Function at 0x4e4480
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x518666
mov eax, dword fs:[0]
push eax
sub esp, 0x478
mov eax, dword [0x572bb0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x430], edx
mov edi, ecx
mov dword [ebp - 0x420], edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x424], eax
call fcn.00460220
mov ecx, eax
xor eax, eax
test ecx, ecx
setne al
test eax, eax
jne 0x4e44e1
push 0x80004005
call fcn.004712d0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x460], eax
push edi
lea ecx, [ebp - 0x418]
mov dword [ebp - 4], 0
call fcn.00471bb0
push 0x556b98
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 1
call fcn.00471bb0
mov byte [ebp - 4], 2
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e4536
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x450], esi
lea eax, [ebp - 0x434]
mov byte [ebp - 4], 3
push eax
lea edx, [ebp - 0x450]
lea ecx, [ebp - 0x428]
call fcn.00472fc0
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 4
push ecx
mov edx, eax
lea ecx, [ebp - 0x444]
call fcn.00472fc0
add esp, 8
push eax
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 5
call fcn.00473a30
mov byte [ebp - 4], 4
or ebx, 0xffffffff
mov edx, dword [ebp - 0x444]
mov eax, ebx
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4e45b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov ecx, ebx
mov edx, dword [ebp - 0x428]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e45d6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 2
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e45f3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov ecx, ebx
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4616
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4639
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.doRsaDecode
lea ecx, [ebp - 0x418]
call fcn.00471bb0
push str.doRsaDecode
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 6
call fcn.00471bb0
push 0
lea eax, [ebp - 0x460]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x434]
push eax
call fcn.00473100
mov byte [ebp - 4], 6
mov ecx, ebx
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e46a0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e46c3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x434], 0
call fcn.00401ca0
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e470c
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x464], eax
mov byte [ebp - 4], 8
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e473c
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x42c], esi
mov byte [ebp - 4], 9
test edi, edi
jne 0x4e4758
xor ecx, ecx
jmp 0x4e476f
mov ecx, edi
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4e4760
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x464]
call fcn.004725a0
mov edi, dword [ebp - 0x464]
push 0x5c
push edi
mov eax, dword [edi - 0xc]
mov dword [ebp - 0x428], eax
call fcn.004ed9f1
add esp, 8
test eax, eax
jne 0x4e479f
or eax, 0xffffffff
jmp 0x4e47a3
sub eax, edi
sar eax, 1
mov ecx, dword [ebp - 0x428]
sub ecx, eax
lea eax, [ebp - 0x41c]
dec ecx
push ecx
push eax
lea ecx, [ebp - 0x464]
call fcn.0047df50
mov byte [ebp - 4], 0xa
lea ecx, [esi - 0x10]
mov edx, dword [eax]
mov dword [ebp - 0x438], ecx
lea eax, [edx - 0x10]
mov dword [ebp - 0x428], eax
cmp eax, ecx
je 0x4e483a
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x4e4825
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x4e4825
mov ecx, dword [ebp - 0x428]
call fcn.00471fb0
mov dword [ebp - 0x428], eax
mov ecx, ebx
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x4e481a
mov esi, dword [ebp - 0x438]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x428]
lea esi, [eax + 0x10]
mov dword [ebp - 0x42c], esi
jmp 0x4e483a
push dword [edx - 0xc]
lea ecx, [ebp - 0x42c]
push edx
call fcn.004725a0
mov esi, dword [ebp - 0x42c]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e485d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi - 0xc]
push 0x2e
push esi
mov dword [ebp - 0x428], eax
call fcn.004ed9f1
add esp, 8
test eax, eax
jne 0x4e487a
or eax, 0xffffffff
jmp 0x4e487e
sub eax, esi
sar eax, 1
mov ecx, dword [ebp - 0x428]
sub ecx, eax
lea eax, [ebp - 0x448]
push ecx
push eax
lea ecx, [ebp - 0x42c]
call fcn.0047df50
push 0x2e
push esi
mov byte [ebp - 4], 0xb
call fcn.004ed9f1
add esp, 8
test eax, eax
jne 0x4e48b1
or eax, 0xffffffff
jmp 0x4e48b5
sub eax, esi
sar eax, 1
push eax
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x42c]
call fcn.0047f000
mov byte [ebp - 4], 0xc
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x4e4925
cmp dword [esi + 0xc], 0
jl 0x4e4916
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4e4916
call fcn.00471fb0
mov dword [ebp - 0x428], eax
lea edx, [esi + 0xc]
mov ecx, ebx
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4e490b
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x428]
add eax, 0x10
mov dword [ebp - 0x42c], eax
jmp 0x4e4925
push dword [edx - 0xc]
lea ecx, [ebp - 0x42c]
push edx
call fcn.004725a0
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4948
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
call fcn.004eb627
push eax
mov dword [ebp - 0x458], edx
call fcn.004ed9e1
add esp, 8
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e497a
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x428], esi
mov byte [ebp - 4], 0xd
call fcn.004ed9c0
push eax
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x41c]
call fcn.00472f20
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0xe
push ecx
mov edx, eax
lea ecx, [ebp - 0x438]
call fcn.00472fc0
add esp, 8
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x42c]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0047a5d0
mov byte [ebp - 4], 0xe
mov ecx, ebx
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e49f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xd
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4a1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0xb
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4a38
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x42c]
mov edx, 0x57a264
push eax
lea ecx, [ebp - 0x438]
call fcn.004738b0
add esp, 4
mov byte [ebp - 4], 0x10
mov edx, dword [eax]
mov eax, dword [ebp - 0x430]
lea ecx, [edx - 0x10]
mov esi, dword [eax]
sub esi, 0x10
cmp ecx, esi
je 0x4e4ab9
cmp dword [esi + 0xc], 0
jl 0x4e4aaa
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4e4aaa
call fcn.00471fb0
mov dword [ebp - 0x428], eax
lea edx, [esi + 0xc]
mov ecx, ebx
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4e4a9d
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x428]
mov ecx, dword [ebp - 0x430]
add eax, 0x10
mov dword [ecx], eax
jmp 0x4e4ab9
push dword [edx - 0xc]
mov ecx, dword [ebp - 0x430]
push edx
call fcn.004725a0
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4adc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 3
push 0
push 1
push 1
push dword [ebp - 0x420]
call esi
mov dword [ebp - 0x428], eax
cmp eax, 0xffffffff
jne 0x4e4d12
push str.doRsaDecode_CreateFile_source_
lea ecx, [ebp - 0x434]
call fcn.00471bb0
mov byte [ebp - 4], 0x11
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e4b38
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x444], esi
lea eax, [ebp - 0x434]
mov byte [ebp - 4], 0x12
push eax
lea edx, [ebp - 0x444]
lea ecx, [ebp - 0x438]
call fcn.00472fc0
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x428]
call fcn.00472f20
add esp, 4
mov ecx, dword [ebp - 0x424]
push eax
mov byte [ebp - 4], 0x14
call fcn.00473a30
mov byte [ebp - 4], 0x13
or ebx, 0xffffffff
mov edx, dword [ebp - 0x428]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4bba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov ecx, ebx
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4bdd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x11
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4bfa
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4c1d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0x15
call fcn.00471bb0
push 2
push dword [ebp - 0x424]
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x434]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x15
mov ecx, ebx
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4c83
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4ca6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4cc9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x42c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4cec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4f6f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4e4f6f
mov eax, dword [ebp - 0x430]
push 0
push 0x80
push 4
push 0
push 1
push 2
push dword [eax]
call esi
mov dword [ebp - 0x438], eax
cmp eax, 0xffffffff
jne 0x4e4fa3
push str.doRsaDecode_CreateFile_destination_
lea ecx, [ebp - 0x418]
call fcn.00471bb0
mov byte [ebp - 4], 0x17
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e4d6a
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x438], esi
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x18
push eax
lea edx, [ebp - 0x438]
lea ecx, [ebp - 0x420]
call fcn.00472fc0
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x19
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x41c]
call fcn.00472f20
add esp, 4
mov ecx, dword [ebp - 0x424]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00473a30
mov byte [ebp - 4], 0x19
or ebx, 0xffffffff
mov edx, dword [ebp - 0x41c]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4dec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4e0f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x17
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4e2c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4e4f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x1b
call fcn.00471bb0
push 2
push dword [ebp - 0x424]
