Function at 0x431847
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4df49e
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0xfe0
push ebx
push esi
push edi
mov eax, dword [0x524330]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xdf8], ecx
and dword [ebp - 0x8f8], 0
and dword [ebp - 4], 0
mov byte [ebp - 0x1d], 1
call fcn.00498191
push eax
lea ecx, [ebp - 0x18]
call fcn.00403ced
mov byte [ebp - 4], 1
call fcn.00498191
push eax
lea ecx, [ebp - 0x44]
call fcn.00403ced
mov byte [ebp - 4], 2
push 0
call fcn.004bf06f
pop ecx
push eax
call fcn.004bf03b
pop ecx
call fcn.004bf04d
cdq
push 0x64
pop ecx
idiv ecx
inc edx
mov dword [ebp - 0x3c], edx
mov byte [ebp - 0x3e], 0
push 0x4f5ed4
lea ecx, [ebp - 0x2a0]
call fcn.00403a33
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x8f8]
or eax, 1
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x908], eax
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x908]
lea ecx, [ebp - 0x2b0]
call fcn.0044f086
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov dword [ebp - 0x938], eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, dword [ebp - 0x938]
call fcn.004965d9
movzx eax, al
neg eax
sbb eax, eax
inc eax
movzx eax, al
test eax, eax
je 0x42d5fe
push 0x4f5ee0
lea ecx, [ebp - 0x2cc]
call fcn.00403a33
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x8f8]
or eax, 2
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.0048498d
movzx eax, al
test eax, eax
je 0x42d5fe
mov dword [ebp - 0xdfc], 1
jmp 0x42d605
and dword [ebp - 0xdfc], 0
mov al, byte [ebp - 0xdfc]
mov byte [ebp - 0x281], al
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x8f8]
and eax, 2
je 0x42d639
and dword [ebp - 0x8f8], 0xfffffffd
push 0
push 1
lea ecx, [ebp - 0x2cc]
call fcn.00404010
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x8f8]
and eax, 1
je 0x42d661
and dword [ebp - 0x8f8], 0xfffffffe
push 0
push 1
lea ecx, [ebp - 0x2a0]
call fcn.00404010
movzx eax, byte [ebp - 0x281]
test eax, eax
je 0x42d717
push 0x4f5eec
lea ecx, [ebp - 0x2e8]
call fcn.00403a33
mov byte [ebp - 4], 5
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849e5
mov dword [ebp - 0xe00], eax
mov eax, dword [ebp - 0xe00]
mov dword [ebp - 0x954], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x954]
cmp dword [eax + 0x18], 8
jb 0x42d6d4
mov eax, dword [ebp - 0x954]
mov eax, dword [eax + 4]
mov dword [ebp - 0xe04], eax
jmp 0x42d6e3
mov eax, dword [ebp - 0x954]
add eax, 4
mov dword [ebp - 0xe04], eax
push dword [ebp - 0xe04]
lea ecx, [ebp - 0x18]
call fcn.00403361
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x304]
call fcn.00404010
mov byte [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x2e8]
call fcn.00404010
push 0x4f5ef8
lea ecx, [ebp - 0x324]
call fcn.00403a33
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x8f8]
or eax, 4
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x96c], eax
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x96c]
lea ecx, [ebp - 0x334]
call fcn.0044f086
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov dword [ebp - 0x99c], eax
lea eax, [ebp - 0x334]
push eax
mov ecx, dword [ebp - 0x99c]
call fcn.004965d9
movzx eax, al
neg eax
sbb eax, eax
inc eax
movzx eax, al
test eax, eax
je 0x42d7e4
push 0x4f5f18
lea ecx, [ebp - 0x350]
call fcn.00403a33
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0x8f8]
or eax, 8
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.0048498d
movzx eax, al
test eax, eax
je 0x42d7e4
mov dword [ebp - 0xe08], 1
jmp 0x42d7eb
and dword [ebp - 0xe08], 0
mov al, byte [ebp - 0xe08]
mov byte [ebp - 0x305], al
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x8f8]
and eax, 8
je 0x42d81f
and dword [ebp - 0x8f8], 0xfffffff7
push 0
push 1
lea ecx, [ebp - 0x350]
call fcn.00404010
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x8f8]
and eax, 4
je 0x42d847
and dword [ebp - 0x8f8], 0xfffffffb
push 0
push 1
lea ecx, [ebp - 0x324]
call fcn.00404010
movzx eax, byte [ebp - 0x305]
test eax, eax
je 0x42d96a
call fcn.00498191
push eax
lea ecx, [ebp - 0x4c]
call fcn.00403ced
mov byte [ebp - 4], 9
push str.admin_required
lea ecx, [ebp - 0x36c]
call fcn.00403a33
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849e5
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0xe0c]
mov dword [ebp - 0x9b8], eax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x9b8]
cmp dword [eax + 0x18], 8
jb 0x42d8cc
mov eax, dword [ebp - 0x9b8]
mov eax, dword [eax + 4]
mov dword [ebp - 0xe10], eax
jmp 0x42d8db
mov eax, dword [ebp - 0x9b8]
add eax, 4
mov dword [ebp - 0xe10], eax
push dword [ebp - 0xe10]
lea ecx, [ebp - 0x4c]
call fcn.00403361
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x388]
call fcn.00404010
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x36c]
call fcn.00404010
push 0
push 0x4f5f58
lea ecx, [ebp - 0x4c]
call fcn.0040355e
xor ecx, ecx
cmp eax, 0xffffffff
setg cl
mov byte [ebp - 0x46], cl
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x42d94f
movzx eax, byte [0x52589a]
test eax, eax
jne 0x42d94f
mov byte [ebp - 0x1d], 0
push str.Admin_required__not_local_admin
push dword [ebp + 0x28]
call fcn.00461af8
pop ecx
pop ecx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x4c]
sub eax, 0x10
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9d0]
call fcn.0040110c
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42da43
push 0x4f5f80
lea ecx, [ebp - 0x3a8]
call fcn.00403a33
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x8f8]
or eax, 0x10
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x9e0], eax
lea eax, [ebp + 8]
push eax
push dword [ebp - 0x9e0]
lea ecx, [ebp - 0x3b8]
call fcn.0044f086
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov dword [ebp - 0xa10], eax
lea eax, [ebp - 0x3b8]
push eax
mov ecx, dword [ebp - 0xa10]
call fcn.004965d9
movzx eax, al
neg eax
sbb eax, eax
inc eax
movzx eax, al
test eax, eax
je 0x42da43
push 0x4f5fac
lea ecx, [ebp - 0x3d4]
call fcn.00403a33
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x8f8]
or eax, 0x20
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.0048498d
movzx eax, al
test eax, eax
je 0x42da43
mov dword [ebp - 0xe14], 1
jmp 0x42da4a
and dword [ebp - 0xe14], 0
mov al, byte [ebp - 0xe14]
mov byte [ebp - 0x389], al
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0x8f8]
and eax, 0x20
je 0x42da7e
and dword [ebp - 0x8f8], 0xffffffdf
push 0
push 1
lea ecx, [ebp - 0x3d4]
call fcn.00404010
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x8f8]
and eax, 0x10
je 0x42daa6
and dword [ebp - 0x8f8], 0xffffffef
push 0
push 1
lea ecx, [ebp - 0x3a8]
call fcn.00404010
movzx eax, byte [ebp - 0x389]
test eax, eax
je 0x42dbc9
call fcn.00498191
push eax
lea ecx, [ebp - 0x54]
call fcn.00403ced
mov byte [ebp - 4], 0xe
push str.workstation_required
lea ecx, [ebp - 0x3f0]
call fcn.00403a33
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849e5
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0xa2c], eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0xa2c]
cmp dword [eax + 0x18], 8
jb 0x42db2b
mov eax, dword [ebp - 0xa2c]
mov eax, dword [eax + 4]
mov dword [ebp - 0xe1c], eax
jmp 0x42db3a
mov eax, dword [ebp - 0xa2c]
add eax, 4
mov dword [ebp - 0xe1c], eax
push dword [ebp - 0xe1c]
lea ecx, [ebp - 0x54]
call fcn.00403361
mov byte [ebp - 4], 0xf
push 0
push 1
lea ecx, [ebp - 0x40c]
call fcn.00404010
mov byte [ebp - 4], 0xe
push 0
push 1
lea ecx, [ebp - 0x3f0]
call fcn.00404010
push 0
push 0x4f6004
lea ecx, [ebp - 0x54]
call fcn.0040355e
xor ecx, ecx
cmp eax, 0xffffffff
setg cl
mov byte [ebp - 0x4d], cl
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x42dbae
movzx eax, byte [0x52589b]
test eax, eax
je 0x42dbae
mov byte [ebp - 0x1d], 0
push str.WorkStation_required__not_a_workstation
push dword [ebp + 0x28]
call fcn.00461af8
pop ecx
pop ecx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x54]
sub eax, 0x10
mov dword [ebp - 0xa44], eax
mov ecx, dword [ebp - 0xa44]
call fcn.0040110c
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42dca4
push 0x4f6034
lea ecx, [ebp - 0x42c]
call fcn.00403a33
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x8f8]
or eax, 0x40
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xa54], eax
lea eax, [ebp + 8]
push eax
push dword [ebp - 0xa54]
lea ecx, [ebp - 0x43c]
call fcn.0044f086
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov dword [ebp - 0xa84], eax
lea eax, [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0xa84]
call fcn.004965d9
movzx eax, al
neg eax
sbb eax, eax
inc eax
movzx eax, al
test eax, eax
je 0x42dca4
push 0x4f6058
lea ecx, [ebp - 0x458]
call fcn.00403a33
mov dword [ebp - 4], 0x12
mov eax, dword [ebp - 0x8f8]
or eax, 0x80
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.0048498d
movzx eax, al
test eax, eax
je 0x42dca4
mov dword [ebp - 0xe20], 1
jmp 0x42dcab
and dword [ebp - 0xe20], 0
mov al, byte [ebp - 0xe20]
mov byte [ebp - 0x40d], al
mov dword [ebp - 4], 0x11
mov eax, dword [ebp - 0x8f8]
and eax, 0x80
je 0x42dce4
and dword [ebp - 0x8f8], 0xffffff7f
push 0
push 1
lea ecx, [ebp - 0x458]
call fcn.00404010
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x8f8]
and eax, 0x40
je 0x42dd0c
and dword [ebp - 0x8f8], 0xffffffbf
push 0
push 1
lea ecx, [ebp - 0x42c]
call fcn.00404010
movzx eax, byte [ebp - 0x40d]
test eax, eax
je 0x42de2f
call fcn.00498191
push eax
lea ecx, [ebp - 0x58]
call fcn.00403ced
mov byte [ebp - 4], 0x13
push str.nonadmin_required
lea ecx, [ebp - 0x474]
call fcn.00403a33
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849e5
mov dword [ebp - 0xe24], eax
mov eax, dword [ebp - 0xe24]
mov dword [ebp - 0xaa0], eax
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xaa0]
cmp dword [eax + 0x18], 8
jb 0x42dd91
mov eax, dword [ebp - 0xaa0]
mov eax, dword [eax + 4]
mov dword [ebp - 0xe28], eax
jmp 0x42dda0
mov eax, dword [ebp - 0xaa0]
add eax, 4
mov dword [ebp - 0xe28], eax
push dword [ebp - 0xe28]
lea ecx, [ebp - 0x58]
call fcn.00403361
mov byte [ebp - 4], 0x14
push 0
push 1
lea ecx, [ebp - 0x490]
call fcn.00404010
mov byte [ebp - 4], 0x13
push 0
push 1
lea ecx, [ebp - 0x474]
