Function at 0x445f18
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Parse pe header

Disassembly:
push 0x1b8
mov eax, 0x48af79
call fcn.0045e53f
mov ebx, ecx
mov dword [ebp - 0x1b8], ebx
and dword [ebp - 0x1bc], 0
lea ecx, [ebp - 0xb8]
push str.UniAccessAgent.ini
call fcn.0041b66b
and dword [ebp - 4], 0
lea eax, [ebp - 0xb8]
push eax
lea edx, [ebx + 0x28]
lea ecx, [ebp - 0x104]
call fcn.0041ddb9
pop ecx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.0041baf2
push str.prepare_ini_from_section_start_file
lea ecx, [ebp - 0x9c]
call fcn.0041b66b
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x9c]
mov edi, 0x4b5c30
push eax
push 0x18e
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, edi
call fcn.004083e1
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
call fcn.0041baf2
push str.lva.ini
lea ecx, [ebp - 0x9c]
call fcn.0041b66b
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x9c]
call fcn.00406d3d
pop ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.0041baf2
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.0041b292
push 0x49d3d8
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.0041b66b
push str.get_file_from_pe_section_lva.ini_to
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.0041b66b
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x191
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, edi
call fcn.004083e1
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.0041baf2
test esi, esi
je 0x4461d3
push str._failed.
lea ecx, [ebp - 0x80]
call fcn.0041b66b
push 8
pop ebx
push str.get_file_from_pe_section
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.0041b66b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x104]
mov ecx, edi
push eax
lea eax, [ebp - 0x48]
push eax
push 0x195
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, edi
call fcn.004083e1
lea ecx, [ebp - 0x48]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.0041baf2
push 2
push 0x64
pop edi
push edi
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b5b90], 0
jne 0x447171
push 0x49fdf0
lea ecx, [ebp - 0x80]
call fcn.0041b66b
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.0041b66b
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.00444ed7
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x446194
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x44619e
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
jmp 0x447171
lea ecx, [ebp - 0x104]
call fcn.00406742
mov esi, eax
mov eax, edx
mov dword [ebp - 0x1b4], eax
push 0x64
pop edi
test eax, eax
jg 0x446379
jl 0x4461fd
cmp esi, edi
ja 0x446379
push str._Must_Cust_Error...
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
push ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x1b4]
push esi
call fcn.0041b212
push str.size
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xe
call fcn.0041b66b
push str.GetFileLen::
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
call fcn.0041b66b
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x4b5c30
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x19f
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x48]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.0041baf2
push 2
push edi
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b5b90], 0
jne 0x446371
push 0x49fdf0
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.0041b66b
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x64]
call fcn.00444ed7
add esi, 4
push 8
pop ebx
cmp dword [esi + 0x14], ebx
jb 0x446337
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x446341
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
push 0x65
pop edi
jmp 0x447171
lea ecx, [ebp - 0xe8]
call fcn.0040e5ca
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xd4]
call fcn.0041b7fa
lea ecx, [ebp - 0xe8]
call fcn.0040ee86
push str.UUID
lea ecx, [ebp - 0x48]
call fcn.0041b66b
mov esi, str.Main
mov byte [ebp - 4], 0x15
push esi
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebx + 0x60]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.CustTime
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.0041b66b
lea eax, [ebx + 0x7c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.package_name
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.0041b66b
lea esi, [ebx + 0x98]
mov byte [ebp - 4], 0x1a
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push 0x49b67c
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.0041ec93
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.0041b7fa
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.str_x86_url
lea ecx, [ebp - 0x48]
call fcn.0041b66b
mov esi, str.Main
mov byte [ebp - 4], 0x1d
push esi
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebx + 0x15c]
mov byte [ebp - 4], 0x1e
push eax
mov dword [ebp - 0x1c0], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.str_x64_url
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.0041b66b
lea eax, [ebx + 0x178]
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x1c4], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.ins_user
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.0041b66b
lea eax, [ebx + 0x194]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.ins_pass
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.0041b66b
lea esi, [ebx + 0x1b0]
