Function at 0x43c5d0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Encode data using xor
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5381dd
mov eax, dword fs:[0]
push eax
mov eax, 0x50eb8
call fcn.004682f0
mov eax, dword [0x657114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x50d98], ecx
mov ecx, 0x5a
mov ebx, dword [ebp + 0xc]
mov esi, str.WvK2haxyJVwbafTUlE6igtUVAegJKdQi6yWYiONq4uPpE2oIRVb7rsOylwdQoggbFNyEgTEMg1ibonJlOkzwldqEJTKh0fxwbXFCV8K7TdXEVPJ2jCL66s9yLpXV71D5D4EC0TPGwIycpRei4865f4MzFiFgN33W3rdkr3yMdyBGNlohPiOQamNDB806SYkHltOAetl5wf8R8w9zG9Zutc7zXVpgCpCMZ6rAhYHkw8sQfBzSPi1Twb4rmBQNhaw8o304qFH6BBR4jlfz73qo8SdrwcPkugwlqP1Go0EF5rTNcJcyO9FK11zmVV6Y76olNkTjPeYuuX0wD1mbclc4d9p3gMxXGSo1WUerD8xp
mov dword [ebp - 0x50d7c], ebx
lea edi, [ebp - 0x15f0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x74
movsb byte es:[edi], byte [esi]
mov esi, str.SesBbP4oztTaDAQSqJU7ppFhhmaXaj008K9cMTF0rfdaU7AXCiSBsKBGiEdtHeXmU8wV4wiE2xICxx17Q2zE6wvtzA6je7c676wdEWMQEHnOq6TQfsngY4XoBki7bcDNLl2b0bdNzlzFeE6te09qaQDSCM7LB3r1W9vN4kvBmlunABnZYcai9XevIYFWoJLkQgZdnThzP21r2iPmboB6SCDbiZ10ws5ix8vTYm4uGnXEPPFowuCGfFebiye3H4ilV4qBAYtveulHcIGEURk01RSDlw12BbJMlkTDivFiSFb8kwuK5VRGH5Q323jVgkvjZe8awL6Zg7xVov26Fqf9mSrZPCA8TtkCVskiBC3HRSh4OpxcpUDAFnz7F9yrbzx4aUu3W5nCaMnZv89dpwIgAkhnd8XMK5lBiZsYsglbl5qSuqfVnCrP0wl2WpSmL8xDF1BFZFZFHEQ4asWs
lea edi, [ebp - 0x2d3c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5e
movsb byte es:[edi], byte [esi]
mov esi, str.oH4G8BbFNn1jKEZllcwWFETbjPBRz7pJrG78wbT4MFhb1o6UVmFUCLXFgINcIb8lNZN1Fi4cgZdFeWEyaMWdIAjaSWFsp2ZlmViKWvhmkAt8DymQ1MkZVyHItznN0TkvMNOzcXR1CGfH9nvdTpheFEvjt3dl9brmXqt4CdoYGart3jJHUc7f0iHdQKnqEM2DwWDEgvBfnnllU8Zwg9ZrLgsSAVCCR72vr6bWbopASeEFvI4on1desOO5VMchh3RFkjPQshYwHUqqEapwBrL75ZdYurN8Lr5FGV73vIuTLFjXNOhPweVdPiKrixCR2zDO7tF3HAiqZlazk8MJvTw3zatHg82rp8hZtMzfD4EvH1kMgO1dcc4fEZUm
lea edi, [ebp - 0x2130]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
movsb byte es:[edi], byte [esi]
mov esi, str.3Png0jMqSkwOHuYgvEk0mDgt2RWBgLz7DjfUvD6zkJYPVJejV3dgGgvpKTpeCP1xCmoPkwgYE2MMTxE9oAzCvFzM2S1JRzLtlyFQlszCindGwgN7bPh34ngonlYYYeBbpZeJrxBkgaMOVCKhU775HnoFEs5uB3NvZ6qo7YFPixmEhpLOz59O1moIkvfEY5bhou2x7vg8gW5ygEDZc0dQvCLJM5c2ZhiNqMXeHiEIklgcNtXulKqDaKii5iociHTkw0iOHpBsiBU6v6fmPcrGObkxJA5aryTEHgRV5uD95HTG4yGCVjKHsZScEdg1qMXn3g9P3dn59K2wD1etKTwsHvsKh3CglqiBTRHAQVWPxYCyL85vkLjMqKfhuDlyNpO70Br5aBqWz8c8ZzyYWmb129SoDRUOC2o5jzO8XUQZuC5RsguabHc5hRJ70gcoTMhrhk9hAmhG23tjUCGtsrE8
lea edi, [ebp - 0x2308]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x65
movsb byte es:[edi], byte [esi]
mov esi, str.SyDT2S51rJucpfPRzIq3PnZQorbiW3XWBxnZEovaZtDzEjsEEh6v6cS1YVNrZAAXbuO8LX41Oqz77JICNxGveIhjSXBcrkhYarmOc6PxtlyMFof8l1ZD1mOr5FjaIfoc969C6s4IP2CDQ1NsXkov0pEYbC4ePijTXwngn7hRiUIfOxDDOJJFL6IbzvKYb2rSP2s8moTRqECUTEHSDCo72wmXhWXFqsItmAQaagfNOBex3lpMGNORb3xSFu7S0SQuEDGwH99gkWKix5HTBLtmRq05DqaX6RuNcSq9S3FMCl3lRIpKuzJ90gEFouTioMaOyW03GgT66JXSbAGEff1IUVUqpTMv6cOcNuTUkbQR6FKZ9lndYmJAwSQLMCZ6lSVn70NVWbJWpfo5Bb0SqXl6si
lea edi, [ebp - 0x2634]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3e
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.D2qpl5kUPEZmGm62ExcIoqCeq2d5BioiDoc0TujyDJsUrq5npipCi7ZWYftVJQDv0vmM8w8ROGT4kgdhryRc6JU2DdSz7IffopdtLltJFmvcLaZKV2rDXo6u9PFA2Y1daHOBBQJjtWPMrBvMZZjvOnBVZv4H3JmAjVeTorPw49oRE3glmueYKzS90AgGoCCPPSt3pA0fxqdqQYvKW0LGWLPGe6wFceOz382dhIV177SH6lrlF9q3sdi
lea edi, [ebp - 0x564]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x65
lea edi, [ebp - 0x249c]
mov esi, str.ESDa8d3IcnO6ij68hjCPuzooAfGn68bobDUPzw4r7xhuXtHQaBqZixHukm2Bu0jCMKFaCDwOvgbdj0avo9L9MmjOMWXitCBKsPfSTRyLQNCVfASDaQlBkf8S1zwLl6wb5G7LdOaQrSeuQYXwJvtnXt85VKTe1wFx0HlyGIMtJ1rbz8Mn33QrHetENrVG0IeGqUWCrjyom7aWGmt0b9CQSiuLSVpJsIYCWmdbRFakriLybJRbmMKA1YmGt5F4YoA5aNVeyRKR7RlZMLk73oDTUK7ZKGI5yTmgBLShMdOVnxtWP08GoHzRH4Uo0R7Y4byxGSHLcNrFa5yWnUJAgCiYRMUIEeFnwi04xahCq377oPm39RrDMp8R9NUJ8ZG0n5kmjg4WDeLrqTZu1UgX4GO
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5b
lea edi, [ebp - 0x1e3c]
mov esi, str.Ltq1iSpKgESv78MTYSYFynoylxnnex4pzOx0gXVrutoPGHH5cnIdF1Co7KboFm5pVwGPTaWLtKBCVf4pfawqP6CpyN8VyqBkm36wMka6Qiwwh4M7Tv3mEYTqZyDoix4QoGj7l7clYPaVQzJhNKm3dpS6gSlzR9IpP1U2LFazYf3I6JCQvdcCecHlzqfFTFtaZzex91eN5J4kIO6z26RTS5BtK2v3n7Qda2LLA3y5R6sO0FkVQFwwQmjppa6xQTRIVfyss1tVxQBqoW8TXRQ9yLAlZiyLGNcsHLOtAjz78H9JsJDEavBwazFhDivt6RcsNk3zvWkyexI72fWZuY64yIgtwSRr9ul2ez5BDAp9QhGR
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
movsb byte es:[edi], byte [esi]
mov esi, str.kkgUu4r3yZ9QyH3ksPksE24vR6i5kPyb22ZFsDZEpVm65sA8TWQcYNhX1yJhGIn7nU7bMDtrRamxiZYH8zZVNTR3I6spDPy93DxJXVtg8AxcBkWgh8ANF18XHgLXz0Vkbw1WVjrVCWso2KO4zEpLtjgtWfJv1sKWut5BYp3E1Ftdru3DbbKaUAPBc505itw1s1tb6YNRbZAGsbGg4tMLDJIrRkM1Rm5jkVYUpIwJJtBOtIKmMf9XtXTHOKPSprDdVylR0Bkkg8Wdr5NAjfbYKQKOsLko8upM1mJfdHn43TqMmOza9TWFnvdsKGtVswPyYURwqIzoHq9yUscyLFCBXHoAxmQmbIpJJF7bTfNIICqYavYMRuK2wqzjhDgay7oQiDCt1ciY7C7b0kZ3p7BdBYJRoYNzyombJ69sQyPg2mJHuH0QNNgNxLmhKSn3vdNfIeANCnmUeF93s8l8Vpn9lY3W8A4eC9nzgye0wzURvlC6ESgne
lea edi, [ebp - 0x3a60]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x78
movsw word es:[edi], word [esi]
mov esi, str.Rs5SCGbduBoVgly96xICvvHcJ1xVzHoU28NRRS3ndh4Zd5l1QKIbLmCwE79ZvDtbkCjEmlEI09DOuD7VEF43dBIM8WzqLMICKBVq6Ypz6Jwv7SeKnzEJd2wnkWRO0px4e3BuRUiQ0oX3VzgLXf2VT9YYwakVkpeqgPwoxjTYWZzDdcDcC03vXz8ghGpw0KpjNIgZ60QVPtXhHLdSX6u8JRQkUcaOwnswEtDkradIV6kWvpP2Qt8gQPngmHXRULQhndAsqklFbPhFXbwF7qnF2UDYzOr09tf7OgjpTvRy3RrDQC2LzIUDV0GPIHMWP4VrxjOMI9IdLnQ01DPZyynEai3xa1M6aM7ddrrQTiqsxG2by7Mz1KlZj2EnqdMaeaDerW2r1pmHROkbTgTeK8k24sLyZaQ7AZyblBi5GaM2aC4sLlUlgD6f3WmtLzQkilyRZ5Duvoa66nmY0Bnug2TxEsN4bYKgq9J
lea edi, [ebp - 0x3678]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5d
lea edi, [ebp - 0x1ccc]
mov esi, str.W5JRsFfAv7Wn6x75ERNYEWjBqbGQc2wXskdfuTVeXJ5FY9KsjidSBDqpElYm8vUwyilMey0rVWPGs4A4EBnlyi2fTFTrfyBPrCdB5slq3vc1EduckIFbPxmpjsaYVKWAKfvbd3nWyDvWU0z5Lxnh3lwG6n53CohIpVRPCDSmkOh1apGsHJ6xZh8pORXXHckGjrAdo0XgTvUbP4ky6XEbFka7UUwrCuZlB6ZulpNBq1cAndg5IbDITD0m4r0cbXGapxVrX9gUVEnKocenIAkqUu4x0vFsB14l6XufV1RpGbYYAMLO8Z3pMiZfHDA2nuHPgQbCMLvv0DovCH9TqxoDn6qY9KGRXfdp7nahxW318ap92vEm7ULqW
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x74
movsw word es:[edi], word [esi]
mov esi, str.GwwIqhMFPEGLTTmXls8BxHm7TiPnsxJfyZuBJkNLDEDQxc4G7NQErwPDSqYDJOQgWp9CHVzMF0CZW617n67NX1NJZ6gflDvOGcwV9i3jdXmdmDzSP2yojM6VkFpnFJS8Xv5oa942N5FLFWJGx2WPjUktYAECaaWmiuuCYXtfaN1syS7zYo4Rwmt0pxyFm4tJWsSmuyVecECcbvN8KR6MKoCetHgEKX10tgLkRGwYLjAWvQwlyEgsZJfYRKU5cxDf3KldABgJaNBvVSAggHGKF6u1PSHFTFPBrvQaG5JiBQsyYUXKjHJ10qFR3LbQ3X5xXCsW14fSaFd9Gq39wMhQHUOltdW4wBZSTFohOyLlRNe0hZmzZazM8s4E5gqacETEk5a6myngmCG764M0dpeCuh2wXLDx9Cwou5KWRCbICzVHER4xGZRUbCIqEfSYGZOfxo91EHSiR7pS9lh6
lea edi, [ebp - 0x2f10]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5a
movsb byte es:[edi], byte [esi]
mov esi, str.DdvmGnDfOE2L3bw7jTzgJUPJ7ujEGCbFlVqwh0MrB2dUqCOU8SkTnxxHkjvg4XKDt6fi8H4wlQcpHnr942c5hPzprO2F9vt78prSawn7t9k3Mg88ClJNWyJDOhXaySWpIQpEDkGKlCaknJC39Yy3dZuTf8tUULPc9ImuOnUSzl3G18ns1ffpTpQb19yAwY86xlMmILbFjTB0u4AQxa8o9BjceV6ILeVWUeooe9zOZx4ooDQTMg9A5HPUSk6siKHtpttHTvaWhiBuPPUro7uBUobnnZuGND0KgemKO0Csby6UFbjpxpwRh4zYPmF2NlbNDT4ed1Z6Jw24jxlvlamWQLlJ7E8Wfmdlh8LRcpy8
lea edi, [ebp - 0x1484]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x42
movsb byte es:[edi], byte [esi]
mov esi, str.qbsyfPtKha1oGPcPSh75As3vUCaMuvssvxTl5a7IMm8Qlp3pHBF23F0WT49V606c4tGArmV4nQdvsdFYv1MByLvJXvK1ycaKXOEwASaiWO99ilmaWx9oLcxTEskndALQOPJR4NePnGsZqPcbSgMwpnOwPsdkbK4htXOTnwnERv6CI0HkP5lpL5clczfOvMEgzIv8CzCZIHbOt6HYHBzDgl477Xyk7wjqW1TrxhpZEyD9uS3XdXNKzIk8py99mnsSplsGqKwX
lea edi, [ebp - 0x76c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
movsb byte es:[edi], byte [esi]
mov esi, str.srkvryql11WNkc5P3dmgIpZZFmpfKXnAm9n5vxGxEYTheAxJaZx7MHj9SD9kvE2GCjMP5smgZ2bBlGTNajV9USwDkTCsQZZQtc0YQ0qscOO5INNpilXiFieDCtA9zryUNU8EXZxPK8dbIEsmyKp4ypzZRyJTc9PPdn1BZLgxmu4ENa7xtC0Y4h0PDybsd6PhGtut8O1t1aQAJXHWP3r11p3OlfyJbasqrGMMjy3Jzg0PROxxxsrIETecaW1KTAR75rRzj6ZXxVmHLjFlyZ359ytb0ULDoP5KzitYMnqNHchgMwQMXQlHkJnBYBkJMxlr3p8adpnnBE4kAWHeRbWI32HjcSeCgd9Wl6x2raYYv314dfqy4xVtrYWtIHR0LzPddsaZAcEkmQvSoB0gO6SSGHUdQORvC6CLBHaZlLmIh7CkYlUldku1UH8oK5GZaFA4WT0IW5zmJii9YkHsOE7aeAp4weFrNoP91D2ENpVPdKhV9MG6
