Function at 0x4883f0
Capabilities:
Delete file
Get file size
Move file
Read file on windows
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x56388e
mov eax, dword fs:[0]
push eax
sub esp, 0x86c
mov eax, dword [0x651788]
xor eax, esp
mov dword [esp + 0x868], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x651788]
xor eax, esp
push eax
lea eax, [esp + 0x880]
mov dword fs:[0], eax
mov edi, dword [esp + 0x890]
call fcn.0040b140
mov ecx, eax
call fcn.0046c750
xor ebx, ebx
mov ebp, 7
mov ecx, eax
mov dword [esp + 0x260], ebp
mov dword [esp + 0x25c], ebx
mov word [esp + 0x24c], bx
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x488460
sub ecx, esi
sar ecx, 1
push ecx
push eax
lea ecx, [esp + 0x250]
call fcn.00402120
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x250]
push eax
lea ecx, [esp + 0x1e4]
mov dword [esp + 0x894], ebx
mov dword [esp + 0x1fc], ebp
mov dword [esp + 0x1f8], ebx
mov word [esp + 0x1e8], bx
call fcn.00402390
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x250]
push ecx
lea ecx, [esp + 0x2a8]
mov byte [esp + 0x894], 1
mov dword [esp + 0x2c0], ebp
mov dword [esp + 0x2bc], ebx
mov word [esp + 0x2ac], bx
call fcn.00402390
push 0xb
push str.Slation.exe
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x890], 2
call fcn.00403e10
push 0x206
lea edx, [esp + 0x67a]
push ebx
push edx
mov word [esp + 0x680], bx
call fcn.004afb50
lea eax, [esp + 0x254]
push eax
lea ecx, [esp + 0x2c8]
push ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x44], ebx
call fcn.00471a50
add esp, 0x14
push 8
push str.Temp.xml
lea ecx, [esp + 0x2c0]
mov byte [esp + 0x890], 3
call fcn.0041b450
lea edx, [esp + 0x2b8]
push edx
lea eax, [esp + 0x230]
push eax
call fcn.00471d30
add esp, 8
cmp dword [esp + 0x244], 8
mov eax, dword [esp + 0x230]
mov byte [esp + 0x888], 4
jae 0x48858f
lea eax, [esp + 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x248]
push ecx
lea edx, [esp + 0x2f4]
push edx
call fcn.00471a50
add esp, 8
push 0xa
push str.Config.xml
lea ecx, [esp + 0x2f8]
mov byte [esp + 0x890], 5
call fcn.0041b450
lea eax, [esp + 0x248]
push eax
lea ecx, [esp + 0x310]
push ecx
call fcn.00471a50
add esp, 8
push 8
push str.temp.dat
lea ecx, [esp + 0x314]
mov byte [esp + 0x890], 6
call fcn.0041b450
lea ecx, [esp + 0xcc]
call fcn.004cfa60
push 0x38
mov byte [esp + 0x88c], 7
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 8
je 0x488642
push 0x5a6600
push 0x581628
push 0x581624
mov ecx, eax
call fcn.004d0080
jmp 0x488644
xor eax, eax
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x88c], 7
call fcn.004cef90
push 0x50
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 9
je 0x488685
push str.TheQueryInfo
mov ecx, eax
call fcn.004d0560
mov dword [esp + 0x2c], eax
jmp 0x488689
mov dword [esp + 0x2c], ebx
push 0x50
mov byte [esp + 0x88c], 7
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0xa
je 0x4886bd
push str.PushList
mov ecx, eax
call fcn.004d0560
mov dword [esp + 0x18], eax
jmp 0x4886c1
mov dword [esp + 0x18], ebx
mov esi, dword [edi + 8]
add edi, 4
cmp esi, dword [edi + 8]
mov byte [esp + 0x888], 7
mov dword [esp + 0x38], edi
jbe 0x4886dd
call fcn.004afdfe
mov ebp, esi
mov dword [esp + 0x40], ebp
mov esi, dword [edi + 8]
cmp dword [edi + 4], esi
jbe 0x4886f0
call fcn.004afdfe
cmp edi, edi
je 0x4886f9
call fcn.004afdfe
cmp ebp, esi
je 0x48a0c6
cmp ebp, dword [edi + 8]
jb 0x48870b
call fcn.004afdfe
mov esi, dword [ebp + 0x1c]
push 8
push str.PushName
lea ecx, [esp + 0x138]
mov dword [esp + 0x150], 7
mov dword [esp + 0x14c], ebx
mov word [esp + 0x13c], bx
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x130]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0xb
call edx
cmp dword [esp + 0x148], 8
mov dword [esp + 0x1c], eax
mov byte [esp + 0x888], 7
jb 0x48877a
mov eax, dword [esp + 0x134]
push eax
call fcn.00492573
add esp, 4
push 0xd
mov ebp, 7
push str.ChooseInstall
lea ecx, [esp + 0x154]
mov dword [esp + 0x150], ebp
mov dword [esp + 0x14c], ebx
mov word [esp + 0x13c], bx
mov dword [esp + 0x16c], ebp
mov dword [esp + 0x168], ebx
mov word [esp + 0x158], bx
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x14c]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0xc
call edx
cmp dword [esp + 0x164], 8
mov edi, eax
mov byte [esp + 0x888], 7
jb 0x4887fb
mov eax, dword [esp + 0x150]
push eax
call fcn.00492573
add esp, 4
cmp edi, ebx
mov dword [esp + 0x164], ebp
mov dword [esp + 0x160], ebx
mov word [esp + 0x150], bx
je 0x48a0a0
cmp dword [edi + 0x18], 8
jb 0x488824
mov eax, dword [edi + 4]
jmp 0x488827
lea eax, [edi + 4]
mov ecx, 0x5826c4
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x488856
test dx, dx
je 0x488852
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x488856
add eax, 4
add ecx, 4
test dx, dx
jne 0x488830
