Function at 0x4b2a61
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Parse pe header

Disassembly:
push 0x1b8
mov eax, 0x4fd14b
call fcn.004cb6c8
mov ebx, ecx
mov dword [ebp - 0x1b8], ebx
and dword [ebp - 0x1bc], 0
lea ecx, [ebp - 0xb8]
push str.UniAccessAgent.ini
call fcn.00440943
and dword [ebp - 4], 0
lea eax, [ebp - 0xb8]
push eax
lea edx, [ebx + 0x28]
lea ecx, [ebp - 0x104]
call fcn.0044316e
pop ecx
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.00440de9
push str.prepare_ini_from_section_start_file
lea ecx, [ebp - 0x9c]
call fcn.00440943
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x9c]
mov edi, 0x541580
push eax
push 0x19b
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, edi
call fcn.0042cc71
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
call fcn.00440de9
push str.lva.ini
lea ecx, [ebp - 0x9c]
call fcn.00440943
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x9c]
call fcn.0042b342
pop ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.00440de9
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.0044056a
push 0x520bcc
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.00440943
push str.get_file_from_pe_section_lva.ini_to
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 6
call fcn.00440943
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x19e
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, edi
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, edi
call fcn.0042cc71
lea ecx, [ebp - 0x9c]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.00440de9
test esi, esi
je 0x4b2d1c
push str._failed.
lea ecx, [ebp - 0x80]
call fcn.00440943
push 8
pop ebx
push str.get_file_from_pe_section
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.00440943
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x104]
mov ecx, edi
push eax
lea eax, [ebp - 0x48]
push eax
push 0x1a2
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, edi
call fcn.0042cc71
lea ecx, [ebp - 0x48]
call fcn.00440de9
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.00440de9
push 2
push 0x64
pop edi
push edi
push 0x8d2
push dword [0x541448]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x541478], 0
jne 0x4b3d28
push str.MSG_TIPS
lea ecx, [ebp - 0x80]
call fcn.00440943
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xa
call fcn.00440943
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.004b1690
mov esi, eax
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x64]
call fcn.004b1690
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b2cdd
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b2ce7
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541448]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
jmp 0x4b3d28
lea ecx, [ebp - 0x104]
call fcn.0042ad40
mov esi, eax
mov eax, edx
mov dword [ebp - 0x1b4], eax
push 0x64
pop edi
test eax, eax
jg 0x4b2ec2
jl 0x4b2d46
cmp esi, edi
ja 0x4b2ec2
push str._Must_Cust_Error...
lea ecx, [ebp - 0x2c]
call fcn.00440943
push ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x1b4]
push esi
call fcn.004404ea
push str.size
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xe
call fcn.00440943
push str.GetFileLen::
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0xf
call fcn.00440943
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x9c]
mov ebx, 0x541580
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x1ac
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, ebx
call fcn.0042cc71
lea ecx, [ebp - 0x48]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
lea ecx, [ebp - 0x9c]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00440de9
push 2
push edi
push 0x8d2
push dword [0x541448]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x541478], 0
jne 0x4b2eba
push str.MSG_TIPS
lea ecx, [ebp - 0x48]
call fcn.00440943
push str.MSG_MUST_CUST
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.00440943
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004b1690
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x64]
call fcn.004b1690
add esi, 4
push 8
pop ebx
cmp dword [esi + 0x14], ebx
jb 0x4b2e80
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b2e8a
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541448]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
call fcn.00440de9
push 0x65
pop edi
jmp 0x4b3d28
lea ecx, [ebp - 0xe8]
call fcn.004331f5
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xd4]
call fcn.00440ae9
lea ecx, [ebp - 0xe8]
call fcn.00433abd
push str.UUID
lea ecx, [ebp - 0x48]
