Function at 0x404c42
Capabilities:
Contain obfuscated stackstrings
Create directory

Disassembly:
push 0x130
mov eax, 0x4bc40e
call fcn.004180a8
and dword [ebp - 0x138], 0
xor ebx, ebx
inc ebx
or edi, 0xffffffff
cmp dword [0x5201e0], 0
mov esi, 0x5201f0
jne 0x404d7a
push 0x4d5098
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
and dword [ebp - 4], 0
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x128]
push esi
push eax
call fcn.004019e2
push dword [eax]
mov byte [ebp - 4], bl
call fcn.004040f0
add esp, 0x10
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], edi
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push str.HprUnInst.log
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x128]
push esi
push eax
call fcn.004019e2
push dword [eax]
mov byte [ebp - 4], 3
call fcn.004040f0
add esp, 0x10
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], edi
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push str.HprUnInst.log
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x128]
push 0x5201f4
push eax
call fcn.004019e2
push str.File_Del:
push dword [0x5201f0]
mov byte [ebp - 4], 5
push dword [eax]
call fcn.00403c9d
add esp, 0x18
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], edi
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push str.HprUnInst.log
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 6
push eax
lea eax, [ebp - 0x128]
push 0x5201f4
push eax
call fcn.004019e2
push dword [eax]
mov byte [ebp - 4], 7
call fcn.0040791f
add esp, 0x10
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], edi
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [0x5201f0]
push dword [0x5201f4]
push 0x4d4ad0
call fcn.00407544
add esp, 0xc
lea ecx, [ebp - 0x120]
push str.HprUnInst.log
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0x128]
push esi
push eax
call fcn.004019e2
push 0x4d3a20
push dword [eax]
call fcn.00404914
add esp, 0x14
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], edi
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
cmp dword [0x511074], 2
je 0x405a5a
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
mov eax, dword [0x511074]
mov dword [ebp - 4], 9
cmp eax, ebx
jne 0x404eb6
lea eax, [ebp - 0x124]
push 0x17
push eax
call fcn.0040a110
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__26]
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov eax, dword [ebp - 0x11c]
cmp dword [eax - 0xc], 4
jge 0x404eb1
xor eax, eax
mov dword [0x511074], eax
jmp 0x404eb6
mov eax, dword [0x511074]
test eax, eax
jne 0x404eeb
lea eax, [ebp - 0x124]
push 2
push eax
call fcn.0040a110
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__26]
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0x5c
push 0x2f
mov ecx, 0x5201f8
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__22]
mov esi, str.__t_r_n_
mov ecx, 0x5201f8
push esi
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__11]
push esi
mov esi, 0x5201f8
mov ecx, esi
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__12]
lea eax, [edi + 1]
mov ecx, esi
push eax
push 0x5c
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__2]
push 0x4d4dfc
lea ecx, [ebp - 0x12c]
mov edi, eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
test edi, edi
jle 0x404fd3
push edi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0xc
push eax
mov ecx, esi
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t_]
mov esi, eax
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004019e2
push esi
push eax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0xe
push eax
call fcn.004019e2
add esp, 0x18
push 0
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x130]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov esi, 0x5201f8
jmp 0x404f19
push esi
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.004019e2
add esp, 0xc
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator_3]
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
xor edi, edi
push edi
push dword [ebp - 0x11c]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push str.Made_Dir:
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
push str.HprUnInst.log
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__3]
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004019e2
mov esi, eax
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x118]
push 0x5201f0
push eax
call fcn.004019e2
push dword [esi]
push dword [eax]
call fcn.00404914
add esp, 0x20
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x130]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x12c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push edi