xor eax, eax
jmp 0x48885b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x48a0a0
push 0xe
xor edi, edi
mov ebx, 7
push str.InstallPushUrl
lea ecx, [esp + 0x18c]
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a0], edi
mov word [esp + 0x190], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x184]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0xd
call edx
cmp dword [esp + 0x19c], 8
mov ebp, eax
mov byte [esp + 0x888], bl
jb 0x4888cf
mov eax, dword [esp + 0x188]
push eax
call fcn.00492573
add esp, 4
push 0xf
push str.InstallGreenBag
lea ecx, [esp + 0x218]
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a0], edi
mov word [esp + 0x190], di
mov dword [esp + 0x230], ebx
mov dword [esp + 0x22c], edi
mov word [esp + 0x21c], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x210]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0xe
call edx
cmp dword [esp + 0x228], 8
mov dword [esp + 0x4c], eax
mov byte [esp + 0x888], 7
jb 0x48894d
mov eax, dword [esp + 0x214]
push eax
call fcn.00492573
add esp, 4
push 0xf
push str.InstallRunParam
lea ecx, [esp + 0x80]
mov dword [esp + 0x230], ebx
mov dword [esp + 0x22c], edi
mov word [esp + 0x21c], di
mov dword [esp + 0x98], ebx
mov dword [esp + 0x94], edi
mov word [esp + 0x84], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x78]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0xf
call edx
cmp dword [esp + 0x90], 8
mov dword [esp + 0x24], eax
mov byte [esp + 0x888], 7
jb 0x4889c5
mov eax, dword [esp + 0x7c]
push eax
call fcn.00492573
add esp, 4
push 0xd
push str.InstallRunExe
lea ecx, [esp + 0xb8]
mov dword [esp + 0x98], ebx
mov dword [esp + 0x94], edi
mov word [esp + 0x84], di
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xcc], edi
mov word [esp + 0xbc], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0xb0]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x10
call edx
cmp dword [esp + 0xc8], 8
mov dword [esp + 0x34], eax
mov byte [esp + 0x888], 7
jb 0x488a43
mov eax, dword [esp + 0xb4]
push eax
call fcn.00492573
add esp, 4
push 0x12
push str.InstallRunLocalExe
lea ecx, [esp + 0x9c]
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xcc], edi
mov word [esp + 0xbc], di
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb0], edi
mov word [esp + 0xa0], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x94]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x11
call edx
cmp dword [esp + 0xac], 8
mov dword [esp + 0x44], eax
mov byte [esp + 0x888], 7
jb 0x488ac1
mov eax, dword [esp + 0x98]
push eax
call fcn.00492573
add esp, 4
push 0xb
push str.InstallType
lea ecx, [esp + 0x64]
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb0], edi
mov word [esp + 0xa0], di
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
mov word [esp + 0x68], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x5c]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x12
call edx
cmp dword [esp + 0x74], 8
mov dword [esp + 0x28], eax
mov byte [esp + 0x888], 7
jb 0x488b2a
mov eax, dword [esp + 0x60]
push eax
call fcn.00492573
add esp, 4
push 0xe
push str.InstallUACType
lea ecx, [esp + 0x1fc]
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
mov word [esp + 0x68], di
mov dword [esp + 0x214], ebx
mov dword [esp + 0x210], edi
mov word [esp + 0x200], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x1f4]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x13
call edx
cmp dword [esp + 0x20c], 8
mov dword [esp + 0x14], eax
mov byte [esp + 0x888], 7
jb 0x488b9f
mov eax, dword [esp + 0x1f8]
push eax
call fcn.00492573
add esp, 4
push 0xe
push str.InstallWmiMode
lea ecx, [esp + 0x1c4]
mov dword [esp + 0x214], ebx
mov dword [esp + 0x210], edi
mov word [esp + 0x200], di
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x1d8], edi
mov word [esp + 0x1c8], di
call fcn.00402120
mov edx, dword [esi]
mov edx, dword [edx + 0x1c]
lea eax, [esp + 0x1bc]
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x14
call edx
cmp dword [esp + 0x1d4], 8
mov dword [esp + 0x50], eax
mov byte [esp + 0x888], 7
jb 0x488c1d
mov eax, dword [esp + 0x1c0]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x1c], edi
mov dword [esp + 0x1d4], ebx
mov dword [esp + 0x1d0], edi
mov word [esp + 0x1c0], di
je 0x48962f
mov edi, dword [esp + 0x1c]
mov ebx, dword [edi + 0x18]
add edi, 4
cmp ebx, 8
jb 0x488c50
mov eax, dword [edi]
jmp 0x488c52
mov eax, edi
mov ecx, str.hao123kantu
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x488c7d
test dx, dx
je 0x488c79
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x488c7d
add eax, 4
add ecx, 4
test dx, dx
jne 0x488c57
xor eax, eax
jmp 0x488c82
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x48927a
test ebp, ebp
je 0x48a0a0
lea ecx, [esp + 0x328]
call fcn.00486450
mov ebx, 8
cmp dword [ebp + 0x18], ebx
mov byte [esp + 0x888], 0x15
jb 0x488cb5
mov eax, dword [ebp + 4]
jmp 0x488cb8
lea eax, [ebp + 4]
push eax
push esi
lea ecx, [esp + 0x330]
call fcn.004865b0
lea ecx, [esp + 0x328]
call fcn.004863b0
push eax
lea ecx, [esp + 0x1c0]
call fcn.00401d20
xor ebp, ebp
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x1c4]
push ecx
mov edi, 7
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x894], 0x16
mov dword [esp + 0x1c4], edi
mov dword [esp + 0x1c0], ebp
mov word [esp + 0x1b0], bp
call fcn.00402390
mov eax, dword [esp + 0x34]
cmp eax, ebp
mov byte [esp + 0x888], 0x17
je 0x488d45
cmp dword [eax + 0x18], ebx
jb 0x488d35
mov eax, dword [eax + 4]
jmp 0x488d38
add eax, 4
push eax
lea ecx, [esp + 0x1a4]
call fcn.00403aa0
mov eax, dword [esp + 0x28]
cmp dword [eax + 0x18], ebx
jb 0x488d53
mov eax, dword [eax + 4]
jmp 0x488d56
add eax, 4
mov ecx, str.open_explorer
jmp 0x488d60
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x488d86
cmp dx, bp
je 0x488d82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x488d86
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x488d60
xor eax, eax
jmp 0x488d8b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
je 0x488f26
push 0x5a6624
lea ecx, [esp + 0x16c]
call fcn.00401d20
mov esi, dword [esp + 0x24]
cmp esi, ebp
mov byte [esp + 0x888], 0x18
lea ecx, [esp + 0x168]
jne 0x488dd0
push 0xffffffffffffffff
push ebp
lea edx, [esp + 0x1a8]
push edx
call fcn.00402390
jmp 0x488e9c
push 0x57415c
call fcn.00403a70
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x1a8]
push eax
lea ecx, [esp + 0x174]
call fcn.00403f10
push 0x574154
lea ecx, [esp + 0x16c]
call fcn.00403aa0
cmp dword [esi + 0x18], ebx
jb 0x488e0c
mov eax, dword [esi + 4]
jmp 0x488e0f
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x16c]
call fcn.00403aa0
call fcn.00470cb0
push 0x62
lea ecx, [esp + 0x3be]
push ebp
push ecx
mov esi, eax
mov word [esp + 0x3c4], bp
call fcn.004afb50
push 0x62
lea edx, [esp + 0x42e]
push ebp
push edx
mov word [esp + 0x434], bp
call fcn.004afb50
push esi
lea eax, [esp + 0x3d4]
push 0x571094
push eax
call fcn.00405340
add esp, 0x24
xor eax, eax
jmp 0x488e70
movzx ecx, word [esp + eax + 0x3bc]
mov word [esp + eax + 0x41c], cx
add eax, 2
cmp cx, bp
jne 0x488e70
lea ecx, [esp + 0x41c]
push ecx
lea ecx, [esp + 0x16c]
call fcn.00403aa0
cmp dword [esp + 0x180], ebx
mov eax, dword [esp + 0x16c]
jae 0x488eb3
lea eax, [esp + 0x16c]
push eax
call fcn.00470c30
add esp, 4
push 0x57415c
lea ecx, [esp + 0x16c]
call fcn.00403a70
push 0xffffffffffffffff
push ebp
lea edx, [esp + 0x1a8]
push edx
lea ecx, [esp + 0x174]
call fcn.00403f10
push str.__CreateStartMenu
lea ecx, [esp + 0x16c]
call fcn.00403aa0
cmp dword [esp + 0x180], ebx
mov eax, dword [esp + 0x16c]
jae 0x488f0c
lea eax, [esp + 0x16c]
push eax
call fcn.00470c30
add esp, 4
lea ecx, [esp + 0x168]
call fcn.00401d60
jmp 0x489203
push 0x50
mov dword [esp + 0x24], 1
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x888], 0x19
je 0x488f58
push str.PushItem
mov ecx, eax
call fcn.004d0560
mov edi, eax
jmp 0x488f5a
xor edi, edi
push 0x50
mov byte [esp + 0x88c], 0x17
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x888], 0x1a
je 0x488f8c
push 0x5837e4
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x488f8e
xor esi, esi
push 0x1f3
lea eax, [esp + 0x485]
push ebp
push eax
mov byte [esp + 0x894], 0x17
mov byte [esp + 0x48c], 0
call fcn.004afb50
mov eax, dword [esp + 0x1b0]
add esp, 0xc
cmp dword [esp + 0x1b8], ebx
jae 0x488fcb
lea eax, [esp + 0x1a4]
lea ecx, [esp + 0x480]
push ecx
push eax
call fcn.0046ecc0
push 0x30
call fcn.00492548
add esp, 0xc
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x888], 0x1b
je 0x489004
lea edx, [esp + 0x480]
push edx
mov ecx, eax
call fcn.0046adf0
jmp 0x489006
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x17
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x48917e
cmp dword [eax + 0x18], ebx
jb 0x489034
mov eax, dword [eax + 4]
jmp 0x489037
add eax, 4
push eax
lea ecx, [esp + 0x1f8]
call fcn.00401d20
mov byte [esp + 0x888], 0x1c
call fcn.00470cb0
push 0x62
mov esi, eax
lea eax, [esp + 0x422]
push ebp
push eax
mov word [esp + 0x428], bp
call fcn.004afb50
push 0x62
lea ecx, [esp + 0x3ca]
push ebp
push ecx
mov word [esp + 0x3d0], bp
call fcn.004afb50
push esi
lea edx, [esp + 0x438]
push 0x571094
push edx
call fcn.00405340
add esp, 0x24
xor eax, eax
jmp 0x4890a0
movzx ecx, word [esp + eax + 0x420]
mov word [esp + eax + 0x3b8], cx
add eax, 2
cmp cx, bp
jne 0x4890a0
lea eax, [esp + 0x3b8]
push eax
lea ecx, [esp + 0x1f8]
call fcn.00403aa0
push 0x50
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x888], 0x1d
je 0x4890f6
push 0x5837d4
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x4890f8
xor esi, esi