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x1b
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4eb5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4ed8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4efb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x42c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4f1e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e4f3b
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x428]
call esi
mov eax, dword [ebp - 0x434]
test eax, eax
je 0x4e4f5c
push eax
call fcn.00401190
add esp, 4
mov eax, dword [ebp - 0x444]
test eax, eax
je 0x4e4f6f
push eax
call fcn.00401bc0
add esp, 4
push str.iRetVal
lea ecx, [ebp - 0x444]
call fcn.00471bb0
mov byte [ebp - 4], 0x4c
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e6200
push 0x80004005
call fcn.004712d0
push 0xf7
push str._____BEGIN_RSA_PUBLIC_KEY______nMIGHAoGBANyWsWNMh4EW0i9RQRnLC8CG8zVhDlnrl644H9FhpCrIrHO1AosuzR3_nyvrDyKIy4rM18gih9myLXiOq2uGtXxSzkpJB1iaL6E5AwMMmXeVU5m_n6Sftz_nyiGzLqpgWFFi_YThn2LSQUDr6RFlQgnAgI3IhHXLWlioPzLJFWJAgED_n_____END_RSA_PUBLIC_KEY______n
call fcn.00401d40
add esp, 8
mov dword [ebp - 0x444], eax
test eax, eax
jne 0x4e51a0
push str.doRsaDecode_BIO_new_mem_buf_
lea ecx, [ebp - 0x418]
call fcn.00471bb0
mov byte [ebp - 4], 0x1d
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e4ff3
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x420]
call fcn.00472fc0
add esp, 4
mov ecx, dword [ebp - 0x424]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00473a30
mov byte [ebp - 4], 0x1e
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5055
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x1d
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5072
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5095
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x424]
mov ecx, esi
call fcn.004e63b0
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x20
call fcn.00471bb0
push 2
push esi
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x20
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5103
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5126
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5149
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x42c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e516c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e61ed
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x438]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x4e4f41
push 0
push 0
push 0
push eax
call fcn.004021b0
add esp, 0x10
mov dword [ebp - 0x434], eax
test eax, eax
jne 0x4e539a
push str.doRsaDecode_PEM_read_bio_RSAPublicKey_
lea ecx, [ebp - 0x418]
call fcn.00471bb0
mov byte [ebp - 4], 0x22
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e51ed
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x23
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x420]
call fcn.00472fc0
add esp, 4
mov ecx, dword [ebp - 0x424]
push eax
mov byte [ebp - 4], 0x24
call fcn.00473a30
mov byte [ebp - 4], 0x23
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e524f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x22
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e526c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e528f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x424]
mov ecx, esi
call fcn.004e63b0
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x25
call fcn.00471bb0
push 2
push esi
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x25
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e52fd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5320
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5343
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x42c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5366
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e61ed
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x438]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x4e4f41
push eax
call fcn.004012b0
add esp, 4
mov dword [ebp - 0x440], eax
test eax, eax
jne 0x4e558e
push str.doRsaDecode_RSA_size_
lea ecx, [ebp - 0x418]
call fcn.00471bb0
mov byte [ebp - 4], 0x27
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e53e1
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x28
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x420]
call fcn.00472fc0
add esp, 4
mov ecx, dword [ebp - 0x424]
push eax
mov byte [ebp - 4], 0x29
call fcn.00473a30
mov byte [ebp - 4], 0x28
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5443
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x27
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5460
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5483
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x424]
mov ecx, esi
call fcn.004e63b0
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x2a
call fcn.00471bb0
push 2
push esi