call fcn.00404010
push 0
push 0x4f60a0
lea ecx, [ebp - 0x58]
call fcn.0040355e
xor ecx, ecx
cmp eax, 0xffffffff
setg cl
mov byte [ebp - 0x59], cl
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x42de14
movzx eax, byte [0x52589a]
test eax, eax
je 0x42de14
mov byte [ebp - 0x1d], 0
push str.Non_admin_required__is_admin
push dword [ebp + 0x28]
call fcn.00461af8
pop ecx
pop ecx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x58]
sub eax, 0x10
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xab8]
call fcn.0040110c
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42de69
push 0
push str.lesstab
lea ecx, [ebp - 0x18]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42de69
movzx eax, byte [0x52589a]
test eax, eax
jne 0x42de69
mov byte [ebp - 0x1d], 0
push str.Offer_has_lesstab_in_it__not_admin
push dword [ebp + 0x28]
call fcn.00461af8
pop ecx
pop ecx
push 0x4f60f4
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x494], esp
mov dword [ebp - 0xac8], eax
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0xac8]
call fcn.0044a14d
lea eax, [ebp - 0x2c]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe2c], eax
mov byte [ebp - 4], 0x16
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42df7a
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xacc], eax
cmp dword [ebp - 0xacc], 0
jle 0x42df7a
push ecx
mov eax, esp
mov dword [ebp - 0x498], esp
mov dword [ebp - 0xad0], eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0xad0]
call fcn.00448edc
call fcn.0045ed3b
pop ecx
mov byte [ebp - 0xe2d], al
movzx eax, byte [ebp - 0xe2d]
test eax, eax
jne 0x42df7a
push dword [ebp - 0x2c]
push ecx
mov ecx, esp
mov dword [ebp - 0x49c], esp
push 0x4f6114
call fcn.00403241
push 0
lea eax, [ebp - 0x4a0]
push eax
call fcn.004596cf
add esp, 0xc
mov dword [ebp - 0xe34], eax
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0xe38], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0xe38]
call fcn.00403617
push dword [eax]
push str.The_brand___s__not_in_whitelist:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x4a0]
sub eax, 0x10
mov dword [ebp - 0xae4], eax
mov ecx, dword [ebp - 0xae4]
call fcn.0040110c
mov byte [ebp - 0x1d], 0
push 0x4f6150
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x4a4], esp
mov dword [ebp - 0xae8], eax
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0xae8]
call fcn.0044a14d
lea eax, [ebp - 0x14]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe3c], eax
mov byte [ebp - 4], 0x18
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42e08b
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xaec], eax
cmp dword [ebp - 0xaec], 0
jle 0x42e08b
push ecx
mov eax, esp
mov dword [ebp - 0x4a8], esp
mov dword [ebp - 0xaf0], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0xaf0]
call fcn.00448edc
call fcn.0045f00b
pop ecx
mov byte [ebp - 0xe3d], al
movzx eax, byte [ebp - 0xe3d]
test eax, eax
je 0x42e08b
push dword [ebp - 0x14]
push ecx
mov ecx, esp
mov dword [ebp - 0x4ac], esp
push 0x4f6170
call fcn.00403241
push 0
lea eax, [ebp - 0x4b0]
push eax
call fcn.004596cf
add esp, 0xc
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0xe44]
mov dword [ebp - 0xe48], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0xe48]
call fcn.00403617
push dword [eax]
push str.The_brand___s__in_blacklist:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x4b0]
sub eax, 0x10
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
call fcn.0040110c
mov byte [ebp - 0x1d], 0
push 0x4f61a8
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x4b4], esp
mov dword [ebp - 0xb08], eax
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0xb08]
call fcn.0044a14d
lea eax, [ebp - 0x28]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe4c], eax
mov byte [ebp - 4], 0x1a
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42e18b
mov eax, dword [ebp - 0x28]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xb0c], eax
cmp dword [ebp - 0xb0c], 0
jle 0x42e18b
push ecx
mov eax, esp
mov dword [ebp - 0x4b8], esp
mov dword [ebp - 0xb10], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0xb10]
call fcn.00448edc
call fcn.0045f2db
pop ecx
mov byte [ebp - 0xe4d], al
movzx eax, byte [ebp - 0xe4d]
test eax, eax
jne 0x42e18b
push 0x9c
lea eax, [ebp - 0x4bc]
push eax
call fcn.00458eb3
pop ecx
pop ecx
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 0xe54]
mov dword [ebp - 0xe58], eax
mov byte [ebp - 4], 0x1b
push dword [ebp - 0x28]
mov ecx, dword [ebp - 0xe58]
call fcn.00403617
push dword [eax]
push str.The_adprovider___s__not_in_whitelist:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x4bc]
sub eax, 0x10
mov dword [ebp - 0xb1c], eax
mov ecx, dword [ebp - 0xb1c]
call fcn.0040110c
mov byte [ebp - 0x1d], 0
push 0x4f6200
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x4c0], esp
mov dword [ebp - 0xb20], eax
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0xb20]
call fcn.0044a14d
lea eax, [ebp - 0x38]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe5c], eax
mov byte [ebp - 4], 0x1c
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42e28b
mov eax, dword [ebp - 0x38]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0xb24], 0
jle 0x42e28b
push ecx
mov eax, esp
mov dword [ebp - 0x4c4], esp
mov dword [ebp - 0xb28], eax
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0xb28]
call fcn.00448edc
call fcn.0045f5b2
pop ecx
mov byte [ebp - 0xe5d], al
movzx eax, byte [ebp - 0xe5d]
test eax, eax
je 0x42e28b
push 0x9c
lea eax, [ebp - 0x4c8]
push eax
call fcn.00458eb3
pop ecx
pop ecx
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0xe68], eax
mov byte [ebp - 4], 0x1d
push dword [ebp - 0x38]
mov ecx, dword [ebp - 0xe68]
call fcn.00403617
push dword [eax]
push str.The_adprovider___s__in_blacklist:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x4c8]
sub eax, 0x10
mov dword [ebp - 0xb34], eax
mov ecx, dword [ebp - 0xb34]
call fcn.0040110c
mov byte [ebp - 0x1d], 0
push 0x4f6254
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x4cc], esp
mov dword [ebp - 0xb38], eax
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0xb38]
call fcn.0044a14d
lea eax, [ebp - 0x34]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe6c], eax
mov byte [ebp - 4], 0x1e
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42e38b
mov eax, dword [ebp - 0x34]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xb3c], eax
cmp dword [ebp - 0xb3c], 0
jle 0x42e38b
push ecx
mov eax, esp
mov dword [ebp - 0x4d0], esp
mov dword [ebp - 0xb40], eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xb40]
call fcn.00448edc
call fcn.0045f889
pop ecx
mov byte [ebp - 0xe6d], al
movzx eax, byte [ebp - 0xe6d]
test eax, eax
je 0x42e38b
push 0x91
lea eax, [ebp - 0x4d4]
push eax
call fcn.00458eb3
pop ecx
pop ecx
mov dword [ebp - 0xe74], eax
mov eax, dword [ebp - 0xe74]
mov dword [ebp - 0xe78], eax
mov byte [ebp - 4], 0x1f
push dword [ebp - 0x34]
mov ecx, dword [ebp - 0xe78]
call fcn.00403617
push dword [eax]
push str.The_source___s__in_blacklist:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x4d4]
sub eax, 0x10
mov dword [ebp - 0xb4c], eax
mov ecx, dword [ebp - 0xb4c]
call fcn.0040110c
mov byte [ebp - 0x1d], 0
push 0x4f629c
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x4d8], esp
mov dword [ebp - 0xb50], eax
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0xb50]
call fcn.0044a14d
lea eax, [ebp - 0x30]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe7c], eax
mov byte [ebp - 4], 0x20
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42e48b
mov eax, dword [ebp - 0x30]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xb54], eax
cmp dword [ebp - 0xb54], 0
jle 0x42e48b
push ecx
mov eax, esp
mov dword [ebp - 0x4dc], esp
mov dword [ebp - 0xb58], eax
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0xb58]
call fcn.00448edc
call fcn.0045ea64
pop ecx
mov byte [ebp - 0xe7d], al
movzx eax, byte [ebp - 0xe7d]
test eax, eax
jne 0x42e48b
push 0x91
lea eax, [ebp - 0x4e0]
push eax
call fcn.00458eb3
pop ecx
pop ecx
mov dword [ebp - 0xe84], eax
mov eax, dword [ebp - 0xe84]
mov dword [ebp - 0xe88], eax
mov byte [ebp - 4], 0x21
push dword [ebp - 0x30]
mov ecx, dword [ebp - 0xe88]
call fcn.00403617
push dword [eax]
push str.The_source___s__not_in_whitelist:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x4e0]
sub eax, 0x10
mov dword [ebp - 0xb64], eax
mov ecx, dword [ebp - 0xb64]
call fcn.0040110c
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x42e568
push 0x4f62e8
lea ecx, [ebp - 0x500]
call fcn.00403a33
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x8f8]
or eax, 0x100
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xb74], eax
lea eax, [ebp + 8]
push eax
push dword [ebp - 0xb74]
lea ecx, [ebp - 0x510]
call fcn.0044f086
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x508]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov dword [ebp - 0xba4], eax
lea eax, [ebp - 0x510]
push eax
mov ecx, dword [ebp - 0xba4]
call fcn.004965d9
movzx eax, al
neg eax
sbb eax, eax
inc eax
movzx eax, al
test eax, eax
je 0x42e568
push 0x4f62fc
lea ecx, [ebp - 0x52c]
call fcn.00403a33
mov dword [ebp - 4], 0x23
mov eax, dword [ebp - 0x8f8]
or eax, 0x200
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x52c]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849b9
movzx eax, al
test eax, eax
je 0x42e568
mov dword [ebp - 0xe8c], 1
jmp 0x42e56f
and dword [ebp - 0xe8c], 0
mov al, byte [ebp - 0xe8c]
mov byte [ebp - 0x4e1], al
mov dword [ebp - 4], 0x22
mov eax, dword [ebp - 0x8f8]
and eax, 0x200
je 0x42e5a8
and dword [ebp - 0x8f8], 0xfffffdff
push 0
push 1
lea ecx, [ebp - 0x52c]
call fcn.00404010
mov dword [ebp - 4], 0x20
mov eax, dword [ebp - 0x8f8]
and eax, 0x100
je 0x42e5d5
and dword [ebp - 0x8f8], 0xfffffeff
push 0
push 1
lea ecx, [ebp - 0x500]
call fcn.00404010
movzx eax, byte [ebp - 0x4e1]
test eax, eax
je 0x430ec0
mov byte [ebp - 0x5a], 0
push 0x4f6310
lea ecx, [ebp - 0x548]
call fcn.00403a33
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x548]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.00484a34
mov byte [ebp - 4], 0x26
push 0
push 1
lea ecx, [ebp - 0x548]
call fcn.00404010
and dword [ebp - 0x78], 0
jmp 0x42e636
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x68]
sar eax, 2
cmp dword [ebp - 0x78], eax
jae 0x430eb4
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x68]
sar eax, 2
cmp dword [ebp - 0x78], eax
jb 0x42e65b
call fcn.004bdbbd
xor eax, eax
jne 0x42e65b
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x78]
lea eax, [eax + ecx*4]
mov dword [ebp - 0xbc0], eax
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0xbc0]
mov ecx, dword [eax]
call fcn.00484a5f
mov byte [ebp - 4], 0x27
push 0x4f6324
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x54c], esp
mov dword [ebp - 0xbc4], eax
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0xbc4]
call fcn.0044a14d
lea eax, [ebp - 0xac]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe90], eax
mov byte [ebp - 4], 0x28
push 0x4f6330
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x550], esp
mov dword [ebp - 0xbc8], eax
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0xbc8]
call fcn.0044a14d
lea eax, [ebp - 0x7c]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe94], eax
mov byte [ebp - 4], 0x29
push 0x4f6338
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x554], esp
mov dword [ebp - 0xbcc], eax
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0xbcc]
call fcn.0044a14d
lea eax, [ebp - 0xa8]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe98], eax
mov byte [ebp - 4], 0x2a
push 0x4f6344
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x558], esp
mov dword [ebp - 0xbd0], eax
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0xbd0]
call fcn.0044a14d
lea eax, [ebp - 0x55c]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xe9c], eax
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0xea0], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0xea0]
call fcn.00403617
mov dword [ebp - 0xbdc], eax
push dword [ebp - 0xbdc]
lea ecx, [ebp - 0xa4]
call fcn.00448edc
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x55c]
sub eax, 0x10
mov dword [ebp - 0xbe0], eax
mov ecx, dword [ebp - 0xbe0]
call fcn.0040110c
push 0
push 0x4f6350
lea ecx, [ebp - 0x7c]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42e7fb
push 0
push 0x4f6354
lea ecx, [ebp - 0x7c]
call fcn.0040355e
cmp eax, 0xffffffff
jg 0x42e857
push 0
push 0x4f6358
lea ecx, [ebp - 0xa8]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42e829
push 0
push 0x4f635c
lea ecx, [ebp - 0xa8]
call fcn.0040355e
cmp eax, 0xffffffff
jg 0x42e857
push 0
push 0x4f6360
lea ecx, [ebp - 0xa4]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42e88a
push 0
push 0x4f6364
lea ecx, [ebp - 0xa4]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42e88a
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xdf8]
call fcn.0040e51b
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0xdf8]
call fcn.0040e51b
lea eax, [ebp - 0xa4]
push eax
mov ecx, dword [ebp - 0xdf8]
call fcn.0040e51b
push 0x4f6368
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x560]
push eax
call fcn.004038b5
add esp, 0xc
mov dword [ebp - 0xea4], eax
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0xea8], eax
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 0xea8]
lea eax, [ebp - 0x564]
push eax
call fcn.004037e6
add esp, 0xc
mov dword [ebp - 0xeac], eax
mov eax, dword [ebp - 0xeac]
mov dword [ebp - 0xc2c], eax
mov byte [ebp - 4], 0x2f
push dword [ebp - 0xc2c]
mov ecx, 0x525ad0
call fcn.00403d36
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x564]
sub eax, 0x10
mov dword [ebp - 0xc30], eax
mov ecx, dword [ebp - 0xc30]
call fcn.0040110c
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x560]
sub eax, 0x10
mov dword [ebp - 0xc34], eax
mov ecx, dword [ebp - 0xc34]
call fcn.0040110c
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xc38], eax
xor eax, eax
cmp dword [ebp - 0xc38], 0
sete al
movzx eax, al
test eax, eax
jne 0x42e9e0
lea eax, [ebp - 0xa8]
push eax
push 0x4f636c
lea eax, [ebp - 0x568]
push eax
call fcn.0040acc3
add esp, 0xc
mov dword [ebp - 0xeb0], eax
mov eax, dword [ebp - 0xeb0]
mov dword [ebp - 0xc44], eax
mov byte [ebp - 4], 0x30
mov eax, dword [ebp - 0xc44]
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xc44]
mov eax, dword [eax]
mov dword [ebp - 0xc40], eax
push dword [ebp - 0xc3c]
push dword [ebp - 0xc40]
mov ecx, 0x525ad0
call fcn.00403e1c
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x568]
sub eax, 0x10
mov dword [ebp - 0xc48], eax
mov ecx, dword [ebp - 0xc48]
call fcn.0040110c
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xc4c], eax
xor eax, eax
cmp dword [ebp - 0xc4c], 0
sete al
movzx eax, al
test eax, eax
jne 0x42ea8a
lea eax, [ebp - 0xa4]
push eax
push 0x4f6370
lea eax, [ebp - 0x56c]
push eax
call fcn.0040acc3
add esp, 0xc
mov dword [ebp - 0xeb4], eax
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0xc58], eax
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0xc58]
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp - 0xc58]
mov eax, dword [eax]
mov dword [ebp - 0xc54], eax
push dword [ebp - 0xc50]
push dword [ebp - 0xc54]
mov ecx, 0x525ad0
call fcn.00403e1c
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x56c]
sub eax, 0x10
mov dword [ebp - 0xc5c], eax
mov ecx, dword [ebp - 0xc5c]
call fcn.0040110c
mov byte [ebp - 0x9d], 1
push 0x4f6374
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x570], esp
mov dword [ebp - 0xc60], eax
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0xc60]
call fcn.0044a14d
lea eax, [ebp - 0xb0]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xeb8], eax
mov byte [ebp - 4], 0x32
push 0x4f6394
lea ecx, [ebp - 0xb0]
call fcn.0040abe6
test eax, eax
jne 0x42eaed
mov byte [ebp - 0x9d], 0
push 0x4f639c
lea ecx, [ebp - 0xb0]
call fcn.0040abe6
test eax, eax
jne 0x42eb08
mov byte [ebp - 0x9d], 0
push str.av_blacklist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42ec7a
push ecx
mov eax, esp
mov dword [ebp - 0x574], esp
mov dword [ebp - 0xc7c], eax
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0xc7c]
call fcn.00448edc
mov byte [ebp - 4], 0x33
push ecx
mov eax, esp
mov dword [ebp - 0x578], esp
mov dword [ebp - 0xc80], eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xc80]
call fcn.00448edc
mov byte [ebp - 4], 0x34
push ecx
mov eax, esp
mov dword [ebp - 0x57c], esp
push eax
mov ecx, dword [0x525b10]
call fcn.00401139
mov dword [ebp - 0xebc], eax
mov byte [ebp - 4], 0x35
push ecx
mov eax, esp
mov dword [ebp - 0x580], esp
push eax
mov ecx, dword [0x525b10]
call fcn.00401178
mov byte [ebp - 4], 0x32
call fcn.0045e2b2
add esp, 0x10
mov byte [ebp - 0xebd], al
movzx eax, byte [ebp - 0xebd]
test eax, eax
je 0x42ec7a
push dword [ebp - 0x7c]
push str.AV___s__is_running
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0xc84]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xc88], eax
mov ecx, dword [ebp - 0xc88]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xc8c], eax
mov ecx, dword [ebp - 0xc8c]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xc90], eax
mov ecx, dword [ebp - 0xc90]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xc94], eax
mov ecx, dword [ebp - 0xc94]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
push str.av_whitelist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42edec
push ecx
mov eax, esp
mov dword [ebp - 0x584], esp
mov dword [ebp - 0xca0], eax
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0xca0]
call fcn.00448edc
mov byte [ebp - 4], 0x36
push ecx
mov eax, esp
mov dword [ebp - 0x588], esp
mov dword [ebp - 0xca4], eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xca4]
call fcn.00448edc
mov byte [ebp - 4], 0x37
push ecx
mov eax, esp
mov dword [ebp - 0x58c], esp
push eax
mov ecx, dword [0x525b10]
call fcn.00401139
mov dword [ebp - 0xec4], eax
mov byte [ebp - 4], 0x38
push ecx
mov eax, esp
mov dword [ebp - 0x590], esp
push eax
mov ecx, dword [0x525b10]
call fcn.00401178
mov byte [ebp - 4], 0x32
call fcn.0045e2b2
add esp, 0x10
mov byte [ebp - 0xec5], al
movzx eax, byte [ebp - 0xec5]
test eax, eax
jne 0x42edec
push dword [ebp - 0x7c]
push str.AV___s__is_not_running
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xca8], eax
mov ecx, dword [ebp - 0xca8]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xcac], eax
mov ecx, dword [ebp - 0xcac]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xcb0], eax
mov ecx, dword [ebp - 0xcb0]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0xcb4]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xcb8], eax
mov ecx, dword [ebp - 0xcb8]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
push str.process_whitelist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42ef00
push ecx
mov eax, esp
mov dword [ebp - 0x594], esp
mov dword [ebp - 0xcc4], eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xcc4]
call fcn.00448edc
call fcn.0045e6de
pop ecx
mov byte [ebp - 0xec6], al
movzx eax, byte [ebp - 0xec6]
test eax, eax
jne 0x42eefb
push dword [ebp - 0x7c]
push str.process___s__not_running
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xcc8], eax
mov ecx, dword [ebp - 0xcc8]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0xccc]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0xcd0]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xcd4], eax
mov ecx, dword [ebp - 0xcd4]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xcd8], eax
mov ecx, dword [ebp - 0xcd8]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push str.process_blacklist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42f014
push ecx
mov eax, esp
mov dword [ebp - 0x598], esp
mov dword [ebp - 0xce4], eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xce4]
call fcn.00448edc
call fcn.0045e6de
pop ecx
mov byte [ebp - 0xec7], al
movzx eax, byte [ebp - 0xec7]
test eax, eax
je 0x42f00f
push dword [ebp - 0x7c]
push str.process___s__running
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xce8], eax
mov ecx, dword [ebp - 0xce8]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xcec], eax
