Function at 0x4369d0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59a505
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x6031c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 1
mov dword [0x607b90], 0
push 0x5af280
push 1
call fcn.00436460
push eax
lea ecx, [ebp - 0x28]
call fcn.004020c0
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
call fcn.00402670
add esp, 8
movzx ecx, al
mov dword [0x607b8c], ecx
lea ecx, [ebp - 0x28]
call fcn.004023e0
push 0x5af284
lea edx, [ebp + 8]
push edx
call fcn.00410a30
add esp, 8
movzx eax, al
test eax, eax
je 0x436a5d
mov dword [0x607b94], 1
call fcn.00436fc0
movzx ecx, al
test ecx, ecx
jne 0x436a89
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.004023e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004023e0
jmp 0x436cd9
cmp dword [0x607c20], 0
je 0x436aaa
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push 0x5af28c
call fcn.00401f50
call fcn.00436ea0
add esp, 4
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
lea ecx, [ebp + 0xc]
call fcn.00405f50
cmp dword [ebp - 0x14], eax
jge 0x436b30
mov edx, dword [ebp - 0x10]
push edx
mov ecx, 0x607bfc
call fcn.00402750
cmp dword [eax + 0x10], 0
jne 0x436b25
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp + 0xc]
call fcn.004368e0
movzx ecx, ax
cmp ecx, 0x30
jne 0x436af6
mov dword [ebp - 0x18], 1
jmp 0x436afd
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x10]
push edx
mov ecx, 0x607bfc
call fcn.00402750
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
jmp 0x436b2e
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
jmp 0x436ab8
cmp dword [0x607c20], 0
je 0x436bf7
lea edx, [ebp - 0x60]
push edx
call fcn.00436e80
push 0
push 0x3b
push 0x2f
push 0
lea ecx, [ebp - 0x50]
call fcn.00436860
mov eax, dword [0x607c20]
cdq
push edx
push eax
lea ecx, [ebp - 0x48]
call fcn.004259e0
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x48]
push ecx
lea edx, [ebp - 0x58]
push edx
lea ecx, [ebp - 0x60]
call fcn.00436920
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x58]
call fcn.00436990
movzx edx, al
test edx, edx
jne 0x436bb1
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x3c], esp
push 0
push 0
call fcn.004259e0
lea ecx, [ebp - 0x58]
call fcn.00436950
movzx eax, al
test eax, eax
je 0x436bea
push str.__mb_Demo_Package_is_expired
call fcn.00435d80
add esp, 4
mov dword [0x607b98], 1
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.004023e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004023e0
jmp 0x436cd9
push str.__mb_Silent_Install_Builder_Demo_Package.
call fcn.00435d80
add esp, 4
push 0
push 0
push 0x435b60
call fcn.0057fb92
add esp, 0xc
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x607c20], 0
je 0x436c9c
cmp dword [0x607b98], 0
je 0x436c9c
push 0x96
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x607bb0
call fcn.00409a10
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x30]
call fcn.00402790
push eax
lea ecx, [ebp - 0x20]
call fcn.0040bad0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x34]
call fcn.004023e0
push ecx
mov edx, esp
mov dword [ebp - 0x40], esp
lea eax, [ebp - 0x20]
push eax
push 0x5af324
push edx
call fcn.0040cf60
add esp, 0xc
call fcn.00417b90
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
call fcn.004023e0
cmp dword [0x607b98], 0
jne 0x436cae
cmp dword [0x607b9c], 0
je 0x436cb7
push 0xffffffffffffffff
call fcn.00436490
jmp 0x436cbe
push 0
call fcn.00436490
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.004023e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004023e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret