Function at 0x43ac0f
Capabilities:
Copy file
Persist via lnk shortcut
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbe0
mov eax, dword [0x59a240]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x108]
push esi
push edi
push 0x104
push 0
push eax
call fcn.004e4da0
mov esi, 0x400
lea eax, [ebp - 0x68c]
push esi
push 0
push eax
call fcn.004e4da0
push esi
lea eax, [ebp - 0xa8c]
push 0
push eax
call fcn.004e4da0
xor eax, eax
and dword [ebp - 0xbb4], 0
lea edi, [ebp - 0xba0]
stosd dword es:[edi], eax
push 0x40
push 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0xbb0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x188]
push eax
call fcn.004e4da0
add esp, 0x30
call fcn.0040e9f7
test eax, eax
jne 0x43aca4
push eax
push eax
push eax
call fcn.0040e70d
add esp, 0xc
call fcn.0040cf42
push 0
call fcn.0049b14f
push 2
call fcn.00410aa6
push 0x270f
call fcn.00411595
push 0
push str.8Ex0_0T_I__lQegYdiyovQ8
call fcn.004a0bb6
push eax
push 0x50fd28
push 0
call fcn.0049e318
add esp, 0x20
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov esi, str.UpStrdedP2_221277_avcdii22.flg
push esi
push 0
call fcn.0047d10c
push eax
call fcn.0042916f
add esp, 0xc
test eax, eax
jne 0x43ad39
push 0x15e
push str.E:UserskerryDocumentsVisual_Studio_2022ProjectsPAULA__TEMP_COPY_Installation.c
push 0x51cf84
push esi
push eax
call fcn.0047d10c
pop ecx
pop ecx
push eax
call fcn.0042d2de
mov esi, eax
add esp, 0x10
test esi, esi
je 0x43ad39
push str.FLAG
push esi
call fcn.00404f0f
push esi
call fcn.0042d153
add esp, 0xc
push ebx
call fcn.0042916f
mov esi, str.InstallPaula2.exe
jmp 0x43aed9
push 0
push str.zbiiSeQ_iREuKaXaa_fIO
call fcn.004a0bb6
push eax
push 0x51ffa0
call fcn.0040f3a2
mov eax, dword [0x59dc10]
add esp, 0x10
cmp ebx, eax
je 0x43ad82
push eax
call fcn.00403fe1
pop ecx
test eax, eax
je 0x43ad82
mov ebx, dword [0x59dc10]
jmp 0x43aed3
push ebx
push str.:7:InstallPAULA__s__encountered_a_problem:_The_archive_could_not_be_found_
call fcn.004255b9
push str._n_nThe_installation_archive_could_not_be_found.
call fcn.0040f3a2
push ebx
push str._nArchive:___s_
call fcn.0040f3a2
push str._n_nPlease_enter_the_path_and_filename_of_the_installation_archive.
call fcn.0040f3a2
push str._nFilename:
call fcn.0040f3a2
lea eax, [ebp - 0x108]
push eax
call fcn.0041248c
lea eax, [ebp - 0x108]
push str.desktop
push eax
call fcn.004ee718
add esp, 0x28
test eax, eax
lea eax, [ebp - 0x108]
jne 0x43ae84
push 1
push eax
call fcn.0040e019
push eax
call fcn.0049f486
add esp, 0xc
test eax, eax
jne 0x43ae26
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.0049d9e2
lea eax, [ebp - 0x108]
push eax
call fcn.0042916f
add esp, 0xc
test eax, eax
jne 0x43ae26
lea eax, [ebp - 0x108]
push eax
call fcn.0049e2d6
pop ecx
lea eax, [ebp - 0x108]
push eax
call fcn.0042916f
pop ecx
test eax, eax
jne 0x43aec8
lea eax, [ebp - 0x108]
push 2
push eax
call fcn.0040e019
push eax
call fcn.0049f486
add esp, 0xc
test eax, eax
jne 0x43aec8
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.0049d9e2
lea eax, [ebp - 0x108]
push eax
call fcn.0042916f
add esp, 0xc
test eax, eax
jne 0x43aec8
lea eax, [ebp - 0x108]
push eax
call fcn.0049e2d6
jmp 0x43aec7
push str.temp
push eax
call fcn.004ee718
pop ecx
pop ecx
test eax, eax
jne 0x43aec8
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.0047d10c
lea eax, [ebp - 0x108]
push eax
call fcn.0042916f
add esp, 0xc
test eax, eax
je 0x43aec8
lea eax, [ebp - 0x108]
push eax
push str.:10:Installation_Exception:_Archive_manually_redirected_to___s__
call fcn.004255b9
pop ecx
pop ecx
lea ebx, [ebp - 0x108]
call fcn.0040cf42
push ebx
call fcn.0042916f
pop ecx
test eax, eax
je 0x43ad49
lea eax, [ebp - 0x108]
cmp ebx, eax
jne 0x43aef9
push ebx
push str.:7:InstallPAULA__s__encountered_a_problem:_Had_to_use_alternate_archive_path.