push dword [ebp - 0x11c]
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__waccess]
pop ecx
pop ecx
test eax, eax
jne 0x40525e
push 0x4d4dfc
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__17]
lea eax, [ebp - 0x114]
push 0x27
push eax
call fcn.0040a110
mov edi, eax
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x14
push ebx
push eax
call fcn.00407fc0
push eax
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004019e2
push str..lnk
push eax
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x16
push eax
call fcn.00401a36
mov esi, eax
push str.HprSnap.exe
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x17
push 0x5201f0
push eax
call fcn.00401a36
push dword [edi]
xor edi, edi
mov byte [ebp - 4], 0x18
push edi
push ebx
push 0x4d3a20
push dword [esi]
push dword [eax]
call fcn.004049fd
add esp, 0x4c
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x130]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x12c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea eax, [ebp - 0x124]
push 0x65
push eax
call fcn.00407fc0
push eax
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004019e2
push str..lnk
push eax
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x1a
push eax
call fcn.00401a36
mov esi, eax
mov byte [ebp - 4], 0x1b
push str.HprSnapMan.chm
lea eax, [ebp - 0x114]
push 0x5201f0
push eax
call fcn.00401a36
push edi
push edi
push ebx
push 0x4d3a20
push dword [esi]
mov byte [ebp - 4], 0x1c
push dword [eax]
call fcn.004049fd
add esp, 0x44
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x130]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
cmp dword [0x511078], 0
je 0x405395
mov eax, dword [0x511074]
cmp eax, ebx
jne 0x40528a
lea eax, [ebp - 0x114]
push 0x19
push eax
call fcn.0040a110
pop ecx
pop ecx
mov byte [ebp - 4], 0x1d
jmp 0x4052a1
test eax, eax
jne 0x4052be
lea eax, [ebp - 0x114]
push edi
push eax
call fcn.0040a110
pop ecx
pop ecx
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__26]
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0x4d3d70
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator_2]
lea eax, [ebp - 0x12c]
push 0x27
push eax
call fcn.0040a110
mov edi, eax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x1f
push ebx
push eax
call fcn.00407fc0
push eax
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004019e2
push str..lnk
push eax
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x21
push eax
call fcn.00401a36
mov esi, eax
push str.HprSnap.exe
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x22
push 0x5201f0
push eax
call fcn.00401a36
push dword [edi]
xor edi, edi
mov byte [ebp - 4], 0x23
push edi
push ebx
push 0x4d3a20
push dword [esi]
push dword [eax]
call fcn.004049fd
add esp, 0x4c
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x130]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
cmp dword [0x5201e8], 0
je 0x4054cd
mov eax, dword [0x511074]
cmp eax, ebx
jne 0x4053c1
lea eax, [ebp - 0x114]
push 0x18
push eax
call fcn.0040a110
pop ecx
pop ecx
mov byte [ebp - 4], 0x24
jmp 0x4053d9
test eax, eax
jne 0x4053f6
lea eax, [ebp - 0x114]
push 7
push eax
call fcn.0040a110
pop ecx
pop ecx
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__26]
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push 0x4d3d70
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator_2]
lea eax, [ebp - 0x12c]
push 0x27
push eax
call fcn.0040a110
mov edi, eax
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 0x26
push ebx
push eax
call fcn.00407fc0
push eax
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004019e2
push str..lnk
push eax
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x28
push eax
call fcn.00401a36
mov esi, eax
push str.HprSnap.exe
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x29
push 0x5201f0
push eax
call fcn.00401a36
push dword [edi]
xor edi, edi
mov byte [ebp - 4], 0x2a
push edi
push ebx
push 0x4d3a20
push dword [esi]
push dword [eax]
call fcn.004049fd
add esp, 0x4c
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x130]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
cmp dword [0x511074], ebx
mov ecx, 0x4d50e4
mov eax, 0x4d4dec
mov esi, str.SOFTWAREHyperionicsHyperSnap_9
cmovne eax, ecx
push eax
push 0x4d50e8
push esi
push SysStringLen
call fcn.0040a7e0
push dword [0x5201f0]
push str.Path
push esi
push SysStringLen
call fcn.0040a7e0
push 0x5201f0
lea eax, [ebp - 0x118]
push 0x4d45b4
push eax
call fcn.00402461
push str.HprSnap.exe____1_
