 4], 0x77
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x160c]
mov byte [ebp - 4], 0x76
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10d0]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push eax
lea edx, [ebp - 0x1614]
push str.Symantec_scan_completed__Risks:_0_and
push edx
call fcn.00401a70
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str._files_etc...
push eax
push ecx
mov byte [ebp - 4], 0x78
call fcn.004019e0
add esp, 0xc
mov byte [ebp - 4], 0x79
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 0x78
call fcn.00420000
lea ecx, [ebp - 0x1614]
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x457ff4
lea ecx, [ebp - 0xef4]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
mov esi, eax
lea ecx, [ebp - 0x10d8]
sub esi, edi
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub esi, eax
push esi
lea edx, [ebp - 0x161c]
push edx
lea ecx, [ebp - 0xef4]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xef4]
mov byte [ebp - 4], 0x7a
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x161c]
mov byte [ebp - 4], 0x76
call dword [sym.imp.mfc100.dll_Ordinal_901]
inc dword [ebp - 0xea0]
xor al, al
je 0x457eb0
lea ecx, [ebp - 0x10d0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10d8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xef4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10e0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf48]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10e8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x101c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1210]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov dword [ebp - 4], 2
jmp 0x459f8c
push 0
push str.showProxyDialog
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x45824d
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1624]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x27e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1624]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x162c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x27f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x162c]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0xe90]
push 0x4ae26b
push edx
call fcn.00401980
add esp, 8
test al, al
je 0x458212
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov dword [ebp - 4], 0x280
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov dword [ebp - 4], esi
call fcn.00401840
push 0
lea ecx, [ebp - 0x254c]
call fcn.0040c5b0
lea ecx, [ebp - 0x254c]
mov dword [ebp - 4], 0x281
call sub.mfc100.dll_Ordinal_3620
test eax, eax
lea ecx, [ebp - 0x254c]
sete bl
mov dword [ebp - 4], 2
call fcn.0040c1d0
jmp 0x459f8c
push str.checkforDomain
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
test eax, eax
js 0x45836c
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.systeminfo_find__Domain_
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0xf74]
push ecx
call fcn.0047d270
add esp, 0xc
mov dword [ebp - 4], 0x282
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x1218]
push edx
call fcn.00405ca0
push 0
mov bl, 0x83
push str.sony
lea ecx, [ebp - 0x1218]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
test eax, eax
js 0x458300
lea eax, [ebp - 0xf74]
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.check_for_user_domain_in_sony
mov byte [ebp - 4], 0x84
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
push 0
push str.ap.sony.com
jmp 0x458337
lea edx, [ebp - 0xf74]
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.check_for_user_domain_in_syngene
mov byte [ebp - 4], 0x85
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
push 0
push str.BIOCON.COM
lea ecx, [ebp - 0xf74]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
lea ecx, [ebp - 0x1218]
setns bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf74]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.Groupdatecheck
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4585fd
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0xf7c]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xf7c]
mov dword [ebp - 4], 0x286
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1634]
push ecx
lea ecx, [ebp - 0xf7c]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf7c]
mov byte [ebp - 4], 0x87
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1634]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf38]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1654]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x10f0]
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
push 0x4b16e8
lea ecx, [ebp - 0xf7c]
mov byte [ebp - 4], 0x8a
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4585c1
push str.gpresult__Scope_User__v_findstr__Last_time_Group_Policy_was_applied_
lea ecx, [ebp - 0x10f0]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push 0
push ecx
lea edx, [ebp - 0x10f0]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea eax, [ebp - 0x163c]
push eax
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0xf38]