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x2a
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e54f1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov ecx, ebx
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5514
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5537
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x42c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e555a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e61ed
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x438]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x4e4f41
push eax
call fcn.004ea22e
xor esi, esi
mov dword [ebp - 0x470], 0
mov edx, eax
mov dword [ebp - 0x430], esi
xor cl, cl
mov dword [ebp - 0x420], edx
add esp, 4
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x46c], esi
mov dword [ebp - 0x468], esi
mov byte [ebp - 4], 0x2c
xor eax, eax
jmp 0x4e55d0
push dword [ebp - 0x440]
inc eax
push 0
push edx
mov dword [ebp - 0x41c], eax
call fcn.004ef3a0
add esp, 0xc
lea eax, [ebp - 0x474]
push 0
push eax
push dword [ebp - 0x440]
push dword [ebp - 0x420]
push dword [ebp - 0x428]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4e5f4d
mov edx, dword [ebp - 0x474]
test edx, edx
je 0x4e596e
mov ecx, dword [ebp - 0x418]
mov eax, dword [ebp - 0x440]
cmp edx, eax
movzx ecx, cl
mov edx, 1
cmovb ecx, edx
sub esi, dword [ebp - 0x470]
add eax, 0xfffffff5
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x430], eax
lea ecx, [ebp - 0x470]
imul eax, dword [ebp - 0x41c]
push eax
call fcn.0047e050
mov eax, dword [ebp - 0x470]
push 1
push dword [ebp - 0x434]
add eax, esi
push eax
push dword [ebp - 0x420]
push dword [ebp - 0x440]
call fcn.00401300
add esp, 0x14
cmp eax, 0xffffffff
je 0x4e56d2
cmp eax, dword [ebp - 0x430]
jae 0x4e56a0
add eax, esi
lea ecx, [ebp - 0x470]
push eax
call fcn.0047e050
mov ecx, dword [ebp - 0x418]
test cl, cl
jne 0x4e56c7
mov esi, dword [ebp - 0x46c]
mov eax, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x420]
mov dword [ebp - 0x430], esi
jmp 0x4e55d0
mov ecx, dword [ebp - 0x46c]
jmp 0x4e5974
push str.doRsaDecode_RSA_public_decrypt_
lea ecx, [ebp - 0x418]
call fcn.00471bb0
mov byte [ebp - 4], 0x33
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e5702
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x440], esi
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x34
push eax
lea edx, [ebp - 0x440]
lea ecx, [ebp - 0x458]
call fcn.00472fc0
add esp, 4
mov ecx, dword [ebp - 0x424]
mov byte [ebp - 4], 0x35
mov eax, dword [eax]
mov dword [ebp - 0x43c], eax
add eax, 0xfffffff0
mov edx, dword [ecx]
sub edx, 0x10
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x44c], edx
cmp eax, edx
je 0x4e57c8
cmp dword [edx + 0xc], 0
lea eax, [edx + 0xc]
mov dword [ebp - 0x430], eax
jl 0x4e57b9
mov eax, dword [ebp - 0x41c]
mov eax, dword [eax]
cmp eax, dword [edx]
jne 0x4e57b9
mov ecx, dword [ebp - 0x41c]
call fcn.00471fb0
mov edx, dword [ebp - 0x430]
mov ecx, ebx
mov dword [ebp - 0x41c], eax
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4e57ac
mov eax, dword [ebp - 0x44c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0x424]
add eax, 0x10
mov dword [ecx], eax
jmp 0x4e57c8
mov eax, dword [ebp - 0x43c]
push dword [eax - 0xc]
push eax
call fcn.004725a0
mov byte [ebp - 4], 0x34
mov ecx, ebx
mov edx, dword [ebp - 0x458]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e57eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x33
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5808
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e582b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.004ef3a0
add esp, 0xc
lea eax, [ebp - 0x414]
push eax
call fcn.004033a0
push eax
call fcn.00403370
mov eax, dword [ebp - 0x424]
add esp, 8
mov eax, dword [eax]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x4e5878
mov eax, dword [ecx]
call dword [eax + 0x10]
mov edx, eax
test edx, edx
jne 0x4e5886
call fcn.00460220
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, eax
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
jne 0x4e589b
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x440], esi
lea eax, [ebp - 0x414]
mov byte [ebp - 4], 0x36
test eax, 0xffff0000
jne 0x4e58e0
movzx ecx, ax
call fcn.00471400
test eax, eax
je 0x4e58f2
lea edx, [ebp - 0x414]
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x440]
call fcn.004724d0
jmp 0x4e58ec
push eax
lea ecx, [ebp - 0x440]
call fcn.00471eb0
mov esi, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x424]
mov byte [ebp - 4], 0x37
push dword [esi - 0xc]
push esi
call fcn.0047a5d0
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2c
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5922
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x38
call fcn.00471bb0
push 2
push dword [ebp - 0x424]
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x38
jmp 0x4e6122
mov ecx, dword [ebp - 0x430]
mov esi, dword [ebp - 0x470]