push eax
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x2b
push eax
call fcn.00401a36
push dword [eax]
mov byte [ebp - 4], 0x2c
push edi
push str.HyperSnap.8_shellopencommand
push 0x80000000
call fcn.0040a7e0
add esp, 0x48
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push str.SOFTWAREHyperionicsHyperSnap_9CapabilitiesFileAssociations
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__28]
push str.ApplicationsHprSnap.exe
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__28]
mov byte [ebp - 4], 0x2e
call fcn.004078dd
test eax, eax
je 0x4055b1
push str.HyperSnap.8
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140u.dll_ATL::CSimpleStringT_wchar_t_1_::operator]
cmp dword [0x4d434c], 0
mov esi, edi
jle 0x4055e5
push dword [ebp - 0x120]
push dword [esi*8 + section..data]
push dword [ebp - 0x128]
push SysStringLen
call fcn.0040a7e0
add esp, 0x10
inc esi
cmp esi, dword [0x4d434c]
jl 0x4055bc
push str.SOFTWAREHyperionicsHyperSnap_9Capabilities
push str.HyperSnap.8
push str.SOFTWARERegisteredApplications
push SysStringLen
call fcn.0040a7e0
push str.HyperSnap9.License
push edi
push 0x4d46a0
push 0x80000000
call fcn.0040a7e0
mov esi, 0x5201f0
lea eax, [ebp - 0x118]
push esi
push 0x4d45b4
push eax
call fcn.00402461
push str.HprSnap.exe____1_
push eax
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x2f
push eax
call fcn.00401a36
push dword [eax]
mov byte [ebp - 4], 0x30
push edi
push str.HyperSnap9.License_shellopencommand
push 0x80000000
call fcn.0040a7e0
add esp, 0x48
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push str.HprSnap.exe
lea eax, [ebp - 0x114]
push esi
push eax
call fcn.00401a36
push dword [eax]
mov esi, str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsHprSnap.exe
mov byte [ebp - 4], 0x31
push edi
push esi
mov edi, SysStringLen
push edi
call fcn.0040a7e0
add esp, 0x1c
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [0x5201f0]
push str.Path
push esi
push edi
call fcn.0040a7e0
push str.Support
push str.Contact
mov esi, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallHyperSnap_9
push esi
push edi
call fcn.0040a7e0
lea eax, [ebp - 0x114]
push ebx
push eax
call fcn.00407fc0
push dword [eax]
mov byte [ebp - 4], 0x32
push str.DisplayName
push esi
push edi
call fcn.0040a7e0
add esp, 0x38
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [0x5201f0]
push str.InstallLocation
push esi
push edi
call fcn.0040a7e0
push dword [0x5201d8]
mov edi, 0x80
lea eax, [ebp - 0x110]
push dword [0x5201d4]
push dword [0x5201d0]
push 0x4d5338
push edi
push eax
call fcn.00404890
lea eax, [ebp - 0x110]
push eax
push str.DisplayVersion
push esi
push SysStringLen
call fcn.0040a7e0
push dword [0x5201d0]
mov esi, 0x4d4de4
lea eax, [ebp - 0x110]
push esi
push edi
push eax
call fcn.00404890
add esp, 0x48
lea eax, [ebp - 0x110]
push eax
push str.VersionMajor
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallHyperSnap_9
push SysStringLen
call fcn.0040a7e0
push dword [0x5201d4]
lea eax, [ebp - 0x110]
push esi
push edi
push eax
call fcn.00404890
lea eax, [ebp - 0x110]
mov esi, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallHyperSnap_9
push eax
push str.VersionMinor
push esi
mov edi, SysStringLen
push edi
call fcn.0040a7e0
push dword [0x5201d0]
push str.MajorVersion
push esi
push edi
call fcn.0040a790
add esp, 0x40
push dword [0x5201d4]
push str.MinorVersion
push esi
push edi
call fcn.0040a790
push str.Hyperionics_Technology
push str.Publisher
push esi
push edi
call fcn.0040a7e0
push str.HprUnInst.exe
mov edi, 0x5201f0
lea eax, [ebp - 0x114]
push edi
push eax
call fcn.00401a36
push dword [eax]
mov byte [ebp - 4], 0x33
push str.UninstallString
push esi
push SysStringLen
call fcn.0040a7e0
add esp, 0x3c
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push str.https:__www.hyperionics.com
push str.URLInfoAbout
push esi
push SysStringLen
call fcn.0040a7e0
push edi
lea eax, [ebp - 0x118]
push 0x4d45b4
push eax
call fcn.00402461
push str.HprSnap.exe____1_
push eax
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x34
push eax
call fcn.00401a36
push dword [eax]
xor edi, edi
mov byte [ebp - 4], 0x35
push edi
push str.ApplicationsHprSnap.exe_shellopencommand
push 0x80000000
call fcn.0040a7e0
add esp, 0x38
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
call fcn.004078f8
lea ecx, [ebp - 0x134]
mov esi, eax
call dword [sym.imp.mfc140u.dll_Ordinal_296]
mov byte [ebp - 4], 0x36
test esi, esi
je 0x40593c
cmp dword [0x5205dc], 6
jb 0x4058f5
push str.x64ThumbDhs64.dll
lea eax, [ebp - 0x118]