mov byte [ebp - 4], 0x8b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x163c]
mov byte [ebp - 4], 0x8a
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf38]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0xf38]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.Check_for_group_policy_updation
mov byte [ebp - 4], 0x8c
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0x8a
call fcn.0047c140
add esp, 0xc
push 0
push str.Last_time_Group_Policy_was_applied:
lea ecx, [ebp - 0xf38]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xf38]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
push eax
lea eax, [ebp - 0xf58]
push eax
lea ecx, [ebp - 0xf38]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0
mov bl, 0x8d
push str.Group_Policy_was_applied_from:
lea ecx, [ebp - 0xf58]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1644]
push ecx
lea ecx, [ebp - 0xf58]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xf58]
mov byte [ebp - 4], 0x8e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1644]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf58]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
push str.._Do_you_want_to_force_update_it_
lea edx, [ebp - 0xf58]
push edx
lea eax, [ebp - 0x164c]
push eax
call fcn.004019e0
add esp, 0xc
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0x8f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x164c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf58]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10f0]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1654]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf38]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf7c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.switchoffproxy
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x458a84
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x165c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x290
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x165c]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x1664]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x291
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1664]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xeb8]
push eax
push 0x20006
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
push SysReAllocStringLen
mov dword [ebp - 0x10f8], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push 0
push str.ongc
lea ecx, [ebp - 0xe90]
mov ebx, eax
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45879c
test ebx, ebx
jne 0x45879c
cmp dword [ebp - 0xeb8], ebx
je 0x45879c
push str.10.205.48.228:8080
lea ecx, [ebp - 0x1024]
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov edx, dword [ebp - 0xeb8]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 4
lea ecx, [ebp - 0x166c]
push ecx
push 4
push ebx
push str.ProxyEnable
push edx
mov dword [ebp - 4], 0x292
mov dword [ebp - 0x166c], edi
call esi
push edi
lea ecx, [ebp - 0x1024]
call dword [sym.imp.mfc100.dll_Ordinal_4498]
lea ecx, [ebp - 0x1024]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x1024]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov eax, dword [ebp - 0xeb8]
push edi
push ebx
push str.ProxyServer
push eax
call esi
lea ecx, [ebp - 0x1024]
mov ebx, eax
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x4587a2
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push 0
push 0x4bbd48
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4588c0
test ebx, ebx
jne 0x4588c0
cmp dword [ebp - 0xeb8], ebx
je 0x4588c0
push ebx
push 0x4b4b94
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov ebx, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, ebx
sub eax, edi
push eax
lea ecx, [ebp - 0x1674]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x293
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1674]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push str.:8080
lea edx, [ebp - 0xe90]
push edx
lea eax, [ebp - 0x102c]
push eax
call fcn.004019e0
add esp, 0xc
mov edx, dword [ebp - 0xeb8]
push 4
lea ecx, [ebp - 0x167c]
push ecx
push 4
push 0
push str.ProxyEnable
push edx
mov dword [ebp - 4], 0x294
mov dword [ebp - 0x167c], edi
call esi
push edi
lea ecx, [ebp - 0x102c]
call dword [sym.imp.mfc100.dll_Ordinal_4498]
lea ecx, [ebp - 0x102c]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x102c]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov eax, dword [ebp - 0xeb8]
push edi
push 0
push str.ProxyServer
push eax
call esi
lea ecx, [ebp - 0x102c]
mov ebx, eax
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.HDBFS
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x458993
test ebx, ebx
jne 0x4589e5
cmp dword [ebp - 0xeb8], ebx
je 0x4589e5
push str.Proxy.HDBFS.com:9444
lea ecx, [ebp - 0x1034]
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov edx, dword [ebp - 0xeb8]
push 4
lea ecx, [ebp - 0x1684]
push ecx
push 4
push ebx
push str.ProxyEnable
push edx
mov dword [ebp - 4], 0x295
mov dword [ebp - 0x1684], edi
call esi
push edi
