Function at 0x4b29ef
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Parse pe header

Disassembly:
push 0x1b8
mov eax, 0x4fd0a4
call fcn.004cb654
mov ebx, ecx
mov dword [ebp - 0x1b8], ebx
and dword [ebp - 0x1bc], 0
lea ecx, [ebp - 0xb8]
push str.UniAccessAgent.ini
call fcn.004408e0
and dword [ebp - 4], 0
lea eax, [ebp - 0xb8]
push eax
lea edx, [ebx + 0x28]
lea ecx, [ebp - 0x104]
call fcn.0044310b
pop ecx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.00440d86
push str.prepare_ini_from_section_start_file
lea ecx, [ebp - 0x9c]
call fcn.004408e0
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x9c]
mov edi, 0x541580
push eax
push 0x19b
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, edi
call fcn.0042cc64
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
call fcn.00440d86
push str.lva.ini
lea ecx, [ebp - 0x9c]
call fcn.004408e0
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x9c]
call fcn.0042b335
pop ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.00440d86
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.00440507
push 0x520b68
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.004408e0
push str.get_file_from_pe_section_lva.ini_to
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.004408e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x19e
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, edi
call fcn.0042cc64
lea ecx, [ebp - 0x9c]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00440d86
test esi, esi
je 0x4b2caa
push str._failed.
lea ecx, [ebp - 0x80]
call fcn.004408e0
push 8
pop ebx
push str.get_file_from_pe_section
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.004408e0
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x104]
mov ecx, edi
push eax
lea eax, [ebp - 0x48]
push eax
push 0x1a2
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, edi
call fcn.0042cc64
lea ecx, [ebp - 0x48]
call fcn.00440d86
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.00440d86
push 2
push 0x64
pop edi
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], 0
jne 0x4b3cb6
push 0x528298
lea ecx, [ebp - 0x80]
call fcn.004408e0
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.004408e0
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.004b161e
mov esi, eax
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.004b161e
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b2c6b
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b2c75
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
jmp 0x4b3cb6
lea ecx, [ebp - 0x104]
call fcn.0042ad33
mov esi, eax
mov eax, edx
mov dword [ebp - 0x1b4], eax
push 0x64
pop edi
test eax, eax
jg 0x4b2e50
jl 0x4b2cd4
cmp esi, edi
ja 0x4b2e50
push str._Must_Cust_Error...
lea ecx, [ebp - 0x2c]
call fcn.004408e0
push ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x1b4]
push esi
call fcn.00440487
push str.size
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xe
call fcn.004408e0
push str.GetFileLen::
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
call fcn.004408e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x541580
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x1ac
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x48]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
lea ecx, [ebp - 0x9c]
call fcn.00440d86
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00440d86
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], 0
jne 0x4b2e48
push 0x528298
lea ecx, [ebp - 0x48]
call fcn.004408e0
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.004408e0
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004b161e
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x64]
call fcn.004b161e
add esi, 4
push 8
pop ebx
cmp dword [esi + 0x14], ebx
jb 0x4b2e0e
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b2e18
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
call fcn.00440d86
push 0x65
pop edi
jmp 0x4b3cb6
lea ecx, [ebp - 0xe8]
call fcn.004331e4
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xd4]
call fcn.00440a86
lea ecx, [ebp - 0xe8]
call fcn.00433aac
push str.UUID
lea ecx, [ebp - 0x48]
call fcn.004408e0
mov esi, str.Main
mov byte [ebp - 4], 0x15
push esi
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebx + 0x60]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.CustTime
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.004408e0
lea eax, [ebx + 0x7c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.package_name
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.004408e0
lea esi, [ebx + 0x98]
mov byte [ebp - 4], 0x1a
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.00443b1c
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.00440a86
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.str_x86_url
lea ecx, [ebp - 0x48]
call fcn.004408e0
mov esi, str.Main
mov byte [ebp - 4], 0x1d
push esi
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebx + 0x15c]
mov byte [ebp - 4], 0x1e
push eax
mov dword [ebp - 0x1c0], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.str_x64_url
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.004408e0
lea eax, [ebx + 0x178]
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x1c4], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.ins_user
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.004408e0
lea eax, [ebx + 0x194]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.ins_pass
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.004408e0
lea esi, [ebx + 0x1b0]