push 0x5201f0
push eax
call fcn.00401a36
add esp, 0xc
mov byte [ebp - 4], 0x37
jmp 0x405910
push 0x4d3a20
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__28]
push 2
mov dword [ebp - 4], 0x38
pop ebx
push eax
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x138], ebx
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__26]
test bl, 2
je 0x405937
lea ecx, [ebp - 0x114]
and ebx, 0xfffffffd
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
test bl, 1
jmp 0x4059b3
cmp dword [0x5205dc], 6
jb 0x405966
push str.ThumbDhs32.dll
lea eax, [ebp - 0x118]
push 0x5201f0
push eax
call fcn.00401a36
add esp, 0xc
mov byte [ebp - 4], 0x39
push 4
jmp 0x405988
push str.ThumbDhsXP32.dll
lea eax, [ebp - 0x114]
push 0x5201f0
push eax
call fcn.00401a36
add esp, 0xc
mov dword [ebp - 4], 0x3a
push 8
pop ebx
push eax
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x138], ebx
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__26]
test bl, 8
je 0x4059b0
lea ecx, [ebp - 0x114]
and ebx, 0xfffffff7
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
test bl, 4
mov dword [ebp - 4], 0x36
je 0x4059c8
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov eax, dword [ebp - 0x134]
cmp dword [eax - 0xc], 4
jle 0x405a26
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x118]
push str.regsvr32.exe__s__
push eax
call fcn.00402461
push 0x4d45b4
push eax
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 0x3b
push eax
call fcn.00401a36
push edi
push edi
push dword [eax]
call fcn.00407ff9
add esp, 0x24
lea ecx, [ebp - 0x114]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x134]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [0x52022c]
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_char_StrTraitMFC_DLL_char_ATL::ChTraitsCRT_char__8]
mov eax, dword [ebp - 0x128]
xor ebx, ebx
mov dword [ebp - 4], 0x3c
push dword [eax - 0xc]
push eax
push ebx
call fcn.0040ebd0
add esp, 0xc
mov esi, eax
cmp eax, 0x4dad36bb
jne 0x405a9b
mov eax, 0xa10b5339
mov esi, 0x24e3af87
push eax
push str.Identities_X_CA39_31BF_B518_527AD6AE017B
lea eax, [ebp - 0xb0]
push 0x50
push eax
call fcn.00404890
push 0x4d4ddc
lea eax, [ebp - 0xb0]
push eax
push 0x80000001
call fcn.0040a670
mov edi, dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 0x1c
or eax, edx
jne 0x405af0
push ebx
call edi
push edx
push eax
push 0x4d4ddc
lea eax, [ebp - 0xb0]
push eax
push 0x80000001
call fcn.0040a850
add esp, 0x18
push esi
push str.CLSID_X_C9A3_1B3F_B185_D6A527AE017BProgID
lea eax, [ebp - 0xb0]
push 0x50
push eax
call fcn.00404890
push ebx
lea eax, [ebp - 0xb0]
mov esi, 0x80000000
push eax
push esi
call fcn.0040a670
add esp, 0x1c
or eax, edx
jne 0x405b34
push ebx
call edi
push edx
push eax
push ebx
lea eax, [ebp - 0xb0]
push eax
push esi
call fcn.0040a850
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0x4d3a20
mov ecx, 0x5201fc
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__25]
test eax, eax
jle 0x405ba4
push ebx
push dword [0x5201f0]
push dword [0x5201fc]
push str.HprSnap.ini
call fcn.004071f3
push ebx
push dword [0x5201f0]
mov dword [0x520488], eax
push dword [0x5201fc]
push str.HprSnap.reg
call fcn.004071f3
push dword [0x5201f0]
push dword [0x5201fc]
push str..hslic
call fcn.00407544
add esp, 0x2c
push 0x5201f0
lea eax, [ebp - 0x114]
push 0x4d45b4
push eax
call fcn.00402461
push str.HprSnap.exe_
push eax
lea eax, [ebp - 0x13c]
mov dword [ebp - 4], 0x3d
push eax
call fcn.00401a36
add esp, 0x18
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x3f
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov eax, dword [0x520484]
test eax, eax
jne 0x405bf9
call fcn.00406c23
mov dword [0x520484], eax
cmp eax, 8
jne 0x405c65
cmp dword [0x511074], 2
jne 0x405c52
cmp dword [0x511070], 0
jne 0x405c20
push 0xffffffffffffffff
push 0x24
push 0x1d
call sub.mfc140u.dll_AfxMessageBox
cmp eax, 6
jne 0x405c52
push str.__savelic
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.00401a36
push ebx
push ebx
push dword [eax]
call fcn.00407ff9
add esp, 0x18
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
jmp 0x405c65
cmp dword [0x511070], 0
jne 0x405c65
push 0xffffffffffffffff
push ebx
push 0x22
call sub.mfc140u.dll_AfxMessageBox
cmp dword [0x511074], 2
jge 0x405c9e
push str.__regonly
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.00401a36
push ebx
push ebx
push dword [eax]
call fcn.00407ff9
add esp, 0x18
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x13c]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
xor eax, eax
call fcn.00418057
ret