mov ecx, dword [ebp - 0xcec]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xcf0], eax
mov ecx, dword [ebp - 0xcf0]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xcf4], eax
mov ecx, dword [ebp - 0xcf4]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xcf8], eax
mov ecx, dword [ebp - 0xcf8]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push str.service_whitelist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42f128
push ecx
mov eax, esp
mov dword [ebp - 0x59c], esp
mov dword [ebp - 0xd04], eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xd04]
call fcn.00448edc
call fcn.0045e8a1
pop ecx
mov byte [ebp - 0xec8], al
movzx eax, byte [ebp - 0xec8]
test eax, eax
jne 0x42f123
push dword [ebp - 0x7c]
push str.service___s__not_running
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp - 0xd08]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xd0c], eax
mov ecx, dword [ebp - 0xd0c]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xd10], eax
mov ecx, dword [ebp - 0xd10]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xd14], eax
mov ecx, dword [ebp - 0xd14]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xd18], eax
mov ecx, dword [ebp - 0xd18]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push str.service_blacklist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42f23c
push ecx
mov eax, esp
mov dword [ebp - 0x5a0], esp
mov dword [ebp - 0xd24], eax
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0xd24]
call fcn.00448edc
call fcn.0045e8a1
pop ecx
mov byte [ebp - 0xec9], al
movzx eax, byte [ebp - 0xec9]
test eax, eax
je 0x42f237
push dword [ebp - 0x7c]
push str.service___s__running
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xd28], eax
mov ecx, dword [ebp - 0xd28]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xd2c], eax
mov ecx, dword [ebp - 0xd2c]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xd30], eax
mov ecx, dword [ebp - 0xd30]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xd34], eax
mov ecx, dword [ebp - 0xd34]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xd38], eax
mov ecx, dword [ebp - 0xd38]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push 0x4f64a8
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42f449
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xd44], eax
push 0
push 0
push dword [ebp - 0xd44]
push 0x80000002
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
je 0x42f2a5
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xd48], eax
push 0x100
push 0
push dword [ebp - 0xd48]
push 0x80000002
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
jne 0x42f377
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42f372
push dword [ebp - 0x7c]
push str.Registry_key_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xd4c], eax
mov ecx, dword [ebp - 0xd4c]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xd50], eax
mov ecx, dword [ebp - 0xd50]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xd54], eax
mov ecx, dword [ebp - 0xd54]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xd58], eax
mov ecx, dword [ebp - 0xd58]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xd5c], eax
mov ecx, dword [ebp - 0xd5c]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x42f444
movzx eax, byte [ebp - 0x9d]
test eax, eax
jne 0x42f444
push dword [ebp - 0x7c]
push str.Registry_key_not_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xd60], eax
mov ecx, dword [ebp - 0xd60]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xd64], eax
mov ecx, dword [ebp - 0xd64]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xd68], eax
mov ecx, dword [ebp - 0xd68]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xd6c], eax
mov ecx, dword [ebp - 0xd6c]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xd70], eax
mov ecx, dword [ebp - 0xd70]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push 0x4f64f0
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42f656
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xd7c], eax
push 0
push 0
push dword [ebp - 0xd7c]
push 0x80000002
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
je 0x42f4b2
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xd80], eax
push 0x100
push 0
push dword [ebp - 0xd80]
push 0x80000002
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
jne 0x42f584
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42f57f
push dword [ebp - 0x7c]
push str.Registry_lm_key_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xd84], eax
mov ecx, dword [ebp - 0xd84]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xd88], eax
mov ecx, dword [ebp - 0xd88]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xd8c], eax
mov ecx, dword [ebp - 0xd8c]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xd90], eax
mov ecx, dword [ebp - 0xd90]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xd94], eax
mov ecx, dword [ebp - 0xd94]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x42f651
movzx eax, byte [ebp - 0x9d]
test eax, eax
jne 0x42f651
push dword [ebp - 0x7c]
push str.Registry_lm_key_not_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xd98], eax
mov ecx, dword [ebp - 0xd98]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xd9c], eax
mov ecx, dword [ebp - 0xd9c]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xda0], eax
mov ecx, dword [ebp - 0xda0]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xda4], eax
mov ecx, dword [ebp - 0xda4]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xda8], eax
mov ecx, dword [ebp - 0xda8]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push 0x4f654c
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42f863
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xdb4], eax
push 0
push 0
push dword [ebp - 0xdb4]
push 0x80000001
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
je 0x42f6bf
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xdb8], eax
push 0x100
push 0
push dword [ebp - 0xdb8]
push 0x80000001
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
jne 0x42f791
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42f78c
push dword [ebp - 0x7c]
push str.Registry_cu_key_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xdbc], eax
mov ecx, dword [ebp - 0xdbc]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xdc0], eax
mov ecx, dword [ebp - 0xdc0]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0xdc4]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xdc8], eax
mov ecx, dword [ebp - 0xdc8]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xdcc], eax
mov ecx, dword [ebp - 0xdcc]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x42f85e
movzx eax, byte [ebp - 0x9d]
test eax, eax
jne 0x42f85e
push dword [ebp - 0x7c]
push str.Registry_cu_key_not_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0xb0]
sub eax, 0x10
mov dword [ebp - 0xdd0], eax
mov ecx, dword [ebp - 0xdd0]
call fcn.0040110c
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0xa4]
sub eax, 0x10
mov dword [ebp - 0xdd4], eax
mov ecx, dword [ebp - 0xdd4]
call fcn.0040110c
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0xa8]
sub eax, 0x10
mov dword [ebp - 0xdd8], eax
mov ecx, dword [ebp - 0xdd8]
call fcn.0040110c
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x7c]
sub eax, 0x10
mov dword [ebp - 0xddc], eax
mov ecx, dword [ebp - 0xddc]
call fcn.0040110c
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0xac]
sub eax, 0x10
mov dword [ebp - 0xde0], eax
mov ecx, dword [ebp - 0xde0]
call fcn.0040110c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push 0x4f65a8
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42fb83
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xdec], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xdf0], eax
push 0
push dword [ebp - 0xdec]
push dword [ebp - 0xdf0]
push 0x80000001
lea eax, [ebp - 0xb4]
push eax
call fcn.0046cd23
add esp, 0x14
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xdf4], eax
push 0
push dword [ebp - 0xdf4]
lea ecx, [ebp - 0x7c]
call fcn.00449784
push eax
push 0x80000001
lea eax, [ebp - 0xb8]
push eax
call fcn.0046cd23
add esp, 0x14
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xb4]
call fcn.00403617
lea ecx, [ebp - 0xb8]
call fcn.00403617
push 0
lea ecx, [ebp - 0xa4]
call fcn.00449784
push eax
lea ecx, [ebp - 0xb4]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42f9d1
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42f9cc
push dword [ebp - 0xa4]
push dword [ebp - 0xb4]
push str.Registry_cuk_key___s__found___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xb8]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xb4]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x42fb60
lea ecx, [ebp - 0xb8]
call fcn.004498b2
movzx eax, al
test eax, eax
jne 0x42fab7
push 0
lea ecx, [ebp - 0xa4]
call fcn.00449784
push eax
lea ecx, [ebp - 0xb8]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42fab2
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42fab2
push dword [ebp - 0xa4]
push dword [ebp - 0xb4]
push str.Registry_cuk_key_found:___s___n
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xb8]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xb4]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x42fb60
movzx eax, byte [ebp - 0x9d]
test eax, eax
jne 0x42fb60
push dword [ebp - 0xa4]
push dword [ebp - 0xb4]
push str.Registry_cuk_key___s__not_found___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xb8]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xb4]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xb8]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xb4]
call fcn.0046edd5
jmp 0x430e58
push 0x4f6630
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x42feb7
push 0
lea ecx, [ebp - 0xa8]
call fcn.00449784
push eax
lea ecx, [ebp - 0x7c]
call fcn.00449784
push eax
push 0x80000002
lea eax, [ebp - 0xc0]
push eax
call fcn.0046cd23
add esp, 0x14
mov byte [ebp - 4], 0x3b
push 0x100
lea ecx, [ebp - 0xa8]
call fcn.00449784
push eax
lea ecx, [ebp - 0x7c]
call fcn.00449784
push eax
push 0x80000002
lea eax, [ebp - 0xc4]
push eax
call fcn.0046cd23