lea edi, [ebp - 0x386c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x56
movsb byte es:[edi], byte [esi]
mov esi, str.ffrK1nP6FznQy8MC7ZvKxuENbjA7cNLOpUPikSlCnLxgaaqvdkGdPawQHWIrTdfdltSX25YXPJSB25EcpGFMSoXNqqcGRnQE016gTcbBcmesZ8yyjoggGETKa9cTOyM9wXrDy5zhYUTcxak6qQmzhf432EQ0sCxL3CUPQtTGGT724mjCWBRzFMYE2D1zPrqtBBFJqNFKAr8POC9yZujPalPZcvTWmnu58o0gS0e0FZj3QbFVkjcMLDwKBhzGrJ4ilrszk9oT5PoJi0RjFRLwkNjet9gIaLeyWT3IiI9bKlJUzjARUDepXcSLeOxw5a3jtqhBWeX9g0vwc3vYt0P6xVI
lea edi, [ebp - 0x1a00]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x76
mov esi, str.7J11KPRe8kIPBSFZX0Q4rsN26kaqmeXfnghKuWZrtseX5tRbOFzrZi47o8hgUkVBoGZlL8n1fhsW2gyNDRBe4jhE5LXfJUMLBDLxyCDTybz5D5a9sirwVwTWbvWpdoDZ5lCXv7pMAp6BNTqtpj5pzWZetShjdh45SEaAb1Pi2slWsfDUluyJxGCN5b0o5m5EXO1Unb2EEnMJzB93OZFs6HyfNMUSycwejdrodk65acT5va4WO5sv1YelZBwe8upH7D9TKuDHHUGuO1gmYgKmp9fijH95YK3obOhB4v1lXCZnQkK4saxCgT1Ysl0fpBQd5Rv5ZQD6hKJdbz9JifVOzDkYIzThH4h8yccHbjJ1EJjvxtmPotMIIDk9fbAH8WQJNaj9sSb9ZWLCZRBDWV9998vmS51xB7mm9ia9fzuwmMysyI7OmxeqofnIBGVXomgo0q1Z2lPvNsm4VQbXDddlaw1
lea edi, [ebp - 0x3498]
mov dword [ebp - 0x50d88], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x49
mov dword [ebp - 0x50d84], 0
mov esi, str.USpDr2Trk1sDGtjXzMSn5bLa4zxqgKfATbHx3d1DVeIhNWyUjrbSctugsCaGQk3cYov2KCAbay47k24RMsWxc8fexlCfytiYGbwJ0kSHJlcUYmUBYHD5BHjOCvrR6Ycx11QOxiJtsYEYCW6Bvl0DsObKZAyHmFnFxly0dNZFrAdq026HRkpjeGxY5bf9pdfeDyv2F2ZPmvnJCNIepG86dAYnMmTnCRk3PMUbdLnKmXSBeJbHJjsJdk6MOLR7tsxwLNHpx8nwDW2jQGdKtEVdkXCVZdOjjQz5tve
mov dword [ebp - 0x50d80], 0
lea edi, [ebp - 0x1080]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x39
lea edi, [ebp - 0x46c]
mov esi, str.GcsvJI2kEIqyNSbnVO8plIikY6Pb73vzmL6mpV06DvlyCSm8t6zZBQD8CfVl7jy1dv7bJk82HJqosDhUaC2CLp9Ph90BiWqlb2TeHFDJCrMOd2SNMwCmbFWoyc6WvlzMa2n0jxKMF2cEEr72YexgD1yZFANvt2hx1QrMXxBOeqlm0UDfc17dcnWmNd9BYOENQulzstWDveJgt0kWGBY4obPNv7tw5KbInq81a
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
movsw word es:[edi], word [esi]
mov esi, str.raqLkkVFqvS9lzBwBI4bDfFq6rh39SnVnYLQs44rFepvmpuUwQ45rLzNdvAriNuzTudgtopkjcDJ75JHiHeIgMBfW8Qso1rSLhdDFpd0CvSwen4rpDlfMlXcCXiQERaB7FzJ1WSgDEBNJZNc3P2k5f5616bNs2p7UKMqWdYa9E8ttUeLnBp25duj1pL0AlDY87sFrV4pvD7DCsXqlfzScsI2tWnTCI8OBYmUYXUzJ0aNavp1lPPsLOqxhpeFeUSFViWIziAVesBGFOjFCJ6TgS32T4kStsNXbbBcxoSd3dIF8OUK81USV1NeYUsTFtXU71pag47bGsg9bEIAh6T8X81WH6Je6153jTsjTvnpUgLZYho31RZAAnA5qWz7UtTkYetgzez0YO97OBYy6U9oaDjCO7qqVCdsppyUfC4huvdCvr5r94LPbb7ZmaFcmAAwKjqYkJ3twJFhnoFjUgxs
lea edi, [ebp - 0x30e8]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x15f0]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x4348]
call fcn.00405820
lea eax, [ebp - 0x4348]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x4348]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x2d3c]
push eax
lea ecx, [ebp - 0x4360]
call fcn.00405820
lea eax, [ebp - 0x4360]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x4360]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x2130]
push eax
lea ecx, [ebp - 0x3df0]
call fcn.00405820
lea eax, [ebp - 0x3df0]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3df0]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x2308]
push eax
lea ecx, [ebp - 0x4390]
call fcn.00405820
lea eax, [ebp - 0x4390]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x4390]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x2634]
push eax
lea ecx, [ebp - 0x43a8]
call fcn.00405820
lea eax, [ebp - 0x43a8]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x43a8]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x564]
push eax
lea ecx, [ebp - 0x43c0]
call fcn.00405820
lea eax, [ebp - 0x43c0]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x43c0]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x249c]
push eax
lea ecx, [ebp - 0x3b68]
call fcn.00405820
lea eax, [ebp - 0x3b68]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3b68]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x1e3c]
push eax
lea ecx, [ebp - 0x3b80]
call fcn.00405820
lea eax, [ebp - 0x3b80]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3b80]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x3a60]
push eax
lea ecx, [ebp - 0x3b98]
call fcn.00405820
lea eax, [ebp - 0x3b98]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3b98]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x3678]
push eax
lea ecx, [ebp - 0x3bb0]
call fcn.00405820
lea eax, [ebp - 0x3bb0]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3bb0]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x1ccc]
push eax
lea ecx, [ebp - 0x3bc8]
call fcn.00405820
lea eax, [ebp - 0x3bc8]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3bc8]
call fcn.00405970
lea eax, [ebp - 0x2f10]
push eax
lea ecx, [ebp - 0x3be0]
call fcn.00405820
lea eax, [ebp - 0x3be0]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3be0]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x1484]
push eax
lea ecx, [ebp - 0x3bf8]
call fcn.00405820
lea eax, [ebp - 0x3bf8]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3bf8]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x76c]
push eax
lea ecx, [ebp - 0x3c10]
call fcn.00405820
lea eax, [ebp - 0x3c10]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3c10]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x386c]
push eax
lea ecx, [ebp - 0x3c28]
call fcn.00405820
lea eax, [ebp - 0x3c28]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3c28]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x1a00]
push eax
lea ecx, [ebp - 0x3c40]
call fcn.00405820
lea eax, [ebp - 0x3c40]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3c40]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x3498]
push eax
lea ecx, [ebp - 0x3c58]
call fcn.00405820
lea eax, [ebp - 0x3c58]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3c58]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x1080]
push eax
lea ecx, [ebp - 0x3c70]
call fcn.00405820
lea eax, [ebp - 0x3c70]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3c70]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x46c]
push eax
lea ecx, [ebp - 0x3c88]
call fcn.00405820
lea eax, [ebp - 0x3c88]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3c88]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x30e8]
push eax
lea ecx, [ebp - 0x3ca0]
call fcn.00405820
lea eax, [ebp - 0x3ca0]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x50d88]
call fcn.00407e30
lea ecx, [ebp - 0x3ca0]
mov byte [ebp - 4], 0
call fcn.00405970
lea eax, [ebp - 0x3a90]
push eax
call fcn.004d4111
add esp, 4
mov byte [ebp - 4], 0x15
call fcn.00402160
mov ecx, dword [ebp - 0x3a80]
test ecx, ecx
sete al
test al, al
jne 0x43cc57
cmp dword [ebp - 0x3a7c], 8
lea eax, [ebp - 0x3a90]
cmovae eax, dword [ebp - 0x3a90]
movzx eax, word [eax + ecx*2 - 2]
cmp eax, 0x5c
je 0x43cc57
cmp eax, 0x2f
je 0x43cc57
push 0x63d88c
lea ecx, [ebp - 0x3a90]
call fcn.00403fa0
push 0x5a66e0
lea ecx, [ebp - 0x3a90]
call fcn.00403fa0
cmp dword [ebp - 0x3a7c], 8
lea eax, [ebp - 0x3a90]
cmovae eax, dword [ebp - 0x3a90]
push eax
call fcn.004c0987
add esp, 4
lea eax, [ebp - 0x4450]
push eax
call fcn.00408f30
mov ecx, eax
call fcn.004115d0
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x50dbc], 0
call fcn.004d07aa
push 0
push eax
lea eax, [ebp - 0x4438]
push eax
call fcn.004c0aec
add esp, 0xc
mov byte [ebp - 4], 0x17
call fcn.00402160
lea eax, [ebp - 0x4468]
push 0x36
push eax
call fcn.00408fb0
mov ecx, eax
call fcn.0041a260
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x18
jb 0x43cce6
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3cb8]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3cb8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x19
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3cb8]
call fcn.004024b0
lea ecx, [ebp - 0x4468]
mov byte [ebp - 4], 0x17
call fcn.004024b0
lea eax, [ebp - 0x4480]
push 0x39
push eax
call fcn.00408fb0
mov ecx, eax
call fcn.0041a260
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x1a
jb 0x43cd41