cmp dword [esp + 0x20c], ebx
mov eax, dword [esp + 0x1f8]
mov byte [esp + 0x888], 0x1c
jae 0x489117
lea eax, [esp + 0x1f8]
lea ecx, [esp + 0x480]
push ecx
push eax
call fcn.0046ecc0
push 0x30
call fcn.00492548
add esp, 0xc
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x888], 0x1e
je 0x489150
lea edx, [esp + 0x480]
push edx
mov ecx, eax
call fcn.0046adf0
jmp 0x489152
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x1c
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x888], 0x17
call fcn.00401d60
push 0x50
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x888], 0x1f
je 0x4891a8
push str.InstallRunFullPath
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x4891aa
xor esi, esi
push 0x30
mov byte [esp + 0x88c], 0x17
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebp
mov byte [esp + 0x888], 0x20
je 0x4891da
push str.true
mov ecx, eax
call fcn.0046adf0
jmp 0x4891dc
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x17
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
mov ecx, dword [esp + 0x18]
push edi
call fcn.004cef90
mov edi, 7
cmp dword [esp + 0x1b8], ebx
jb 0x48921c
mov eax, dword [esp + 0x1a4]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x1d4], ebx
mov dword [esp + 0x1b8], edi
mov dword [esp + 0x1b4], ebp
mov word [esp + 0x1a4], bp
jb 0x48924b
mov ecx, dword [esp + 0x1c0]
push ecx
call fcn.00492573
add esp, 4
lea ecx, [esp + 0x328]
mov dword [esp + 0x1d4], edi
mov dword [esp + 0x1d0], ebp
mov word [esp + 0x1c0], bp
mov byte [esp + 0x888], 7
call fcn.004863c0
jmp 0x48a0a0
cmp ebx, 8
jb 0x489283
mov eax, dword [edi]
jmp 0x489285
mov eax, edi
mov ecx, str.juzibrowse
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4892b6
test dx, dx
je 0x4892b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4892b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x489290
xor eax, eax
jmp 0x4892bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x48962f
test ebp, ebp
je 0x48a0a0
lea ecx, [esp + 0x328]
call fcn.004904b0
mov edi, 8
cmp dword [ebp + 0x18], edi
mov byte [esp + 0x888], 0x21
jb 0x4892ee
mov eax, dword [ebp + 4]
jmp 0x4892f1
lea eax, [ebp + 4]
push eax
push esi
lea ecx, [esp + 0x330]
call fcn.00490b20
lea ecx, [esp + 0x328]
call fcn.004863b0
push eax
lea ecx, [esp + 0x268]
call fcn.00401d20
push 0x7d0
mov byte [esp + 0x88c], 0x22
call dword [sym.imp.KERNEL32.dll_Sleep]
xor ebx, ebx
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x26c]
push edx
lea ecx, [esp + 0x13c]
mov dword [esp + 0x154], 7
mov dword [esp + 0x150], ebx
mov word [esp + 0x140], bx
call fcn.00402390
push str.jzbrowse.exe
lea ecx, [esp + 0x134]
mov byte [esp + 0x88c], 0x23
call fcn.00403aa0
mov eax, dword [esp + 0x28]
cmp dword [eax + 0x18], edi
jb 0x489385
mov eax, dword [eax + 4]
jmp 0x489388
add eax, 4
mov ecx, str.open_explorer
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4893b6
cmp dx, bx
je 0x4893b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4893b6
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x489390
xor eax, eax
jmp 0x4893bb
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4893e4
cmp dword [esp + 0x148], edi
mov eax, dword [esp + 0x134]
jae 0x4893d6
lea eax, [esp + 0x134]
push eax
call fcn.00470c30
add esp, 4
jmp 0x4895fe
push 0x50
mov dword [esp + 0x24], 1
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x24
je 0x489416
push str.PushItem
mov ecx, eax
call fcn.004d0560
mov edi, eax
jmp 0x489418
xor edi, edi
push 0x50
mov byte [esp + 0x88c], 0x23
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x25
je 0x48944a
push 0x5837e4
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x48944c
xor esi, esi
push 0x1f3
lea eax, [esp + 0x485]
push ebx
push eax
mov byte [esp + 0x894], 0x23
mov byte [esp + 0x48c], 0
call fcn.004afb50
mov eax, dword [esp + 0x140]
add esp, 0xc
cmp dword [esp + 0x148], 8
jae 0x48948a
lea eax, [esp + 0x134]
lea ecx, [esp + 0x480]
push ecx
push eax
call fcn.0046ecc0
push 0x30
call fcn.00492548
add esp, 0xc
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x26
je 0x4894c3
lea edx, [esp + 0x480]
push edx
mov ecx, eax
call fcn.0046adf0
jmp 0x4894c5
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x23
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
mov ebp, dword [esp + 0x24]
cmp ebp, ebx
je 0x48957e
push 0x50
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x27
je 0x489513
push 0x5837d4
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x489515
xor esi, esi
cmp dword [ebp + 0x18], 8
mov byte [esp + 0x888], 0x23
jb 0x489528
mov eax, dword [ebp + 4]
jmp 0x48952b
lea eax, [ebp + 4]
lea ecx, [esp + 0x480]
push ecx
push eax
call fcn.0046ecc0
push 0x30
call fcn.00492548
add esp, 0xc
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x28
je 0x489564
lea edx, [esp + 0x480]