add esp, 0x14
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xc0]
call fcn.00403617
lea ecx, [ebp - 0xc4]
call fcn.00403617
mov byte [ebp - 0xb9], 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.00449784
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42fcf2
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42fce6
push dword [ebp - 0xa4]
push dword [ebp - 0xc0]
push str.Registry_lmk_key___s__found___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xc4]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xc0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 0xb9], 1
jmp 0x42fddc
lea ecx, [ebp - 0xc4]
call fcn.004498b2
movzx eax, al
test eax, eax
jne 0x42fddc
push 0
lea ecx, [ebp - 0xa4]
call fcn.00449784
push eax
lea ecx, [ebp - 0xc4]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x42fddc
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42fdd5
push dword [ebp - 0xa4]
push dword [ebp - 0xc0]
push str.Registry_LMK_key_found:___s___n
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xc4]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xc0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 0xb9], 1
movzx eax, byte [ebp - 0x9d]
test eax, eax
jne 0x42fe94
movzx eax, byte [ebp - 0xb9]
test eax, eax
jne 0x42fe94
push dword [ebp - 0xa4]
push dword [ebp - 0xc0]
push str.Registry_lmk_key___s__not_found___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xc4]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xc0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xc4]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xc0]
call fcn.0046edd5
jmp 0x430e58
push 0x4f66b8
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x430017
push 0
push 0
lea ecx, [ebp - 0x7c]
call fcn.00449784
push eax
push 0x80000000
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
je 0x42ff14
push 0x100
push 0
lea ecx, [ebp - 0x7c]
call fcn.00449784
push eax
push 0x80000000
call fcn.0046c95d
add esp, 0x10
cmp eax, 1
jne 0x42ff94
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x42ff92
push dword [ebp - 0x7c]
push str.Registry_cr_key_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430012
movzx eax, byte [ebp - 0x9d]
test eax, eax
jne 0x430012
push dword [ebp - 0x7c]
push str.Registry_cr_key_not_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push str.upgrade_code
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x43016a
push 0x27
call fcn.00498154
pop ecx
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0xcc], eax
and dword [ebp - 0xc8], 0
push dword [ebp - 0xcc]
push dword [ebp - 0xc8]
push 0
lea ecx, [ebp - 0x7c]
call fcn.00449784
push eax
call sub.msi.dll_MsiSourceListClearAllA
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jne 0x4300f0
push dword [ebp - 0x7c]
push str.Upgrade_code_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
cmp dword [ebp - 0xd0], 0x103
je 0x430165
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xed0], eax
cmp dword [ebp - 0xed0], 8
je 0x430152
cmp dword [ebp - 0xed0], 0x57
je 0x43013d
cmp dword [ebp - 0xed0], 0x64a
je 0x430128
jmp 0x430165
push dword [ebp - 0x7c]
push str.Upgrade_code:_Corrupt_config:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
jmp 0x430165
push dword [ebp - 0x7c]
push str.Upgrade_code:_Invalid_parameter:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
jmp 0x430165
push dword [ebp - 0x7c]
push str.Upgrade_code:_Not_enough_memory:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
jmp 0x430e58
push 0x4f67b4
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x43022d
lea eax, [ebp - 0x7c]
push eax
call fcn.00460d83
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x5a8], esp
lea eax, [ebp - 0x7c]
push eax
call fcn.00448edc
call fcn.0046b9b1
pop ecx
mov byte [ebp - 0xed1], al
movzx eax, byte [ebp - 0xed1]
test eax, eax
je 0x430228
push dword [ebp - 0x7c]
push str.Directory_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push 0x4f67d8
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x4302f0
lea eax, [ebp - 0x7c]
push eax
call fcn.00460d83
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x5ac], esp
lea eax, [ebp - 0x7c]
push eax
call fcn.00448edc
call fcn.0046bd1d
pop ecx
mov byte [ebp - 0xed2], al
movzx eax, byte [ebp - 0xed2]
test eax, eax
je 0x4302eb
push dword [ebp - 0x7c]
push str.File_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
jmp 0x430e58
push 0x4f67f4
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x43046b
lea eax, [ebp - 0x7c]
push eax
call fcn.00460d83
pop ecx
push 0x4f0316
lea ecx, [ebp - 0xd4]
call fcn.00403241
mov byte [ebp - 4], 0x3d
push ecx
mov ecx, esp
mov dword [ebp - 0x5b0], esp
lea eax, [ebp - 0x7c]
push eax
call fcn.00448edc
call fcn.0046bd1d
pop ecx
mov byte [ebp - 0xed3], al
movzx eax, byte [ebp - 0xed3]
test eax, eax
je 0x430457
push ecx
mov ecx, esp
mov dword [ebp - 0x5b4], esp
lea eax, [ebp - 0x7c]
push eax
call fcn.00448edc
lea eax, [ebp - 0x5b8]
push eax
call fcn.0045ad00
pop ecx
pop ecx
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp - 0xed8]
mov dword [ebp - 0xedc], eax
mov byte [ebp - 4], 0x3e
push dword [ebp - 0xedc]
lea ecx, [ebp - 0xd4]
call fcn.00448f0e
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x5b8]
call fcn.0046edd5
push 0
lea ecx, [ebp - 0xa4]
call fcn.00449784
push eax
lea ecx, [ebp - 0xd4]
call fcn.00403617
mov ecx, eax
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x430457
push dword [ebp - 0xa4]
push str.File_Contents_found:___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xd4]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xd4]
call fcn.0046edd5
jmp 0x430e58
push 0x4f6820
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x43059f
push 0x96
lea eax, [ebp - 0xdc]
push eax
call fcn.00458eb3
pop ecx
pop ecx
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xdc]
call fcn.00403617
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00448edc
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xd8]
call fcn.00403617
push 0
lea ecx, [ebp - 0xdc]
call fcn.00449784
push eax
lea ecx, [ebp - 0xd8]
call fcn.0040355e
cmp eax, 0xffffffff
jg 0x43057c
push dword [ebp - 0x7c]
push dword [ebp - 0xdc]
push str.Current_browser:_found___s__need___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xd8]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xdc]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xd8]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xdc]
call fcn.0046edd5
jmp 0x430e58
push 0x4f6850
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x4307cf
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xec]
call fcn.00448edc
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xec]
call fcn.00403617
lea ecx, [ebp - 0xe0]
call fcn.00448ec0
mov byte [ebp - 4], 0x42
mov dword [ebp - 0xe8], 0x400
lea eax, [ebp - 0xe8]
push eax
push dword [ebp - 0xe8]
lea ecx, [ebp - 0xe0]
call fcn.0044984f
push eax
push 0x4f6860
push 0x4f6868
push 2
push 0
call dword [sym.imp.SHLWAPI.dll_AssocQueryStringA]
mov dword [ebp - 0xe4], eax
push 0xffffffffffffffff
lea ecx, [ebp - 0xe0]
call fcn.004498d0
lea ecx, [ebp - 0xe0]
call fcn.00403617
push 0
push 0x4f6870
lea ecx, [ebp - 0xe0]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x430665
push 0x4f687c
lea ecx, [ebp - 0xe0]
call fcn.00403dc5
jmp 0x4306f0
push 0
push 0x4f6880
lea ecx, [ebp - 0xe0]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x43068e
push 0x4f6888
lea ecx, [ebp - 0xe0]
call fcn.00403dc5
jmp 0x4306f0
push 0
push 0x4f688c
lea ecx, [ebp - 0xe0]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x4306b7
push 0x4f6894
lea ecx, [ebp - 0xe0]
call fcn.00403dc5
jmp 0x4306f0
push 0
push 0x4f6898
lea ecx, [ebp - 0xe0]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x4306e0
push 0x4f68a4
lea ecx, [ebp - 0xe0]
call fcn.00403dc5
jmp 0x4306f0
push 0x4f68a8
lea ecx, [ebp - 0xe0]
call fcn.00403dc5
push 0
lea ecx, [ebp - 0xe0]
call fcn.00449784
push eax
lea ecx, [ebp - 0xec]
call fcn.0040355e
cmp eax, 0xffffffff
jg 0x4307ac
push dword [ebp - 0xec]
push dword [ebp - 0xe0]
push str.Default_browser:_found___s___need___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xe0]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xec]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xe0]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xec]
call fcn.0046edd5
jmp 0x430e58
push 0x4f68d4
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x4308b3
lea eax, [ebp - 0xf0]
push eax
call fcn.0046d180
pop ecx
mov byte [ebp - 4], 0x43
push 0
lea ecx, [ebp - 0xf0]
call fcn.00449784
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040355e
cmp eax, 0xffffffff
jg 0x43089f
push dword [ebp - 0x7c]
push dword [ebp - 0xf0]
push str.Incompatible_.NET_version:_found___s__need___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xf0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xf0]
call fcn.0046edd5
jmp 0x430e58
push 0x4f6910
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x430a0d
lea eax, [ebp - 0x5bc]
push eax
call fcn.00457678
pop ecx
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0xee4], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0xee4]
call fcn.00403617
push eax
lea ecx, [ebp - 0xf8]
call fcn.00448edc
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x5bc]
call fcn.0046edd5
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0xf4]
call fcn.00448edc
mov byte [ebp - 4], 0x47
push 0
lea ecx, [ebp - 0xf8]
call fcn.00449784
push eax
lea ecx, [ebp - 0xf4]
call fcn.00403617
mov ecx, eax
call fcn.0040355e
cmp eax, 0xffffffff
jg 0x4309ea
push dword [ebp - 0xf4]
push dword [ebp - 0xf8]
push str.Incompatible_OS:_found___s___need___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0xf4]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xf8]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0xf4]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xf8]
call fcn.0046edd5
jmp 0x430e58
push 0x4f693c
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x430a2a
mov byte [ebp - 0x5a], 1
jmp 0x430e58
push str.homepage_whitelist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x430c42