mov byte [ebp - 4], 0x24
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.ins_domain
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.0041b66b
lea eax, [ebx + 0x1cc]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push 0x49b67c
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.0041ec93
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x28
call fcn.0041b7fa
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.UseBeeDwn
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
call fcn.0041b66b
lea eax, [ebx + 0x278]
mov byte [ebp - 4], 0x2a
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f223
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.ServerIP
lea ecx, [ebp - 0x48]
call fcn.0041b66b
mov esi, str.AgentCOMM
mov byte [ebp - 4], 0x2b
push esi
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebx + 0xb4]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.OnlineServerIP
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2d
call fcn.0041b66b
lea eax, [ebx + 0xd0]
mov byte [ebp - 4], 0x2e
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.ServerPort
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2f
call fcn.0041b66b
lea eax, [ebx + 0xec]
mov byte [ebp - 4], 0x30
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.WebPort
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x31
call fcn.0041b66b
lea eax, [ebx + 0x108]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.0041baf2
push str.BeeServerPort
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.0041b66b
add ebx, 0x27c
mov byte [ebp - 4], 0x34
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f223
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
cmp dword [ebx], 0
jne 0x446871
mov dword [ebx], 0x9914
lea ecx, [ebp - 0x120]
call fcn.0041b057
push str.MainTitle
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x35
call fcn.0041b66b
mov ebx, str.Main
mov byte [ebp - 4], 0x36
push ebx
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
lea ecx, [ebp - 0x13c]
call fcn.0041b057
push str.PartnerAgentName
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041b66b
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.0041b66b
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0040f61e
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
mov ebx, 0x49b67c
lea ecx, [ebp - 0x2c]
push ebx
call fcn.0041b66b
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x3b
push eax
lea edx, [ebp - 0x120]
lea ecx, [ebp - 0x64]
call fcn.0041ec93
pop ecx
add eax, 4
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x11c]
call fcn.0041e1ec
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
push ebx
lea ecx, [ebp - 0x80]
call fcn.0041b66b
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x3d
push eax
lea edx, [ebp - 0x13c]
lea ecx, [ebp - 0x64]
call fcn.0041eb1e
pop ecx
add eax, 4
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x138]
call fcn.0041e1ec
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
push 8
pop ebx
cmp dword [ebp - 0x108], ebx
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
push eax
push 0x100
push 0x4b5948
call fcn.00467852
mov esi, dword [ebp - 0x1b8]
add esp, 0xc
cmp dword [esi + 0x11c], 0
jne 0x446a1e
push 0xa
push 0x50
lea ecx, [ebp - 0x2c]
call fcn.0041b292
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [esi + 0x10c]
call fcn.0041e1ec
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
push str._strCustOnlineServerIP
lea ecx, [ebp - 0xb8]
call fcn.0041b66b
push str._WebPort
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x40
call fcn.0041b66b
push str._ServerIP
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x41
call fcn.0041b66b
push str._strCustTime
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x42
call fcn.0041b66b
push str.strCustGUID
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x43
call fcn.0041b66b
lea eax, [esi + 0xd0]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0xb8]
mov ecx, 0x4b5c30
push eax
lea eax, [esi + 0x108]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [esi + 0x7c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [esi + 0x60]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x1d3
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, 0x4b5c30
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
call fcn.0041baf2
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
mov ecx, esi
call fcn.0044573a
cmp dword [0x4b591c], 0
mov esi, eax
mov dword [ebp - 0x1b8], esi
je 0x446bdc
test esi, esi
je 0x446b6f
cmp esi, 1
je 0x446b6f
cmp esi, 2
jne 0x446bdc
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.0041b292
push str.update_judge_ret
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x45
call fcn.0041b66b
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x46
push eax
lea eax, [ebp - 0x2c]
mov ebx, 0x4b5c30
push eax
push 0x1db
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, ebx
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
call fcn.0041baf2
push 0xfffffffffffffffd
jmp 0x447137
push str..msi
lea ecx, [ebp - 0x48]
call fcn.0041b66b
mov ecx, dword [ebp - 0x1c0]
xor eax, eax
inc eax
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x48]
push 0
push eax
call fcn.0041cd67
test al, al
je 0x446c44
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x2c]
push 0
push eax