lea ecx, [ebp - 0x1034]
call dword [sym.imp.mfc100.dll_Ordinal_4498]
lea ecx, [ebp - 0x1034]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
push eax
lea ecx, [ebp - 0x1034]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
mov eax, dword [ebp - 0xeb8]
push edi
push ebx
push str.ProxyServer
push eax
call esi
mov edx, dword [ebp - 0xeb8]
push 4
lea ecx, [ebp - 0x10f8]
push ecx
push 4
push ebx
push str.AutoDetect
push edx
mov dword [ebp - 0x10f8], ebx
call esi
lea ecx, [ebp - 0x1034]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x4589e5
mov ecx, dword [ebp - 0xeb8]
push 4
lea eax, [ebp - 0x168c]
push eax
push 4
push 0
push str.ProxyEnable
push ecx
mov dword [ebp - 0x168c], 0
call esi
mov edx, dword [ebp - 0xeb8]
push str.AutoConfigURL
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ecx, dword [ebp - 0xeb8]
push 4
lea eax, [ebp - 0x10f8]
push eax
push 4
push 0
push str.AutoDetect
push ecx
call esi
push 0
push str.DisableFirefoxProxy
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x458a72
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x1228]
push edx
call fcn.00405cd0
push str.disableProxyInMozilla.bat
lea eax, [ebp - 0x1228]
push eax
lea ecx, [ebp - 0x1220]
push ecx
mov dword [ebp - 4], 0x296
call fcn.004019e0
add esp, 8
lea edx, [ebp - 0x1220]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0x97
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00483f30
add esp, 4
lea ecx, [ebp - 0x1220]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1228]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov eax, dword [ebp - 0xeb8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x44d42b
push str.checkpopstatus
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x458ca6
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x1694]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x298
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1694]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x169c]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x299
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x169c]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xe90]
push eax
push str.Internet_Explorer
call fcn.00419a00
add esp, 8
test al, al
je 0x458be2
push 0x4ae26b
lea ecx, [ebp - 0x1100]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push str.HKEY_CURRENT_USERSoftwareMicrosoftInternet_ExplorerNew_WindowsPopupMgr
lea ecx, [ebp - 0x1230]
mov dword [ebp - 4], 0x29a
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x1100]
push ecx
push ecx
lea edx, [ebp - 0x1230]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov byte [ebp - 4], 0x9b
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00485e10
lea eax, [ebp - 0x1100]
push edi
push eax
call fcn.00405d10
add esp, 0x10
test al, al
lea ecx, [ebp - 0x1230]
sete bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1100]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea ecx, [ebp - 0xe90]
push ecx
push str.chrome
call fcn.00419a00
add esp, 8
test al, al
je 0x44d42b
push str.HKEY_LOCAL_MACHINESOFTWAREPoliciesGoogleChrome
lea ecx, [ebp - 0x16bc]
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea edx, [ebp - 0x16b4]
push edx
push 0x20019
push 0
push str.SOFTWAREPoliciesGoogleChrome
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x16a4]
push eax
mov eax, dword [ebp - 0x16b4]
lea ecx, [ebp - 0x1238]
push ecx
lea edx, [ebp - 0x16ac]
push edx
push 0
push str.DefaultPopupsSetting
push eax
mov dword [ebp - 0x1238], 0
mov dword [ebp - 0x16ac], 4
mov dword [ebp - 0x16a4], 0x3ff
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x458c93
cmp dword [ebp - 0x1238], edi
jne 0x458c93
lea ecx, [ebp - 0x16bc]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
lea ecx, [ebp - 0x16bc]
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.telnetDialog
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x458d27
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push 0x4bbc2c
mov dword [ebp - 4], 0x29c
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov esi, 2
mov dword [ebp - 4], esi
call fcn.00485a00
add esp, 0xc
push 0
lea ecx, [ebp - 0x2888]
call fcn.0046d0f0
lea ecx, [ebp - 0x2888]
mov dword [ebp - 4], 0x29d
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0x2888]
mov dword [ebp - 4], esi
call fcn.0046ce20
jmp 0x44d42b
push 0
push str.showAdAccountDialog
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x458e51
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x16c4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x29e
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x16c4]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x16cc]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x29f
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16cc]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov dword [ebp - 4], 0x2a0
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov dword [ebp - 4], esi
call fcn.00401840
push 0
lea ecx, [ebp - 0x2bd8]
call fcn.00402490
lea ecx, [ebp - 0x2bd8]