lea ecx, [ebp - 0x7c]
call fcn.00403617
push eax
lea ecx, [ebp - 0xfc]
call fcn.00448edc
mov byte [ebp - 4], 0x48
mov ecx, 0x525ab8
call fcn.004498b2
movzx eax, al
test eax, eax
je 0x430ac7
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x5c4], esp
push 0x96
push eax
call fcn.00458eb3
pop ecx
pop ecx
lea eax, [ebp - 0x5c8]
push eax
call fcn.00461fcc
add esp, 0xc
mov dword [ebp - 0xee8], eax
mov eax, dword [ebp - 0xee8]
mov dword [ebp - 0xeec], eax
mov byte [ebp - 4], 0x49
mov eax, dword [ebp - 0x8f8]
or eax, 0x400
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp - 0xeec]
mov dword [ebp - 0xef0], eax
jmp 0x430ad1
mov dword [ebp - 0xef0], 0x525ab8
mov eax, dword [ebp - 0xef0]
mov dword [ebp - 0x5c0], eax
push dword [ebp - 0x5c0]
lea ecx, [ebp - 0x100]
call fcn.00448edc
mov dword [ebp - 4], 0x4b
mov eax, dword [ebp - 0x8f8]
and eax, 0x400
je 0x430b17
and dword [ebp - 0x8f8], 0xfffffbff
lea ecx, [ebp - 0x5c8]
call fcn.0046edd5
push ecx
mov ecx, esp
mov dword [ebp - 0x5cc], esp
push str.Homepage_Whitelist
call fcn.00403241
mov dword [ebp - 0xef4], eax
mov byte [ebp - 4], 0x4c
push ecx
mov ecx, esp
mov dword [ebp - 0x5d0], esp
lea eax, [ebp - 0xfc]
push eax
call fcn.00448edc
mov dword [ebp - 0xef8], eax
mov byte [ebp - 4], 0x4d
push ecx
mov ecx, esp
mov dword [ebp - 0x5d4], esp
lea eax, [ebp - 0x100]
push eax
call fcn.00448edc
mov byte [ebp - 4], 0x4b
call fcn.0045df33
add esp, 0xc
mov byte [ebp - 0xef9], al
mov al, byte [ebp - 0xef9]
mov byte [ebp - 0x1d], al
movzx eax, byte [ebp - 0x1d]
test eax, eax
jne 0x430c1f
push dword [ebp - 0xfc]
push str.Homepage_not_in_whitelist__s
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x100]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xfc]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x100]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xfc]
call fcn.0046edd5
jmp 0x430e58
push str.homepage_blacklist
lea ecx, [ebp - 0xac]
call fcn.0040abe6
test eax, eax
jne 0x430e58
lea ecx, [ebp - 0x7c]
call fcn.00403617
push eax
lea ecx, [ebp - 0x104]
call fcn.00448edc
mov byte [ebp - 4], 0x4e
mov ecx, 0x525ab8
call fcn.004498b2
movzx eax, al
test eax, eax
je 0x430cdf
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x5dc], esp
push 0x96
push eax
call fcn.00458eb3
pop ecx
pop ecx
lea eax, [ebp - 0x5e0]
push eax
call fcn.00461fcc
add esp, 0xc
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp - 0xf00]
mov dword [ebp - 0xf04], eax
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0x8f8]
or eax, 0x800
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp - 0xf04]
mov dword [ebp - 0xf08], eax
jmp 0x430ce9
mov dword [ebp - 0xf08], 0x525ab8
mov eax, dword [ebp - 0xf08]
mov dword [ebp - 0x5d8], eax
push dword [ebp - 0x5d8]
lea ecx, [ebp - 0x108]
call fcn.00448edc
mov dword [ebp - 4], 0x51
mov eax, dword [ebp - 0x8f8]
and eax, 0x800
je 0x430d2f
and dword [ebp - 0x8f8], 0xfffff7ff
lea ecx, [ebp - 0x5e0]
call fcn.0046edd5
push ecx
mov ecx, esp
mov dword [ebp - 0x5e4], esp
push str.Homepage_Blacklist
call fcn.00403241
mov dword [ebp - 0xf0c], eax
mov byte [ebp - 4], 0x52
push ecx
mov ecx, esp
mov dword [ebp - 0x5e8], esp
lea eax, [ebp - 0x104]
push eax
call fcn.00448edc
mov dword [ebp - 0xf10], eax
mov byte [ebp - 4], 0x53
push ecx
mov ecx, esp
mov dword [ebp - 0x5ec], esp
lea eax, [ebp - 0x108]
push eax
call fcn.00448edc
mov byte [ebp - 4], 0x51
call fcn.0045df33
add esp, 0xc
mov byte [ebp - 0xf11], al
movzx eax, byte [ebp - 0xf11]
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x1d], al
movzx eax, byte [ebp - 0x1d]
test eax, eax
jne 0x430e3a
push dword [ebp - 0x104]
push str.Homepage_in_blacklist__s
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x108]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x104]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x430eb4
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x108]
call fcn.0046edd5
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x104]
call fcn.0046edd5
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb0]
call fcn.0046edd5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xa4]
call fcn.0046edd5
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa8]
call fcn.0046edd5
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x7c]
call fcn.0046edd5
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xac]
call fcn.0046edd5
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x9c]
call fcn.0044a1e9
jmp 0x42e62f
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x74]
call fcn.00449f42
or dword [ebp - 0x1c], 0xffffffff
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x4311ea
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x5f0], esp
lea eax, [ebp + 8]
push eax
call fcn.0041429a
mov ecx, dword [ebp - 0xdf8]
call fcn.00414f05
mov byte [ebp - 0xf12], al
movzx eax, byte [ebp - 0xf12]
test eax, eax
je 0x431064
push 0x4f69d8
lea ecx, [ebp - 0x610]
call fcn.00403a33
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0x8f8]
or eax, 0x1000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x620]
push eax
lea ecx, [ebp + 8]
call fcn.0044a2f1
push eax
lea eax, [ebp - 0x610]
push eax
lea eax, [ebp - 0x618]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov ecx, eax
call fcn.0044a790
movzx eax, al
test eax, eax
je 0x430fae
push 0x4f6a28
lea ecx, [ebp - 0x63c]
call fcn.00403a33
mov dword [ebp - 4], 0x55
mov eax, dword [ebp - 0x8f8]
or eax, 0x2000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x63c]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849a3
movzx eax, al
test eax, eax
je 0x430fae
mov dword [ebp - 0xf18], 1
jmp 0x430fb5
and dword [ebp - 0xf18], 0
mov al, byte [ebp - 0xf18]
mov byte [ebp - 0x5f1], al
mov dword [ebp - 4], 0x54
mov eax, dword [ebp - 0x8f8]
and eax, 0x2000
je 0x430fea
and dword [ebp - 0x8f8], 0xffffdfff
lea ecx, [ebp - 0x63c]
call fcn.00403a92
mov dword [ebp - 4], 0x20
mov eax, dword [ebp - 0x8f8]
and eax, 0x1000
je 0x431013
and dword [ebp - 0x8f8], 0xffffefff
lea ecx, [ebp - 0x610]
call fcn.00403a92
movzx eax, byte [ebp - 0x5f1]
test eax, eax
je 0x43105f
push str.bundlescreen_offer_visibility_threshold
lea ecx, [ebp - 0x658]
call fcn.00403a33
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x658]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.00484a25
call fcn.004beb70
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x658]
call fcn.00403a92
jmp 0x4311bf
push 0x4f6ac8
lea ecx, [ebp - 0x678]
call fcn.00403a33
mov byte [ebp - 4], 0x57
mov eax, dword [ebp - 0x8f8]
or eax, 0x4000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp + 8]
call fcn.0044a2f1
push eax
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x680]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov ecx, eax
call fcn.0044a790
movzx eax, al
test eax, eax
je 0x43110e
push 0x4f6b00
lea ecx, [ebp - 0x6a4]
call fcn.00403a33
mov dword [ebp - 4], 0x58
mov eax, dword [ebp - 0x8f8]
or eax, 0x8000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x6a4]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849a3
movzx eax, al
test eax, eax
je 0x43110e
mov dword [ebp - 0xf1c], 1
jmp 0x431115
and dword [ebp - 0xf1c], 0
mov al, byte [ebp - 0xf1c]
mov byte [ebp - 0x659], al
mov dword [ebp - 4], 0x57
mov eax, dword [ebp - 0x8f8]
and eax, 0x8000
je 0x43114a
and dword [ebp - 0x8f8], 0xffff7fff
lea ecx, [ebp - 0x6a4]
call fcn.00403a92
mov dword [ebp - 4], 0x20
mov eax, dword [ebp - 0x8f8]
and eax, 0x4000
je 0x431173
and dword [ebp - 0x8f8], 0xffffbfff
lea ecx, [ebp - 0x678]
call fcn.00403a92
movzx eax, byte [ebp - 0x659]
test eax, eax
je 0x4311bf
push 0x4f6b38
lea ecx, [ebp - 0x6c0]
call fcn.00403a33
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x6c0]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.00484a25
call fcn.004beb70
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6c0]
call fcn.00403a92
cmp dword [ebp - 0x1c], 0xffffffff
jle 0x4311ea
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x1c]
jle 0x4311ea
push dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push dword [ebp - 0x18]
push str.offerName___s__threshold___lu__VisibleThreshold___lu_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x14
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x4312e5
movzx eax, byte [0x525a98]
test eax, eax
jne 0x4312e5
mov ecx, 0x525ad8
call fcn.00449784
push eax
lea ecx, [ebp - 0x18]
call fcn.0040abe6
test eax, eax
jne 0x4312e5
mov byte [ebp - 0x1d], 0
and dword [ebp - 0x10c], 0
jmp 0x43123a
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0xdf8]
add ecx, 0xc30
call fcn.0041417a
cmp dword [ebp - 0x10c], eax
jge 0x4312ce
lea ecx, [ebp - 0x18]
call fcn.00449784
push eax
push dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xdf8]
add ecx, 0xc30
call fcn.0044fbd2
mov ecx, eax
call fcn.0040abe6
test eax, eax
jne 0x4312c9
mov byte [ebp - 0x1d], 1
mov byte [0x525a9a], 1
mov byte [0x525a98], 1
movzx eax, byte [ebp - 0x1d]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xdf8]
add ecx, 0xc30
call fcn.0044fbd2
push dword [eax]
push dword [ebp - 0x10c]
push str.m_offerNames.GetAt__lu____s__offerName___s__blnShouldShowOffer___lu_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x18
jmp 0x4312ce
jmp 0x43122d
movzx eax, byte [ebp - 0x1d]
test eax, eax
jne 0x4312e5
push 0x4f0317
mov ecx, 0x525ad8
call fcn.00403dc5
mov ecx, 0x525ad8
call fcn.004498a1
test eax, eax
jle 0x431338
push 0
push str._optin
lea ecx, [ebp - 0x18]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x431338
mov ecx, 0x525ad8
call fcn.00449784
push eax
lea ecx, [ebp - 0x18]
call fcn.0040abe6
test eax, eax
je 0x431338
push dword [0x525ad8]
push str.OptIn_offer___s__does_not_match_offer
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
mov ecx, 0x525ad8
call fcn.004498a1
test eax, eax
jne 0x4313f4
push 0x4f6c20
lea ecx, [ebp - 0x6e0]
call fcn.00403a33
mov byte [ebp - 4], 0x5a
mov eax, dword [ebp - 0x8f8]
or eax, 0x10000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x6f0]
push eax
lea ecx, [ebp + 8]
call fcn.0044a2f1
push eax
lea eax, [ebp - 0x6e0]
push eax
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov ecx, eax
