Function at 0x4589c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55d842
mov eax, dword fs:[0]
push eax
mov eax, 0x2d9c
call fcn.00464ee0
mov eax, dword [0x5c24ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2c98], ecx
push str.RunType
mov ecx, dword [ebp + 8]
call fcn.0043ddf0
mov dword [ebp - 0x2ce4], eax
push 0x568f68
lea ecx, [ebp - 0x265c]
call fcn.0041b0f0
mov dword [ebp - 4], 0
mov dword [ebp - 0x2cb8], 0
cmp dword [ebp - 0x2ce4], 0
je 0x458aa5
mov eax, dword [ebp - 0x2ce4]
push eax
lea ecx, [ebp - 0x287c]
call fcn.00419540
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x287c]
push ecx
lea edx, [ebp - 0x2a6c]
push edx
call fcn.0047335a
add esp, 8
mov dword [ebp - 0x2d3c], eax
mov eax, dword [ebp - 0x2d3c]
push eax
lea ecx, [ebp - 0x265c]
call fcn.00420510
lea ecx, [ebp - 0x2a6c]
call fcn.0041b370
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x287c]
call fcn.004195b0
mov ecx, dword [ebp - 0x2ce4]
push ecx
call fcn.0048a073
add esp, 4
mov dword [ebp - 0x2cb8], eax
mov dword [ebp - 0x2cd4], 0
cmp dword [ebp - 0x2cb8], 0
jne 0x458ad8
push 0xffffffffffffffff
push 0x568f6c
push 0x568f90
call fcn.00419670
mov ecx, eax
call fcn.0046cf86
mov dword [ebp - 0x2cd4], eax
jmp 0x458b1f
cmp dword [ebp - 0x2cb8], 1
jne 0x458b01
push 0xffffffffffffffff
push 0x568fa0
push 0x568fcc
call fcn.00419670
mov ecx, eax
call fcn.0046cf86
mov dword [ebp - 0x2cd4], eax
jmp 0x458b1f
push 0xffffffffffffffff
push 0x568fdc
push 0x569004
call fcn.00419670
mov ecx, eax
call fcn.0046cf86
mov dword [ebp - 0x2cd4], eax
push 0
push str.UpAnZhuangFlag
push 0x569034
call fcn.00419670
mov ecx, eax
call fcn.0046cf86
mov dword [ebp - 0x2d38], eax
cmp dword [ebp - 0x2d38], 0xffffffff
jne 0x458bd4
push 0x569044
lea ecx, [ebp - 0x2614]
call fcn.00419540
mov byte [ebp - 4], 2
call fcn.00419670
mov ecx, eax
call fcn.0046cbd7
push eax
lea ecx, [ebp - 0x2614]
call fcn.00419650
push 0x569048
lea ecx, [ebp - 0x2614]
call fcn.00419650
push 0x56905c
lea ecx, [ebp - 0x2614]
call fcn.00419650
push str.UpInstalloffline
lea ecx, [ebp - 0x2614]
call fcn.00419650
lea ecx, [ebp - 0x2614]
call fcn.0041a090
push eax
call fcn.0046fe72
add esp, 4
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2614]
call fcn.004195b0
push str.http:__sc.yaoguangsoft.cn_tm.php
lea ecx, [ebp - 0x2734]
call fcn.0041b0f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2734]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045a2d0
mov dword [ebp - 0x2cb4], eax
mov edx, dword [ebp - 0x2cd4]
cmp edx, dword [ebp - 0x2cb4]
jne 0x458c39
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2734]
call fcn.0041b370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x265c]
call fcn.0041b370
jmp 0x45a2ac
cmp dword [ebp - 0x2cb4], 0
je 0x458caf
cmp dword [ebp - 0x2cb8], 0
jne 0x458c6a
mov eax, dword [ebp - 0x2cb4]
push eax
push str.UpOnlineFuWuDate
push 0x5690d0
call fcn.00419670
mov ecx, eax
call fcn.0046ed1c
jmp 0x458caf
cmp dword [ebp - 0x2cb8], 1
jne 0x458c92
mov ecx, dword [ebp - 0x2cb4]
push ecx
push str.UpOnlineRuanJianDate
push 0x56910c
call fcn.00419670
mov ecx, eax
call fcn.0046ed1c
jmp 0x458caf
mov edx, dword [ebp - 0x2cb4]
push edx
push str.UpOnlineCaiDanDate
push 0x569144
call fcn.00419670
mov ecx, eax
call fcn.0046ed1c
xor eax, eax
mov word [ebp - 0x31c], ax
push 0x206
push 0
lea ecx, [ebp - 0x31a]
push ecx
call fcn.00485370
add esp, 0xc
mov byte [ebp - 0x2524], 0
push 0xfff
push 0
lea edx, [ebp - 0x2523]
push edx
call fcn.00485370
add esp, 0xc
mov dword [ebp - 0x2cc8], 0x1000