call fcn.004255b9
pop ecx
pop ecx
call fcn.0042b812
cmp eax, 3
jne 0x43af0f
push ebx
call fcn.0043c137
pop ecx
jmp 0x43b34d
call fcn.0042b812
push str.DONE
mov dword [ebp - 0xbb8], eax
call fcn.0040f3a2
pop ecx
call fcn.00439ed1
push 0x3c
pop esi
cmp eax, 1
jle 0x43afef
push str.PAULA.exe
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
push 0x50d2a0
lea eax, [ebp - 0xa8c]
push 0x400
push eax
call fcn.004a0ddb
lea eax, [ebp - 0xa8c]
push eax
call fcn.0042916f
add esp, 0x18
test eax, eax
je 0x43b227
push 0x520150
call fcn.0040f3a2
mov dword [esp], str._n_The_previous_setup_process_did_not_complete.
call fcn.0040f3a2
mov dword [esp], str._n_You_can_either_Resume_from_where_you_left_off_
call fcn.0040f3a2
mov dword [esp], str._n_or_you_can_start_over_from_the_beginning.
call fcn.0040f3a2
mov dword [esp], str._n_Select_NO_if_you_would_like_to_start_over.
call fcn.0040f3a2
mov dword [esp], str._n_n_Would_you_like_to_resume_setup___Y_N_
call fcn.0040f3a2
push 0
call fcn.00434115
pop ecx
pop ecx
test eax, eax
je 0x43b227
call fcn.0043dc1e
push str._n_n_n__Please_wait_a_moment_for_PAULA_Setup_to_start..._n_n
call fcn.0040f3a2
mov dword [esp], 0x1388
call fcn.00433b8b
pop ecx
xor eax, eax
inc eax
jmp 0x43b34d
push 0x40
lea eax, [ebp - 0x148]
push 0
push eax
call fcn.004e4da0
push 0x5202a8
call fcn.004115eb
push 0
push 0
push ebx
call fcn.0042aa40
imul eax, eax, 3
push eax
call fcn.0043d748
add esp, 0x20
test eax, eax
je 0x43b34b
push 0x5202ac
call fcn.0040f3a2
pop ecx
mov edi, esi
push 0x2a
push 0x5104c8
call fcn.0040f3a2
pop ecx
pop ecx
sub edi, 1
jne 0x43b034
push 0x2a
push 0x3a
push edi
push str.ZXh_E_co_cV_ta
call fcn.004a0bb6
pop ecx
pop ecx
push eax
call fcn.0049db8f
pop ecx
pop ecx
push eax
push 0x2a
push str._n_c_s_c_n
call fcn.0040f3a2
add esp, 0x10
push 0x2a
push 0x5104c8
call fcn.0040f3a2
pop ecx
pop ecx
sub esi, 1
jne 0x43b070
cmp dword [ebp - 0xbb8], 2
jne 0x43b0bd
lea eax, [ebp - 0x681]
mov dword [ebp - 0xbc0], 0x34b
mov dword [ebp - 0xbb4], eax
mov esi, 0x517d4c
push 0xc
mov dword [ebp - 0xbbc], 0xf
mov eax, str.EY_aQ4_v8YpcWSY8uNt_Qq_jk1N
jmp 0x43b153
push 0
push str.tZcfUbEfZgb_llGP_jW5__pW__WrpulHq_wHac1q_P_u__ik
mov dword [ebp - 0xbc0], 0x21f
call fcn.004a0bb6
push eax
mov esi, 0x517d4c
push esi
call fcn.0040f3a2
push 0
push str.MdeVMTUPEXi__eXhfh_ZWfuj_Edq_ivu__hvyalZpijtUy5_U_9__sb
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
push 0
push str.bEWUTQk_bQ_f_EagQl_a_RK3r_TyQ2_neVcg_EQiyQ2uUgmu
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
push 0
push str.XdmhiT_EYaSVKVqou_hXq_ahhEagdxgqlTfsbIei_moEZx6qK_4_e
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
add esp, 0x40
push 0
push str.a_bPoqIaanUvSYyRaaofhEughraXc3MIL_VTGO_DYE0r
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
add esp, 0x10
mov dword [ebp - 0xbbc], 0xa
lea eax, [ebp - 0x686]
mov esi, str._n_n__s
mov dword [ebp - 0xbb4], eax
mov eax, str._Te_UK_UdE_p__WE_ctb_rO_qK6q_A