mov byte [ebp - 4], 0x24
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.ins_domain
lea ecx, [ebp - 0x48]
call fcn.004408e0
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.004408e0
lea eax, [ebx + 0x1cc]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.00443b1c
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x28
call fcn.00440a86
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00440d86
cmp dword [ebx + 0x1a8], 0
je 0x4b31d5
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
lea esi, [ebx + 0x194]
push eax
mov edx, esi
lea ecx, [ebp - 0xb8]
call fcn.00443b1c
pop ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2b
call fcn.00440d86
cmp dword [ebp - 0xa4], 0
je 0x4b31c6
lea eax, [ebp - 0xb4]
push eax
lea ecx, [esi + 4]
call fcn.0044341f
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.UseBeeDwn
lea ecx, [ebp - 0x48]
call fcn.004408e0
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.004408e0
lea eax, [ebx + 0x278]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00433e49
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.ServerIP
lea ecx, [ebp - 0x48]
call fcn.004408e0
mov esi, str.AgentCOMM
mov byte [ebp - 4], 0x2e
push esi
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebx + 0xb4]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.OnlineServerIP
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.004408e0
lea eax, [ebx + 0xd0]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.ServerPort
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call fcn.004408e0
mov byte [ebp - 4], 0x33
lea eax, [ebx + 0xec]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.WebPort
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
call fcn.004408e0
lea eax, [ebx + 0x108]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440d86
push str.BeeServerPort
lea ecx, [ebp - 0x48]
call fcn.004408e0
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.004408e0
add ebx, 0x27c
mov byte [ebp - 4], 0x37
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00433e49
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
call fcn.00440d86
cmp dword [ebx], 0
jne 0x4b33ad
mov dword [ebx], 0x9914
lea ecx, [ebp - 0x120]
call fcn.004402d1
push str.MainTitle
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.004408e0
mov ebx, str.Main
mov byte [ebp - 4], 0x39
push ebx
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
call fcn.00440d86
lea ecx, [ebp - 0x13c]
call fcn.004402d1
push str.PartnerAgentName
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.004408e0
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3c
call fcn.004408e0
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434244
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
mov ebx, 0x51f46c
lea ecx, [ebp - 0x80]
push ebx
call fcn.004408e0
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x3e
push eax
lea edx, [ebp - 0x120]
lea ecx, [ebp - 0x64]
call fcn.00443b1c
pop ecx
add eax, 4
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x11c]
call fcn.0044341f
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
push ebx
lea ecx, [ebp - 0x9c]
call fcn.004408e0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x40
push eax
lea edx, [ebp - 0x13c]
lea ecx, [ebp - 0x64]
call fcn.004439d2
pop ecx
add eax, 4
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x138]
call fcn.0044341f
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
push 8
pop ebx
cmp dword [ebp - 0x108], ebx
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
push eax
push 0x100
push 0x541220
call fcn.004dd693
mov esi, dword [ebp - 0x1b8]
add esp, 0xc
cmp dword [esi + 0x11c], 0
jne 0x4b3563
push 0xa
push 0x50
lea ecx, [ebp - 0x2c]
call fcn.00440507
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [esi + 0x10c]
call fcn.0044341f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
push str._strCustOnlineServerIP
lea ecx, [ebp - 0xb8]
call fcn.004408e0
push str._WebPort
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x43
call fcn.004408e0
push str._ServerIP
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x44
call fcn.004408e0
push str._strCustTime
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x45
call fcn.004408e0
push str.strCustGUID
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x46
call fcn.004408e0
lea eax, [esi + 0xd0]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0xb8]
mov ecx, 0x541580
push eax
lea eax, [esi + 0x108]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [esi + 0x7c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [esi + 0x60]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x1e9
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, 0x541580
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
lea ecx, [ebp - 0x9c]
call fcn.00440d86
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
mov ecx, esi
call fcn.004b220d
cmp dword [0x5414d4], 0
mov esi, eax
mov dword [ebp - 0x1b8], esi
je 0x4b3721
test esi, esi
je 0x4b36b4
cmp esi, 1
je 0x4b36b4
cmp esi, 2
jne 0x4b3721
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.00440507
push str.update_judge_ret
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.004408e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x2c]
mov ebx, 0x541580
push eax
push 0x1f1
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
call fcn.00440d86
push 0xfffffffffffffffd
jmp 0x4b3c7c
push str..msi
lea ecx, [ebp - 0x48]
call fcn.004408e0
mov ecx, dword [ebp - 0x1c0]
xor eax, eax
inc eax