call fcn.0044a790
movzx eax, al
test eax, eax
je 0x4313f4
push 0x4f6c34
lea ecx, [ebp - 0x70c]
call fcn.00403a33
mov dword [ebp - 4], 0x5b
mov eax, dword [ebp - 0x8f8]
or eax, 0x20000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x70c]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.0048498d
movzx eax, al
test eax, eax
je 0x4313f4
mov dword [ebp - 0xf20], 1
jmp 0x4313fb
and dword [ebp - 0xf20], 0
mov al, byte [ebp - 0xf20]
mov byte [ebp - 0x6c1], al
mov dword [ebp - 4], 0x5a
mov eax, dword [ebp - 0x8f8]
and eax, 0x20000
je 0x431430
and dword [ebp - 0x8f8], 0xfffdffff
lea ecx, [ebp - 0x70c]
call fcn.00403a92
mov dword [ebp - 4], 0x20
mov eax, dword [ebp - 0x8f8]
and eax, 0x10000
je 0x431459
and dword [ebp - 0x8f8], 0xfffeffff
lea ecx, [ebp - 0x6e0]
call fcn.00403a92
movzx eax, byte [ebp - 0x6c1]
test eax, eax
je 0x431524
lea ecx, [ebp - 0x110]
call fcn.00448ec0
mov byte [ebp - 4], 0x5c
push str.is_optin
lea ecx, [ebp - 0x728]
call fcn.00403a33
mov byte [ebp - 4], 0x5d
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0x728]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849e5
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0xf28], eax
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0xf28]
call fcn.00449f18
push eax
lea ecx, [ebp - 0x110]
call fcn.00403361
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x744]
call fcn.00403a92
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x728]
call fcn.00403a92
push 0x4f6c5c
lea ecx, [ebp - 0x110]
call fcn.0040abe6
test eax, eax
jne 0x431515
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x525ad8
call fcn.00448f0e
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x110]
call fcn.0046edd5
mov byte [ebp - 0x3d], 0
push 0x9a
lea eax, [ebp - 0x24]
push eax
call fcn.00458eb3
pop ecx
pop ecx
mov byte [ebp - 4], 0x5f
call fcn.00467c72
movzx eax, al
test eax, eax
jne 0x431554
call fcn.00467d1d
movzx eax, al
test eax, eax
je 0x431574
push 0
push 0x4f6c64
lea ecx, [ebp - 0x24]
call fcn.0040355e
cmp eax, 0xffffffff
jg 0x431574
mov dword [ebp - 0xf2c], 1
jmp 0x43157b
and dword [ebp - 0xf2c], 0
mov al, byte [ebp - 0xf2c]
mov byte [ebp - 0x3d], al
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x431646
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x431646
push 0x4f6c6c
lea ecx, [ebp - 0x764]
call fcn.00403a33
mov byte [ebp - 4], 0x60
mov eax, dword [ebp - 0x8f8]
or eax, 0x40000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x774]
push eax
lea ecx, [ebp + 8]
call fcn.0044a2f1
push eax
lea eax, [ebp - 0x764]
push eax
lea eax, [ebp - 0x76c]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov ecx, eax
call fcn.0044a790
movzx eax, al
test eax, eax
je 0x431646
push 0x4f6c84
lea ecx, [ebp - 0x790]
call fcn.00403a33
mov dword [ebp - 4], 0x61
mov eax, dword [ebp - 0x8f8]
or eax, 0x80000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x790]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849b9
movzx eax, al
test eax, eax
je 0x431646
mov dword [ebp - 0xf30], 1
jmp 0x43164d
and dword [ebp - 0xf30], 0
mov al, byte [ebp - 0xf30]
mov byte [ebp - 0x745], al
mov dword [ebp - 4], 0x60
mov eax, dword [ebp - 0x8f8]
and eax, 0x80000
je 0x431682
and dword [ebp - 0x8f8], 0xfff7ffff
lea ecx, [ebp - 0x790]
call fcn.00403a92
mov dword [ebp - 4], 0x5f
mov eax, dword [ebp - 0x8f8]
and eax, 0x40000
je 0x4316ab
and dword [ebp - 0x8f8], 0xfffbffff
lea ecx, [ebp - 0x764]
call fcn.00403a92
movzx eax, byte [ebp - 0x745]
test eax, eax
je 0x431847
mov byte [ebp - 4], 0x62
push str.checkboxes
lea ecx, [ebp - 0x7ac]
call fcn.00403a33
mov dword [ebp - 0xf34], eax
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x7ac]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov dword [ebp - 0xf38], eax
lea eax, [ebp - 0x128]
push eax
mov eax, dword [ebp - 0xf38]
mov ecx, dword [eax]
call fcn.00484a34
mov dword [ebp - 0xf3c], eax
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x7ac]
call fcn.00403a92
and dword [ebp - 0x12c], 0
jmp 0x43172c
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
lea ecx, [ebp - 0x128]
call fcn.00449f98
mov dword [ebp - 0xf40], eax
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0xf40]
jae 0x431822
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x128]
call fcn.00449fb0
mov dword [ebp - 0xf44], eax
lea eax, [ebp - 0x150]
push eax
mov eax, dword [ebp - 0xf44]
mov ecx, dword [eax]
call fcn.00484a5f
mov dword [ebp - 0xf48], eax
mov byte [ebp - 4], 0x66
push 0x4f6cb4
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x7b0], esp
lea eax, [ebp - 0x150]
push eax
call fcn.0041429a
lea eax, [ebp - 0x130]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf4c], eax
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x130]
call fcn.004498a1
test eax, eax
jle 0x4317ff
mov byte [ebp - 0x1d], 0
push dword [ebp - 0x18]
push str.Not_showing_bundled_offer___s____VM
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x130]
call fcn.0046edd5
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x150]
call fcn.0044a1e9
jmp 0x431822
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x130]
call fcn.0046edd5
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x150]
call fcn.0044a1e9
jmp 0x43171f
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x128]
call fcn.00449f42
jmp 0x431840
mov dword [ebp - 4], 0x5f
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x431909
push 0x4f6ce4
lea ecx, [ebp - 0x7d0]
call fcn.00403a33
mov byte [ebp - 4], 0x69
mov eax, dword [ebp - 0x8f8]
or eax, 0x100000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x7e0]
push eax
lea ecx, [ebp + 8]
call fcn.0044a2f1
push eax
lea eax, [ebp - 0x7d0]
push eax
lea eax, [ebp - 0x7d8]
push eax
lea ecx, [ebp + 8]
call fcn.0044a386
mov ecx, eax
call fcn.0044a790
movzx eax, al
test eax, eax
je 0x431909
push 0x4f6d08
lea ecx, [ebp - 0x7fc]
call fcn.00403a33
mov dword [ebp - 4], 0x6a
mov eax, dword [ebp - 0x8f8]
or eax, 0x200000
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x7fc]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.004849b9
movzx eax, al
test eax, eax
je 0x431909
movzx eax, byte [ebp - 0x45]
test eax, eax
jne 0x431909
mov dword [ebp - 0xf50], 1
jmp 0x431910
and dword [ebp - 0xf50], 0
mov al, byte [ebp - 0xf50]
mov byte [ebp - 0x7b1], al
mov dword [ebp - 4], 0x69
mov eax, dword [ebp - 0x8f8]
and eax, 0x200000
je 0x431945
and dword [ebp - 0x8f8], 0xffdfffff
lea ecx, [ebp - 0x7fc]
call fcn.00403a92
mov dword [ebp - 4], 0x5f
mov eax, dword [ebp - 0x8f8]
and eax, 0x100000
je 0x43196e
and dword [ebp - 0x8f8], 0xffefffff
lea ecx, [ebp - 0x7d0]
call fcn.00403a92
movzx eax, byte [ebp - 0x7b1]
test eax, eax
je 0x432549
push 0x4f6d2c
lea ecx, [ebp - 0x818]
call fcn.00403a33
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x818]
push eax
lea ecx, [ebp + 8]
call fcn.0044a002
mov ecx, dword [eax]
call fcn.00484a34
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x818]
call fcn.00403a92
and dword [ebp - 0x16c], 0
jmp 0x4319d3
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
lea ecx, [ebp - 0x168]
call fcn.00449f98
cmp dword [ebp - 0x16c], eax
jae 0x43253a
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x168]
call fcn.00449fb0
mov ecx, dword [eax]
call fcn.00484a5f
mov byte [ebp - 4], 0x6e
push 0x4f6d50
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x81c], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x170]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf54], eax
mov byte [ebp - 4], 0x6f
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x432517
push 0x4f6d5c
lea ecx, [ebp - 0x170]
call fcn.0040abe6
test eax, eax
jne 0x432517
push 0x4f6d60
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x820], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x1b4]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf58], eax
mov byte [ebp - 4], 0x70
push 0x4f6d68
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x824], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x1b8]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf5c], eax
mov byte [ebp - 4], 0x71
push str.cache_name
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x828], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x1a4]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf60], eax
mov byte [ebp - 4], 0x72
push 0x4f6d94
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x82c], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x194]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf64], eax
mov byte [ebp - 4], 0x73
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0xdf8]
call fcn.0040e51b
push 0x4f6db0
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x830], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x1b0]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf68], eax
mov byte [ebp - 4], 0x74
push 0x4f6dc8
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x834], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x1a0]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf6c], eax
mov byte [ebp - 4], 0x75
push 0x4f6de8
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x838], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x83c]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf70], eax
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0xf74], eax
mov byte [ebp - 4], 0x76
mov ecx, dword [ebp - 0xf74]
call fcn.004498a1
test eax, eax
jle 0x431c6e
push 0x4f6e04
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x840], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x844]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0xf78]
mov dword [ebp - 0xf7c], eax
mov eax, dword [ebp - 0x8f8]
or eax, 0x400000
mov dword [ebp - 0x8f8], eax
mov ecx, dword [ebp - 0xf7c]
call fcn.00449784
push eax
call fcn.004bdc77
pop ecx
mov dword [ebp - 0xf80], eax
jmp 0x431c78
mov dword [ebp - 0xf80], 0xbb8
mov eax, dword [ebp - 0xf80]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x8f8]
and eax, 0x400000
je 0x431ca6
and dword [ebp - 0x8f8], 0xffbfffff
lea ecx, [ebp - 0x844]
call fcn.0046edd5
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x83c]