push 7
xor ecx, ecx
pop edi
push ecx
push eax
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
push 0x20
lea eax, [ebp - 0x68c]
push 0x19
push eax
call fcn.0043328f
lea eax, [ebp - 0x68c]
push eax
call fcn.004a0481
push edi
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.004a11a5
push dword [ebp - 0xbb4]
call fcn.004ef9cb
add esp, 0x30
mov dword [ebp - 0xbb4], eax
lea eax, [ebp - 0xba0]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 0x10
lea esi, [ebp - 0xba0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0049240a
mov eax, dword [ebp - 0xbb4]
mov word [ebp - 0xb92], ax
lea eax, [ebp - 0x68c]
push eax
call fcn.004ee800
add esp, 0x14
cmp eax, dword [ebp - 0xbbc]
jne 0x43c010
lea eax, [ebp - 0x148]
push eax
call fcn.0049f277
pop ecx
cmp eax, dword [ebp - 0xbc0]
jne 0x43c010
call fcn.0040cf42
push 0x40
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.004a11a5
add esp, 0xc
push 0
push 0
call fcn.0043d80e
call fcn.00498696
push 0x52058c
call fcn.004115eb
push str.Installation__Phase_1_of_5_
call fcn.0041128e
push 0
lea eax, [ebp - 0xbb0]
push eax
push 0
call fcn.0042b1a1
add esp, 0xc
lea esi, [ebp - 0xbb0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004ca980
add esp, 0x10
lea esi, [ebp - 0xba0]
push eax
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004ca980
add esp, 0x10
push eax
call fcn.004ca75a
push eax
call fcn.004ee48a
add esp, 0xc
cmp eax, 7
jle 0x43b35c
push 0x5202ac
call fcn.0040f3a2
pop ecx
push 0x37
pop esi
push 0x21
push 0x5104c8
call fcn.0040f3a2
pop ecx
pop ecx
sub esi, 1
jne 0x43b2ae
xor ebx, ebx
push ebx
push str._ur3EZNuagxU___siggSU_HTm_umausos_fu
call fcn.004a0bb6
push eax
mov esi, 0x517d4c
push esi
call fcn.0040f3a2
push ebx
push str.t_ciY_Qje_Z_UxpHTlecprPj_POUoVmT_jNvV_WUzyeo6uxncUbMm0_3cHge_
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
push ebx
push str.zZel_oKfcVaUbtehKemh_ekzEsgsuKawp_zp_sa_jwyK___X__nX._h.9amc
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
push ebx
push str.bOEmX_m_gV_QPccQCk_p_yL_Ucyv_CJpgbqEvlYplaRKd_Q__volf_
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
add esp, 0x40
push ebx
push str.cKXTooacfY_RYfRul__Te_WE__f_
call fcn.004a0bb6
push eax
push esi
call fcn.0040f3a2
push ebx
push str.tT_WYPiY_EeeKUR_Ek_fXgrdw7MF
call fcn.004a0bb6
push eax
push 0x51ffa0
call fcn.0040f3a2
push ebx
push ebx
call fcn.0043d80e
push ebx
call fcn.00433b8b
add esp, 0x2c
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e3632
leave
ret
mov eax, dword [ebp - 0xbb4]
lea esi, [ebp - 0xbb0]
sub esp, 0x10
mov word [ebp - 0xba2], ax
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0043d695
add esp, 0x10
call fcn.0047d25f
test eax, eax
je 0x43b3cb
push 0x5206c4
call fcn.0040f3a2
xor ebx, ebx
push ebx
push str._Gxs_WcheUoeZcTfglYjwhVUbToWtchaXze_m__ZWJ_phglS
call fcn.004a0bb6
push eax
push 0x517d4c
call fcn.0040f3a2
push str._n_nPress_any_key_to_cancel...