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x48]
push 0
push eax
call fcn.00441ffb
test al, al
je 0x4b3789
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.004408e0
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x2c]
push 0
push eax
mov dword [ebp - 0x1b4], 3
call fcn.00441ffb
mov byte [ebp - 0x1ad], 1
test al, al
jne 0x4b3790
mov byte [ebp - 0x1ad], 0
test byte [ebp - 0x1b4], 2
je 0x4b37a1
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x3b
call fcn.00440d86
cmp byte [ebp - 0x1ad], 0
je 0x4b3987
cmp esi, 1
je 0x4b38c1
cmp esi, 2
je 0x4b38c1
test esi, esi
jne 0x4b3c7f
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], esi
jne 0x4b387d
push 0x528298
lea ecx, [ebp - 0x48]
call fcn.004408e0
push str.MSG_MUST_SAME_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
call fcn.004408e0
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x80]
call fcn.004b161e
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x64]
call fcn.004b161e
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b383f
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3849
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
push eax
push 0x207
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
jmp 0x4b3c75
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], 0
jne 0x4b3968
push 0x528298
lea ecx, [ebp - 0x48]
call fcn.004408e0
push str.MSG_MUST_OTHER_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.004408e0
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x80]
call fcn.004b161e
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x64]
call fcn.004b161e
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b392a
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3934
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
lea ecx, [ebp - 0x2c]
call fcn.00440d86
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
push str.Check_old_version_when_msi_setup_int_a_downloading_version
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
push eax
push 0x1ff
jmp 0x4b3a72
cmp esi, 1
je 0x4b3995
cmp esi, 2
jne 0x4b3aaa
cmp dword [0x54146c], 0
jne 0x4b3aaa
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x528298
lea ecx, [ebp - 0x9c]
call fcn.004408e0
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x53
call fcn.004408e0
lea edx, [ebp - 0x9c]
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1ac]
call fcn.004b161e
mov esi, eax
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x190]
call fcn.004b161e
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3a0a
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3a14
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x190]
mov esi, eax
call fcn.00440d86
lea ecx, [ebp - 0x1ac]
call fcn.00440d86
lea ecx, [ebp - 0x80]
call fcn.00440d86
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
cmp esi, 6
je 0x4b3aa4
push str.Artificial__exit
lea ecx, [ebp - 0x2c]
call fcn.004408e0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x56
push eax
push 0x214
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x2c]
call fcn.00440d86
or edi, 0xffffffff
jmp 0x4b3c95
mov esi, dword [ebp - 0x1b8]
test esi, esi
jne 0x4b3c7f
push 2
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54146c], esi
jne 0x4b3c7f
push 0x528298
lea ecx, [ebp - 0x64]
call fcn.004408e0
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x57
call fcn.004408e0
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x174]
call fcn.004b161e
mov esi, eax
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x158]
call fcn.004b161e
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3b26
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3b30
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x158]
mov esi, eax
call fcn.00440d86
lea ecx, [ebp - 0x174]
call fcn.00440d86
lea ecx, [ebp - 0xb8]
call fcn.00440d86
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
cmp esi, 6
jne 0x4b3c36
push 0x528298
lea ecx, [ebp - 0xb8]
call fcn.004408e0
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
call fcn.004408e0
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x158]
call fcn.004b161e
mov esi, eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x174]
call fcn.004b161e
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3bcc
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3bd6
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541440]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x174]
mov esi, eax
call fcn.00440d86
lea ecx, [ebp - 0x158]
call fcn.00440d86
lea ecx, [ebp - 0x64]
call fcn.00440d86
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3b
call fcn.00440d86
cmp esi, 6
je 0x4b3c7f
push str.current_version_have_already_setup__exit
lea ecx, [ebp - 0x64]
call fcn.004408e0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5d
push eax
push 0x224
jmp 0x4b3c50
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x64]
call fcn.004408e0
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5e
push eax
push 0x22a
push str.e:works10820_niduniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd55
mov ecx, eax
call fcn.0042bd3a
push eax
mov ecx, ebx
call fcn.0042cc64
lea ecx, [ebp - 0x64]
call fcn.00440d86
push 0xfffffffffffffffe
pop edi
jmp 0x4b3c95
push 1
push edi
push 0x8d2
push dword [0x541440]
call dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
lea ecx, [ebp - 0x13c]
call fcn.00440d86
lea ecx, [ebp - 0x120]
call fcn.00440d86
lea ecx, [ebp - 0xe8]
call fcn.00433207
lea ecx, [ebp - 0x104]
call fcn.00440d86
mov eax, edi
call fcn.004cb5fe
ret