mov dword [ebp - 0x2ccc], 0
lea ecx, [ebp - 0x2c90]
call fcn.0047aa6f
mov byte [ebp - 4], 4
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x2c90]
call fcn.0047b582
lea ecx, [ebp - 0x31c]
push ecx
lea ecx, [ebp - 0x284c]
call fcn.00419540
mov byte [ebp - 4], 5
lea edx, [ebp - 0x284c]
push edx
lea eax, [ebp - 0x2794]
push eax
call fcn.0047335a
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x284c]
call fcn.004195b0
lea ecx, [ebp - 0x2a54]
push ecx
call fcn.00419670
mov ecx, eax
call fcn.0046ccf3
mov dword [ebp - 0x2d40], eax
mov edx, dword [ebp - 0x2d40]
mov dword [ebp - 0x2d34], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2d34]
push eax
lea ecx, [ebp - 0x2554]
push ecx
call fcn.0047335a
add esp, 8
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a54]
call fcn.004195b0
push 0x569154
lea ecx, [ebp - 0x2834]
call fcn.00419540
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x2834]
push edx
lea eax, [ebp - 0x277c]
push eax
call fcn.0047335a
add esp, 8
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2834]
call fcn.004195b0
push str.YaSuo
lea ecx, [ebp - 0x27f4]
call fcn.00419540
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x27f4]
push ecx
lea edx, [ebp - 0x2894]
push edx
call fcn.0047335a
add esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x27f4]
call fcn.004195b0
push 0x569170
lea ecx, [ebp - 0x2864]
call fcn.00419540
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x2864]
push eax
lea ecx, [ebp - 0x2764]
push ecx
call fcn.0047335a
add esp, 8
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2864]
call fcn.004195b0
lea ecx, [ebp - 0x2554]
call fcn.0041c910
mov dword [ebp - 0x2cbc], eax
cmp dword [ebp - 0x2cbc], 6
jl 0x4597e5
mov edx, dword [ebp - 0x2cbc]
sub edx, 6
push edx
push 0
lea eax, [ebp - 0x294c]
push eax
lea ecx, [ebp - 0x2554]
call fcn.00454980
mov byte [ebp - 4], 0x14
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x2cbc]
sub ecx, 6
push ecx
lea edx, [ebp - 0x26a4]
push edx
lea ecx, [ebp - 0x2554]
call fcn.00454980
mov byte [ebp - 4], 0x15
push 2
push 0
lea eax, [ebp - 0x280c]
push eax
lea ecx, [ebp - 0x26a4]
call fcn.00454980
mov byte [ebp - 4], 0x16
push 2
push 2
lea ecx, [ebp - 0x27ac]
push ecx
lea ecx, [ebp - 0x26a4]
call fcn.00454980
mov byte [ebp - 4], 0x17
push 2
push 4
lea edx, [ebp - 0x27c4]
push edx
lea ecx, [ebp - 0x26a4]
call fcn.00454980
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x280c]
call fcn.0041bee0
push eax
call fcn.0048a09d
add esp, 4
mov dword [ebp - 0x2cf0], eax
lea ecx, [ebp - 0x27ac]
call fcn.0041bee0
push eax
call fcn.0048a09d
add esp, 4
mov dword [ebp - 0x2ce8], eax
lea ecx, [ebp - 0x27c4]
call fcn.0041bee0
push eax
call fcn.0048a09d
add esp, 4
mov dword [ebp - 0x2cf4], eax
mov byte [ebp - 0x2c91], 0
mov dword [ebp - 0x2cdc], 0x12
mov dword [ebp - 0x2cf8], 0
lea ecx, [ebp - 0x2584]
call fcn.0041b270
mov byte [ebp - 4], 0x19
xor eax, eax
mov word [ebp - 0x524], ax
push 0x206
push 0
lea ecx, [ebp - 0x522]
push ecx
call fcn.00485370
add esp, 0xc
push 0x104
lea edx, [ebp - 0x524]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x2cf8], eax
cmp dword [ebp - 0x2cf8], 0
jne 0x45901b
call fcn.00419670
mov ecx, eax
call fcn.0046cb19
push eax
lea ecx, [ebp - 0x2584]
call fcn.00419610
lea ecx, [ebp - 0x2584]
call fcn.0045c870
movzx eax, word [eax]
cmp eax, 0x5c
je 0x459009
lea ecx, [ebp - 0x2584]
call fcn.0045c870
movzx ecx, word [eax]
cmp ecx, 0x2f
je 0x459009
push 0x5c
lea ecx, [ebp - 0x2584]
call fcn.0045c030
push 0x569180
lea ecx, [ebp - 0x2584]
call fcn.00419650