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3cd0]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3cd0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1b
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3cd0]
mov dword [ebp - 0x50d94], eax
call fcn.004024b0
lea ecx, [ebp - 0x4480]
mov byte [ebp - 4], 0x17
call fcn.004024b0
push str.InstallOpenRun
lea ecx, [ebp - 0x3ce8]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3ce8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1c
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3ce8]
mov dword [ebp - 0x50d90], eax
call fcn.004024b0
mov dword [ebp - 0x50e58], 0
mov dword [ebp - 0x50e54], 0
mov dword [ebp - 0x50e50], 0
mov ecx, 0x43
mov byte [ebp - 4], 0x1d
mov esi, str.z9mmfvEgXyY7mUhBxKfU3hhmfz9HA9JprrXMFuwnrptk034nsGiXmKmPq3ql9zythcfUqaYvGIK8Rgz3RlDyxV6YGKrIiqXeZckcYAZUj9VHk7CHkl1uNsz7JXB7v4qcQUlKzQ8vjRbyQSiPafm2OvE5wQbSa00tlrhAyud2aBbtTBeNPwFJX4VMafPCA5wzK7w6X4r7Dm2nakhLNBALXpcKBQsz2vWlgOxlfbHXHvflIch6po3fwTVSst3suQGdCZf9KZYyy0E
lea edi, [ebp - 0x878]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x878]
push eax
lea ecx, [ebp - 0x3d00]
call fcn.00405820
lea eax, [ebp - 0x3d00]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x50e58]
call fcn.00407e30
lea ecx, [ebp - 0x3d00]
mov byte [ebp - 4], 0x1d
call fcn.00405970
push str.InstallCanInstall
lea ecx, [ebp - 0x3d18]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3d18]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x1f
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3d18]
mov dword [ebp - 0x50da8], eax
mov byte [ebp - 4], 0x1d
call fcn.004024b0
push str.InstallRunThrough
lea ecx, [ebp - 0x3d30]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3d30]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x20
mov eax, dword [eax + 0x1c]
call eax
mov dword [ebp - 0x50db0], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x3d30]
call fcn.004024b0
push str.InstallRunSpecial
lea ecx, [ebp - 0x3d48]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3d48]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x21
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3d48]
mov dword [ebp - 0x50d8c], eax
call fcn.004024b0
mov dword [ebp - 0x50e64], 0
mov dword [ebp - 0x50e60], 0
mov dword [ebp - 0x50e5c], 0
mov ecx, 0x54
mov byte [ebp - 4], 0x22
mov esi, str.PZjGMf6ptk1FVKLIfokQkapqNenP6imwwvgjWfY2JAIHrDebdBOqZqLDVtZTTlTKELpf3Kwy4Ah93EQ2F2w4htUvpNZT6OpJCjwgO6RoC8P8E169TMTtCtatleaWk1uBpee5wlC0qm9nvsvsTtMGOcfvfhpGJoWezaQO1VtjeyFvF1XC4mrJE55Epj88AeWEjMfZnKjZ75JrBVditm5fKOXFeqSasFZArHjgn3jae0Ebe8UCaunRWHtyuO0NmZBObgp91TdIfhQWwss5YRBp3YYis4rOwkxQprKf8AEchxkDJCxQg9w5o5rURU26tz0BTswYzyvw9zw6CqsbhD
lea edi, [ebp - 0x1b54]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1b54]
push eax
lea ecx, [ebp - 0x3d60]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x3d60]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x50e64]
call fcn.00407e30
lea ecx, [ebp - 0x3d60]
mov byte [ebp - 4], 0x22
call fcn.00405970
mov dword [ebp - 0x50d74], 0
mov dword [ebp - 0x50dac], 0
call fcn.0046dd70
cmp dword [ebp + 8], 0
je 0x43cfb7
mov esi, dword [ebp - 0x50d90]
test esi, esi
je 0x43d085
call fcn.00402160
cmp dword [esi + 0x14], 8
jb 0x43cf70
mov esi, dword [esi]
mov eax, 0x588c30
mov cx, word [esi]
cmp cx, word [eax]
jne 0x43cf9b
test cx, cx
je 0x43cf97
mov cx, word [esi + 2]
cmp cx, word [eax + 2]
jne 0x43cf9b
add esi, 4
add eax, 4
test cx, cx
jne 0x43cf75
xor eax, eax
jmp 0x43cfa0
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43d085
mov dword [ebp - 0x50d74], 1
jmp 0x43d085
mov eax, dword [ebp - 0x50d94]
mov dword [ebp - 0x50dac], 1
test eax, eax
je 0x43d085
cmp dword [eax + 0x14], 8
jb 0x43cfd7
mov eax, dword [eax]
mov ecx, 0x588c30
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43d006
test dx, dx
je 0x43d002
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43d006
add eax, 4
add ecx, 4
test dx, dx
jne 0x43cfe0
xor eax, eax
jmp 0x43d00b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43d085
mov dword [ebp - 0x50e40], eax
mov dword [ebp - 0x50e3c], eax
mov dword [ebp - 0x50e38], eax
mov ecx, 0x57
mov byte [ebp - 4], 0x24
mov esi, str.7C0cG9wIm14Zx8mPDieXmHVhVpw78zKfZmDyxwfFvcwlN9lQpgjQEGYNrefrMmrgPiudyWT7yrlCs91FhNqPfCdsEo2hsjg9Pw6hx2jf9zWRE9mqruC7Hlta8lHEWLse0HiTqDYiRZUmFXRwAHJMoRHenFacd1T7PLdJfYwYlwjX3kVnbE2JOiUMv8J6GOKn42THwnosEkKcIPlR9V6T95GYnJiXC52OM473IXf6WV09QiLwHa9KaAWiiMP9WO4YcCItGWJKk9TS5YS8N88vRlRA85PbwgDYekHe8FHVIIeoXiNCq1sj9P59udvOyth43wdqrKsHgxkDDYqAfDAgjOldfg5t0
lea edi, [ebp - 0x1750]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1750]
push eax
lea ecx, [ebp - 0x3d78]
movsw word es:[edi], word [esi]
call fcn.00405820
lea eax, [ebp - 0x3d78]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x50e40]
call fcn.00407e30
lea ecx, [ebp - 0x3d78]
call fcn.00405970
lea ecx, [ebp - 0x50e40]
mov dword [ebp - 0x50d74], 1
mov byte [ebp - 4], 0x22
call fcn.004059b0
mov eax, dword [ebp - 0x50da8]
test eax, eax
je 0x43d0de
cmp dword [eax + 0x14], 8
jb 0x43d097
mov eax, dword [eax]
mov ecx, 0x59e514
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43d0c6
test dx, dx
je 0x43d0c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43d0c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x43d0a0
xor eax, eax
jmp 0x43d0cb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43d0de
call fcn.0046dbf4
mov dword [ebp - 0x50d74], 0
mov dword [ebp - 0x50e70], 0
mov dword [ebp - 0x50e6c], 0
mov dword [ebp - 0x50e68], 0
mov ecx, 0x3e
mov byte [ebp - 4], 0x26
mov esi, str.aFaVf1CQVLJuRvQlDZBni5LsDreFNko18LDlEaYfrG5yQIxgHPbhcB2yJ0rI32p8sI869ZqthFN6fBmFmdaQ6l0wNz2XcAteY81xDEm3rREStRuzmRTWdWxndrvNaJ5h7rpx5g46B1hM9PJAfkCkOvdungIkLc3B2AXx4SYA9MgnsXX17rEjxwJdPCceQG3PqJX0w3dABgAHcgwCEY0mRYZ83QnshMu2HPpOsqZnZkAxky8ene8aVmnAA
lea edi, [ebp - 0x660]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x660]
push eax
lea ecx, [ebp - 0x3d90]
movsw word es:[edi], word [esi]
call fcn.00405820
lea eax, [ebp - 0x3d90]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x50e70]
call fcn.00407e30
lea ecx, [ebp - 0x3d90]
call fcn.00405970
mov eax, dword [ebp - 0x50db0]
test eax, eax
je 0x43d202
cmp dword [eax + 0x14], 8
jb 0x43d15d
mov eax, dword [eax]
mov ecx, 0x59e514
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43d188
test dx, dx
je 0x43d184
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43d188
add eax, 4
add ecx, 4
test dx, dx
jne 0x43d162
xor eax, eax
jmp 0x43d18d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43d202
mov dword [ebp - 0x50e34], eax
mov dword [ebp - 0x50e30], eax
mov dword [ebp - 0x50e2c], eax
mov ecx, 0x4c
mov byte [ebp - 4], 0x28
mov esi, str.kLLzTBOtih3TD1nad9u6FdVgn8rJWLYMIl9xLjNbKSAKQ4auPro3IHsQ165Qru1pMGgqvy2SFyPHRP7Vdr2KN96iz80iP0InNpSlCREu6iWUvpWSQZEPZd2q8iMHHBJYMssDNPzjz0SyGifGQfVf4nE2CsLzy0P3ixmLYSWDjogVldr3iDnso02ITWDJdFtOqkzGM0N4sJ3UdcuvPVRBKZhWRKXKxiKBM2DokdAieac4GPiWj5voyLlHTTVdvYMhIj3n6cFAXQklbBYq9QxbuAkneh8wnNK1mFGHnvvWMRbalu9K
lea edi, [ebp - 0xe38]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe38]
push eax
lea ecx, [ebp - 0x3da8]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x3da8]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x50e34]
call fcn.00407e30
lea ecx, [ebp - 0x3da8]
call fcn.00405970
lea ecx, [ebp - 0x50e34]
mov dword [ebp - 0x50d74], 0
call fcn.004059b0
cmp dword [ebp - 0x50d8c], 0
je 0x43d2e5
mov dword [ebp - 0x50e28], 0
mov dword [ebp - 0x50e24], 0
mov dword [ebp - 0x50e20], 0
mov ecx, 0x75
mov byte [ebp - 4], 0x2a
mov esi, str.Kp8Y1hAEmAc6N6KjoL9ZmZLuqkpTv381Um7MbkfPwrdx0gnwEaM14ZFLazNRRIvLETcZ3xasWXBiwd8mUwWvGIs91GvVXew2APwL65SdJQOZhGDBs6t5QvRkrDmGcQqAvbvIq8nd0LqNZU3TXXl0A32mqkiNwbLXfW5uS1spztoN9mrTkQqtHINresb4Zvrna2LF0NQINT9gFc6TdIdlTpgCqpIgFc1i6Kn09QZtyUn5BFgs0tAP2XYRQClw0B9Cml3DidaSSeC2s8OCE2NvO93WOqUOHQp8g3xaqLOggo2CSlACXmK0yW58ZfUNo0HxCtl6jTkCdrWoLYbIBESlS6L35uBk1rdVGsgvjW6PU6BmYgxSf4vjXhq3GkhgBvkbIpK3WwZQeFN5pLTKj9fRc2N0YAMcC9awta1JseCl8yqzhnIxBKZPmLvCr5IooAXybWWihp4dkFToVDJCP3wAth