push edx
mov ecx, eax
call fcn.0046adf0
jmp 0x489566
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x23
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
push 0x50
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x29
je 0x4895a8
push str.InstallRunFullPath
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x4895aa
xor esi, esi
push 0x30
mov byte [esp + 0x88c], 0x23
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x2a
je 0x4895da
push str.true
mov ecx, eax
call fcn.0046adf0
jmp 0x4895dc
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x23
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
mov ecx, dword [esp + 0x18]
push edi
call fcn.004cef90
lea ecx, [esp + 0x130]
call fcn.00401d60
lea ecx, [esp + 0x264]
call fcn.00401d60
lea ecx, [esp + 0x328]
mov byte [esp + 0x888], 7
call fcn.00490400
jmp 0x48a0a0
test ebp, ebp
je 0x48a0a0
cmp dword [ebp + 0x18], 8
mov dword [esp + 0x1c], 1
jb 0x48964a
mov edx, dword [ebp + 4]
jmp 0x48964d
lea edx, [ebp + 4]
xor ebx, ebx
mov eax, edx
mov dword [esp + 0x164], 7
mov dword [esp + 0x160], ebx
mov word [esp + 0x150], bx
lea edi, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x489670
sub eax, edi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x154]
call fcn.00402120
cmp dword [esp + 0x164], 8
mov eax, dword [esp + 0x150]
mov byte [esp + 0x888], 0x2b
jae 0x4896ad
lea eax, [esp + 0x150]
lea ecx, [esp + 0x674]
push ecx
push eax
call fcn.0046f570
add esp, 8
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1e0]
mov ebp, 7
push edx
lea ecx, [esp + 0x174]
mov dword [esp + 0x18c], ebp
mov dword [esp + 0x188], ebx
mov word [esp + 0x178], bx
call fcn.00402390
lea eax, [esp + 0x674]
mov byte [esp + 0x888], 0x2c
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x489702
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x678]
push eax
lea ecx, [esp + 0x170]
call fcn.00403e10
mov eax, dword [esp + 0x16c]
mov edi, 8
cmp dword [esp + 0x180], edi
jae 0x489742
lea eax, [esp + 0x16c]
push eax
call fcn.0046f9c0
add esp, 4
lea ecx, [esp + 0x54]
call fcn.00401b00
cmp dword [esp + 0x1f0], edi
mov edx, dword [esp + 0x1dc]
mov byte [esp + 0x888], 0x2d
jae 0x489773
lea edx, [esp + 0x1dc]
mov eax, edx
mov dword [esp + 0x148], ebp
mov dword [esp + 0x144], ebx
mov word [esp + 0x134], bx
lea edi, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x489790
sub eax, edi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x138]
call fcn.00402120
cmp dword [esp + 0x164], 8
mov edx, dword [esp + 0x150]
mov byte [esp + 0x888], 0x2e
jae 0x4897cd
lea edx, [esp + 0x150]
mov eax, edx
mov dword [esp + 0x19c], ebp
mov dword [esp + 0x198], ebx
mov word [esp + 0x188], bx
lea edi, [eax + 2]
jmp 0x4897f0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4897f0
sub eax, edi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x18c]
call fcn.00402120
lea ecx, [esp + 0x130]
push ecx
lea edx, [esp + 0x188]
push edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x890], 0x2f
call fcn.00401ba0
cmp dword [esp + 0x19c], 8
movzx edi, al
jb 0x48984b
mov eax, dword [esp + 0x188]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x148], 8
mov dword [esp + 0x19c], ebp
mov dword [esp + 0x198], ebx
mov word [esp + 0x188], bx
mov byte [esp + 0x888], 0x2d
jb 0x489883
mov ecx, dword [esp + 0x134]
push ecx
call fcn.00492573
add esp, 4
cmp edi, ebx
lea ecx, [esp + 0x184]
je 0x4898d4
push 0x5826c4
call fcn.00401d20
push str.DownloadFlag
lea ecx, [esp + 0x268]
mov byte [esp + 0x88c], 0x30
call fcn.00401d20
mov edx, dword [esi]
mov edx, dword [edx + 8]
lea eax, [esp + 0x184]
push eax
lea ecx, [esp + 0x268]
push ecx
mov ecx, esi
mov byte [esp + 0x890], 0x31
call edx
jmp 0x489918
push 0x582734
call fcn.00401d20
push str.DownloadFlag
lea ecx, [esp + 0x268]
mov byte [esp + 0x88c], 0x32
call fcn.00401d20
mov eax, dword [esi]
mov eax, dword [eax + 8]
lea ecx, [esp + 0x184]
push ecx
lea edx, [esp + 0x268]
push edx
mov ecx, esi
mov byte [esp + 0x890], 0x33
call eax
lea ecx, [esp + 0x264]
call fcn.00401d60
lea ecx, [esp + 0x184]
mov byte [esp + 0x888], 0x2d
call fcn.00401d60
mov ecx, dword [esp + 0x1dc]
mov esi, 8
cmp dword [esp + 0x1f0], esi
jae 0x489954
lea ecx, [esp + 0x1dc]
cmp dword [esp + 0x164], esi
mov eax, dword [esp + 0x150]
jae 0x48996b
lea eax, [esp + 0x150]
push edi
push ecx
push eax
push str.__s___s___d_
call fcn.0046fb10
add esp, 0x10
cmp edi, ebx
je 0x48a03f
cmp dword [esp + 0x1f0], esi
mov eax, dword [esp + 0x1dc]
jae 0x48999a
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x1a4]
call fcn.00401d20
lea ecx, [esp + 0x674]
push ecx
lea ecx, [esp + 0x188]
mov byte [esp + 0x88c], 0x34
call fcn.00401d20
mov eax, dword [esp + 0x4c]
cmp eax, ebx
mov byte [esp + 0x888], 0x35
je 0x489b21
cmp dword [eax + 0x18], esi
jb 0x4899e1
mov eax, dword [eax + 4]