jmp 0x45902d
lea edx, [ebp - 0x524]
push edx
lea ecx, [ebp - 0x2584]
call fcn.00419610
push 0
push 0x80
push 3
push 0
push 1
push connect
lea ecx, [ebp - 0x2584]
call fcn.0041a090
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x2ce0], eax
cmp dword [ebp - 0x2ce0], 0xffffffff
je 0x459185
push 0
push 0
lea eax, [ebp - 0x2d94]
push eax
mov ecx, dword [ebp - 0x2ce0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x459185
lea edx, [ebp - 0x281c]
push edx
lea eax, [ebp - 0x2d94]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea ecx, [ebp - 0x28d4]
push ecx
lea edx, [ebp - 0x281c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
lea ecx, [ebp - 0x25fc]
call fcn.00420080
mov byte [ebp - 4], 0x1a
mov byte [ebp - 0x114], 0
push 0x103
push 0
lea eax, [ebp - 0x113]
push eax
call fcn.00485370
add esp, 0xc
movzx ecx, word [ebp - 0x28d4]
push ecx
push 0x569194
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00420670
push 0xffffffffffffffff
lea ecx, [ebp - 0x25fc]
call fcn.0041c910
sub eax, 2
push eax
lea ecx, [ebp - 0x2a3c]
push ecx
lea ecx, [ebp - 0x25fc]
call fcn.00454980
mov dword [ebp - 0x2d30], eax
mov edx, dword [ebp - 0x2d30]
push edx
lea ecx, [ebp - 0x25fc]
call fcn.00420510
lea ecx, [ebp - 0x2a3c]
call fcn.0041b370
lea ecx, [ebp - 0x25fc]
call fcn.0041bee0
push eax
call fcn.0048a09d
add esp, 4
mov dword [ebp - 0x2cdc], eax
mov eax, dword [ebp - 0x2ce0]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x25fc]
call fcn.0041b370
mov ecx, dword [ebp - 0x2cdc]
sub ecx, 1
cmp dword [ebp - 0x2cf0], ecx
jl 0x4591a7
mov edx, dword [ebp - 0x2cdc]
add edx, 1
cmp dword [ebp - 0x2cf0], edx
jle 0x4591ae
mov byte [ebp - 0x2c91], 1
cmp dword [ebp - 0x2ce8], 1
jl 0x4591c0
cmp dword [ebp - 0x2ce8], 0xc
jle 0x4591c7
mov byte [ebp - 0x2c91], 1
cmp dword [ebp - 0x2cf4], 1
jl 0x4591d9
cmp dword [ebp - 0x2cf4], 0x1f
jle 0x4591e0
mov byte [ebp - 0x2c91], 1
movzx eax, byte [ebp - 0x2c91]
test eax, eax
je 0x45978b
mov ecx, dword [ebp - 0x2c98]
cmp dword [ecx], 0
jne 0x45920c
push 0
call fcn.00458970
add esp, 4
mov edx, dword [ebp - 0x2c98]
mov dword [edx], eax
mov byte [ebp - 0x2c9b], 0
call fcn.00419670
mov ecx, eax
call fcn.0046cbef
mov dword [ebp - 0x2cac], eax
cmp dword [ebp - 0x2cac], 0
jne 0x459245
mov byte [ebp - 0x2c9b], 1
mov eax, dword [ebp - 0x2c98]
mov ecx, dword [eax]
mov dword [ebp - 0x2cac], ecx
jmp 0x459283
mov edx, dword [ebp - 0x2c98]
mov eax, dword [edx]
sub eax, dword [ebp - 0x2cac]
push eax
call fcn.0048f86f
add esp, 4
mov dword [ebp - 0x2d2c], eax
cmp dword [ebp - 0x2d2c], 0x12cc0300
jl 0x459283
mov byte [ebp - 0x2c9b], 1
mov ecx, dword [ebp - 0x2c98]
mov edx, dword [ecx]
mov dword [ebp - 0x2cac], edx
mov eax, dword [ebp - 0x2cac]
push eax
call fcn.0047034b
add esp, 4
mov dword [ebp - 0x2d1c], eax
mov eax, dword [ebp - 0x2cac]
cdq
push edx
push eax
lea ecx, [ebp - 0x27dc]
push ecx
call fcn.00471ee8
add esp, 0xc
mov byte [ebp - 4], 0x1b
push 0x568f6a
lea ecx, [ebp - 0x25cc]
call fcn.0041b0f0
mov byte [ebp - 4], 0x1c
push 0x568f6b
lea ecx, [ebp - 0x262c]
call fcn.0041b0f0
mov byte [ebp - 4], 0x1d
push 0x568f8e
lea ecx, [ebp - 0x268c]
call fcn.0041b0f0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2d00]
call fcn.0045bd90
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x2cd8], 0
jmp 0x45931a
mov edx, dword [ebp - 0x2cd8]
add edx, 1
mov dword [ebp - 0x2cd8], edx
cmp dword [ebp - 0x2cd8], 0x1a
jge 0x45934d
mov eax, dword [ebp - 0x2cd8]
add eax, 0x61
mov byte [ebp - 0x2ca7], al
lea ecx, [ebp - 0x2ca7]
push ecx