lea edi, [ebp - 0x32c0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x32c0]
push eax
lea ecx, [ebp - 0x3dc0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x3dc0]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x50e28]
call fcn.00407e30
lea ecx, [ebp - 0x3dc0]
mov byte [ebp - 4], 0x2a
call fcn.00405970
mov eax, dword [ebp - 0x50d8c]
cmp dword [eax + 0x14], 8
jb 0x43d28b
mov eax, dword [eax]
mov ecx, 0x588c30
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43d2b6
test dx, dx
je 0x43d2b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43d2b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x43d290
xor eax, eax
jmp 0x43d2bb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43d2da
mov eax, dword [ebp - 0x50d98]
cmp dword [eax + 0x40], 0
je 0x43d2da
call fcn.0047078d
mov dword [ebp - 0x50d74], 0
lea ecx, [ebp - 0x50e28]
call fcn.004059b0
mov dword [ebp - 0x50e7c], 0
mov dword [ebp - 0x50e78], 0
mov dword [ebp - 0x50e74], 0
mov ecx, 0x4a
mov byte [ebp - 4], 0x2c
mov esi, str.G07rFGfCrM96xokOlviwEMLXpGdh8n3ozv22h39uzJ2HGEGX7bXc95gf82OILLHpDhH80Tyt8ayL18rlm2ZMYteaOKnfidXxllkx6kXutVImwYlp6EQ5zr908ZpjbMzD3CjYwx7QGrSlevfvyTomKlTneFLc8PiG5XWxRf4DBvvhjMZ5opEFYirSaJl18U7udcyS323iUFRMew3LOwQSG1RnwkFlZePkN0rb0o60fYSrAKKh5pqZiNHB4GkXXzlB5mvcQbBhpPye2mS4zYY4CBIQhKMo39TvUMLDipA
lea edi, [ebp - 0xbcc]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xbcc]
push eax
lea ecx, [ebp - 0x3dd8]
call fcn.00405820
lea eax, [ebp - 0x3dd8]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x50e7c]
call fcn.00407e30
lea ecx, [ebp - 0x3dd8]
mov byte [ebp - 4], 0x2c
call fcn.00405970
cmp dword [ebp - 0x50d74], 0
je 0x43edd0
call fcn.00470595
push 0x588c30
lea ecx, [ebp - 0x3e08]
call fcn.004024f0
push str.InstallRunThrough
lea ecx, [ebp - 0x4258]
mov byte [ebp - 4], 0x2e
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3e08]
push ecx
lea ecx, [ebp - 0x4258]
mov byte [ebp - 4], 0x2f
push ecx
mov eax, dword [eax + 8]
mov ecx, ebx
call eax
lea ecx, [ebp - 0x4258]
call fcn.004024b0
lea ecx, [ebp - 0x3e08]
mov byte [ebp - 4], 0x2c
call fcn.004024b0
push str.PushKeyName
lea ecx, [ebp - 0x3e20]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3e20]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x30
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3e20]
mov byte [ebp - 4], 0x2c
call fcn.004024b0
push str.InstallPushUrl
lea ecx, [ebp - 0x3e38]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3e38]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x31
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3e38]
mov dword [ebp - 0x50d74], eax
mov byte [ebp - 4], 0x2c
call fcn.004024b0
call fcn.00402160
push str.InstallBackPushUrl
lea ecx, [ebp - 0x3e50]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3e50]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x32
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3e50]
mov dword [ebp - 0x50db4], eax
mov byte [ebp - 4], 0x2c
call fcn.004024b0
push str.InstallPush32Url
lea ecx, [ebp - 0x3e68]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3e68]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x33
mov eax, dword [eax + 0x1c]
call eax
mov dword [ebp - 0x50da8], eax
lea ecx, [ebp - 0x3e68]
mov byte [ebp - 4], 0x2c
call fcn.004024b0
push str.InstallPush64Url
lea ecx, [ebp - 0x3e80]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3e80]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x34
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3e80]
mov dword [ebp - 0x50db0], eax
call fcn.004024b0
mov dword [ebp - 0x50dec], 0
mov dword [ebp - 0x50de8], 0
mov dword [ebp - 0x50de4], 0
mov ecx, 0x73
mov byte [ebp - 4], 0x35
mov esi, str.AHm9m9PeP5o8ekMoaHoOYEdi2pEwnr5RGxntNiHjqXhWR5B3xDrSdlyxSY50rGVqHBgR32C4bxtyQqwaCdQOyNikVk5mSaEQVrDWUa08zYngr2XkahfPZkpzx0fM8zQTjlwPs3uVwzEWMNWGHwxoHFaSjDvd4NwztzgGHdkMPmQXuON33XAq7xdQhldw4FhMN2DYRpG2hbEUZS2jfka60ow5hxNEk7JsYHPioEpYMjhCJH7UrG86ItMshWLQEMVuczpofNlqsLrufIp83zO13pHMJmcoKIOHHfdhb4e3lzzZd6skf3YONfPQ6qSHFz9udEVDxz1ICB2idU8cVhc9Y4Z8QCv05El5ZBDKpzjQoHJHbdoHAF6TygLFKssNu6zNlwbksaEQ6ski1BEESaLb2rVGAMdJLmRJn00NMYCmi3pOu9CnbXxsDp5uVR63s0XAMXCPSohFlZM
lea edi, [ebp - 0x2b68]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x2b68]
push eax
lea ecx, [ebp - 0x3e98]
call fcn.00405820
lea eax, [ebp - 0x3e98]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x50dec]
call fcn.00407e30
lea ecx, [ebp - 0x3e98]
mov byte [ebp - 4], 0x35
call fcn.00405970
push str.InstallProgramName
lea ecx, [ebp - 0x3eb0]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3eb0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x37
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3eb0]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallAppDataName
lea ecx, [ebp - 0x3ec8]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3ec8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x38
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3ec8]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallGreenBag
lea ecx, [ebp - 0x3ee0]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3ee0]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x39
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3ee0]
mov byte [ebp - 4], 0x35
call fcn.004024b0
call fcn.0046f737
push str.InstallRunParam
lea ecx, [ebp - 0x3ef8]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3ef8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x3a
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3ef8]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallFileName
lea ecx, [ebp - 0x3f10]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3f10]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x3b
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3f10]
mov byte [ebp - 4], 0x35
mov ebx, eax
call fcn.004024b0
push str.InstallTempName
lea ecx, [ebp - 0x3f28]
call fcn.004024f0
mov esi, dword [ebp - 0x50d7c]
lea ecx, [ebp - 0x3f28]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3c
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3f28]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallCreateProcess
lea ecx, [ebp - 0x3f40]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x3f40]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3d
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3f40]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallWay
lea ecx, [ebp - 0x3f58]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x3f58]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x3e
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3f58]
mov dword [ebp - 0x50de0], eax
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallRandName
lea ecx, [ebp - 0x3f70]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x3f70]
mov byte [ebp - 4], 0x3f
mov eax, dword [eax + 0x1c]
push ecx
mov ecx, esi
call eax
lea ecx, [ebp - 0x3f70]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallMDDesktopBrowser
lea ecx, [ebp - 0x3f88]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x3f88]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x40
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3f88]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallLastSend
lea ecx, [ebp - 0x3fa0]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x3fa0]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x41
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3fa0]
mov dword [ebp - 0x50ddc], eax
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallDragName
lea ecx, [ebp - 0x41f8]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x41f8]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x42
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x41f8]
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallSwapRefer
lea ecx, [ebp - 0x4378]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x4378]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x43
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x4378]
mov dword [ebp - 0x50dd8], eax
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.SwapReferOffsetIndex