mov dword [ebp - 4], 0x2a1
call sub.mfc100.dll_Ordinal_3620
test eax, eax
lea ecx, [ebp - 0x2bd8]
sete bl
mov dword [ebp - 4], esi
call fcn.00401b90
jmp 0x459f8c
push str.showPrinterdialogbox
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x459313
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x16d4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x2a2
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x16d4]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea edx, [ebp - 0x16dc]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x2a3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16dc]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0xe90]
push eax
lea ecx, [ebp - 0xf10]
call dword [sym.imp.mfc100.dll_Ordinal_300]
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x2a4
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x458f88
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x16e4]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xa5
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16e4]
mov byte [ebp - 4], 0xa4
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0xe90]
push 0x4ae26b
push edx
call fcn.00401980
add esp, 8
test al, al
je 0x458fcb
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], 0xa6
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], 0xa4
call fcn.00401840
push 0
push str.servercsvfile
lea ecx, [ebp - 0xf10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45903c
push 0
push 0x4b4b94
lea ecx, [ebp - 0xf10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xf10]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea ecx, [ebp - 0x16ec]
push ecx
lea ecx, [ebp - 0xf10]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xf10]
mov byte [ebp - 4], 0xa7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16ec]
mov byte [ebp - 4], 0xa4
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x7df8]
call fcn.004632b0
lea edx, [ebp - 0xe90]
push 0x4bddfc
mov bl, 0xa8
push edx
mov byte [ebp - 4], bl
call fcn.00401b00
add esp, 8
test al, al
je 0x45906d
mov byte [ebp - 0x5dec], 1
push 0
push str.servercsvfile
lea ecx, [ebp - 0xf10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4590bf
push ecx
mov eax, esp
mov dword [ebp - 0xe94], esp
push str..csv
lea ecx, [ebp - 0xf10]
push ecx
push eax
call fcn.004019e0
add esp, 0xc
mov byte [ebp - 4], 0xa9
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov byte [ebp - 4], bl
call fcn.00401840
mov word [ebp - 0x5dec], 0x101
lea ecx, [ebp - 0x7df8]
call sub.mfc100.dll_Ordinal_3620
mov edi, eax
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x1240]
push edx
call fcn.00405ca0
push 0
mov bl, 0xaa
push str.BInternal
lea ecx, [ebp - 0x1240]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45925e
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0xedc]
push ecx
mov ecx, eax
call fcn.004484d0
push 0x5c
lea ecx, [ebp - 0xedc]
mov byte [ebp - 4], 0xab
call dword [sym.imp.mfc100.dll_Ordinal_11744]
lea ecx, [ebp - 0xedc]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea edx, [ebp - 0x16f4]
push edx
lea ecx, [ebp - 0xedc]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xedc]
mov byte [ebp - 4], 0xac
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16f4]
mov byte [ebp - 4], 0xab
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xedc]
call dword [sym.imp.mfc100.dll_Ordinal_5207]
dec eax
push eax
lea eax, [ebp - 0x16fc]
push eax
lea ecx, [ebp - 0xedc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xedc]
mov byte [ebp - 4], 0xad
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x16fc]
mov byte [ebp - 4], 0xab
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xedc]
push ecx
lea edx, [ebp - 0x171c]
push str.Please_wait_till__
push edx
call fcn.00401a70
push str.__is_listed_here_or_you_get_any_error_message._Can_you_see__
push eax
lea eax, [ebp - 0x1714]
push eax
mov byte [ebp - 4], 0xae
call fcn.004019e0
lea ecx, [ebp - 0xedc]
push ecx
push eax
lea edx, [ebp - 0x170c]
push edx
mov byte [ebp - 4], 0xaf
call fcn.004018e0
push str.__printer_here_
push eax
lea eax, [ebp - 0x1704]
push eax
mov byte [ebp - 4], 0xb0
call fcn.004019e0
add esp, 0x30
push eax
mov ecx, 0x4e54f4
mov byte [ebp - 4], 0xb1
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1704]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x170c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1714]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x171c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xedc]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1724]
push ecx
call fcn.00476a50
mov edx, esp
mov dword [ebp - 0xe94], esp
push str.sTemp.csv
push eax
push edx
mov byte [ebp - 4], 0xb2
call fcn.004019e0
add esp, 0xc
call fcn.00473a70
add esp, 4
lea ecx, [ebp - 0x1724]
mov byte [ebp - 0xe99], al
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
cmp byte [ebp - 0xe99], 0
je 0x4592db
lea eax, [ebp - 0x172c]
push eax
call fcn.00476a50
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xb3
