Function at 0x492b20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x518f66
mov eax, dword fs:[0]
push eax
sub esp, 0x140
mov eax, dword [0x577680]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x128], esi
mov eax, dword [ebp + 8]
xor ecx, ecx
mov word [ebp - 0x5c], cx
lea ecx, [ebp - 0x78]
push ecx
push eax
lea eax, [ebp - 0x12c]
mov ebx, 0x6e
push eax
mov dword [ebp - 0x78], 0x53005c
mov dword [ebp - 0x74], 0x740065
mov dword [ebp - 0x70], 0x690074
mov dword [ebp - 0x6c], 0x67006e
lea edx, [ebx + 5]
mov dword [ebp - 0x68], 0x2e0073
mov dword [ebp - 0x64], 0x73006a
mov dword [ebp - 0x60], 0x6e006f
call fcn.00402b40
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x130]
push eax
mov dword [ebp - 4], 0
call fcn.00413300
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 1
call fcn.00417130
mov ecx, dword [eax]
xor eax, eax
add esp, 0x18
test ecx, ecx
setne al
test eax, eax
jne 0x492bed
push 0x80004005
call fcn.004030e0
mov eax, dword [ebp - 0x130]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x492c19
test dx, dx
je 0x492c15
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x492c19
add eax, 4
add ecx, 4
test dx, dx
jne 0x492bf3
xor eax, eax
jmp 0x492c1e
sbb eax, eax
or eax, 1
mov edx, dword [ebp - 0x124]
test eax, eax
sete bl
add edx, 0xfffffff0
or edi, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x492c45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x492cdb
xor eax, eax
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x34], 0x650072
mov dword [ebp - 0x30], 0x640061
mov dword [ebp - 0x2c], 0x63005f
mov ebx, 0x63
mov dword [ebp - 0x28], 0x5f0072
mov dword [ebp - 0x24], 0x61006d
mov dword [ebp - 0x20], 0x69006e
mov dword [ebp - 0x1c], 0x650066
mov dword [ebp - 0x18], 0x740073
call fcn.00401c30
lea eax, [ebp - 0x128]
push eax
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.0040c040
mov edx, dword [ebp - 0x128]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492cd4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor bl, bl
jmp 0x4934e6
lea ecx, [ebp - 0x120]
call fcn.0046d2e0
push 0
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 3
call fcn.004707b0
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 4
call fcn.0049acd0
add esp, 8
push 1
lea ecx, [ebp - 0x14c]
push ecx
push eax
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 5
call fcn.0046eac0
test al, al
sete bl
cmp dword [ebp - 0x7c], 0x10
mov byte [ebp - 4], 4
jb 0x492d47
push dword [ebp - 0x90]
call fcn.004f03fe
add esp, 4
test bl, bl
je 0x492f30
mov ebx, dword [0x578ad4]
mov eax, ebx
imul eax, ebx
cdq
mov ecx, 0x15
idiv ecx
cmp edx, 0xb
jne 0x492dd9
mov eax, ebx
cdq
lea esi, [ecx - 7]
xor ecx, ecx
sub eax, edx
sar eax, 1
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x138], eax
nop
test eax, eax
jle 0x492dcb
mov eax, ebx
cdq
and edx, 3
lea edi, [edx + eax]
mov eax, dword [ebp - 0x138]
sar edi, 2
xor edx, edx
mov dword [ebp - 0x134], eax
mov edi, edi
test edi, edi
jle 0x492dba
mov eax, edx
mov ecx, edi
add esi, eax
dec eax
dec ecx
jne 0x492da8
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x124]
add edx, ecx
dec eax
mov dword [ebp - 0x134], eax
jne 0x492da0
mov eax, dword [ebp - 0x138]
inc ecx
mov dword [ebp - 0x124], ecx
cmp ecx, esi
jl 0x492d80
or edi, 0xffffffff
lea eax, [ebx + 1]
imul eax, ebx
cdq
mov ecx, 0xe
idiv ecx
mov dword [ebp - 0x34], 0x610070
mov dword [ebp - 0x30], 0x730072
mov dword [ebp - 0x2c], 0x5f0065
mov dword [ebp - 0x28], 0x720063
mov dword [ebp - 0x24], 0x6d005f
mov dword [ebp - 0x20], 0x6e0061
mov dword [ebp - 0x1c], 0x660069
mov dword [ebp - 0x18], 0x730065
mov dword [ebp - 0x14], 0x74
cmp edx, 8
jne 0x492e85
mov eax, 0x2e8ba2e9
imul ebx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb
mov eax, ebx
sub eax, ecx
xor esi, esi
cmp eax, 0xcf
je 0x492e7f
jmp 0x492e50
mov eax, ebx
or eax, 0xffffffd8
add ebx, eax
mov eax, ebx
imul eax, ebx
inc esi
cmp esi, eax
jg 0x492e7f