lea edx, [ebp - 0x2da8]
push edx
lea ecx, [ebp - 0x2d00]
call fcn.0045bcd0
jmp 0x45930b
mov dword [ebp - 0x2cd0], 0
jmp 0x459368
mov eax, dword [ebp - 0x2cd0]
add eax, 1
mov dword [ebp - 0x2cd0], eax
cmp dword [ebp - 0x2cd0], 0x1a
jge 0x45939b
mov ecx, dword [ebp - 0x2cd0]
add ecx, 0x41
mov byte [ebp - 0x2ca6], cl
lea edx, [ebp - 0x2ca6]
push edx
lea eax, [ebp - 0x2da0]
push eax
lea ecx, [ebp - 0x2d00]
call fcn.0045bcd0
jmp 0x459359
mov dword [ebp - 0x2cb0], 0
jmp 0x4593b6
mov ecx, dword [ebp - 0x2cb0]
add ecx, 1
mov dword [ebp - 0x2cb0], ecx
mov edx, dword [ebp - 0x2cb0]
cmp edx, dword [ebp - 0x2cbc]
jge 0x45943a
mov eax, dword [ebp - 0x2cb0]
push eax
lea ecx, [ebp - 0x2554]
call fcn.0045be70
push eax
lea ecx, [ebp - 0x2d28]
push ecx
lea ecx, [ebp - 0x2d00]
call fcn.0045d270
lea edx, [ebp - 0x2d84]
push edx
lea ecx, [ebp - 0x2d00]
call fcn.0045c9e0
push eax
lea ecx, [ebp - 0x2d28]
call fcn.004636e0
movzx eax, al
test eax, eax
je 0x459412
jmp 0x45943a
mov ecx, dword [ebp - 0x2cb0]
push ecx
lea ecx, [ebp - 0x2554]
call fcn.0045be70
mov dl, byte [eax]
movzx eax, dl
push eax
lea ecx, [ebp - 0x25cc]
call fcn.0045c010
jmp 0x4593a7
push 0xffffffffffffffff
lea ecx, [ebp - 0x25cc]
call fcn.0041c910
push eax
lea ecx, [ebp - 0x2a24]
push ecx
lea ecx, [ebp - 0x2554]
call fcn.00454980
mov dword [ebp - 0x2d24], eax
mov edx, dword [ebp - 0x2d24]
push edx
lea ecx, [ebp - 0x268c]
call fcn.00420510
lea ecx, [ebp - 0x2a24]
call fcn.0041b370
lea ecx, [ebp - 0x268c]
call fcn.0041c910
cmp eax, 3
jb 0x459519
push 3
push 0
lea eax, [ebp - 0x2904]
push eax
lea ecx, [ebp - 0x268c]
call fcn.00454980
mov dword [ebp - 0x2d20], eax
mov ecx, dword [ebp - 0x2d20]
push ecx
lea ecx, [ebp - 0x262c]
call fcn.00420510
lea ecx, [ebp - 0x2904]
call fcn.0041b370
lea ecx, [ebp - 0x262c]
call fcn.0041bee0
push eax
call fcn.00472607
add esp, 4
test eax, eax
je 0x4594eb
mov byte [ebp - 0x2c9a], 1
jmp 0x4594f2
mov byte [ebp - 0x2c9a], 0
mov dl, byte [ebp - 0x2c9a]
mov byte [ebp - 0x2ca5], dl
movzx eax, byte [ebp - 0x2ca5]
test eax, eax
jne 0x459519
push 0x568f8f
lea ecx, [ebp - 0x262c]
call fcn.00420670
lea ecx, [ebp - 0x262c]
push ecx
lea ecx, [ebp - 0x25cc]
call fcn.00420780
mov eax, dword [ebp - 0x2d1c]
cdq
push edx
push eax
lea edx, [ebp - 0x291c]
push edx
call fcn.00471ee8
add esp, 0xc
mov dword [ebp - 0x2d18], eax
mov eax, dword [ebp - 0x2d18]
mov dword [ebp - 0x2d14], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x2d14]
push ecx
lea ecx, [ebp - 0x25cc]
call fcn.00420780
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x291c]
call fcn.0041b370
lea edx, [ebp - 0x25cc]
push edx
lea ecx, [ebp - 0x2554]
call fcn.00420600
call fcn.00419670
mov ecx, eax
call fcn.0046cbd7
push eax
lea ecx, [ebp - 0x2674]
call fcn.00419540
mov byte [ebp - 4], 0x21
push str.Reg.exe
lea ecx, [ebp - 0x2674]
call fcn.00419650
push str.SetSPD
lea ecx, [ebp - 0x25b4]
call fcn.00419540
mov byte [ebp - 4], 0x22
push str.___qid
lea ecx, [ebp - 0x25b4]
call fcn.00419650
lea eax, [ebp - 0x25cc]
push eax
lea ecx, [ebp - 0x2934]
push ecx
call fcn.00472eb6
add esp, 8
mov dword [ebp - 0x2d10], eax
mov edx, dword [ebp - 0x2d10]
mov dword [ebp - 0x2d0c], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x2d0c]
push eax
lea ecx, [ebp - 0x25b4]
call fcn.00419630
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2934]
call fcn.004195b0
push str.___time
lea ecx, [ebp - 0x25b4]
call fcn.00419650
lea ecx, [ebp - 0x27dc]
push ecx
lea edx, [ebp - 0x2a84]
push edx
call fcn.00472eb6
add esp, 8
mov dword [ebp - 0x2d08], eax