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
lea ecx, [ebp - 0x172c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
test edi, edi
lea ecx, [ebp - 0x1240]
sete bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x7df8]
mov byte [ebp - 4], 0xa4
call fcn.004604b0
lea ecx, [ebp - 0xf10]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push str.IsWizardPrinter
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459368
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x144]
lea ecx, [ebp - 0x1248]
push ecx
mov ecx, eax
call fcn.00448500
lea edx, [ebp - 0x1248]
push str.WIZARD
push edx
call fcn.00401b00
add esp, 8
test al, al
lea ecx, [ebp - 0x1248]
setne bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.printerdetrmination
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x45945d
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x144]
lea ecx, [ebp - 0x103c]
push ecx
mov ecx, eax
call fcn.0041ffd0
lea edx, [ebp - 0xf84]
push edx
mov dword [ebp - 4], 0x2b4
call fcn.004810a0
add esp, 4
push 0
push str.Canon_imageRUNNER_IR_3225
lea ecx, [ebp - 0x103c]
mov byte [ebp - 4], 0xb5
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4593d7
push str.AnakageFilesSelfHealSolutionsiassistZee137Canon_imageRUNNER_IR_3225.pdf
jmp 0x45940d
push 0
push str.Cannon_Imagerunner_2525
lea ecx, [ebp - 0x103c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4593f5
push str.AnakageFilesSelfHealSolutionsiassistZee137Cannon_Imagerunner_2525.pdf
jmp 0x45940d
push 0
push edi
lea ecx, [ebp - 0x103c]
call dword [sym.imp.mfc100.dll_Ordinal_4143]
test eax, eax
je 0x459419
push str.AnakageFilesSelfHealSolutionsiassistZee137Leaser_jet_Pro_MFP_M128fn.pdf
lea ecx, [ebp - 0xf84]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push 5
push 0
push 0
lea ecx, [ebp - 0xf84]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xf84]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x103c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.ShowPrinterDialogBoxforsony
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push 0
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x4595a3
push 0x4b478c
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x1734]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x2b6
call dword [sym.imp.mfc100.dll_Ordinal_1313]
mov esi, 2
lea ecx, [ebp - 0x1734]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x173c]
push ecx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov dword [ebp - 4], 0x2b7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x173c]
mov dword [ebp - 4], esi
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp - 0xe90]
push 0x4ae26b
push edx
call fcn.00401980
add esp, 8
test al, al
je 0x459568
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov dword [ebp - 4], 0x2b8
call sub.mfc100.dll_Ordinal_1929
mov ecx, dword [eax + 4]
mov dword [ebp - 4], esi
call fcn.00401840
push 0
lea ecx, [ebp - 0x306c]
call fcn.0043b680
lea ecx, [ebp - 0x306c]
mov dword [ebp - 4], 0x2b9
call sub.mfc100.dll_Ordinal_3620
test eax, eax
lea ecx, [ebp - 0x306c]
sete bl
mov dword [ebp - 4], 2
call fcn.0043aef0
jmp 0x459f8c
push str.isCitrixInstalled
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459645
push str.C:Program_Files__x86_CitrixICA_ClientSelfServicePluginSelfService.exe
lea ecx, [ebp - 0x1044]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1044]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov dword [ebp - 4], 0x2ba
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x45962b
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x1044]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea eax, [ebp - 0x1044]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
setne bl
jmp 0x45962d
mov bl, 1
lea ecx, [ebp - 0x1044]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.deleteofficecachefolder
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459807
lea ecx, [ebp - 0x104c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1260]
mov dword [ebp - 4], 0x2bb
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1258]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xf8c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1250]
push ecx
mov byte [ebp - 4], 0xbe
call fcn.0047c3d0
lea edx, [ebp - 0x1258]
push edx
lea eax, [ebp - 0x1260]
push eax
lea ecx, [ebp - 0x104c]
mov bl, 0xbf
push ecx
mov byte [ebp - 4], bl
call fcn.00475100
add esp, 0x10
push 0
push str.16.0
lea ecx, [ebp - 0x1250]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459736
lea edx, [ebp - 0x104c]
push edx
lea eax, [ebp - 0x174c]
push 0x4af5dc
push eax
call fcn.00401a70
push str.AppDataLocalMicrosoftOffice16.0OfficeFileCache
push eax
lea ecx, [ebp - 0x1744]
push ecx
mov byte [ebp - 4], 0xc0
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0xf8c]
mov byte [ebp - 4], 0xc1
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1744]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x174c]
jmp 0x4597a1
push 0
push str.15.0