sub ecx, esi
mov dword [ebp - 0x430], ecx
test cl, 3
jne 0x4e5df5
mov eax, ecx
shr eax, 2
cmp byte [esi + ecx - 1], 0x3d
lea eax, [eax + eax*2]
mov dword [ebp - 0x418], eax
jne 0x4e59a7
dec eax
mov dword [ebp - 0x418], eax
cmp byte [esi + ecx - 2], 0x3d
jne 0x4e59b5
dec eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
push eax
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x40
call fcn.0047e050
mov edx, dword [ebp - 0x430]
lea eax, [ebp - 0x458]
push eax
push dword [ebp - 0x418]
mov ecx, esi
push dword [ebp - 0x480]
call fcn.00471840
add esp, 0xc
test al, al
jne 0x4e5b85
push str.doRsaDecode_Decode
lea ecx, [ebp - 0x41c]
call fcn.00471bb0
mov byte [ebp - 4], 0x41
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e5a3e
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 0x42
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x43c]
call fcn.00472fc0
add esp, 4
mov ecx, dword [ebp - 0x424]
push eax
mov byte [ebp - 4], 0x43
call fcn.00473a30
mov byte [ebp - 4], 0x42
mov ecx, ebx
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5aa0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x41
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5abd
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x40
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5ae0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x44
call fcn.00471bb0
push 2
push dword [ebp - 0x424]
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x44
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5b46
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x40
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5b69
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x480]
test ecx, ecx
je 0x4e6164
push ecx
call fcn.004e98a6
add esp, 4
jmp 0x4e6164
mov ecx, dword [ebp - 0x480]
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x47c]
push 0
push edx
sub eax, ecx
push eax
push ecx
push dword [ebp - 0x438]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x4e5dca
push str.doRsaDecode_WriteFile_destination_
lea ecx, [ebp - 0x41c]
call fcn.00471bb0
mov byte [ebp - 4], 0x46
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e5be2
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 0x47
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x44c]
call fcn.00472fc0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 0x48
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, edi
lea ecx, [ebp - 0x43c]
call fcn.00472f20
add esp, 4
mov edi, dword [ebp - 0x424]
mov ecx, edi
push eax
mov byte [ebp - 4], 0x49
call fcn.00473a30
mov byte [ebp - 4], 0x48
mov ecx, ebx
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5c63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x47
mov ecx, ebx
mov edx, dword [ebp - 0x44c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5c86
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x46
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5ca3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x40
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5cc6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x4a
call fcn.00471bb0
push 2
push edi
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x4b
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x4a
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5d27
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x40
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5d4a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x480]
test eax, eax
je 0x4e5d5d
push eax
call fcn.004e98a6
add esp, 4
mov eax, dword [ebp - 0x470]
test eax, eax
je 0x4e5d70
push eax
call fcn.004e98a6
add esp, 4
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5d93
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x42c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5db6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0
call fcn.00471d10
jmp 0x4e61da
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x450], 0
test eax, eax
je 0x4e5de7
push eax
call fcn.004e98a6
add esp, 4
test esi, esi
je 0x4e6177
push esi
jmp 0x4e616f
push str.doRsaDecode_GetDecodeSize_
lea ecx, [ebp - 0x41c]
call fcn.00471bb0
mov byte [ebp - 4], 0x3a
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e5e25
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 0x3b
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x44c]
call fcn.00472fc0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x430]
mov edx, eax
call fcn.00472f20
add esp, 8
mov ecx, dword [ebp - 0x424]
push eax
mov byte [ebp - 4], 0x3d
call fcn.00473a30
mov byte [ebp - 4], 0x3c
mov ecx, ebx
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5e9e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x3b
mov ecx, ebx
mov edx, dword [ebp - 0x44c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5ec1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x3a
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5ede