mov eax, dword [ebp - 0x2d08]
mov dword [ebp - 0x2d04], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x2d04]
push ecx
lea ecx, [ebp - 0x25b4]
call fcn.00419630
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2a84]
call fcn.004195b0
push 0x5691dc
lea ecx, [ebp - 0x2644]
call fcn.00419540
mov byte [ebp - 4], 0x25
lea edx, [ebp - 0x2674]
push edx
lea ecx, [ebp - 0x2644]
call fcn.00419630
push 0x5691e0
lea ecx, [ebp - 0x2644]
call fcn.00419650
lea eax, [ebp - 0x25b4]
push eax
lea ecx, [ebp - 0x2644]
call fcn.00419630
call fcn.00472f67
test eax, eax
je 0x4596f3
push 0
push 0
push 0
lea ecx, [ebp - 0x2644]
call fcn.0041a090
push eax
call fcn.0046fd03
add esp, 0x10
jmp 0x459713
lea ecx, [ebp - 0x25b4]
call fcn.0041a090
push eax
lea ecx, [ebp - 0x2674]
call fcn.0041a090
push eax
call fcn.0046fb74
add esp, 8
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2644]
call fcn.004195b0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x25b4]
call fcn.004195b0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x2674]
call fcn.004195b0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2d00]
call fcn.0045be50
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x268c]
call fcn.0041b370
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x262c]
call fcn.0041b370
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x25cc]
call fcn.0041b370
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x27dc]
call fcn.0041b370
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2584]
call fcn.004195b0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x27c4]
call fcn.0041b370
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x27ac]
call fcn.0041b370
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x280c]
call fcn.0041b370
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x26a4]
call fcn.0041b370
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x294c]
call fcn.0041b370
push 0x568fca
lea ecx, [ebp - 0x256c]
call fcn.0041b0f0
mov byte [ebp - 4], 0x26
push str.UID_
lea ecx, [ebp - 0x256c]
call fcn.00420670
lea ecx, [ebp - 0x2794]
push ecx
lea ecx, [ebp - 0x256c]
call fcn.00420780
push str._QID_
lea ecx, [ebp - 0x256c]
call fcn.004207a0
lea edx, [ebp - 0x2554]
push edx
lea ecx, [ebp - 0x256c]
call fcn.00420780
push str._SoftName_
lea ecx, [ebp - 0x256c]
call fcn.004207a0
lea eax, [ebp - 0x2894]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00420780
push str._SoftID_
lea ecx, [ebp - 0x256c]
call fcn.004207a0
lea ecx, [ebp - 0x277c]
push ecx
lea ecx, [ebp - 0x256c]
call fcn.00420780
push str._SoftVer_
lea ecx, [ebp - 0x256c]
call fcn.004207a0
lea edx, [ebp - 0x2764]
push edx
lea ecx, [ebp - 0x256c]
call fcn.00420780
push str._Type_
lea ecx, [ebp - 0x256c]
call fcn.004207a0
lea eax, [ebp - 0x265c]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00420780
lea ecx, [ebp - 0x256c]
call fcn.0041bee0
push eax
call fcn.00489270
add esp, 4
mov dword [ebp - 0x2ccc], eax
mov dword [ebp - 0x2cc8], 0x1000
lea ecx, [ebp - 0x2cc8]
push ecx
lea edx, [ebp - 0x2524]
push edx
mov eax, dword [ebp - 0x2ccc]
push eax
lea ecx, [ebp - 0x256c]
call fcn.0041bee0
push eax
call fcn.0047a8fa
add esp, 0x10
lea ecx, [ebp - 0x2c99]
call fcn.00474e40
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x2524]
push ecx
lea ecx, [ebp - 0x2c99]
call fcn.0047bb4b
push 0x568fcb
lea ecx, [ebp - 0x259c]
call fcn.0041b0f0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x259c]
call fcn.00421570
movzx edx, al
test edx, edx
jne 0x459b3a