mov eax, 0x2e8ba2e9
imul ebx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xb
mov eax, ebx
sub eax, ecx
cmp eax, 0xcf
jne 0x492e50
mov dword [0x578ad4], esi
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x124]
call fcn.00401c30
mov ecx, dword [ebp - 0x128]
lea eax, [ebp - 0x124]
push eax
mov byte [ebp - 4], 6
call fcn.0040c040
mov edx, dword [ebp - 0x124]
add edx, 0xfffffff0
mov byte [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492ecd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00493930
test al, al
jne 0x492f29
mov ax, word [0x5344d4]
movq xmm0, qword [str.DfPjyDfJo3]
mov word [ebp - 0x7c], ax
mov al, byte [0x5344d6]
mov byte [ebp - 0x7a], al
lea eax, [ebp - 0x84]
movq qword [ebp - 0x84], xmm0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x492f01
sub eax, edx
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004ef820
push eax
call fcn.004f0683
add esp, 8
xor bl, bl
jmp 0x4934cc
lea eax, [esi + 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x40], 0x736f7263
mov dword [ebp - 0x3c], 0x64697273
mov word [ebp - 0x38], 0x7265
mov byte [ebp - 0x36], 0
mov dword [ebp - 0x58], 0x74736e49
mov dword [ebp - 0x54], 0x656c6c61
mov dword [ebp - 0x50], 0x65644972
mov dword [ebp - 0x4c], 0x6669746e
mov dword [ebp - 0x48], 0x73726569
mov byte [ebp - 0x44], 0
call fcn.0049acd0
add esp, 8
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 7
call fcn.004706a0
lea eax, [ebp - 0x88]
push eax
push str.installer_bic
lea eax, [ebp - 0x58]
push eax
push str.installer
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 8
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470b70
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 7
call fcn.00470ad0
cmp dword [ebp - 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x492ff7
push dword [ebp - 0x28]
call fcn.004f03fe
add esp, 4
lea eax, [esi + 0x28]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0049acd0
add esp, 8
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 9
call fcn.004706a0
lea eax, [ebp - 0x88]
push eax
push str.installer_verifier
lea eax, [ebp - 0x58]
push eax
push str.installer
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xa
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470b70
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 9
call fcn.00470ad0
cmp dword [ebp - 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x49307f
push dword [ebp - 0x28]
call fcn.004f03fe
add esp, 4
lea eax, [esi + 0x44]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0049acd0
add esp, 8
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xb
call fcn.004706a0
lea eax, [ebp - 0x88]
push eax
push str.version
push str.installer
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xc
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470b70
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xb
call fcn.00470ad0
cmp dword [ebp - 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x4930fc
push dword [ebp - 0x28]
call fcn.004f03fe
add esp, 4
cmp byte [esi + 0x68], 0
lea ecx, [ebp - 0x88]
sete al
movzx eax, al
push eax
call fcn.004708b0
lea eax, [ebp - 0x88]
push eax
push str.InstallationThankYouPage
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xd
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470b70
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 4
call fcn.00470ad0
lea eax, [esi + 0x4c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0049acd0
add esp, 8
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xe
call fcn.004706a0
lea eax, [ebp - 0x88]
push eax
push str.source_id
push str.InstallerParams
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xf
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470b70
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0xe
call fcn.00470ad0
cmp dword [ebp - 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x4931cb
push dword [ebp - 0x28]
call fcn.004f03fe