jmp 0x4899e4
add eax, 4
mov ecx, 0x5826c4
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x489a16
cmp dx, bx
je 0x489a12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x489a16
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4899f0
xor eax, eax
jmp 0x489a1b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x489b21
call fcn.0040b140
mov ecx, eax
call fcn.0046c750
push eax
lea ecx, [esp + 0x214]
call fcn.00401d20
cmp dword [esp + 0x1f0], esi
mov eax, dword [esp + 0x1dc]
mov byte [esp + 0x888], 0x36
jae 0x489a5b
lea eax, [esp + 0x1dc]
push eax
lea ecx, [esp + 0x268]
call fcn.00401d20
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x18c]
push edx
lea ecx, [esp + 0x270]
mov byte [esp + 0x894], 0x37
call fcn.00403f10
lea eax, [esp + 0x264]
push eax
lea ecx, [esp + 0x118]
push ecx
call fcn.00471a50
add esp, 8
cmp dword [eax + 0x18], 0x10
mov byte [esp + 0x888], 0x38
jb 0x489ab2
mov eax, dword [eax + 4]
jmp 0x489ab5
add eax, 4
cmp dword [esp + 0x228], esi
mov ecx, dword [esp + 0x214]
jae 0x489acc
lea ecx, [esp + 0x214]
push ebx
push eax
push ecx
call fcn.004836d0
add esp, 0xc
lea ecx, [esp + 0x114]
call fcn.00401cf0
cmp dword [esp + 0x19c], esi
mov eax, dword [esp + 0x188]
jae 0x489afa
lea eax, [esp + 0x188]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [esp + 0x264]
call fcn.00401d60
lea ecx, [esp + 0x210]
mov byte [esp + 0x888], 0x35
call fcn.00401d60
mov eax, dword [esp + 0x34]
cmp eax, ebx
je 0x489bf3
cmp dword [eax + 0x18], esi
jb 0x489b37
mov eax, dword [eax + 4]
jmp 0x489b3a
add eax, 4
push eax
lea ecx, [esp + 0x188]
call fcn.00403a70
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x18c]
push edx
lea ecx, [esp + 0x1ac]
call fcn.00403f10
cmp dword [esp + 0x1b8], esi
mov ecx, dword [esp + 0x1a4]
jae 0x489b75
lea ecx, [esp + 0x1a4]
cmp dword [esp + 0x180], esi
mov eax, dword [esp + 0x16c]
jae 0x489b8c
lea eax, [esp + 0x16c]
push ecx
push eax
call fcn.0046f6e0
mov ecx, dword [esp + 0x1ac]
add esp, 8
cmp dword [esp + 0x1b8], esi
jae 0x489bad
lea ecx, [esp + 0x1a4]
cmp dword [esp + 0x180], esi
mov eax, dword [esp + 0x16c]
jae 0x489bc4
lea eax, [esp + 0x16c]
push ecx
push eax
push str.__s___s_
call fcn.0046fb10
mov eax, dword [esp + 0x178]
add esp, 0xc
cmp dword [esp + 0x180], esi
jae 0x489bea
lea eax, [esp + 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x489c07
lea eax, [esp + 0x674]
push eax
lea ecx, [esp + 0x1a4]
call fcn.00403aa0
mov esi, dword [esp + 0x44]
cmp esi, ebx
je 0x489c45
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x250]
push ecx
lea ecx, [esp + 0x1ac]
mov dword [esp + 0x28], ebx
call fcn.00402390
cmp dword [esi + 0x18], 8
jb 0x489c35
mov eax, dword [esi + 4]
jmp 0x489c38
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x1a4]
call fcn.00403aa0
push 0x5a6624
lea ecx, [esp + 0x134]
call fcn.00401d20
mov ebp, dword [esp + 0x24]
cmp ebp, ebx
mov byte [esp + 0x888], 0x39
lea ecx, [esp + 0x130]
jne 0x489c84
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x1a8]
push edx
call fcn.00403f10
mov edi, 8
jmp 0x489cd5
push 0x57415c
call fcn.00403aa0
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x1a8]
push eax
lea ecx, [esp + 0x13c]
call fcn.00403f10
push 0x574154
lea ecx, [esp + 0x134]
call fcn.00403aa0
mov edi, 8
cmp dword [ebp + 0x18], edi
jb 0x489cc5
mov eax, dword [ebp + 4]
jmp 0x489cc8
lea eax, [ebp + 4]
push eax
lea ecx, [esp + 0x134]
call fcn.00403aa0
mov esi, dword [esp + 0x28]
cmp esi, ebx
je 0x489fa6
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x489d37
cmp dword [eax + 0x18], edi
jb 0x489cf3
mov eax, dword [eax + 4]
jmp 0x489cf6
add eax, 4
mov ecx, 0x5826c4
jmp 0x489d00
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x489d26
cmp dx, bx
je 0x489d22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x489d26
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x489d00
xor eax, eax
jmp 0x489d2b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x489d37
mov dword [esp + 0x30], 1
cmp dword [esi + 0x18], edi
jb 0x489d41
mov eax, dword [esi + 4]
jmp 0x489d44
lea eax, [esi + 4]
mov ecx, str.open_explorer
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x489d76
cmp dx, bx
je 0x489d72
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x489d76
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x489d50
xor eax, eax
jmp 0x489d7b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x489fa6
call fcn.0046ffb0
test eax, eax
je 0x489e16
mov edi, dword [esp + 0x14]
cmp edi, ebx
je 0x489e16
mov ecx, edi
mov esi, str.direct_open
call fcn.00401ef0
mov cx, word [eax]
cmp cx, word [esi]
jne 0x489dca
cmp cx, bx
je 0x489dc6
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x489dca
add eax, 4
add esi, 4
cmp cx, bx
jne 0x489da4
xor eax, eax
jmp 0x489dcf