lea ecx, [ebp - 0xf8c]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4597aa
lea edx, [ebp - 0x104c]
push edx
lea eax, [ebp - 0x175c]
push 0x4af5dc
push eax
call fcn.00401a70
push str.AppDataLocalMicrosoftOffice15.0OfficeFileCache
push eax
lea ecx, [ebp - 0x1754]
push ecx
mov byte [ebp - 4], 0xc2
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0xf8c]
mov byte [ebp - 4], 0xc3
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1754]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x175c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf8c]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
lea ecx, [ebp - 0x1250]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf8c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1258]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1260]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x104c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.IsCiscoJabberInstalled
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x4598b2
push str.C:Program_Files__x86_Cisco_SystemsCisco_JabberCiscoJabber.exe
lea ecx, [ebp - 0x1054]
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1054]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
mov dword [ebp - 4], 0x2c4
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x459894
push str.Program_Files
push str.Program_Files__x86_
lea ecx, [ebp - 0x1054]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push ecx
lea eax, [ebp - 0x1054]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
je 0x459898
mov bl, 1
jmp 0x45989a
xor bl, bl
lea ecx, [ebp - 0x1054]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.advancedcleanup
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
test eax, eax
js 0x459c8c
push ecx
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x1108]
mov dword [ebp - 4], 0x2c5
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
mov bl, 0xc6
push 0x4b478c
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xe90]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1764]
push edx
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xc7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1764]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b4b94
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x176c]
push eax
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xe90]
mov byte [ebp - 4], 0xc8
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x176c]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xed4]
push ecx
mov ecx, dword [ebp - 0xeb4]
call fcn.004482d0
push 0
push str.advancedcleanup
lea ecx, [ebp - 0xed4]
mov byte [ebp - 4], 0xc9
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459a7e
push 0
push 0x4b4b94
lea ecx, [ebp - 0xed4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xed4]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1774]
push edx
lea ecx, [ebp - 0xed4]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xed4]
mov byte [ebp - 4], 0xca
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1774]
mov byte [ebp - 4], 0xc9
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xed4]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea eax, [ebp - 0x177c]
push eax
lea ecx, [ebp - 0xed4]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xed4]
mov byte [ebp - 4], 0xcb
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x177c]
mov byte [ebp - 4], 0xc9
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xed4]
push ecx
lea ecx, [ebp - 0x1108]
call dword [sym.imp.mfc100.dll_Ordinal_1313]
push 0
push str.ShowMessage
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459b95
push 0
push 0x4b4b94
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xebc]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea edx, [ebp - 0x1784]
push edx
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xebc]
mov byte [ebp - 4], 0xcc
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1784]
mov byte [ebp - 4], 0xc9
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b4b94
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0xebc]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
sub eax, edi
push eax
lea eax, [ebp - 0x178c]
push eax
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp - 0xebc]
mov byte [ebp - 4], 0xcd
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x178c]
mov byte [ebp - 4], 0xc9
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push 0x4b0b4c
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push eax
lea ecx, [ebp - 0x1278]
push ecx
lea ecx, [ebp - 0xebc]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp - 0xebc]
mov byte [ebp - 4], 0xce
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x1278]
mov byte [ebp - 4], 0xc9
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
lea ecx, [ebp - 0x5b80]
call fcn.004054c0
lea edx, [ebp - 0xebc]
push str.ShowMessage
mov bl, 0xcf
push edx
mov byte [ebp - 4], bl
call fcn.00401b00
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
test al, al
je 0x459be9
push str.MsgParameter