call fcn.0040f3a2
push ebx
push ebx
call fcn.0043d80e
push 0x493e0
call fcn.00433b8b
add esp, 0x24
jmp 0x43b34b
push 0x520754
call fcn.0040f3a2
mov esi, dword [ebp - 0xbb8]
mov ecx, str.vd_ZGZg_fWaecYkdjhnaK3_.x:ZUY3_kcfzy_2gYk
cmp esi, 2
mov eax, str.paeTMWgZ_H_fQbump_b_gExW_AMLcWd_sruk_eX
push 0
cmove eax, ecx
push eax
call fcn.004a0bb6
push eax
mov edi, 0x517d4c
push edi
call fcn.0040f3a2
push 0
push str._nm_Q_lEQZWNZ_evM_eMsdrh_mg__ZoT._f
call fcn.004a0bb6
push eax
call fcn.00434115
add esp, 0x20
test eax, eax
je 0x43c000
push 0x50eafc
call fcn.0040f3a2
pop ecx
call fcn.0043dd50
test eax, eax
je 0x43c000
push 1
push 1
call fcn.0043d80e
pop ecx
pop ecx
test eax, eax
jne 0x43b44e
push str.:7:InstallPAULA___encountered_a_problem:_SetPaulaSetupFlag___FAILED___
call fcn.004255b9
pop ecx
push 0
push 0
call fcn.0047ced0
push eax
call fcn.00429152
add esp, 0xc
test eax, eax
jne 0x43b476
push eax
push eax
push eax
call fcn.0047ced0
pop ecx
pop ecx
push eax
call fcn.004280f8
pop ecx
pop ecx
push str.ServerSync_
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
push 0x50d2a0
lea eax, [ebp - 0xa8c]
push 0x400
push eax
call fcn.004a0ddb
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429152
add esp, 0x18
test eax, eax
jne 0x43b4bf
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.004280f8
pop ecx
pop ecx
xor eax, eax
push eax
push 1
push 0x520864
push eax
push eax
call fcn.0047cdb0
pop ecx
pop ecx
push eax
push 0x520868
push 0
call fcn.0049e318
add esp, 0x10
push eax
call fcn.00429ec2
push str._nPlease_wait..._This_could_take_a_few_minutes...
call fcn.0040f3a2
add esp, 0x10
lea eax, [ebp - 0x188]
push 0xde
push 1
push eax
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
push ebx
call fcn.00402962
add esp, 0x14
test eax, eax
jne 0x43b5f8
push eax
push eax
push ebx
call fcn.0042aa40
add esp, 0xc
push eax
call fcn.0040289c
push eax
push ebx
push str.:9:InstallPAULA__s__FAILED:_ExpandArchive___FAILED_during_installation.__bBadCheckSum_d:_Archive_size:__d
call fcn.004255b9
push str._n_n______________________________________________________________________
call fcn.0040f3a2
add esp, 0x14
call fcn.0040289c
test eax, eax
je 0x43b5ac
push str._n_ERROR:_The_archive_downloaded_is_corrupt.
call fcn.0040f3a2
mov dword [esp], str._n__This_may_occur_if_the_internet_connection_is_lost_while_downloading.
call fcn.0040f3a2
mov dword [esp], str._n__Please_download_the_PAULA_installation_from_the_web_site_again.
call fcn.0040f3a2
mov dword [esp], str._n__Press_any_key_to_return_to_the_download_page...
call fcn.0040f3a2
push 0
call fcn.00433b8b
push str._n_n_nOpening_web_page__please_wait....
call fcn.0040f3a2
push str.InstallPaula2.exe
push 0
call fcn.0047d10c
push eax
call fcn.00429e69
add esp, 0x18
jmp 0x43b34b
push str._n_ERROR:_The_installation_archive_could_not_be_expanded.
call fcn.0040f3a2
mov dword [esp], str._n__Please_ensure_the_root_drive_is_not_full_and_that_the_downloaded
call fcn.0040f3a2
mov dword [esp], str._n__file_is_accessable.__You_may_call_HoodSoftware_Tech_Support
call fcn.0040f3a2
mov dword [esp], 0x50e360
push str._n__for_help_with_this_issue_at__s.
call fcn.0040f3a2
push str._n__Press_any_key_to_exit...