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x489fa1
mov ecx, edi
mov esi, str.no_open
call fcn.00401ef0
mov cx, word [eax]
cmp cx, word [esi]
jne 0x489e09
cmp cx, bx
je 0x489e05
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x489e09
add eax, 4
add esi, 4
cmp cx, bx
jne 0x489de3
xor eax, eax
jmp 0x489e0e
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x489feb
push 0x50
mov dword [esp + 0x24], 1
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x3a
je 0x489e48
push str.PushItem
mov ecx, eax
call fcn.004d0560
mov edi, eax
jmp 0x489e4a
xor edi, edi
push 0x50
mov byte [esp + 0x88c], 0x39
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x3b
je 0x489e7c
push 0x5837e4
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x489e7e
xor esi, esi
push 0x1f3
lea ecx, [esp + 0x485]
push ebx
push ecx
mov byte [esp + 0x894], 0x39
mov byte [esp + 0x48c], 0
call fcn.004afb50
add esp, 0xc
lea edx, [esp + 0x480]
push edx
lea ecx, [esp + 0x188]
call fcn.00401ef0
push eax
call fcn.0046ecc0
push 0x30
call fcn.00492548
add esp, 0xc
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x3c
je 0x489ee9
lea ecx, [esp + 0x480]
push ecx
mov ecx, eax
call fcn.0046adf0
jmp 0x489eeb
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x39
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
push 0x50
call fcn.00492548
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x3d
je 0x489f2d
push 0x5837d4
mov ecx, eax
call fcn.004d0560
mov esi, eax
jmp 0x489f2f
xor esi, esi
cmp ebp, ebx
mov byte [esp + 0x888], 0x39
je 0x489f95
lea edx, [esp + 0x480]
push edx
mov ecx, ebp
call fcn.00401ef0
push eax
call fcn.0046ecc0
push 0x30
call fcn.00492548
add esp, 0xc
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x888], 0x3e
je 0x489f7b
lea ecx, [esp + 0x480]
push ecx
mov ecx, eax
call fcn.0046adf0
jmp 0x489f7d
xor eax, eax
push eax
mov ecx, esi
mov byte [esp + 0x88c], 0x39
call fcn.004cef90
push esi
mov ecx, edi
call fcn.004cef90
mov ecx, dword [esp + 0x18]
push edi
call fcn.004cef90
jmp 0x489feb
mov edi, 8
cmp dword [esp + 0x148], edi
mov eax, dword [esp + 0x134]
jae 0x489fbd
lea eax, [esp + 0x134]
push eax
call fcn.00470c30
mov eax, dword [esp + 0x138]
add esp, 4
cmp dword [esp + 0x148], edi
jae 0x489fdd
lea eax, [esp + 0x134]
push eax
push 0x574fd8
call fcn.0046fb10
add esp, 8
cmp dword [esp + 0x1c], ebx
je 0x48a013
cmp dword [esp + 0x1b8], 8
mov eax, dword [esp + 0x1a4]
jae 0x48a009
lea eax, [esp + 0x1a4]
push 5
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
lea ecx, [esp + 0x130]
call fcn.00401d60
lea ecx, [esp + 0x184]
call fcn.00401d60
lea ecx, [esp + 0x1a0]
call fcn.00401d60
mov ebp, 7
lea esi, [ebp + 1]
lea ecx, [esp + 0x54]
mov byte [esp + 0x888], 0x2c
call fcn.00401b90
cmp dword [esp + 0x180], esi
jb 0x48a069
mov edx, dword [esp + 0x16c]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x164], esi
mov dword [esp + 0x180], ebp
mov dword [esp + 0x17c], ebx
mov word [esp + 0x16c], bx
mov byte [esp + 0x888], 7
jb 0x48a0a0
mov eax, dword [esp + 0x150]
push eax
call fcn.00492573
add esp, 4
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x40]
cmp edx, dword [ecx + 8]
jb 0x48a0b2
call fcn.004afdfe
add dword [esp + 0x40], 0x20
mov edi, dword [esp + 0x38]
mov ebp, dword [esp + 0x40]
xor ebx, ebx
jmp 0x4886e3
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x2c]
push eax
mov ecx, esi
call fcn.004cef90
push esi
lea ecx, [esp + 0xd0]
call fcn.004cef90
cmp dword [esp + 0x2d0], 0x10
mov eax, dword [esp + 0x2bc]
jae 0x48a0fb
lea eax, [esp + 0x2bc]
push eax
lea ecx, [esp + 0xd0]
call fcn.004cfd10
mov eax, dword [esp + 0x230]
xor ebx, ebx
cmp dword [esp + 0x244], 8
jae 0x48a122
lea eax, [esp + 0x230]
push 0
push 0x80
push 4
push 0
push 1
push closesocket
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x48a14d
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
lea edi, [ebx + 1]
push edi
call fcn.00492578
push edi
mov ebp, eax
push 0
push ebp
call fcn.004afb50
add esp, 0x10
push 0
lea ecx, [esp + 0x4c]
push ecx
push edi
push ebp
push esi
mov dword [esp + 0x5c], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x2f0]
push edx
lea eax, [esp + 0x2d8]
push eax
call fcn.00471d30
add esp, 8
cmp dword [esp + 0x244], 8
mov eax, dword [esp + 0x230]
mov byte [esp + 0x888], 0x3f
jae 0x48a1bb
lea eax, [esp + 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor edi, edi
xor eax, eax
xor ecx, ecx
cmp ebx, edi
jle 0x48a1ec
lea esp, [esp]
mov dl, byte [eax + str.GUANGSU]
xor byte [ecx + ebp], dl
add eax, 1
xor edi, edi
cmp eax, 7
jl 0x48a1e5
xor eax, eax
add ecx, 1
cmp ecx, ebx
jl 0x48a1d0
mov eax, dword [esp + 0x2d8]
mov esi, 8
cmp dword [esp + 0x2ec], esi
jae 0x48a208
lea eax, [esp + 0x2d8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esp + 0x30c]
push eax
lea ecx, [esp + 0x284]