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea eax, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
mov byte [ebp - 4], 0xd0
push eax
jmp 0x459c08
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe98], esp
mov byte [ebp - 4], 0xd1
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x5b80]
mov byte [ebp - 4], bl
call fcn.00448e00
push ecx
lea eax, [ebp - 0x1108]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x5b80]
call fcn.00448530
lea ecx, [ebp - 0x5b80]
call sub.mfc100.dll_Ordinal_3620
test eax, eax
lea ecx, [ebp - 0x5b80]
sete bl
mov byte [ebp - 4], 0xc9
call fcn.00403e90
lea ecx, [ebp - 0xed4]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1108]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xebc]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f8c
push 0
push str.changeIESettings
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459e5a
lea ecx, [ebp - 0xf9c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0xf94]
mov dword [ebp - 4], 0x2d2
call dword [sym.imp.mfc100.dll_Ordinal_316]
push 0
mov bl, 0xd3
push edi
mov byte [ebp - 4], bl
call fcn.00486750
add esp, 8
push str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea ecx, [ebp - 0xf9c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.DWORD
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.2688
mov byte [ebp - 4], 0xd4
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0xf9c]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push edx
mov byte [ebp - 4], 0xd5
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.00481bd0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x459d83
push str.Failed_to_update_the_registry_SecureProtocols
lea ecx, [ebp - 0xf94]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push esi
push ecx
lea eax, [ebp - 0xf94]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.setInternetExplorerAsRecommanded_KB_11517
mov byte [ebp - 4], 0xd6
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
push str.HKEY_CURRENT_USERSoftwareMicrosoftInternet_ExplorerNew_WindowsPopupMgr
lea ecx, [ebp - 0xf9c]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.DWORD
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push 0x4b16e8
mov byte [ebp - 4], 0xd7
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0xf9c]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push edx
mov byte [ebp - 4], 0xd8
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.00481bd0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x459e36
push str._Failed_to_update_the_registry_PopupMgr
lea ecx, [ebp - 0xf94]
call dword [sym.imp.mfc100.dll_Ordinal_1483]
push esi
push ecx
lea eax, [ebp - 0xf94]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.setInternetExplorerAsRecommanded_KB_11517
mov byte [ebp - 4], 0xd9
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0xf94]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf9c]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push 0
push str.changeTLSSetting
lea ecx, [ebp - 0xe90]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x459f6d
lea ecx, [ebp - 0x1118]
call dword [sym.imp.mfc100.dll_Ordinal_316]
lea ecx, [ebp - 0x1110]
mov dword [ebp - 4], 0x2da
call dword [sym.imp.mfc100.dll_Ordinal_316]
mov bl, 0xdb
push str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet_SettingsSecureProtocols
lea ecx, [ebp - 0x1118]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
mov ecx, esp
mov dword [ebp - 0xe94], esp
push str.DWORD
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.2688
mov byte [ebp - 4], 0xdc
call dword [sym.imp.mfc100.dll_Ordinal_310]
push ecx
lea edx, [ebp - 0x1118]
mov ecx, esp
mov dword [ebp - 0xea0], esp
push edx
mov byte [ebp - 4], 0xdd
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov byte [ebp - 4], bl
call fcn.00481bd0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x459f4c
push str.Failed_to_update_the_registry_SecureProtocols
lea ecx, [ebp - 0x1110]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push esi
push ecx
lea eax, [ebp - 0x1110]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
mov ecx, esp
mov dword [ebp - 0xe98], esp
push str.setInternetExplorerAsRecommanded_KB_11517
mov byte [ebp - 4], 0xde
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], bl
call fcn.0047c140
add esp, 0xc
lea ecx, [ebp - 0x1110]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1118]
mov dword [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
jmp 0x459f94
push ecx
lea edx, [ebp - 0xe90]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov ecx, esi
call fcn.0044c300
mov bl, al
test bl, bl
je 0x44d42b
mov ecx, dword [ebp - 0xeb4]
lea eax, [ebp - 0x1120]
push eax
call fcn.00420120
push 0x4ae26b
lea ecx, [ebp - 0x1120]
mov dword [ebp - 4], 0x2df
call dword [sym.imp.mfc100.dll_Ordinal_2611]
test eax, eax
je 0x459fe7
push 0
push ecx
lea edx, [ebp - 0x1120]
mov ecx, esp
mov dword [ebp - 0xe94], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
mov ecx, dword [ebp - 0xf24]
push 0
call fcn.00429020
lea ecx, [ebp - 0x1120]
jmp 0x44d484