call fcn.00440943
mov esi, str.Main
mov byte [ebp - 4], 0x15
push esi
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebx + 0x60]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.CustTime
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.00440943
lea eax, [ebx + 0x7c]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.package_name
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.00440943
lea esi, [ebx + 0x98]
mov byte [ebp - 4], 0x1a
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.00443b7f
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1c
call fcn.00440ae9
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.str_x86_url
lea ecx, [ebp - 0x48]
call fcn.00440943
mov esi, str.Main
mov byte [ebp - 4], 0x1d
push esi
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebx + 0x15c]
mov byte [ebp - 4], 0x1e
push eax
mov dword [ebp - 0x1c0], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.str_x64_url
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.00440943
lea eax, [ebx + 0x178]
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x1c4], eax
lea ecx, [ebp - 0xe8]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.ins_user
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.00440943
lea eax, [ebx + 0x194]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.ins_pass
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x23
call fcn.00440943
lea esi, [ebx + 0x1b0]
mov byte [ebp - 4], 0x24
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.ins_domain
lea ecx, [ebp - 0x48]
call fcn.00440943
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call fcn.00440943
lea eax, [ebx + 0x1cc]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
push eax
mov edx, esi
lea ecx, [ebp - 0x64]
call fcn.00443b7f
pop ecx
push eax
mov ecx, esi
mov byte [ebp - 4], 0x28
call fcn.00440ae9
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00440de9
cmp dword [ebx + 0x1a8], 0
je 0x4b3247
push 0x51f46c
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x29
lea esi, [ebx + 0x194]
push eax
mov edx, esi
lea ecx, [ebp - 0xb8]
call fcn.00443b7f
pop ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2b
call fcn.00440de9
cmp dword [ebp - 0xa4], 0
je 0x4b3238
lea eax, [ebp - 0xb4]
push eax
lea ecx, [esi + 4]
call fcn.00443482
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.UseBeeDwn
lea ecx, [ebp - 0x48]
call fcn.00440943
push str.Main
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2c
call fcn.00440943
lea eax, [ebx + 0x278]
mov byte [ebp - 4], 0x2d
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00433e5a
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.ServerIP
lea ecx, [ebp - 0x48]
call fcn.00440943
mov esi, str.AgentCOMM
mov byte [ebp - 4], 0x2e
push esi
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebx + 0xb4]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.OnlineServerIP
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.00440943
lea eax, [ebx + 0xd0]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.ServerPort
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x32
call fcn.00440943
mov byte [ebp - 4], 0x33
lea eax, [ebx + 0xec]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.WebPort
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
call fcn.00440943
lea eax, [ebx + 0x108]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00440de9
push str.BeeServerPort
lea ecx, [ebp - 0x48]
call fcn.00440943
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.00440943
add ebx, 0x27c
mov byte [ebp - 4], 0x37
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00433e5a
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
call fcn.00440de9
cmp dword [ebx], 0
jne 0x4b341f
mov dword [ebx], 0x9914
lea ecx, [ebp - 0x120]
call fcn.00440334
push str.MainTitle
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x38
call fcn.00440943
mov ebx, str.Main
mov byte [ebp - 4], 0x39
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
call fcn.00440de9
lea ecx, [ebp - 0x13c]
call fcn.00440334
push str.PartnerAgentName
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440943
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3c
call fcn.00440943
lea eax, [ebp - 0x13c]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00434255
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
mov ebx, 0x51f46c
lea ecx, [ebp - 0x80]
push ebx
call fcn.00440943
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x3e
push eax
lea edx, [ebp - 0x120]
lea ecx, [ebp - 0x64]
call fcn.00443b7f
pop ecx