push ecx
call fcn.00471d30
add esp, 8
cmp dword [esp + 0x298], esi
mov eax, dword [esp + 0x284]
mov byte [esp + 0x888], 0x40
jae 0x48a246
lea eax, [esp + 0x284]
push eax
call fcn.0046f9c0
mov eax, dword [esp + 0x288]
add esp, 4
cmp dword [esp + 0x298], esi
jae 0x48a266
lea eax, [esp + 0x284]
push edi
push 0x80
push 1
push edi
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x48a29e
push edi
lea edx, [esp + 0x18]
push edx
push ebx
push ebp
push esi
mov dword [esp + 0x28], edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esp + 0x20], edi
je 0x48a4b8
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
mov ebx, 7
push 0x5a6624
lea ecx, [esp + 0x1c4]
mov dword [esp + 0x1dc], ebx
mov dword [esp + 0x1d8], edi
mov word [esp + 0x1c8], di
call fcn.00402120
push 0xffffffffffffffff
push edi
lea eax, [esp + 0x250]
push eax
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x894], 0x41
call fcn.00402390
push 0xa
push str.Util32.exe
lea ecx, [esp + 0x1c4]
call fcn.00403e10
push edi
push 0x5a6624
lea ecx, [esp + 0x154]
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x168], edi
mov word [esp + 0x158], di
call fcn.00402120
push 1
push 0x57415c
lea ecx, [esp + 0x154]
mov byte [esp + 0x890], 0x42
call fcn.00402120
push 0xffffffffffffffff
push edi
lea ecx, [esp + 0x1c4]
push ecx
lea ecx, [esp + 0x158]
call fcn.00403f10
push 0xd
push str.___RunHuoRong
lea ecx, [esp + 0x154]
call fcn.00403e10
cmp dword [esp + 0x30], edi
jne 0x48a3ac
mov eax, dword [esp + 0x150]
mov esi, 8
cmp dword [esp + 0x164], esi
jae 0x48a3a1
lea eax, [esp + 0x150]
push eax
call fcn.00470c30
jmp 0x48a46b
push edi
push 0x5a6624
lea ecx, [esp + 0x138]
mov dword [esp + 0x150], ebx
mov dword [esp + 0x14c], edi
mov word [esp + 0x13c], di
call fcn.00402120
push 1
push 0x57415c
lea ecx, [esp + 0x138]
mov byte [esp + 0x890], 0x43
call fcn.00402120
push 0xffffffffffffffff
push edi
lea edx, [esp + 0x2a4]
push edx
lea ecx, [esp + 0x13c]
call fcn.00403f10
push 2
push 0x574154
lea ecx, [esp + 0x138]
call fcn.00403e10
push 0xffffffffffffffff
push edi
lea eax, [esp + 0x1c4]
push eax
lea ecx, [esp + 0x13c]
call fcn.00403f10
mov eax, dword [esp + 0x134]
mov esi, 8
cmp dword [esp + 0x148], esi
jae 0x48a44c
lea eax, [esp + 0x134]
push eax
call fcn.00470c30
add esp, 4
cmp dword [esp + 0x148], esi
jb 0x48a46e
mov ecx, dword [esp + 0x134]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x164], esi
jb 0x48a487
mov edx, dword [esp + 0x150]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x1d4], esi
mov dword [esp + 0x164], ebx
mov dword [esp + 0x160], edi
mov word [esp + 0x150], di
jb 0x48a4c0
mov eax, dword [esp + 0x1c0]
push eax
call fcn.00492573
add esp, 4
jmp 0x48a4c0
mov ebx, 7
lea esi, [ebx + 1]
push ebp
call fcn.00492573
add esp, 4
cmp dword [esp + 0x298], esi
jb 0x48a4e2
mov ecx, dword [esp + 0x284]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x2ec], esi
mov dword [esp + 0x298], ebx
mov dword [esp + 0x294], edi
mov word [esp + 0x284], di
jb 0x48a511
mov edx, dword [esp + 0x2d8]
push edx
call fcn.00492573
add esp, 4
mov eax, dword [esp + 0x100]
cmp eax, 0x65a92c
mov dword [esp + 0x2ec], ebx
mov dword [esp + 0x2e8], edi
mov word [esp + 0x2d8], di
mov byte [esp + 0x888], 6
mov dword [esp + 0xcc], vtable.TiXmlDocument.0
je 0x48a551
push eax
call fcn.00492573
add esp, 4
lea ecx, [esp + 0xcc]
call fcn.004cf6f0
cmp dword [esp + 0x324], 0x10
jb 0x48a577
mov eax, dword [esp + 0x310]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x308], 0x10
mov ebp, 0xf
mov dword [esp + 0x324], ebp
mov dword [esp + 0x320], edi
mov byte [esp + 0x310], 0
jb 0x48a5ac
mov ecx, dword [esp + 0x2f4]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x244], esi
mov dword [esp + 0x308], ebp
mov dword [esp + 0x304], edi
mov byte [esp + 0x2f4], 0
jb 0x48a5db
mov edx, dword [esp + 0x230]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x2d0], 0x10
mov dword [esp + 0x244], ebx
mov dword [esp + 0x240], edi
mov word [esp + 0x230], di
jb 0x48a60b
mov eax, dword [esp + 0x2bc]
push eax
call fcn.00492573
add esp, 4
cmp dword [esp + 0x2b4], esi
mov dword [esp + 0x2d0], ebp
mov dword [esp + 0x2cc], edi
mov byte [esp + 0x2bc], 0
jb 0x48a63a
mov ecx, dword [esp + 0x2a0]
push ecx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x1f0], esi
mov dword [esp + 0x2b4], ebx
mov dword [esp + 0x2b0], edi
mov word [esp + 0x2a0], di
jb 0x48a669
mov edx, dword [esp + 0x1dc]
push edx
call fcn.00492573
add esp, 4
cmp dword [esp + 0x260], esi
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x1ec], edi
mov word [esp + 0x1dc], di
jb 0x48a698
mov eax, dword [esp + 0x24c]
push eax
call fcn.00492573
add esp, 4
mov ecx, dword [esp + 0x880]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x868]
xor ecx, esp
call fcn.004aeca3
add esp, 0x878
ret 4