lea ecx, [ebp - 0x4318]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x4318]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x44
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x4318]
mov dword [ebp - 0x50dd4], eax
mov byte [ebp - 4], 0x35
call fcn.004024b0
push str.InstallSfdownloadName
lea ecx, [ebp - 0x4300]
call fcn.004024f0
mov eax, dword [esi]
lea ecx, [ebp - 0x4300]
push ecx
mov ecx, esi
mov byte [ebp - 4], 0x45
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x4300]
mov dword [ebp - 0x50dcc], eax
call fcn.004024b0
mov dword [ebp - 0x50df8], 0
mov dword [ebp - 0x50df4], 0
mov dword [ebp - 0x50df0], 0
mov ecx, 0x4d
mov byte [ebp - 4], 0x46
mov esi, str.ntBOGfeCtQFkeKsoZeIjK5J8BOWZK5A2BaqAt6pXvKbeVvfhOmov8JBxWXJBPAAxoZWS3uDWRw4OIeZF8uwmtCBUNiwtKwA3BEpyqeKV6KMoYqrJq1K9vTd8kPwf75nuhWpSggY0gBoKD5hGSwIKhLvHrRPOX4k5toIxOlo1OKuTYNbAE7HLVufQ2kThAY8riuH2c0kOJgQTEGLIzTl0nS2Mr7BIM7waL3WJCks6HalscNuJaD0JJ7XrM4tKsawnWMD6hgtVfExrs3P2BfUNJv4sYj14M2rnKeTH7oeVQXYkOi8YhYE2QQ
lea edi, [ebp - 0xd04]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xd04]
push eax
lea ecx, [ebp - 0x42e8]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x42e8]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x50df8]
call fcn.00407e30
lea ecx, [ebp - 0x42e8]
mov byte [ebp - 4], 0x46
call fcn.00405970
test ebx, ebx
jne 0x43d90b
push str.InstallRunExe
lea ecx, [ebp - 0x42d0]
call fcn.004024f0
mov ecx, dword [ebp - 0x50d7c]
lea edx, [ebp - 0x42d0]
push edx
mov byte [ebp - 4], 0x48
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x42d0]
mov byte [ebp - 4], 0x46
call fcn.004024b0
call fcn.004724b2
lea ecx, [ebp - 0x50ec4]
call fcn.004c035c
lea ecx, [ebp - 0x50ec4]
mov byte [ebp - 4], 0x49
call fcn.004c054c
test eax, eax
je 0x43d93a
mov eax, dword [ebp - 0x50db0]
test eax, eax
je 0x43d951
jmp 0x43d94b
mov ecx, dword [ebp - 0x50da8]
test ecx, ecx
mov eax, dword [ebp - 0x50d74]
cmovne eax, ecx
mov dword [ebp - 0x50d74], eax
call fcn.0046f5bc
mov dword [ebp - 0x50e4c], 0
mov dword [ebp - 0x50e48], 0
mov dword [ebp - 0x50e44], 0
mov ecx, 0x48
mov byte [ebp - 4], 0x4a
mov esi, str.eKCxFt6KB9YtXBBN6Txt8IvIQk793dQba9ItoCtpSMRzmnRkw1q4poU7FRVN5ewCntjeujwyi6j0iYEs1TA1ypLJqxcC4sRCV747GrObaOduSxBvauHW6dJ6NC2Y01ywcXchVg0OBoJNm8HO0wml79A5yOt4djnsTzPg00rQ2kKv7ROHuDeNAnNY5f8qRbYSAV6DTJhVDrbrlJji4rA2Zlp1tijAjyEOtFmFd1TNr109BWVpZO7KVuG38dfqiFUG7eeBBk2TbQ9Gh47y0xBeKkBMX6MwkPtB4o
lea edi, [ebp - 0xf5c]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xf5c]
push eax
lea ecx, [ebp - 0x42b8]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x42b8]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [ebp - 0x50e4c]
call fcn.00407e30
lea ecx, [ebp - 0x42b8]
mov byte [ebp - 4], 0x4a
call fcn.00405970
xor edi, edi
mov dword [ebp - 0x50d8c], 0
push 0x63d8a0
lea ecx, [ebp - 0x4000]
mov dword [ebp - 0x50d94], 0
mov dword [ebp - 0x50d90], edi
call fcn.004024f0
push 0x63d8a0
lea ecx, [ebp - 0x4420]
mov byte [ebp - 4], 0x4c
call fcn.004024f0
mov byte [ebp - 4], 0x4d
call fcn.00402160
mov ebx, dword [ebp - 0x50de0]
test ebx, ebx
je 0x43db17
mov esi, dword [ebx + 0x14]
cmp esi, 8
jb 0x43da27
mov eax, dword [ebx]
jmp 0x43da29
mov eax, ebx
mov ecx, str.GreenBag
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43da56
test dx, dx
je 0x43da52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43da56
add eax, 4
add ecx, 4
test dx, dx
jne 0x43da30
xor eax, eax
jmp 0x43da5b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43da69
call fcn.00470317
jmp 0x43db17
cmp esi, 8
jb 0x43da72
mov eax, dword [ebx]
jmp 0x43da74
mov eax, ebx
mov ecx, str.DestopShort
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43daa6
test dx, dx
je 0x43daa2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43daa6
add eax, 4
add ecx, 4
test dx, dx
jne 0x43da80
xor eax, eax
jmp 0x43daab
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43db7f
lea ecx, [ebp - 0x50da4]
call fcn.00436450
mov ecx, 0x49
mov byte [ebp - 4], 0x4e
mov esi, str.heRNlS7xTJcJhN7KuOowp11Ly4LYraHtw6x8T8vJasYb4drC3Vq3GqdUJoyDgFlsAfmpxuqAb9xL8HdGPk6x05iICHF464MbxuTyuJlJOttIa8zW8d1IxxgfN9Fr0qgPKpEC4G37VJKRffzLSTXFNpXUCf1j7o6X27TETTHqGcsp22JPdJeLytPsz0gVDvFKcTuMSOV1PMkW9Ab9Z9CjVuJp5VUCvIwaSwHMflwpr6M94YkG7kNYdh0e0zPovr3czZZ08B48eXiFLeXIttun5F7Io492DLXNgAUG
lea edi, [ebp - 0x11a8]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x11a8]
push eax
lea ecx, [ebp - 0x42a0]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x42a0]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x50da4]
call fcn.00407e30
lea ecx, [ebp - 0x42a0]
call fcn.00405970
lea ecx, [ebp - 0x50da4]
mov byte [ebp - 4], 0x4d
call fcn.004059b0
mov esi, 1
call fcn.00402160
call fcn.00474366
mov eax, dword [ebp - 0x50ddc]
test eax, eax
je 0x43dd38
cmp dword [eax + 0x14], 8
jb 0x43db3c
mov eax, dword [eax]
mov ecx, 0x588c30
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43dd24
test dx, dx
je 0x43db6b
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43dd24
add eax, 4
add ecx, 4
test dx, dx
jne 0x43db41
xor eax, eax
xor ebx, ebx
test eax, eax
cmove ebx, esi
mov dword [ebp - 0x50dbc], ebx
jmp 0x43dd3a
cmp esi, 8
jb 0x43db88
mov eax, dword [ebx]
jmp 0x43db8a
mov eax, ebx
mov ecx, str.RunMemDll
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43dbb6
test dx, dx
je 0x43dbb2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43dbb6
add eax, 4
add ecx, 4
test dx, dx
jne 0x43db90
xor eax, eax
jmp 0x43dbbb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43dc23
lea ecx, [ebp - 0x50da4]
call fcn.00436450
mov ecx, 0x5d
mov byte [ebp - 4], 0x50
mov esi, str.lqZ3OUiAFAe7STfnyomtBW1tgNuSM881bAHkMKNVAFS7JLSbDVSuokLyitx9vooTmW55nXqotejAW7GnCyvGzQEmaZ8RsB5RYDBaZmBYQEL13SdVtwRuceEnRM5Kzzfq2WnUd0WtZOYJprQrGA2feJyEuUEDrh2KM34wX7zeAMgI438RDRxJwzCH6VmLVXgaxCsnBOBwxXXVCH1D70mxMgM5s58FHDTRHfpirKNZ4Omdr9e0GrvEkaEEE3zUsfOvVFhVASrA6vvhfQGz3BFlc6I8t0kKKiRnYOFoQxhCeN6AvRcbh7gFPdjQINOk8mIUlXtJBK2u1m2o46vo5bkEUwhZrbx5rxQVm0lBWttH7Ko6Y2DDVuJu
lea edi, [ebp - 0x1fb4]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1fb4]
push eax
lea ecx, [ebp - 0x4288]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x4288]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x50da4]
call fcn.00407e30
lea ecx, [ebp - 0x4288]
call fcn.00405970
mov dword [ebp - 0x50d8c], 1
jmp 0x43db08
mov ecx, ebx
mov esi, 0x588ebc
call fcn.00402580
nop
mov cx, word [eax]
cmp cx, word [esi]
jne 0x43dc56
test cx, cx
je 0x43dc52
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x43dc56
add eax, 4
add esi, 4
test cx, cx
jne 0x43dc30
xor eax, eax
jmp 0x43dc5b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43dcc5
lea ecx, [ebp - 0x50da4]
call fcn.00436450
mov ecx, 0x38
mov byte [ebp - 4], 0x52
mov esi, str.inrF4MGn8z4JAbI3SIVqGbD2r1Oi591YonvTcmrBIzq69VrtaoUVVEMA2DWQLAA3NRkDGHO4R9ttBmdvf4VxKQqlfKUnH4HtGFhqRyt5i71zV4PrfQ4bP87xhSwX8fzf85DqciG5KMdvcwEabMA3J7xXVFxMlYsBUCTx6nKyrBuz40Bq4t4hf1dyBGlwhVXJSAPvZM5HweK94KsDVhRvIkzcx9bgga7wl1
lea edi, [ebp - 0x384]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x4270]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x4270]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0x50da4]
call fcn.00407e30
lea ecx, [ebp - 0x4270]
call fcn.00405970
mov dword [ebp - 0x50d94], 1
jmp 0x43db08
mov ecx, ebx
mov esi, str.RunSfdownload
call fcn.00402580
mov cx, word [eax]
cmp cx, word [esi]
jne 0x43dd0a
test cx, cx
je 0x43dcf3
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x43dd0a
add eax, 4
add esi, 4
test cx, cx
jne 0x43dcd1
xor eax, eax
mov esi, 1
test eax, eax
cmove edi, esi
mov dword [ebp - 0x50d90], edi
jmp 0x43db1c
sbb eax, eax
mov esi, 1
or eax, 1
test eax, eax
cmove edi, esi
mov dword [ebp - 0x50d90], edi
jmp 0x43db1c
sbb eax, eax
xor ebx, ebx
or eax, 1
test eax, eax
cmove ebx, esi
mov dword [ebp - 0x50dbc], ebx
jmp 0x43dd3a
xor ebx, ebx
mov dword [ebp - 0x50e04], 0
mov dword [ebp - 0x50e00], 0
mov dword [ebp - 0x50dfc], 0
mov ecx, 0x6a
mov byte [ebp - 4], 0x54