lea eax, [ebp - 0x2524]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004207a0
lea ecx, [ebp - 0x259c]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045a650
mov dword [ebp - 0x2ca4], eax
cmp dword [ebp - 0x2ca4], 0
jne 0x459b3a
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x259c]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045a650
mov dword [ebp - 0x2ca4], eax
cmp dword [ebp - 0x2ca4], 0
jne 0x459b3a
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x259c]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045a650
mov dword [ebp - 0x2ca4], eax
cmp dword [ebp - 0x2ca4], 0
jne 0x459b3a
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x259c]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045a650
mov dword [ebp - 0x2ca4], eax
cmp dword [ebp - 0x2ca4], 0
jne 0x459b3a
push str._nN_OD
lea ecx, [ebp - 0x2704]
call fcn.00419540
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2554]
push ecx
lea ecx, [ebp - 0x26ec]
call fcn.0041fff0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x2554]
call fcn.0041c910
cmp eax, 6
jbe 0x459ab8
lea ecx, [ebp - 0x2554]
call fcn.0041c910
sub eax, 6
push eax
push 0
lea edx, [ebp - 0x2964]
push edx
lea ecx, [ebp - 0x2554]
call fcn.00454980
mov dword [ebp - 0x2d58], eax
mov eax, dword [ebp - 0x2d58]
push eax
lea ecx, [ebp - 0x26ec]
call fcn.00420510
lea ecx, [ebp - 0x2964]
call fcn.0041b370
lea ecx, [ebp - 0x26ec]
push ecx
lea edx, [ebp - 0x297c]
push edx
call fcn.00472eb6
add esp, 8
mov dword [ebp - 0x2d50], eax
mov eax, dword [ebp - 0x2d50]
mov dword [ebp - 0x2d4c], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x2d4c]
push ecx
lea ecx, [ebp - 0x2704]
call fcn.00419630
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x297c]
call fcn.004195b0
lea ecx, [ebp - 0x2704]
call fcn.0041a090
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045aee0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x26ec]
call fcn.0041b370
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2704]
call fcn.004195b0
call fcn.00419670
mov ecx, eax
call fcn.0046cbd7
push eax
lea ecx, [ebp - 0x274c]
call fcn.00419540
mov byte [ebp - 4], 0x2c
push 0x569240
lea ecx, [ebp - 0x274c]
call fcn.00419650
push 0
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2d98], esp
lea edx, [ebp - 0x274c]
push edx
call fcn.0041b160
mov dword [ebp - 0x2d8c], eax
lea eax, [ebp - 0x26bc]
push eax
call fcn.00470600
add esp, 0x24
mov dword [ebp - 0x2d88], eax
mov byte [ebp - 4], 0x2d
push 0x569250
lea ecx, [ebp - 0x26bc]
push ecx
call fcn.00437be0
add esp, 8
movzx edx, al
test edx, edx
je 0x459bcb
push str.00000000000000000000000000000000
lea ecx, [ebp - 0x26bc]
call fcn.00419610
mov dword [ebp - 0x2cc4], 0
mov dword [ebp - 0x2cc0], 0
push 0
push str.InstallTime
push 0x5692d4
call fcn.00419670
mov ecx, eax
call fcn.0046cf86
mov dword [ebp - 0x2cc4], eax
push 0
push 0x56926c
push 0x5692e4
call fcn.00419670
mov ecx, eax
call fcn.0046cf86
mov dword [ebp - 0x2cc0], eax
cmp dword [ebp - 0x2cc4], 0
jne 0x459c34
push 0
call fcn.00458970
add esp, 4
mov dword [ebp - 0x2cc4], eax
cmp dword [ebp - 0x2cc0], 0
jne 0x459c4d
push 0
call fcn.00458970
add esp, 4
mov dword [ebp - 0x2cc0], eax
lea ecx, [ebp - 0x2cec]
call fcn.0047c8e1
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x28ac]
push eax
lea ecx, [ebp - 0x2cec]
call fcn.004795a2
mov byte [ebp - 4], 0x2f
push 0x569002
lea ecx, [ebp - 0x253c]
call fcn.0041b0f0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x2794]
push ecx
lea ecx, [ebp - 0x253c]
call fcn.00420780
push str._t_t_t_t_t_t_t_t_t_t
lea ecx, [ebp - 0x253c]
call fcn.004207a0
lea edx, [ebp - 0x277c]
push edx
lea ecx, [ebp - 0x253c]
call fcn.00420780
push 0x5692f8
lea ecx, [ebp - 0x253c]
call fcn.004207a0
lea eax, [ebp - 0x2764]
push eax
lea ecx, [ebp - 0x253c]
call fcn.00420780
push 0x5692fc
lea ecx, [ebp - 0x253c]
call fcn.004207a0
lea ecx, [ebp - 0x2554]
push ecx
lea ecx, [ebp - 0x253c]
call fcn.00420780
push 0x569300
lea ecx, [ebp - 0x253c]
call fcn.004207a0
push 0
lea edx, [ebp - 0x29ac]
push edx
call fcn.004719a7
add esp, 8
mov dword [ebp - 0x2d48], eax
mov eax, dword [ebp - 0x2d48]
mov dword [ebp - 0x2d44], eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x2d44]
push ecx
lea edx, [ebp - 0x2994]
push edx
call fcn.0047335a
add esp, 8
mov dword [ebp - 0x2d54], eax
mov eax, dword [ebp - 0x2d54]
mov dword [ebp - 0x2d70], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x2d70]
push ecx
lea ecx, [ebp - 0x253c]
call fcn.00420780
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2994]
call fcn.0041b370
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x29ac]
call fcn.004195b0
push 0x569304
lea ecx, [ebp - 0x253c]
call fcn.004207a0
lea edx, [ebp - 0x265c]
push edx
lea ecx, [ebp - 0x253c]
call fcn.00420780
push 0x569308
lea ecx, [ebp - 0x253c]
call fcn.004207a0
mov eax, dword [ebp - 0x2cc0]
cdq
push edx
push eax
lea eax, [ebp - 0x29c4]
push eax
call fcn.00471ee8
add esp, 0xc
mov dword [ebp - 0x2d80], eax
mov ecx, dword [ebp - 0x2d80]
mov dword [ebp - 0x2d7c], ecx
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x2d7c]
push edx
lea ecx, [ebp - 0x253c]
call fcn.00420780
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x29c4]
call fcn.0041b370
push 0x56930c
lea ecx, [ebp - 0x253c]
call fcn.004207a0
mov eax, dword [ebp - 0x2cc4]
cdq
push edx
push eax
lea eax, [ebp - 0x28ec]
push eax
call fcn.00471ee8
add esp, 0xc
mov dword [ebp - 0x2d78], eax
mov ecx, dword [ebp - 0x2d78]
mov dword [ebp - 0x2d74], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x2d74]
push edx
lea ecx, [ebp - 0x253c]
call fcn.00420780
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x28ec]
call fcn.0041b370
push 0x569310
lea ecx, [ebp - 0x253c]
call fcn.004207a0
lea eax, [ebp - 0x28ac]
push eax
lea ecx, [ebp - 0x253c]
call fcn.00420780
push 0x569314
lea ecx, [ebp - 0x253c]
call fcn.004207a0
lea ecx, [ebp - 0x26bc]
push ecx
lea edx, [ebp - 0x29dc]
push edx
call fcn.0047335a
add esp, 8
mov dword [ebp - 0x2d5c], eax
mov eax, dword [ebp - 0x2d5c]
mov dword [ebp - 0x2d6c], eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2d6c]
push ecx
lea ecx, [ebp - 0x253c]
call fcn.00420780
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x29dc]
call fcn.0041b370
push 0x569318
lea ecx, [ebp - 0x253c]
call fcn.004207a0
mov byte [ebp - 0x1524], 0
push 0xfff
push 0
lea edx, [ebp - 0x1523]
push edx
call fcn.00485370
add esp, 0xc
lea eax, [ebp - 0x253c]
push eax
lea ecx, [ebp - 0x28c4]
push ecx
call fcn.00472e18
add esp, 8
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x2cc8], 0x1000
lea ecx, [ebp - 0x253c]
call fcn.0041bee0
push eax
call fcn.00489270
add esp, 4
mov dword [ebp - 0x2ccc], eax
push 0x569003
lea edx, [ebp - 0x1524]
push edx
call fcn.0048eed0
add esp, 8
lea eax, [ebp - 0x2cc8]
push eax
lea ecx, [ebp - 0x1524]
push ecx
mov edx, dword [ebp - 0x2ccc]
push edx
lea ecx, [ebp - 0x28c4]
call fcn.0041bee0
push eax
call fcn.0047a8fa
add esp, 0x10
lea eax, [ebp - 0x1524]
push eax
lea ecx, [ebp - 0x2c99]
call fcn.0047bb4b
push 0x56931c
lea ecx, [ebp - 0x25e4]
call fcn.0041b0f0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1524]