add eax, 4
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x11c]
call fcn.00443482
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
push ebx
lea ecx, [ebp - 0x9c]
call fcn.00440943
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x40
push eax
lea edx, [ebp - 0x13c]
lea ecx, [ebp - 0x64]
call fcn.00443a35
pop ecx
add eax, 4
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x138]
call fcn.00443482
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
push 8
pop ebx
cmp dword [ebp - 0x108], ebx
lea eax, [ebp - 0x11c]
cmovae eax, dword [ebp - 0x11c]
push eax
push 0x100
push 0x541230
call fcn.004dd705
mov esi, dword [ebp - 0x1b8]
add esp, 0xc
cmp dword [esi + 0x11c], 0
jne 0x4b35d5
push 0xa
push 0x50
lea ecx, [ebp - 0x2c]
call fcn.0044056a
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [esi + 0x10c]
call fcn.00443482
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
push str._strCustOnlineServerIP
lea ecx, [ebp - 0xb8]
call fcn.00440943
push str._WebPort
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x43
call fcn.00440943
push str._ServerIP
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x44
call fcn.00440943
push str._strCustTime
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x45
call fcn.00440943
push str.strCustGUID
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x46
call fcn.00440943
lea eax, [esi + 0xd0]
mov byte [ebp - 4], 0x47
push eax
lea eax, [ebp - 0xb8]
mov ecx, 0x541580
push eax
lea eax, [esi + 0x108]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [esi + 0xb4]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [esi + 0x7c]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [esi + 0x60]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x1e9
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, 0x541580
call fcn.0042cc71
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
lea ecx, [ebp - 0x9c]
call fcn.00440de9
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
mov ecx, esi
call fcn.004b227f
cmp dword [0x5414e0], 0
mov esi, eax
mov dword [ebp - 0x1b8], esi
je 0x4b3793
test esi, esi
je 0x4b3726
cmp esi, 1
je 0x4b3726
cmp esi, 2
jne 0x4b3793
push 0xa
push esi
lea ecx, [ebp - 0x48]
call fcn.0044056a
push str.update_judge_ret
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.00440943
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x2c]
mov ebx, 0x541580
push eax
push 0x1f1
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, ebx
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, ebx
call fcn.0042cc71
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
call fcn.00440de9
push 0xfffffffffffffffd
jmp 0x4b3cee
push str..msi
lea ecx, [ebp - 0x48]
call fcn.00440943
mov ecx, dword [ebp - 0x1c0]
xor eax, eax
inc eax
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], eax
lea eax, [ebp - 0x48]
push 0
push eax
call fcn.0044205e
test al, al
je 0x4b37fb
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.00440943
mov ecx, dword [ebp - 0x1c4]
lea eax, [ebp - 0x2c]
push 0
push eax
mov dword [ebp - 0x1b4], 3
call fcn.0044205e
mov byte [ebp - 0x1ad], 1
test al, al
jne 0x4b3802
mov byte [ebp - 0x1ad], 0
test byte [ebp - 0x1b4], 2
je 0x4b3813
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x3b
call fcn.00440de9
cmp byte [ebp - 0x1ad], 0
je 0x4b39f9
cmp esi, 1
je 0x4b3933
cmp esi, 2
je 0x4b3933
test esi, esi
jne 0x4b3cf1
push 2
push edi
push 0x8d2
push dword [0x541448]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x541478], esi
jne 0x4b38ef
push str.MSG_TIPS
lea ecx, [ebp - 0x48]
call fcn.00440943
push str.MSG_MUST_SAME_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
call fcn.00440943
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x80]
call fcn.004b1690
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x64]
call fcn.004b1690
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b38b1
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b38bb
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541448]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x52
push eax
push 0x207
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, ebx
call fcn.0042cc71
lea ecx, [ebp - 0x2c]
jmp 0x4b3ce7
push 2
push edi
push 0x8d2
push dword [0x541448]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x541478], 0
jne 0x4b39da
push str.MSG_TIPS
lea ecx, [ebp - 0x48]
call fcn.00440943
push str.MSG_MUST_OTHER_INSTALLED
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4b
call fcn.00440943
lea edx, [ebp - 0x48]
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x80]