mov esi, str.MpNxucXd5rj8WufELrwUP7xugRqWkbbWKNhSAeRfFBoIJrJsnkDy9Emmffu5fP9ydKhFFwTLpta7QvA9IvWn0eOSyazJxpEhcW4j6WmEtjZQqZ4QHj0Um3DTcFXTV53P10ITeyv9HE29XxlgaWXaQ4cIDwDxVvMCXTBs6Ss0KH4pFKmXlyjWa2Eh4cCzPBpffkhhWNwIu4OF2pBoRmIQK651Z0fOIvYP9UsGN34I1YZJTBoWZfCoEx7LsK49BJZe2tloENfSPw18UBIftQYH2vp4fk7JlFYH7WeknU3dWRhD52TxPJI4XRx3xuamnxULRUh0De9Ip9z9q65EDeGwdCjoGEHeoUUmpv8Dxu4d8Nm5fh4NUN1uoiXGYC8sMAyb5KULQBuvXE4yyQCtjU7ZK20EJdQ50c5XQkfkmTWi
lea edi, [ebp - 0x27e0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x27e0]
push eax
lea ecx, [ebp - 0x4240]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x4240]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [ebp - 0x50e04]
call fcn.00407e30
lea ecx, [ebp - 0x4240]
mov byte [ebp - 4], 0x54
call fcn.00405970
mov eax, dword [ebp - 0x50dd8]
test eax, eax
je 0x43ddc4
cmp dword [eax + 0x14], 8
jb 0x43ddb8
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x4000]
call fcn.00402600
call fcn.00471a4c
mov eax, dword [ebp - 0x50dd4]
test eax, eax
je 0x43dde4
cmp dword [eax + 0x14], 8
jb 0x43dddb
mov eax, dword [eax]
push eax
call fcn.004e71c9
add esp, 4
test ebx, ebx
je 0x43ddf5
mov eax, dword [ebp - 0x50d98]
mov dword [eax + 0x34], 1
mov dword [ebp - 0x50e10], 0
mov dword [ebp - 0x50e0c], 0
mov dword [ebp - 0x50e08], 0
mov ecx, 0x44
mov byte [ebp - 4], 0x56
mov esi, str.W2PojtIuJAJCwpmP2jDKM7GlH3OBXVs9UBPtrIScKp3mUQoIsjkZVUYuwV7azC4DUvWqCKjz5oidSDXUdqGXNoNiACFyPB6c4ETKT3QYjEZpeQdPmq2WE7Xd46bcvDvPJyMTvMXgK1ER9kUR1c1ljQif9xctnGDQUTuBoyBcjVKyVd8EyxqrD1aOsnBRtIe8RrI0DmQI622SmRzbJeJlwCJEKCzUknzpdwIwTDihJW4RVjWLBTTfVU0iDfOpl7r7BUN8gANyKirbArD
lea edi, [ebp - 0x988]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x988]
push eax
lea ecx, [ebp - 0x4228]
call fcn.00405820
lea eax, [ebp - 0x4228]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [ebp - 0x50e10]
call fcn.00407e30
lea ecx, [ebp - 0x4228]
mov byte [ebp - 4], 0x56
call fcn.00405970
mov eax, dword [ebp - 0x50d74]
test eax, eax
je 0x43ed6e
cmp dword [eax + 0x14], 8
jb 0x43de76
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3aa8]
call fcn.004024f0
cmp dword [ebp - 0x3a94], 8
lea eax, [ebp - 0x3aa8]
mov byte [ebp - 4], 0x58
cmovae eax, dword [ebp - 0x3aa8]
push eax
lea eax, [ebp - 0x4018]
push eax
call fcn.004cff6b
add esp, 8
mov byte [ebp - 4], 0x59
call fcn.00472c99
xor eax, eax
mov dword [ebp - 0x3aac], 7
push 0xffffffffffffffff
push eax
mov word [ebp - 0x3ac0], ax
lea ecx, [ebp - 0x3ac0]
lea eax, [ebp - 0x3a90]
mov dword [ebp - 0x3ab0], 0
push eax
call fcn.004028b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x4018]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [ebp - 0x3ac0]
call fcn.004043c0
mov bl, 1
call fcn.004cc652
xor ecx, ecx
movzx ebx, bl
test eax, eax
mov dword [ebp - 0x50e1c], ecx
mov dword [ebp - 0x50e18], ecx
cmovne ebx, ecx
mov dword [ebp - 0x50e14], ecx
mov ecx, 0x38
mov byte [ebp - 4], 0x5b
mov esi, str.cmwlYeXrSUofPTsJSZBrhPaFc3RcjfKcDBJ7pnHESv2zayoiuPIthLTXDTBdJlZSni0BYOURSgMABKAzUXBBH98KOkzFqN2bKwfd0nEH2m5bDQVqI5mUPCZPmjq5McxQqFnCF6axjv6I8uZ8Gyqx1S96vHT0Ajyr38m9MObwCY32qD5fjlDUOlQCVwAUeQPbnmh4rTtVmM40DqgEvsyWYO4o2ltYWUAXb
lea edi, [ebp - 0x2a0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x2a0]
push eax
lea ecx, [ebp - 0x4210]
movsw word es:[edi], word [esi]
call fcn.00405820
lea eax, [ebp - 0x4210]
mov byte [ebp - 4], 0x5c
push eax
lea ecx, [ebp - 0x50e1c]
call fcn.00407e30
lea ecx, [ebp - 0x4210]
mov byte [ebp - 4], 0x5b
call fcn.00405970
test bl, bl
je 0x43df92
cmp dword [ebp - 0x3aac], 8
lea eax, [ebp - 0x3ac0]
cmovae eax, dword [ebp - 0x3ac0]
push eax
call fcn.004ce0a5
add esp, 4
cmp dword [ebp - 0x3aac], 8
lea eax, [ebp - 0x3ac0]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x3ac0]
push eax
call edi
test eax, eax
mov esi, 0
mov eax, 1
cmovne esi, eax
call fcn.00470612
cmp dword [ebp - 0x50d8c], 0
je 0x43e13d
push 0x588c30
lea ecx, [ebp - 0x41c8]
call fcn.004024f0
push str.DownloadFlag
lea ecx, [ebp - 0x41e0]
mov byte [ebp - 4], 0x5d
call fcn.004024f0
mov ebx, dword [ebp - 0x50d7c]
lea ecx, [ebp - 0x41c8]
push ecx
lea ecx, [ebp - 0x41e0]
mov byte [ebp - 4], 0x5e
push ecx
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
lea ecx, [ebp - 0x41e0]
call fcn.004024b0
lea ecx, [ebp - 0x41c8]
mov byte [ebp - 4], 0x5b
call fcn.004024b0
push 0x588c30
lea ecx, [ebp - 0x4198]
call fcn.004024f0
push str.InstallFlag
lea ecx, [ebp - 0x41b0]
mov byte [ebp - 4], 0x5f
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x4198]
push ecx
lea ecx, [ebp - 0x41b0]
mov byte [ebp - 4], 0x60
push ecx
mov eax, dword [eax + 8]
mov ecx, ebx
call eax
lea ecx, [ebp - 0x41b0]
call fcn.004024b0
lea ecx, [ebp - 0x4198]
mov byte [ebp - 4], 0x5b
call fcn.004024b0
lea eax, [ebp - 0x3aa8]
push eax
lea eax, [ebp - 0x4168]
push eax
call fcn.004cd4ec
add esp, 8
lea ecx, [ebp - 0x50d75]
mov byte [ebp - 4], 0x61
call fcn.0046b130
sub esp, 0x18
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x4168]
mov ecx, esp
push eax
call fcn.00436420
lea ecx, [ebp - 0x50d75]
call fcn.00407f60
push 0x588c30
lea ecx, [ebp - 0x4180]
call fcn.004024f0
push str.InstallRunFinish
lea ecx, [ebp - 0x4330]
mov byte [ebp - 4], 0x63
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x4180]
push ecx
lea ecx, [ebp - 0x4330]
mov byte [ebp - 4], 0x64
push ecx
mov eax, dword [eax + 8]
mov ecx, ebx
call eax
lea ecx, [ebp - 0x4330]
call fcn.004024b0
lea ecx, [ebp - 0x4180]
call fcn.004024b0
lea ecx, [ebp - 0x50d75]
call fcn.00402160
lea ecx, [ebp - 0x4168]
call fcn.00405970
jmp 0x43ed42
cmp dword [ebp - 0x50d94], 0
je 0x43e24a
push 0x588d1c
lea ecx, [ebp - 0x3b08]
call fcn.004024f0
lea eax, [ebp - 0x4498]
mov byte [ebp - 4], 0x65
push eax
call fcn.00408f30
mov ecx, eax
call fcn.00411440
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x3b08]
mov byte [ebp - 4], 0x66
call fcn.004043c0
lea ecx, [ebp - 0x4498]
mov byte [ebp - 4], 0x65
call fcn.004024b0
push str.__RunHP
lea ecx, [ebp - 0x3b08]
call fcn.00403fa0
cmp dword [ebp - 0x3a94], 8
lea eax, [ebp - 0x3aa8]
lea ecx, [ebp - 0x3b08]
cmovae eax, dword [ebp - 0x3aa8]
push eax
call fcn.00403fa0
cmp dword [ebp - 0x3af4], 8
lea eax, [ebp - 0x3b08]
cmovae eax, dword [ebp - 0x3b08]
push eax
call fcn.004c13d5
add esp, 4
lea ecx, [ebp - 0x4138]
push 0x588c30
call fcn.004024f0
push str.InstallRunFinish
lea ecx, [ebp - 0x4150]
mov byte [ebp - 4], 0x67
call fcn.004024f0
mov ecx, dword [ebp - 0x50d7c]
lea edx, [ebp - 0x4138]
push edx
lea edx, [ebp - 0x4150]
mov byte [ebp - 4], 0x68
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
lea ecx, [ebp - 0x4150]
call fcn.004024b0
lea ecx, [ebp - 0x4138]
call fcn.004024b0
lea ecx, [ebp - 0x3b08]
call fcn.004024b0
jmp 0x43ed42
cmp dword [ebp - 0x50d90], 0
je 0x43e5a7
lea eax, [ebp - 0x3a90]
push eax
lea ecx, [ebp - 0x3ad8]
call fcn.004040b0
push str.sfdownload.exe
lea ecx, [ebp - 0x3ad8]
mov byte [ebp - 4], 0x69
call fcn.00403fa0
lea ecx, [ebp - 0x3ad8]
call fcn.00402580
push eax
call edi
test eax, eax
jne 0x43e355
push str.0KIAzxDogH5bm4zg5f
push str.0KIAzxDogH5bm4zg5f
call fcn.00408f30
mov ecx, eax
call fcn.00405ee0
push eax
call fcn.004d92ce
add esp, 0xc
mov edi, eax
push str.0KIAzxDogH5bm4zg5f
push str.0KIAzxDogH5bm4zg5f
call fcn.00408f30
mov ecx, eax
call fcn.00405ee0
push eax
call fcn.004d926a
add esp, 0xc
lea ecx, [ebp - 0x3b20]
mov esi, eax
push 0x5a2598
call fcn.00405820
mov ebx, dword [ebp - 0x3b10]
xor ecx, ecx
xor edx, edx
mov byte [ebp - 4], 0x6a
test edi, edi
je 0x43e327
nop word [eax + eax]
cmp dword [ebp - 0x3b0c], 0x10
lea eax, [ebp - 0x3b20]
cmovae eax, dword [ebp - 0x3b20]
mov al, byte [ecx + eax]
inc ecx
xor byte [edx + esi], al
xor eax, eax
cmp ecx, ebx
cmovge ecx, eax
inc edx
cmp edx, edi
jb 0x43e300
cmp dword [ebp - 0x3ac4], 8
lea eax, [ebp - 0x3ad8]
push edi
cmovae eax, dword [ebp - 0x3ad8]
push esi
push eax
call fcn.004ceb8e
add esp, 0xc
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x3b20]
call fcn.00405970
lea eax, [ebp - 0x3a90]
push eax
lea ecx, [ebp - 0x3af0]
call fcn.004040b0
mov eax, dword [ebp - 0x50dcc]
mov byte [ebp - 4], 0x6b
test eax, eax
je 0x43e390
cmp dword [eax + 0x14], 8
jb 0x43e37d