push ecx
lea ecx, [ebp - 0x25e4]
call fcn.004207a0
lea ecx, [ebp - 0x25e4]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045aa50
mov dword [ebp - 0x2ca0], eax
cmp dword [ebp - 0x2ca0], 0
jne 0x45a19b
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x25e4]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045aa50
mov dword [ebp - 0x2ca0], eax
cmp dword [ebp - 0x2ca0], 0
jne 0x45a19b
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x25e4]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045aa50
mov dword [ebp - 0x2ca0], eax
cmp dword [ebp - 0x2ca0], 0
jne 0x45a19b
push 0x1f40
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x25e4]
call fcn.0041bee0
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045aa50
mov dword [ebp - 0x2ca0], eax
cmp dword [ebp - 0x2ca0], 0
jne 0x45a19b
push str._nN_O_mpenc_
lea ecx, [ebp - 0x26d4]
call fcn.00419540
mov byte [ebp - 4], 0x38
lea edx, [ebp - 0x2554]
push edx
lea ecx, [ebp - 0x271c]
call fcn.0041fff0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x2554]
call fcn.0041c910
cmp eax, 6
jbe 0x45a119
lea ecx, [ebp - 0x2554]
call fcn.0041c910
sub eax, 6
push eax
push 0
lea eax, [ebp - 0x29f4]
push eax
lea ecx, [ebp - 0x2554]
call fcn.00454980
mov dword [ebp - 0x2d68], eax
mov ecx, dword [ebp - 0x2d68]
push ecx
lea ecx, [ebp - 0x271c]
call fcn.00420510
lea ecx, [ebp - 0x29f4]
call fcn.0041b370
lea edx, [ebp - 0x271c]
push edx
lea eax, [ebp - 0x2a0c]
push eax
call fcn.00472eb6
add esp, 8
mov dword [ebp - 0x2d64], eax
mov ecx, dword [ebp - 0x2d64]
mov dword [ebp - 0x2d60], ecx
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x2d60]
push edx
lea ecx, [ebp - 0x26d4]
call fcn.00419630
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x2a0c]
call fcn.004195b0
lea ecx, [ebp - 0x26d4]
call fcn.0041a090
push eax
mov ecx, dword [ebp - 0x2c98]
call fcn.0045aee0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x271c]
call fcn.0041b370
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x26d4]
call fcn.004195b0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x25e4]
call fcn.0041b370
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x28c4]
call fcn.0041b370
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x253c]
call fcn.0041b370
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x28ac]
call fcn.0041b370
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x2cec]
call fcn.00474e50
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x26bc]
call fcn.004195b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x274c]
call fcn.004195b0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x259c]
call fcn.0041b370
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x2c99]
call fcn.00474e50
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x256c]
call fcn.0041b370
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2764]
call fcn.0041b370
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2894]
call fcn.0041b370
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x277c]
call fcn.0041b370
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2554]
call fcn.0041b370
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2794]
call fcn.0041b370
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c90]
call fcn.00474e50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2734]
call fcn.0041b370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x265c]
call fcn.0041b370
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00464e95
mov esp, ebp
pop ebp
ret 4