mov dword [ebp - 0x1b4], 3
call fcn.0041cd67
mov byte [ebp - 0x1ad], 1
test al, al
jne 0x446c4b
mov byte [ebp - 0x1ad], 0
test byte [ebp - 0x1b4], 2
je 0x446c5c
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x38
call fcn.0041baf2
cmp byte [ebp - 0x1ad], 0
je 0x446e42
cmp esi, 1
je 0x446d7c
cmp esi, 2
je 0x446d7c
test esi, esi
jne 0x44713a
push 2
push edi
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b5b90], esi
jne 0x446d38
push 0x49fdf0
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push str.MSG_MUST_SAME_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4c
call fcn.0041b66b
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x80]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x64]
call fcn.00444ed7
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x446cfa
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x446d04
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
push eax
push 0x1f1
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b5c30
push 3
mov ecx, ebx
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
jmp 0x447130
push 2
push edi
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b5b90], 0
jne 0x446e23
push 0x49fdf0
lea ecx, [ebp - 0x48]
call fcn.0041b66b
push str.MSG_MUST_OTHER_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.0041b66b
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x80]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x64]
call fcn.00444ed7
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x446de5
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x446def
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
push str.Check_old_version_when_msi_setup_int_a_downloading_version
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
push eax
push 0x1e9
jmp 0x446f2d
cmp esi, 1
je 0x446e50
cmp esi, 2
jne 0x446f65
cmp dword [0x4b5b90], 0
jne 0x446f65
push 2
push edi
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x49fdf0
lea ecx, [ebp - 0x9c]
call fcn.0041b66b
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x50
call fcn.0041b66b
lea edx, [ebp - 0x9c]
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1ac]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x190]
call fcn.00444ed7
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x446ec5
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x446ecf
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x190]
mov esi, eax
call fcn.0041baf2
lea ecx, [ebp - 0x1ac]
call fcn.0041baf2
lea ecx, [ebp - 0x80]
call fcn.0041baf2
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
cmp esi, 6
je 0x446f5f
push str.Artificial__exit
lea ecx, [ebp - 0x2c]
call fcn.0041b66b
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x53
push eax
push 0x1fe
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b5c30
push 3
mov ecx, ebx
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x2c]
call fcn.0041baf2
or edi, 0xffffffff
jmp 0x447150
mov esi, dword [ebp - 0x1b8]
test esi, esi
jne 0x44713a
push 2
push edi
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x4b5b90], esi
jne 0x44713a
push 0x49fdf0
lea ecx, [ebp - 0x64]
call fcn.0041b66b
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x54
call fcn.0041b66b
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x174]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x158]
call fcn.00444ed7
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x446fe1
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x446feb
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x158]
mov esi, eax
call fcn.0041baf2
lea ecx, [ebp - 0x174]
call fcn.0041baf2
lea ecx, [ebp - 0xb8]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
cmp esi, 6
jne 0x4470f1
push 0x49fdf0
lea ecx, [ebp - 0xb8]
call fcn.0041b66b
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x57
call fcn.0041b66b
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x158]
call fcn.00444ed7
mov esi, eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x174]
call fcn.00444ed7
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x447087
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x447091
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x174]
mov esi, eax
call fcn.0041baf2
lea ecx, [ebp - 0x158]
call fcn.0041baf2
lea ecx, [ebp - 0x64]
call fcn.0041baf2
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x38
call fcn.0041baf2
cmp esi, 6
je 0x44713a
push str.current_version_have_already_setup__exit
lea ecx, [ebp - 0x64]
call fcn.0041b66b
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
push eax
push 0x20e
jmp 0x44710b
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x64]
call fcn.0041b66b
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5b
push eax
push 0x214
push str.e:works10720uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x4b5c30
push 3
mov ecx, ebx
call fcn.004084dd
mov ecx, eax
call fcn.004076b6
push eax
mov ecx, ebx
call fcn.004083e1
lea ecx, [ebp - 0x64]
call fcn.0041baf2
push 0xfffffffffffffffe
pop edi
jmp 0x447150
push 1
push edi
push 0x8d2
push dword [0x4b5b64]
call dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
lea ecx, [ebp - 0x13c]
call fcn.0041baf2
lea ecx, [ebp - 0x120]
call fcn.0041baf2
lea ecx, [ebp - 0xe8]
call fcn.0040e5ed
lea ecx, [ebp - 0x104]
call fcn.0041baf2
mov eax, edi
call fcn.0045e4e9
ret