call fcn.004b1690
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x64]
call fcn.004b1690
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b399c
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b39a6
mov eax, dword [eax]
push 0
push esi
push eax
push dword [0x541448]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
call fcn.00440de9
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
push str.Check_old_version_when_msi_setup_int_a_downloading_version
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
push eax
push 0x1ff
jmp 0x4b3ae4
cmp esi, 1
je 0x4b3a07
cmp esi, 2
jne 0x4b3b1c
cmp dword [0x541478], 0
jne 0x4b3b1c
push 2
push edi
push 0x8d2
push dword [0x541448]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.MSG_TIPS
lea ecx, [ebp - 0x9c]
call fcn.00440943
push str.MSG_MUST_OTHER_INSTALLED_QUERY
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x53
call fcn.00440943
lea edx, [ebp - 0x9c]
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x1ac]
call fcn.004b1690
mov esi, eax
lea edx, [ebp - 0x80]
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x190]
call fcn.004b1690
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3a7c
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3a86
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541448]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x190]
mov esi, eax
call fcn.00440de9
lea ecx, [ebp - 0x1ac]
call fcn.00440de9
lea ecx, [ebp - 0x80]
call fcn.00440de9
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
cmp esi, 6
je 0x4b3b16
push str.Artificial__exit
lea ecx, [ebp - 0x2c]
call fcn.00440943
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x56
push eax
push 0x214
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, ebx
call fcn.0042cc71
lea ecx, [ebp - 0x2c]
call fcn.00440de9
or edi, 0xffffffff
jmp 0x4b3d07
mov esi, dword [ebp - 0x1b8]
test esi, esi
jne 0x4b3cf1
push 2
push edi
push 0x8d2
push dword [0x541448]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x541478], esi
jne 0x4b3cf1
push str.MSG_TIPS
lea ecx, [ebp - 0x64]
call fcn.00440943
push str.MSG_MUST_SAME_INSTALLED_QUERY
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x57
call fcn.00440943
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x174]
call fcn.004b1690
mov esi, eax
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x158]
call fcn.004b1690
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3b98
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3ba2
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541448]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x158]
mov esi, eax
call fcn.00440de9
lea ecx, [ebp - 0x174]
call fcn.00440de9
lea ecx, [ebp - 0xb8]
call fcn.00440de9
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
cmp esi, 6
jne 0x4b3ca8
push str.MSG_TIPS
lea ecx, [ebp - 0xb8]
call fcn.00440943
push str.MSG_MUST_SAME_INSTALLED_QUERY_TWICE
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5a
call fcn.00440943
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x158]
call fcn.004b1690
mov esi, eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x174]
call fcn.004b1690
add esi, 4
cmp dword [esi + 0x14], ebx
jb 0x4b3c3e
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], ebx
jb 0x4b3c48
mov eax, dword [eax]
push 4
push esi
push eax
push dword [0x541448]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x174]
mov esi, eax
call fcn.00440de9
lea ecx, [ebp - 0x158]
call fcn.00440de9
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3b
call fcn.00440de9
cmp esi, 6
je 0x4b3cf1
push str.current_version_have_already_setup__exit
lea ecx, [ebp - 0x64]
call fcn.00440943
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5d
push eax
push 0x224
jmp 0x4b3cc2
push str.Check_current_version_have_already_setup_
lea ecx, [ebp - 0x64]
call fcn.00440943
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5e
push eax
push 0x22a
push str.e:works10820uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x541580
push 3
mov ecx, ebx
call fcn.0042cd62
mov ecx, eax
call fcn.0042bd47
push eax
mov ecx, ebx
call fcn.0042cc71
lea ecx, [ebp - 0x64]
call fcn.00440de9
push 0xfffffffffffffffe
pop edi
jmp 0x4b3d07
push 1
push edi
push 0x8d2
push dword [0x541448]
call dword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
lea ecx, [ebp - 0x13c]
call fcn.00440de9
lea ecx, [ebp - 0x120]
call fcn.00440de9
lea ecx, [ebp - 0xe8]
call fcn.00433218
lea ecx, [ebp - 0x104]
call fcn.00440de9
mov eax, edi
call fcn.004cb672
ret