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x10
jmp 0x43b34b
cmp eax, 0xffffffff
jne 0x43b6eb
lea eax, [ebp - 0x188]
push eax
push ebx
push 0
push str.11_____ra__y6IBBQ90____gTM_c6niXlpnZ__Km1____dn_Df_vBcU2gzhXu_cv_vb.W_LS
call fcn.004a0bb6
pop ecx
pop ecx
push eax
call fcn.004255b9
push 0x5204a8
call fcn.0040f3a2
add esp, 0x10
push 0x3c
pop esi
push 0x21
push 0x5104c8
call fcn.0040f3a2
pop ecx
pop ecx
sub esi, 1
jne 0x43b62d
push esi
push str.xzux6E_fnGkXpb_dmE45_3Er_covcV_ZrQp_yZV_M
call fcn.004a0bb6
push eax
push str._n__s
call fcn.0040f3a2
push esi
push str.vagZSW__e_IT_Inuhi_hmnXscOcmzQneNgacgZTu_mdTq7jgs0
call fcn.004a0bb6
push eax
push str._n_________s
call fcn.0040f3a2
mov eax, dword [0x5a6170]
add esp, 0x20
mov ecx, eax
inc eax
mov dword [0x5a6170], eax
cmp ecx, 7
jge 0x43b6ad
push esi
push str.m_UXhNKVOKbYsMYiNPgSZyjP_fpV_KluOlXliiWrtOqrcs8vb_H93
call fcn.004a0bb6
push eax
push str._n_s
call fcn.00434115
add esp, 0x10
test eax, eax
jne 0x43c0cf
push 0x50eafc
call fcn.0040f3a2
pop ecx
xor ebx, ebx
push ebx
push str.zZel_oKqcRsshG5_oxov_oiRoT4oZWj___pjf_plg_uV3x__i__T_r__Eq6Xm
call fcn.004a0bb6
push eax
push edi
call fcn.0040f3a2
push ebx
push str.t_gTQLcST_nKHhMtv_FO_
call fcn.004a0bb6
push eax
push edi
call fcn.0040f3a2
push ebx
call fcn.00433b8b
push str._n_n_n_n_n_n_n
call fcn.0040f3a2
add esp, 0x28
jmp 0x43b34b
push str.E32Settings.flg
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
mov edi, 0x50d2a0
lea eax, [ebp - 0xa8c]
push edi
push eax
call fcn.00404f28
lea eax, [ebp - 0xa8c]
push eax
call fcn.0042916f
add esp, 0x14
test eax, eax
je 0x43b763
call fcn.0040d69b
push str.PaulaConfig.cfg
xor esi, esi
push 0
inc esi
push 0
mov dword [ebp - 0xbb4], esi
call fcn.0047cdb0
pop ecx
pop ecx
push eax
push edi
lea eax, [ebp - 0xa8c]
push 0x400
push eax
call fcn.004a0ddb
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429e69
add esp, 0x18
jmp 0x43b7ad
cmp esi, 2
jne 0x43b7a5
push ebx
push str.:9:InstallPAULA___s___encountered_a_problem:_the_EXE_has_been_flagged_as_a_DEMO_but_the_demo_file_flag_is_not_in_the_archive___
call fcn.004255b9
push str._n_n______________________________________
call fcn.0040f3a2
push str._n_ERROR:_The_DEMO_flag_is_missing.
call fcn.0040f3a2
push str._n________This_is_not_a_demo_
call fcn.0040f3a2
push str._n________Press_any_key_to_continue_anyway...
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x1c
xor esi, esi
mov dword [ebp - 0xbb4], esi
push 0x520db8
call fcn.0040f3a2
mov dword [esp], str._nPerforming_setup..._Please_wait_a_moment..
call fcn.0040f3a2
pop ecx
push 0xa
pop esi
push 0x50a0b4
call fcn.0040f3a2
mov dword [esp], 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esi, 1
jne 0x43b7c7
push 0x5204a8
call fcn.0040f3a2
lea eax, [ebp - 0x68c]
push 1
push eax
call fcn.0040e019
push eax
call fcn.0049f486
mov esi, dword [ebp - 0xbb4]
add esp, 0x10
mov edi, str.:9:InstallPAULA__s__FAILED:_CopyFile___s_____s___FAILED:__s
test eax, eax
je 0x43b829
mov esi, str._GetLastError_
push esi
push ebx
push str.:9:InstallPAULA__s__FAILED:_GetDesktopPath_GETPROFILE_ALLUSER__FAILED:__s
call fcn.004255b9
add esp, 0xc
jmp 0x43b889
lea eax, [ebp - 0x68c]
push str.PAULA.lnk
push eax
call fcn.0049d9e2
lea eax, [ebp - 0xa8c]
push str.Paula_2.lnk
push eax
call fcn.0047cdb0
push 0
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429cf7
add esp, 0x1c
test eax, eax
jne 0x43ba5c
mov esi, str._GetLastError_
lea eax, [ebp - 0x68c]
push esi
push eax
lea eax, [ebp - 0xa8c]
push eax
push ebx
push edi
call fcn.004255b9
add esp, 0x14
push ebx
push str.:5:InstallPAULA__s__EAP:_The_desktop_icon_could_not_be_placed_on_the_all_users_desktop_
call fcn.00425c08
lea eax, [ebp - 0x68c]