add esp, 4
lea eax, [esi + 0x50]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0049acd0
add esp, 8
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x10
call fcn.004706a0
lea eax, [ebp - 0x88]
push eax
push str.sub_id
push str.InstallerParams
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x11
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470b70
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x10
call fcn.00470ad0
cmp dword [ebp - 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x493248
push dword [ebp - 0x28]
call fcn.004f03fe
add esp, 4
lea eax, [esi + 0x54]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0049acd0
add esp, 8
push eax
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x12
call fcn.004706a0
lea eax, [ebp - 0x88]
push eax
push str.uzid
push str.InstallerParams
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x13
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470d60
mov ecx, eax
call fcn.00470b70
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x12
call fcn.00470ad0
cmp dword [ebp - 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x4932c5
push dword [ebp - 0x28]
call fcn.004f03fe
add esp, 4
lea ecx, [ebp - 0xb0]
call fcn.00472a40
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x14
call fcn.004758e0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x15
jb 0x4932f9
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x13c]
call fcn.00401a70
cmp dword [ebp - 0x7c], 0x10
mov byte [ebp - 4], 0x17
jb 0x49331d
push dword [ebp - 0x90]
call fcn.004f03fe
add esp, 4
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x12c]
push eax
mov dword [ebp - 0x7c], 0xf
mov dword [ebp - 0x80], 0
mov byte [ebp - 0x90], 0
call fcn.00413d10
add esp, 8
test al, al
jne 0x49345c
mov dword [ebp - 0x34], 0x720077
mov dword [ebp - 0x30], 0x740069
mov ebx, 0x65
mov dword [ebp - 0x2c], 0x5f0065
mov dword [ebp - 0x28], 0x720063
mov dword [ebp - 0x24], 0x6d005f
mov dword [ebp - 0x20], 0x6e0061
mov dword [ebp - 0x1c], 0x660069
mov dword [ebp - 0x18], 0x730065
mov dword [ebp - 0x14], 0x74
call fcn.00493c20
test al, al
jne 0x493414
mov esi, dword [0x578ad4]
test esi, esi
je 0x49340e
jmp 0x4933b0
mov ecx, esi
and ecx, 0x80000001
jns 0x4933bf
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x4933cc
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x4933d3
lea esi, [esi*2 + 1]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [0x578ad4], esi
sub ecx, 0
je 0x4933fd
sub ecx, 2
je 0x493400
dec ecx
je 0x493401
jmp 0x49340a
add esi, 2
inc esi
add esi, 2
mov dword [0x578ad4], esi
test esi, esi
jne 0x4933b0
mov esi, dword [ebp - 0x128]
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x124]
call fcn.00401c30
lea eax, [ebp - 0x124]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x18
call fcn.0040c040
mov edx, dword [ebp - 0x124]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x17
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x493458
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor bl, bl
jmp 0x49345e
mov bl, 1
mov edx, dword [ebp - 0x13c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x14
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x493481
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x98], 0x10
mov byte [ebp - 4], 4
mov dword [ebp - 0xb0], 0x533570
jb 0x4934a6
push dword [ebp - 0xac]
call fcn.004f03fe
add esp, 4
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x98], 0xf
mov dword [ebp - 0x9c], 0
mov byte [ebp - 0xac], 0
call fcn.00472b70
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 3
call fcn.00470ad0
lea ecx, [ebp - 0x120]
call fcn.00402630
mov edx, dword [ebp - 0x130]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x493509
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x12c]
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x49352d
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f0cd4
mov esp, ebp
pop ebp
ret 4