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3af0]
call fcn.00403fa0
push str..exe
jmp 0x43e395
push str.sfdownload.exe
lea ecx, [ebp - 0x3af0]
call fcn.00403fa0
cmp dword [ebp - 0x3adc], 8
lea ecx, [ebp - 0x3af0]
lea eax, [ebp - 0x3ad8]
cmovae ecx, dword [ebp - 0x3af0]
cmp dword [ebp - 0x3ac4], 8
push ecx
cmovae eax, dword [ebp - 0x3ad8]
push eax
call fcn.004ce065
cmp dword [ebp - 0x3ac4], 8
lea eax, [ebp - 0x3ad8]
cmovae eax, dword [ebp - 0x3ad8]
push eax
call fcn.004ce493
cmp dword [ebp - 0x3adc], 8
lea eax, [ebp - 0x3af0]
cmovae eax, dword [ebp - 0x3af0]
push eax
call fcn.004ce493
add esp, 0x10
lea ecx, [ebp - 0x3a78]
push 0x588d1c
call fcn.004024f0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x3af0]
mov byte [ebp - 4], 0x6c
push eax
lea ecx, [ebp - 0x3a78]
call fcn.004043c0
push 0x5a7f8c
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0x588d1c
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x3aa8]
push eax
lea ecx, [ebp - 0x3a78]
call fcn.004043c0
push 0x588d1c
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0x559db0
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0x588d1c
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x3ac0]
push eax
lea ecx, [ebp - 0x3a78]
call fcn.004043c0
push 0x588d1c
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0x559db0
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0x588d1c
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
push 0x588d1c
lea ecx, [ebp - 0x3a78]
call fcn.00403fa0
cmp dword [ebp - 0x3a64], 8
lea eax, [ebp - 0x3a78]
cmovae eax, dword [ebp - 0x3a78]
push eax
push 0x63d898
call fcn.004cc893
cmp dword [ebp - 0x3a64], 8
lea eax, [ebp - 0x3a78]
cmovae eax, dword [ebp - 0x3a78]
push eax
call fcn.004c13d5
add esp, 0xc
lea ecx, [ebp - 0x4108]
push 0x588c30
call fcn.004024f0
push str.InstallRunFinish
lea ecx, [ebp - 0x4120]
mov byte [ebp - 4], 0x6d
call fcn.004024f0
mov ecx, dword [ebp - 0x50d7c]
lea edx, [ebp - 0x4108]
push edx
lea edx, [ebp - 0x4120]
mov byte [ebp - 4], 0x6e
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
lea ecx, [ebp - 0x4120]
call fcn.004024b0
lea ecx, [ebp - 0x4108]
call fcn.004024b0
lea ecx, [ebp - 0x3a78]
call fcn.004024b0
lea ecx, [ebp - 0x3af0]
call fcn.004024b0
lea ecx, [ebp - 0x3ad8]
call fcn.004024b0
jmp 0x43ed42
test esi, esi
jne 0x43ec44
lea ecx, [ebp - 0x50da4]
call fcn.00436450
mov ecx, 0x37
mov byte [ebp - 4], 0x6f
mov esi, str.qrQRhOqXHDygcQUsgfmZOx08wIfDTTzelQ3NqRO0xuXk8ag55J2e9j8roK8dZ3ig0KCoL9eXPjyVadx3kZi85aiODnEmRShE97fc6pE0bkZfhijfT0ZK4T3MhYPFVGrI9Uysd0YwBNYKBDxr2y9RESNqjpYLVcdPsKKyy15672kCodNKZcztiMNYp9W6BRBAOCg1gHbN0wvP0PduumJHqomb3lo
lea edi, [ebp - 0x1bc]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x40f0]
call fcn.00405820
lea eax, [ebp - 0x40f0]
mov byte [ebp - 4], 0x70
push eax
lea ecx, [ebp - 0x50da4]
call fcn.00407e30
lea ecx, [ebp - 0x40f0]
mov byte [ebp - 4], 0x6f
call fcn.00405970
lea ecx, [ebp - 0x50e94]
call fcn.00402350
lea ecx, [ebp - 0x3a90]
mov byte [ebp - 4], 0x71
call fcn.00402580
push eax
lea ecx, [ebp - 0x3aa8]
call fcn.00402580
push eax
lea ecx, [ebp - 0x50e94]
call fcn.00402430
movzx esi, al
lea ecx, [ebp - 0x50e94]
mov dword [ebp - 0x50d74], esi
call fcn.00402420
lea ecx, [ebp - 0x50da4]
mov byte [ebp - 4], 0x5b
call fcn.004059b0
test esi, esi
jne 0x43ec44
lea ecx, [ebp - 0x50dc8]
call fcn.00436450
mov ecx, 0x5b
mov byte [ebp - 4], 0x72
mov esi, str.E9m1RaZntkpKfuDf02P6QAo9pkyz8SRfFo5RqU07sxJAmfiTmwyomu1vMvWPgL1iiAHm2TjwjbiPeJcm1g7D3rOgQLXDy2JGl0mDdCH5P4z4iX8N5EV5f4ZLZfUHKv0nkYkKSHmvbYr2A8s5SRGFrSQGxRhZdpOojVWcjPCxarx2PIXqbImAdRuq5rKbuBfmvU8C0teOihUn6zcHrBB61GpSRaGyHXVEU8cxBRQuWbdvwxMuELfWPGJx96nrqCexWIPcYms6JUUfOZrNQRNvZaMR5X37eHF9cmBlndRP7al8y9D4qrPJ0SwFOK8g5MIB8hOjlhEYj6thPUSA2oB137jceK1S9Kx4mkCuvndfgLEyo
lea edi, [ebp - 0x1318]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1318]
push eax
lea ecx, [ebp - 0x40d8]
movsw word es:[edi], word [esi]
call fcn.00405820
lea eax, [ebp - 0x40d8]
mov byte [ebp - 4], 0x73
push eax
lea ecx, [ebp - 0x50dc8]
call fcn.00407e30
lea ecx, [ebp - 0x40d8]
mov byte [ebp - 4], 0x72
call fcn.00405970
lea eax, [ebp - 0x3aa8]
push eax
lea eax, [ebp - 0x44b0]
push eax
call fcn.004cd4ec
add esp, 8
mov ecx, eax
call fcn.00459140
lea edx, [ebp - 0x4e10]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x43e6e3
lea ecx, [ebp - 0x44b0]
call fcn.00405970
lea eax, [ebp - 0x3a90]
push eax
lea eax, [ebp - 0x44c8]
push eax
call fcn.004cd4ec
add esp, 8
mov ecx, eax
call fcn.00459140
lea edx, [ebp - 0x4c10]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x43e720
lea ecx, [ebp - 0x44c8]
call fcn.00405970
lea ecx, [ebp - 0x50d70]
call fcn.004d9878
sub esp, 0x300
mov byte [ebp - 4], 0x74
mov edi, esp
lea esi, [ebp - 0x4e10]
mov ecx, 0xc0
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x50d70]
call fcn.004d98c8
call fcn.00402160
lea ecx, [ebp - 0x50d70]
call fcn.004da188
lea ecx, [ebp - 0x47f8]
call fcn.00436610
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00402160
lea ecx, [ebp - 0x50d70]
call fcn.004d9ee7
test eax, eax
je 0x43e7b7
call fcn.004711e7
lea eax, [ebp - 0x47f8]
push eax
lea ecx, [ebp - 0x50d70]
call fcn.004d9c6a
push 0x64
call ebx
lea ecx, [ebp - 0x50d70]
call fcn.004d9ef3
test eax, eax
je 0x43e788
call fcn.0046dbf4
lea eax, [ebp - 0x47f8]
push eax
lea ecx, [ebp - 0x50d70]
call fcn.004d9c6a
movsd xmm0, qword [ebp - 0x44e8]
lea ecx, [ebp - 0x50da4]
movsd qword [ebp - 0x50dd0], xmm0
call fcn.00436450
mov ecx, 0x33
mov byte [ebp - 4], 0x75
mov esi, str.UEWduTFOl9CrsCZ7tcnb5omNFPOU5prACSjDpKLF1AStgyy1CTsawbJXFecLguPb8tG2gs6OsmrRyNRUhLsgBUnHw1gUjI2T80ftTvZ4K4d57adv2uJrNTnKJn4iUnDtlqTquOkwRbhOF1RshbOxgApUoFmd2e838UMBBGHfg33dBWJnE5AM1N49sGwQ3CW2rZQL2fYlLjFJh8
lea edi, [ebp - 0xe0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x40c0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x40c0]
mov byte [ebp - 4], 0x76
push eax
lea ecx, [ebp - 0x50da4]
call fcn.00407e30
lea ecx, [ebp - 0x40c0]
call fcn.00405970
movsd xmm1, qword [ebp - 0x44f0]
movsd xmm0, qword [ebp - 0x50dd0]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x43e873
ucomisd xmm0, qword [0x5bea48]
lahf
test ah, 0x44
jnp 0x43e894
mov esi, 1
jmp 0x43e89a
ucomisd xmm0, qword [0x5bea48]
lahf
test ah, 0x44
jnp 0x43e894
ucomisd xmm1, qword [0x5bea50]
mov esi, 1
lahf
test ah, 0x44
jnp 0x43e89a
mov esi, dword [ebp - 0x50d74]
lea ecx, [ebp - 0x50da4]
call fcn.004059b0
lea ecx, [ebp - 0x50d70]
call fcn.00402160
lea ecx, [ebp - 0x50dc8]
mov byte [ebp - 4], 0x5b
call fcn.004059b0
test esi, esi
jne 0x43ec44
push 0x7d0
call ebx
call fcn.00402160
lea ecx, [ebp - 0x3ac0]
call fcn.00402580
push eax
lea eax, [ebp - 0x44e0]
push eax
call fcn.004cff6b
add esp, 8
lea ecx, [ebp - 0x44e0]
call fcn.004024b0
lea eax, [ebp - 0x3aa8]
push eax
lea ecx, [ebp - 0x3b38]
call fcn.004040b0
mov edi, dword [ebp - 0x50db4]
mov byte [ebp - 4], 0x77
test edi, edi
je 0x43e92c
mov ecx, edi
call fcn.00402580
push eax
lea ecx, [ebp - 0x3b38]
call fcn.00402600
call fcn.00402160
lea ecx, [ebp - 0x50ea0]
call fcn.00402350
lea ecx, [ebp - 0x3a90]
mov byte [ebp - 4], 0x78
call fcn.00402580
push eax
lea ecx, [ebp - 0x3b38]
call fcn.00402580
push eax
lea ecx, [ebp - 0x50ea0]
call fcn.00402430
movzx esi, al
lea ecx, [ebp - 0x50ea0]
mov dword [ebp - 0x50d74], esi
call fcn.00402420
lea ecx, [ebp - 0x3b38]
mov byte [ebp - 4], 0x5b
call fcn.004024b0
test esi, esi
jne 0x43ec44
call fcn.0046fa2f
push 0x7d0
call ebx
lea ecx, [ebp - 0x3ac0]
call fcn.00402580
push eax
lea eax, [ebp - 0x43d8]
push eax
call fcn.004cff6b
add esp, 8
lea ecx, [ebp - 0x43d8]
call fcn.004024b0
lea eax, [ebp - 0x3aa8]
push eax
lea ecx, [ebp - 0x3b50]
call fcn.004040b0
mov byte [ebp - 4], 0x79
test edi, edi
je 0x43e9ed
mov ecx, edi
call fcn.00402580
push eax
lea ecx, [ebp - 0x3b50]
call fcn.00402600
lea ecx, [ebp - 0x50dc8]
call fcn.00436450
mov ecx, 0x46
mov byte [ebp - 4], 0x7a
mov esi, str.qpiTm6DiLO7fTU8PcxX0gkbOz7OxbwnW31XXbKu8WXC1VFOrDf07OGW0DjvqrxXY44dlf2AbkWYA0cZdz9vTdaTKIvYmL4nGzB15JbRhZ1fM5NdebBg4Jl1KpFdmPtvDfHuls1sGsaR1HwyCgJe2rp4684bUtol0iSy7JStHSY2h8FIJTO8eIsRyuM1aDOi4ADgA732mGpIKbd3Tv2lz13FxVj4Hp3TwXH0S0aCLJRwYtky14PfQ9aV6bnPZ8yLkujk8LnkQpacA7MV3jsDj05wn