push 2
push eax
call fcn.0040e019
push eax
call fcn.0049f486
add esp, 0x14
test eax, eax
je 0x43b8cf
push esi
push ebx
push str.:9:InstallPAULA__s__FAILED:_GetDesktopPath_GETPROFILE_CURRENTUSER__FAILED:__s
call fcn.004255b9
lea eax, [ebp - 0x68c]
push str.C:Documents_and_SettingsAll_Users
push eax
call fcn.004ee4d0
add esp, 0x14
lea eax, [ebp - 0x68c]
push str.PAULA.lnk
push eax
call fcn.0049d9e2
lea eax, [ebp - 0xa8c]
push str.Paula_2.lnk
push eax
call fcn.0047cdb0
push 0
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429cf7
add esp, 0x1c
test eax, eax
jne 0x43b92e
and dword [ebp - 0xbb8], eax
lea eax, [ebp - 0x68c]
push esi
push eax
lea eax, [ebp - 0xa8c]
push eax
push ebx
push edi
call fcn.004255b9
add esp, 0x14
jmp 0x43b938
mov dword [ebp - 0xbb8], 1
cmp dword [ebp - 0xbb4], 0
je 0x43ba1f
push 0
push 0
call fcn.0047cdb0
push eax
lea eax, [ebp - 0xa8c]
push str._sCounting_Archive.lnk
push eax
call fcn.00404f28
lea eax, [ebp - 0x68c]
push eax
call fcn.004a0109
lea eax, [ebp - 0x68c]
push str.Counting_Archive.lnk
push eax
call fcn.004ee4e0
push 0
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429cf7
add esp, 0x2c
test eax, eax
jne 0x43b9b2
push esi
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
push ebx
push edi
call fcn.004255b9
add esp, 0x14
push 0
push 0
call fcn.0047cdb0
push eax
lea eax, [ebp - 0xa8c]
push str._sQuick_Keys.lnk
push eax
call fcn.00404f28
lea eax, [ebp - 0x68c]
push eax
call fcn.004a0109
lea eax, [ebp - 0x68c]
push str.Quick_Keys.lnk
push eax
call fcn.004ee4e0
push 0
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429cf7
add esp, 0x2c
test eax, eax
jne 0x43ba1f
push esi
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
push ebx
push edi
call fcn.004255b9
add esp, 0x14
cmp dword [ebp - 0xbb8], 0
jne 0x43bb48
push str._n_n____________________________________________
call fcn.0040f3a2
mov dword [esp], str._n_ERROR:_Could_not_create_the_desktop_icon_
call fcn.0040f3a2
mov dword [esp], str._n________Press_any_key...
call fcn.0040f3a2
push 0
call fcn.00433b8b
pop ecx
pop ecx
jmp 0x43bb48
test esi, esi
je 0x43bb48
push 0
push 0
call fcn.0047cdb0
push eax
lea eax, [ebp - 0xa8c]
push str._sCounting_Archive.lnk
push eax
call fcn.00404f28
lea eax, [ebp - 0x68c]
push eax
call fcn.004a0109
lea eax, [ebp - 0x68c]
push str.Counting_Archive.lnk
push eax
call fcn.004ee4e0
push 0
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429cf7
add esp, 0x2c
mov esi, str._GetLastError_
mov edi, str.:9:InstallPAULA__s__FAILED:_CopyFile___s_____s___FAILED:__s
test eax, eax
jne 0x43badb
push esi
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
push ebx
push edi
call fcn.004255b9
add esp, 0x14
push 0
push 0
call fcn.0047cdb0
push eax
lea eax, [ebp - 0xa8c]
push str._sQuick_Keys.lnk
push eax
call fcn.00404f28
lea eax, [ebp - 0x68c]
push eax
call fcn.004a0109
lea eax, [ebp - 0x68c]
push str.Quick_Keys.lnk
push eax
call fcn.004ee4e0
push 0
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
call fcn.00429cf7
add esp, 0x2c
test eax, eax
jne 0x43bb48
push esi
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0xa8c]
push eax
push ebx
push edi
call fcn.004255b9
add esp, 0x14
push str.PAULA.exe
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xa8c]
push 0x50d2a0
push eax
call fcn.00404f28
lea eax, [ebp - 0xa8c]
push eax
call fcn.0042916f
add esp, 0x14
test eax, eax
jne 0x43bbb7
lea eax, [ebp - 0xa8c]
push eax
push ebx
push str.:9:InstallPAULA__s__FAILED:_Could_not_find___s__
call fcn.004255b9
push str._n_n____________________________________________
call fcn.0040f3a2
push str._n_ERROR:_The_PAULA_installation_FAILED_
call fcn.0040f3a2
push str._n________Press_any_key...