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e5f01
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x3e
call fcn.00471bb0
push 2
push dword [ebp - 0x424]
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x3f
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x3e
jmp 0x4e6122
push str.doRsaDecode_ReadFile_source_
lea ecx, [ebp - 0x41c]
call fcn.00471bb0
mov byte [ebp - 4], 0x2d
call fcn.00460220
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4e5f7d
push 0x80004005
call fcn.004712d0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 0x2e
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x430]
call fcn.00472fc0
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x2f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x440]
call fcn.00472f20
add esp, 4
mov ecx, dword [ebp - 0x424]
mov byte [ebp - 4], 0x30
mov ebx, dword [eax]
mov edx, dword [ecx]
sub edx, 0x10
lea eax, [ebx - 0x10]
mov dword [ebp - 0x418], edx
mov dword [ebp - 0x43c], eax
cmp eax, edx
je 0x4e6052
cmp dword [edx + 0xc], 0
lea eax, [edx + 0xc]
mov dword [ebp - 0x44c], eax
jl 0x4e6049
mov eax, dword [ebx - 0x10]
cmp eax, dword [edx]
jne 0x4e6049
mov ecx, dword [ebp - 0x43c]
call fcn.00471fb0
mov edx, dword [ebp - 0x44c]
or ebx, 0xffffffff
mov dword [ebp - 0x43c], eax
mov ecx, ebx
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4e603c
mov eax, dword [ebp - 0x418]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x43c]
mov ecx, dword [ebp - 0x424]
add eax, 0x10
mov dword [ecx], eax
jmp 0x4e6055
push dword [ebx - 0xc]
push ebx
call fcn.004725a0
or ebx, 0xffffffff
mov byte [ebp - 4], 0x2f
mov ecx, ebx
mov edx, dword [ebp - 0x440]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e6078
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2e
mov ecx, ebx
mov edx, dword [ebp - 0x430]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e609b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2d
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e60b8
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov ecx, ebx
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e60db
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.00471bb0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x31
call fcn.00471bb0
push 2
push dword [ebp - 0x424]
lea eax, [ebp - 0x418]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x41c]
mov ecx, ebx
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e6141
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov ecx, ebx
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e6164
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x470]
test eax, eax
je 0x4e6177
push eax
call fcn.004e98a6
add esp, 4
mov byte [ebp - 4], 9
mov ecx, ebx
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e619a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov ecx, ebx
mov edx, dword [ebp - 0x42c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e61bd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e61da
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x420]
test eax, eax
je 0x4e61ed
push eax
call fcn.004ea229
add esp, 4
push dword [ebp - 0x438]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x4e4f41
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x444]
mov byte [ebp - 4], 0x4d
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x44c]
call fcn.00472fc0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x43c]
mov edi, dword [ebp - 0x450]
mov edx, eax
push edi
call fcn.00472f20
add esp, 8
push eax
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0x4f
call fcn.00473a30
mov byte [ebp - 4], 0x4e
mov ecx, ebx
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e627a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x4d
mov ecx, ebx
mov edx, dword [ebp - 0x44c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e629d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x4c
mov ecx, ebx
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e62ba
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, ebx
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e62dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.doRsaDecode
lea ecx, [ebp - 0x444]
call fcn.00471bb0
push str.doRsaDecode
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x50
call fcn.00471bb0
push 0
lea eax, [ebp - 0x460]
mov byte [ebp - 4], 0x51
push eax
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.00473100
mov byte [ebp - 4], 0x50
mov ecx, ebx
mov edx, dword [ebp - 0x450]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e6344
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ecx, ebx
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4e6367
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x460]
add esi, 0xfffffff0
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x4e638b
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004e94b7
mov esp, ebp
pop ebp
ret