lea edi, [ebp - 0xaa4]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xaa4]
push eax
lea ecx, [ebp - 0x40a8]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x40a8]
mov byte [ebp - 4], 0x7b
push eax
lea ecx, [ebp - 0x50dc8]
call fcn.00407e30
lea ecx, [ebp - 0x40a8]
mov byte [ebp - 4], 0x7a
call fcn.00405970
lea eax, [ebp - 0x3b50]
push eax
lea eax, [ebp - 0x43f0]
push eax
call fcn.004cd4ec
add esp, 8
mov ecx, eax
call fcn.00459140
lea edx, [ebp - 0x5110]
sub edx, eax
nop dword [eax + eax]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x43ea70
lea ecx, [ebp - 0x43f0]
call fcn.00405970
lea eax, [ebp - 0x3a90]
push eax
lea eax, [ebp - 0x4408]
push eax
call fcn.004cd4ec
add esp, 8
mov ecx, eax
call fcn.00459140
lea edx, [ebp - 0x4f10]
sub edx, eax
nop dword [eax]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x43eab0
lea ecx, [ebp - 0x4408]
call fcn.00405970
lea ecx, [ebp - 0x2af40]
call fcn.004d9878
sub esp, 0x300
mov byte [ebp - 4], 0x7c
mov edi, esp
lea esi, [ebp - 0x5110]
mov ecx, 0xc0
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x2af40]
call fcn.004d98c8
call fcn.00402160
lea ecx, [ebp - 0x2af40]
call fcn.004da188
lea ecx, [ebp - 0x4b10]
call fcn.00436610
lea ecx, [ebp - 0x2af40]
call fcn.004d9ee7
test eax, eax
je 0x43eb37
lea eax, [ebp - 0x4b10]
push eax
lea ecx, [ebp - 0x2af40]
call fcn.004d9c6a
push 0x64
call ebx
lea ecx, [ebp - 0x2af40]
call fcn.004d9ef3
test eax, eax
je 0x43eb12
lea eax, [ebp - 0x4b10]
push eax
lea ecx, [ebp - 0x2af40]
call fcn.004d9c6a
movsd xmm0, qword [ebp - 0x4800]
movsd qword [ebp - 0x50db8], xmm0
call fcn.00402160
movsd xmm1, qword [ebp - 0x4808]
movsd xmm0, qword [ebp - 0x50db8]
ucomisd xmm0, xmm1
lahf
test ah, 0x44
jp 0x43eb9c
ucomisd xmm0, qword [0x5bea48]
lahf
test ah, 0x44
jnp 0x43ebbd
mov esi, 1
jmp 0x43ebc3
ucomisd xmm0, qword [0x5bea48]
lahf
test ah, 0x44
jnp 0x43ebbd
ucomisd xmm1, qword [0x5bea50]
mov esi, 1
lahf
test ah, 0x44
jnp 0x43ebc3
mov esi, dword [ebp - 0x50d74]
lea ecx, [ebp - 0x2af40]
call fcn.00402160
lea ecx, [ebp - 0x50dc8]
call fcn.004059b0
lea ecx, [ebp - 0x3b50]
mov byte [ebp - 4], 0x5b
call fcn.004024b0
test esi, esi
jne 0x43ec44
push 0x59e514
lea ecx, [ebp - 0x4078]
call fcn.004024f0
push str.DownloadFlag
lea ecx, [ebp - 0x4090]
mov byte [ebp - 4], 0x7f
call fcn.004024f0
mov ebx, dword [ebp - 0x50d7c]
lea ecx, [ebp - 0x4078]
push ecx
lea ecx, [ebp - 0x4090]
mov byte [ebp - 4], 0x80
push ecx
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
lea ecx, [ebp - 0x4090]
call fcn.004024b0
lea ecx, [ebp - 0x4078]
jmp 0x43ec9a
push 0x588c30
lea ecx, [ebp - 0x4048]
call fcn.004024f0
push str.DownloadFlag
lea ecx, [ebp - 0x4060]
mov byte [ebp - 4], 0x7d
call fcn.004024f0
mov ebx, dword [ebp - 0x50d7c]
lea ecx, [ebp - 0x4048]
push ecx
lea ecx, [ebp - 0x4060]
mov byte [ebp - 4], 0x7e
push ecx
mov eax, dword [ebx]
mov ecx, ebx
mov eax, dword [eax + 8]
call eax
lea ecx, [ebp - 0x4060]
call fcn.004024b0
lea ecx, [ebp - 0x4048]
mov byte [ebp - 4], 0x5b
call fcn.004024b0
push esi
lea ecx, [ebp - 0x3a90]
call fcn.00402580
push eax
lea ecx, [ebp - 0x3aa8]
call fcn.00402580
push eax
push str.__s___s___d_
call fcn.004cc6ad
add esp, 0x10
lea ecx, [ebp - 0x50dc8]
call fcn.00436450
mov ecx, 0x56
mov byte [ebp - 4], 0x81
mov esi, str.tp9OZLlNkJpXYnoZ1lhXMFTxP9fkq7EzQCagjNO1rTGUtLFFpu17AlUirZ1sOZNyxp9dFBi8EjddyGgK0k3pgxnHzfwQs2CURVn38xN2hBLzShFZhweR4J8BsYGyJrwXeR2eQtiYKUiAm73Uw5JK6pF75XBedwX74sWUE9lYh6oqUfeiKArxF7uZzzQVkmpxFEI3sViLis6Rrm6GugAVlZbsJse1iWbXDPGevxkoivg6wOw7RxH7K5m7wSahjN0iUXWRQWxNTxEvLWuQfoAX4p0RNcJvQX1PvX4Ews7FILGDV38rCmECt4oVCSYeXblbUltUhTBvNc8V2TmFSJXdwSt
lea edi, [ebp - 0x18a8]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x18a8]
push eax
lea ecx, [ebp - 0x4030]
call fcn.00405820
lea eax, [ebp - 0x4030]
mov byte [ebp - 4], 0x82
push eax
lea ecx, [ebp - 0x50dc8]
call fcn.00407e30
lea ecx, [ebp - 0x4030]
mov byte [ebp - 4], 0x81
call fcn.00405970
mov ecx, dword [ebp - 0x50d98]
push ebx
mov dword [ebp - 0x50dac], 0
call fcn.00441970
lea ecx, [ebp - 0x50dc8]
call fcn.004059b0
lea ecx, [ebp - 0x50e1c]
call fcn.004059b0
lea ecx, [ebp - 0x3ac0]
call fcn.004024b0
lea ecx, [ebp - 0x4018]
call fcn.004024b0
lea ecx, [ebp - 0x3aa8]
call fcn.004024b0
lea ecx, [ebp - 0x50e10]
call fcn.004059b0
lea ecx, [ebp - 0x50e04]
call fcn.004059b0
lea ecx, [ebp - 0x4420]
call fcn.004024b0
lea ecx, [ebp - 0x4000]
call fcn.004024b0
lea ecx, [ebp - 0x50e4c]
call fcn.004059b0
lea ecx, [ebp - 0x50ec4]
call fcn.004c043e
lea ecx, [ebp - 0x50df8]
call fcn.004059b0
lea ecx, [ebp - 0x50dec]
mov byte [ebp - 4], 0x2c
call fcn.004059b0
mov ebx, dword [ebp - 0x50d7c]
cmp dword [ebp - 0x50dac], 0
je 0x43efbe
call fcn.00402160
cmp dword [ebp - 0x50dbc], 0
jne 0x43efbe
push str.InstallSendDC
lea ecx, [ebp - 0x3fe8]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3fe8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x83
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3fe8]
mov dword [ebp - 0x50db4], eax
mov byte [ebp - 4], 0x2c
call fcn.004024b0
push str.InstallSendSoft
lea ecx, [ebp - 0x3fb8]
call fcn.004024f0
mov eax, dword [ebx]
lea ecx, [ebp - 0x3fb8]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 0x84
mov eax, dword [eax + 0x1c]
call eax
lea ecx, [ebp - 0x3fb8]
mov dword [ebp - 0x50dcc], eax
mov byte [ebp - 4], 0x2c
call fcn.004024b0
call fcn.00402160
mov dword [ebp - 0x50e88], 0
mov dword [ebp - 0x50e84], 0
mov dword [ebp - 0x50e80], 0
mov ecx, 0x6e
mov byte [ebp - 4], 0x85
mov esi, str.moaLKMrWPZPGbrNmrTVtDABbbiet7E94RKLFs25PJACwevJ77Mb5poWdIxWE2W8sWuDR9wzzp3qDHtZQN5ur2qrpjMqY1bo2bLpnOCr3jK4fDfZnRZ8j1qClCfLl5pMHbXiHBB1s6TyU9AJtmLol9oIVuEoxNRbnpmMnnCsMXBrUXuz4BKl8z7Lw5gTr7VrYLEQtF7LNXPZqiJCzR09E5cVitJtXzfjkkIrY2tTplsAKpv1JRzXpt99hC4h9hUohd4o8iXpYyT0mUmwXbNQvS7S80Nz9Rl3mNWll0H06VgaUmJJ7M0R4afP9aZf2lu5x3t1MH3OzHiPykMgb5eDxsXvAefo4XVgzNayntEgusQLFfvtDaKOIY0SPYqG3SYVLQdfi1UB36MTCgR8hcknJolj4F20bb8Fs3wpnqy5dYpft1i8CDYZbLD98DT
lea edi, [ebp - 0x299c]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x299c]
push eax
lea ecx, [ebp - 0x3fd0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405820
lea eax, [ebp - 0x3fd0]
mov byte [ebp - 4], 0x86
push eax
lea ecx, [ebp - 0x50e88]
call fcn.00407e30
lea ecx, [ebp - 0x3fd0]
mov byte [ebp - 4], 0x85
call fcn.00405970
mov eax, dword [ebp - 0x50db4]
test eax, eax
je 0x43ef35
cmp dword [eax + 0x14], 8
jb 0x43eee6
mov eax, dword [eax]
mov ecx, 0x588c30
nop dword [eax + eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43ef22
test dx, dx
je 0x43ef12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43ef22
add eax, 4
add ecx, 4
test dx, dx
jne 0x43eef0
xor eax, eax
xor edi, edi
test eax, eax
mov eax, 1
cmove edi, eax
jmp 0x43ef37
sbb eax, eax
xor edi, edi
or eax, 1
test eax, eax
mov eax, 1
cmove edi, eax
jmp 0x43ef37
xor edi, edi
call fcn.0046ef51
mov eax, dword [ebp - 0x50dcc]
test eax, eax
je 0x43ef98
cmp dword [eax + 0x14], 8
jb 0x43ef4e
mov eax, dword [eax]
mov ecx, 0x588c30
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43ef85
test dx, dx
je 0x43ef75
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43ef85
add eax, 4
add ecx, 4
test dx, dx
jne 0x43ef53
xor eax, eax
xor esi, esi
test eax, eax
mov eax, 1
cmove esi, eax
jmp 0x43ef9a
sbb eax, eax
xor esi, esi
or eax, 1
test eax, eax
mov eax, 1
cmove esi, eax
jmp 0x43ef9a
xor esi, esi
call fcn.0046d609
test edi, edi
je 0x43efa7
test esi, esi
jne 0x43efb3
mov ecx, dword [ebp - 0x50d98]
push ebx
call fcn.00444e50
lea ecx, [ebp - 0x50e88]
call fcn.004059b0
lea ecx, [ebp - 0x50e7c]
call fcn.004059b0
lea ecx, [ebp - 0x50e70]
call fcn.004059b0
lea ecx, [ebp - 0x50e64]
call fcn.004059b0
lea ecx, [ebp - 0x50e58]
call fcn.004059b0
lea ecx, [ebp - 0x4438]
call fcn.004024b0
lea ecx, [ebp - 0x4450]
call fcn.004024b0
lea ecx, [ebp - 0x3a90]
call fcn.004024b0
lea ecx, [ebp - 0x50d88]
call fcn.004059b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004682d0
mov esp, ebp
pop ebp
ret 8