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x1c
push 0
call fcn.004382ef
mov edi, str._n_n________________________________________________________
mov esi, str._n__________Press_any_key_to_continue_anyway...
pop ecx
test eax, eax
jne 0x43bbf8
push ebx
push str.:9:InstallPAULA__s__FAILED:_CreateSpawnInstallationScript___FAILED_
call fcn.004255b9
push edi
call fcn.0040f3a2
push str._n_WARNING:_Could_not_create_the_spawn_installation_script.
call fcn.0040f3a2
push esi
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x18
call fcn.00438996
test eax, eax
jne 0x43bc2c
push ebx
push str.:9:InstallPAULA__s__FAILED:_CreateStartupScript___FAILED_
call fcn.004255b9
push edi
call fcn.0040f3a2
push str._n_WARNING:_Could_not_create_the_startup_script.
call fcn.0040f3a2
push esi
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x18
push 0xffffffffffffffff
push 0
call fcn.0047ca1c
push eax
mov esi, str.HCTC
lea eax, [ebp - 0x68c]
push esi
push str.NET_SHARE___s___s___GRANT:Everyone_READ
push 0x400
push eax
call fcn.004a0ddb
lea eax, [ebp - 0x68c]
push eax
call fcn.004120cc
push str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
call fcn.00412502
push 0xffffffffffffffff
push 0
call fcn.0047ca1c
push eax
push esi
push str.NET_SHARE___s___s_
lea eax, [ebp - 0x68c]
push 0x400
push eax
call fcn.004a0ddb
add esp, 0x40
lea eax, [ebp - 0x68c]
push eax
call fcn.004120cc
mov dword [esp], str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
call fcn.00412502
mov dword [esp], str.Preparing_for_setup..._n_n_n_n_n_n_n_n_n_n_n_n
call fcn.0040f3a2
mov dword [esp], str.One_moment..._n_n
call fcn.0040f3a2
mov dword [esp], str.:8:SetFileUserRights___FAILED_during_installation.
call fcn.004255b9
mov dword [esp], str.E32Settings.flg
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xa8c]
push 0x50d2a0
push eax
call fcn.00404f28
lea eax, [ebp - 0xa8c]
push eax
call fcn.0042916f
add esp, 0x14
test eax, eax
je 0x43bf90
and dword [ebp - 0xbce], 0
lea eax, [ebp - 0xb90]
mov esi, 0x104
push esi
push 0
push eax
call fcn.004e4da0
push esi
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004e4da0
add esp, 0x18
mov esi, 0x598450
push esi
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x28c]
push 0x50d2a0
push eax
call fcn.00404f28
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004280f8
lea eax, [ebp - 0x28c]
push eax
push esi
push str.NET_SHARE___s___s___GRANT:Everyone_FULL
lea eax, [ebp - 0x68c]
push 0x400
push eax
call fcn.004a0ddb
lea eax, [ebp - 0x68c]
push eax
call fcn.004120cc
push str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
call fcn.00412502
lea eax, [ebp - 0x28c]
push eax
push esi
push str.NET_SHARE___s___s_
lea eax, [ebp - 0x68c]
push 0x400
push eax
call fcn.004a0ddb
add esp, 0x48
lea eax, [ebp - 0x68c]
push eax
call fcn.004120cc
mov dword [esp], str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_n
call fcn.00412502
push 0
push 0
call fcn.0047cdb0
push eax
lea eax, [ebp - 0xb90]
push str._sSA12_Archive
push eax
call fcn.00404f28
lea eax, [ebp - 0xb90]
push eax
call fcn.0042916f
add esp, 0x1c
mov esi, str._n________Press_any_key_to_continue...
test eax, eax
jne 0x43be33
lea eax, [ebp - 0xb90]
push eax
push ebx
push str.:9:InstallPAULA__s__FAILED:_This_is_a_DEMO_install_but_could_not_find___s__
call fcn.004255b9
push edi
call fcn.0040f3a2
push str._n_ERROR:_Could_not_find_the_SA12_Archive_
call fcn.0040f3a2
push esi
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x1c
push str.P2_DC001
push 0x598450
push 0
push 0
call fcn.0047cdb0
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x28c]
push str._s_s_sSA12_Archive
push eax
call fcn.00404f28
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004280f8
add esp, 0x1c
test eax, eax
jne 0x43bea8
lea eax, [ebp - 0x28c]
push eax
push ebx
push str.:9:InstallPAULA__s__FAILED:_CreateDirectorySuper___s___FAILED_
call fcn.004255b9
push edi
call fcn.0040f3a2
lea eax, [ebp - 0x28c]
push eax
push str._n_ERROR:_Could_not_create___s__
call fcn.0040f3a2
push esi
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x20
push str._n_nCopying_Virtual_SA12_Data..._n_n_n
call fcn.0040f3a2
lea eax, [ebp - 0xb90]
push eax
call fcn.004ee800
inc eax
pop ecx
pop ecx
cmp eax, 0x104
jae 0x43c131
mov byte [ebp + eax - 0xb90], 0
lea eax, [ebp - 0x28c]
push eax
call fcn.004ee800
inc eax
pop ecx
cmp eax, 0x104
jae 0x43c131
xor ecx, ecx
mov dword [ebp - 0xbdc], 2
mov byte [ebp + eax - 0x28c], cl
lea eax, [ebp - 0xb90]
mov dword [ebp - 0xbd8], eax
lea eax, [ebp - 0x28c]
mov dword [ebp - 0xbd4], eax
mov eax, 0x710
mov word [ebp - 0xbd0], ax
lea eax, [ebp - 0xbe0]
push eax
mov dword [ebp - 0xbe0], ecx
mov dword [ebp - 0xbca], ecx
mov dword [ebp - 0xbc6], str.PAULA_is_creating_Virtual_SA12...
call dword [sym.imp.SHELL32.dll_SHFileOperationA]
test eax, eax
je 0x43bff0
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0xb90]
push eax
push ebx
push str.:9:InstallPAULA__s__FAILED:_SHFileOperation___s_____s___FAILED:_error_code__d
call fcn.004255b9
push edi
call fcn.0040f3a2
lea eax, [ebp - 0x28c]
push eax
push str._n_ERROR:_SHFileOperation___FAILED_
call fcn.0040f3a2
push esi
call fcn.0040f3a2
push 0
call fcn.00433b8b
add esp, 0x28
push 0
push 1
call fcn.0043d80e
push str._nDone._n
call fcn.0040f3a2
add esp, 0xc
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.004250fa
sub esp, 0x10
lea esi, [ebp - 0xba0]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00492a18
call fcn.00425129
call fcn.0043dc1e
push str._n_nPlease_wait_a_moment_for_PAULA_to_start..._n_n
call fcn.0040f3a2
push 0x1388
call fcn.00433b8b
add esp, 0x18
jmp 0x43afe7
push 0
push str.Click2.wav
call fcn.0049b74c
pop ecx
pop ecx
jmp 0x43bf90
push 0
push 0
call fcn.0043d80e
pop ecx
pop ecx
jmp 0x43b34b
lea eax, [ebp - 0x68c]
push str.open
push eax
call fcn.004ee718
pop ecx
pop ecx
test eax, eax
je 0x43c10f
lea eax, [ebp - 0x68c]
push str.temp
push eax
call fcn.004ee718
pop ecx
pop ecx
test eax, eax
je 0x43c10f
lea eax, [ebp - 0x68c]
push eax
push ebx
push 0
push str.127_XT_nZd__RZ_HS190___IKrnk_Y_cW_bSeg0___Nnoj7Vpa_2EPQw6QTGpc
call fcn.004a0bb6
pop ecx
pop ecx
push eax
call fcn.004255b9
push 0x5204a8
call fcn.0040f3a2
add esp, 0x10
push 0x3c
pop esi
push 0x21
push 0x5104c8
call fcn.0040f3a2
pop ecx
pop ecx
sub esi, 1
jne 0x43c072
push esi
push str.qWQQjjZ_G_eaKaXSakksS_P_Xoo_tpr_oc_ac9
call fcn.004a0bb6
push eax
mov esi, 0x517d4c
push esi
call fcn.0040f3a2
mov eax, dword [0x5a616c]
add esp, 0x10
mov ecx, eax
inc eax
mov dword [0x5a616c], eax
cmp ecx, 7
jge 0x43c0e5
push 0
push str.m_UXhNKVOKbYsMYiNPgSZyjP_fpV_KluOlXliiWrtOqrcs8vb_H93
call fcn.004a0bb6
push eax
push str._n_n_s
call fcn.00434115
add esp, 0x10
test eax, eax
je 0x43c0da
push ebx
call fcn.0043ac0f
jmp 0x43af09
push 0x50eafc
call fcn.0040f3a2
pop ecx
xor ebx, ebx
push ebx
push str.zZel_oKqcRsshG5_oxov_oiRoT4oZWj___pjf_plg_uV3x__i__T_r__Eq6Xm
call fcn.004a0bb6
push eax
push 0x51ffa0
call fcn.0040f3a2
push ebx
push str.tT_WYPiY_EeeKUR_Ek_fXgrdw7MF
call fcn.004a0bb6
push eax
push esi
jmp 0x43b6ce
push 0
push 0
call fcn.0047d10c
push eax
push str.explorer___s_
call fcn.0041218d
push ebx
call fcn.0043ac0f
add esp, 0x14
jmp 0x43b34d
call fcn.004e37db
int3