call fcn.0046edd5
push str.ok_if_exceeds_wait_time
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x848], esp
lea eax, [ebp - 0x190]
push eax
call fcn.0041429a
lea eax, [ebp - 0x198]
push eax
call fcn.0045b95c
add esp, 0x28
mov dword [ebp - 0xf84], eax
mov byte [ebp - 4], 0x77
or dword [ebp - 0x1ac], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.00448ec0
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x1a4]
call fcn.004498b2
movzx eax, al
test eax, eax
jne 0x431db6
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00449784
push eax
mov ecx, dword [0x525a3c]
call fcn.0044fe82
test eax, eax
je 0x431db6
push ecx
mov ecx, esp
mov dword [ebp - 0x84c], esp
lea eax, [ebp - 0x198]
push eax
call fcn.00448edc
lea ecx, [ebp - 0x1b0]
call fcn.00449784
push eax
call fcn.004bdc77
pop ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00449784
push eax
call fcn.004bdc77
pop ecx
push eax
mov ecx, dword [ebp - 0xdf8]
call fcn.0043261c
mov byte [ebp - 0xf85], al
mov al, byte [ebp - 0xf85]
mov byte [ebp - 0x1d], al
movzx eax, byte [ebp - 0x1d]
test eax, eax
jne 0x431db1
push dword [ebp - 0x1a8]
push dword [ebp - 0x1b8]
push str.Pre_Install_exe___s__result_failed___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
jmp 0x43249f
push ecx
mov ecx, esp
mov dword [ebp - 0x850], esp
lea eax, [ebp - 0x1b8]
push eax
call fcn.00448edc
mov ecx, dword [0x525a4c]
call fcn.0044fc01
lea eax, [ebp - 0x1bc]
push eax
call fcn.0046d180
pop ecx
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x1a0]
call fcn.00449814
push eax
lea ecx, [ebp - 0x870]
call fcn.00405374
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x1bc]
call fcn.00449814
push eax
lea ecx, [ebp - 0x88c]
call fcn.00405374
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x88c]
push eax
call fcn.0045b8b0
pop ecx
pop ecx
mov byte [ebp - 0x851], al
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x88c]
call fcn.00404ec8
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x870]
call fcn.00404ec8
movzx eax, byte [ebp - 0x851]
test eax, eax
je 0x431e92
lea ecx, [ebp - 0x1a0]
call fcn.00449814
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00449814
push eax
push str.Current.Net_version___s__less_than_required___s_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
mov byte [ebp - 0x1d], 0
jmp 0x432490
push 0x4f6eac
lea eax, [ebp - 0x890]
push eax
call fcn.0046c73e
pop ecx
pop ecx
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp - 0xf8c]
mov dword [ebp - 0xf90], eax
mov byte [ebp - 4], 0x7c
lea eax, [ebp - 0x1b8]
push eax
push dword [ebp - 0xf90]
lea eax, [ebp - 0x1c0]
push eax
call fcn.004037e6
add esp, 0xc
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x890]
call fcn.0046edd5
mov byte [ebp - 4], 0x7f
push ecx
mov ecx, esp
mov dword [ebp - 0x894], esp
push 0
call fcn.00403241
mov dword [ebp - 0xf94], eax
mov byte [ebp - 4], 0x80
push ecx
mov ecx, esp
mov dword [ebp - 0x898], esp
lea eax, [ebp - 0x1b4]
push eax
call fcn.00448edc
mov dword [ebp - 0xf98], eax
mov byte [ebp - 4], 0x81
push ecx
mov ecx, esp
mov dword [ebp - 0x89c], esp
push 0x4f6eb8
call fcn.00403241
mov dword [ebp - 0xf9c], eax
mov byte [ebp - 4], 0x82
push ecx
mov eax, esp
mov dword [ebp - 0x8a0], esp
push str._precheck_downloading
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.004038b5
add esp, 0xc
mov byte [ebp - 4], 0x7f
call fcn.00459e6b
add esp, 0x10
lea ecx, [ebp - 0x1e0]
call fcn.004692b0
mov dword [ebp - 0xfa0], eax
mov byte [ebp - 4], 0x83
push 0
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x8a4], esp
lea eax, [ebp - 0x1b8]
push eax
call fcn.00448edc
mov dword [ebp - 0xfa4], eax
mov byte [ebp - 4], 0x84
push ecx
mov ecx, esp
mov dword [ebp - 0x8a8], esp
lea eax, [ebp - 0x1b4]
push eax
call fcn.00448edc
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x1e0]
call fcn.004692e6
mov byte [ebp - 0xfa5], al
mov al, byte [ebp - 0xfa5]
mov byte [ebp - 0x1c1], al
lea ecx, [ebp - 0x1f4]
call fcn.00448ec0
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x1e0]
call fcn.00469713
fstp qword [ebp - 0xfb0]
push ecx
push ecx
fld qword [ebp - 0xfb0]
fstp qword [esp]
push dword [ebp - 0x1b4]
push str._s_download_took__.4f_seconds
lea eax, [ebp - 0x1f4]
push eax
call fcn.0040b04f
add esp, 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x8ac], esp
lea eax, [ebp - 0x1f4]
push eax
call fcn.00448edc
mov dword [ebp - 0xfb4], eax
mov byte [ebp - 4], 0x86
push ecx
mov ecx, esp
mov dword [ebp - 0x8b0], esp
lea eax, [ebp - 0x18]
push eax
call fcn.00448edc
mov dword [ebp - 0xfb8], eax
mov byte [ebp - 4], 0x87
push ecx
mov ecx, esp
mov dword [ebp - 0x8b4], esp
push str.precheck_download_time
call fcn.00403241
mov byte [ebp - 4], 0x85
mov ecx, dword [0x525860]
call fcn.00468432
movzx eax, byte [ebp - 0x1c1]
test eax, eax
jne 0x432122
push ecx
mov ecx, esp
mov dword [ebp - 0x8b8], esp
push 0
call fcn.00403241
mov dword [ebp - 0xfbc], eax
mov byte [ebp - 4], 0x88
push ecx
mov ecx, esp
mov dword [ebp - 0x8bc], esp
lea eax, [ebp - 0x1b4]
push eax
call fcn.00448edc
mov dword [ebp - 0xfc0], eax
mov byte [ebp - 4], 0x89
push ecx
mov ecx, esp
mov dword [ebp - 0x8c0], esp
push 0x4f6f14
call fcn.00403241
mov dword [ebp - 0xfc4], eax
mov byte [ebp - 4], 0x8a
push ecx
mov eax, esp
mov dword [ebp - 0x8c4], esp
push str._precheck_download_error
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.004038b5
add esp, 0xc
mov byte [ebp - 4], 0x85
call fcn.00459e6b
add esp, 0x10
mov byte [ebp - 0x1d], 0
push dword [ebp - 0x1b4]
push str.Precheck_EXE_url___s__download_failure
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
jmp 0x4323f5
push 0x525b14
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x8c8]
push eax
call fcn.004037e6
add esp, 0xc
mov dword [ebp - 0xfc8], eax
mov eax, dword [ebp - 0xfc8]
mov dword [ebp - 0xfcc], eax
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0x194]
push eax
push dword [ebp - 0xfcc]
lea eax, [ebp - 0x1fc]
push eax
call fcn.004037e6
add esp, 0xc
mov dword [ebp - 0xfd0], eax
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x8c8]
call fcn.0046edd5
lea ecx, [ebp - 0x1f5]
call fcn.0048a8e1
mov dword [ebp - 0xfd4], eax
mov byte [ebp - 4], 0x8e
push 0
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00449784
push eax
lea ecx, [ebp - 0x1f5]
call fcn.0048a8ed
push dword [ebp - 0x19c]
push dword [ebp - 0x1f0]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x1ac]
push eax
push dword [ebp - 0x1f0]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x43225a
lea ecx, [ebp - 0x198]
call fcn.004498b2
movzx eax, al
test eax, eax
jne 0x43223b
push 0
push 0x4f6f64
lea ecx, [ebp - 0x198]
call fcn.0040355e
xor ecx, ecx
cmp eax, 0xffffffff
setg cl
mov byte [ebp - 0x1fd], cl
movzx eax, byte [ebp - 0x1fd]
test eax, eax
jne 0x432239
push dword [ebp - 0x1b8]
push 0x4f6f6c
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
mov byte [ebp - 0x1d], 0
jmp 0x432255
mov byte [ebp - 0x1d], 0
push dword [ebp - 0x1b8]
push str.EXE___s__exceeded_wait_time
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0xc
jmp 0x432388
push ecx
mov ecx, esp
mov dword [ebp - 0x8cc], esp
lea eax, [ebp - 0x198]
push eax
call fcn.00448edc
lea ecx, [ebp - 0x1b0]
call fcn.00449784
push eax
call fcn.004bdc77
pop ecx
push eax
push dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0xdf8]
call fcn.0043261c
mov byte [ebp - 0xfd5], al
mov al, byte [ebp - 0xfd5]
mov byte [ebp - 0x1d], al
movzx eax, byte [ebp - 0x1d]
test eax, eax
jne 0x4322c6
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b8]
push str.Pre_Install_exe___s__result_failed___d_
push dword [ebp + 0x28]
call fcn.00461af8
add esp, 0x10
lea ecx, [ebp - 0x1a4]
call fcn.004498b2
movzx eax, al
test eax, eax
jne 0x432388
push 1
push 2
lea ecx, [ebp - 0x280]
call fcn.0044aa0e
mov dword [ebp - 0xfdc], eax
mov byte [ebp - 4], 0x8f
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x280]
call fcn.004499f5
lea eax, [ebp - 0x8ec]
push eax
lea ecx, [ebp - 0x280]
call fcn.0044abad
mov dword [ebp - 0xfe0], eax
mov eax, dword [ebp - 0xfe0]
mov dword [ebp - 0xfe4], eax
mov byte [ebp - 4], 0x90
mov ecx, dword [ebp - 0xfe4]
call fcn.004499cb
mov dword [ebp - 0xfe8], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x8d0], esp
push dword [ebp - 0xfe8]
call fcn.00403241
lea ecx, [ebp - 0x1a4]
call fcn.00449784
push eax
mov ecx, dword [0x525a3c]
call fcn.0044fec1
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x8ec]
call fcn.00404ec8
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x280]
call fcn.004325e2
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x4323bf
lea ecx, [ebp - 0x1b8]
call fcn.00403617
mov dword [ebp - 0xfec], eax
push 0
push 0x4f6fcc
mov ecx, dword [ebp - 0xfec]
call fcn.0040355e
cmp eax, 0xffffffff
jle 0x4323bf
mov byte [0x525bc3], 1
push dword [ebp - 0x1f0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x1ec]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x1f5]
call fcn.004888d1
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x1fc]
call fcn.0046edd5
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x1f4]
call fcn.0046edd5
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x1e0]
call fcn.004692d4
jmp 0x43243c
mov dword [ebp - 4], 0x7e
push ecx
mov ecx, esp
mov dword [ebp - 0x8f0], esp
lea eax, [ebp - 0x1c0]
push eax
call fcn.00448edc
call fcn.0046bd1d
pop ecx
mov byte [ebp - 0xfed], al
movzx eax, byte [ebp - 0xfed]
test eax, eax
je 0x432481
lea ecx, [ebp - 0x1c0]
call fcn.00449784
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x1c0]
call fcn.0046edd5
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x1bc]
call fcn.0046edd5
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x1a8]
call fcn.0046edd5
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x198]
call fcn.0046edd5
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x1a0]
call fcn.0046edd5
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x1b0]
call fcn.0046edd5
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x194]
call fcn.0046edd5
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x1a4]
call fcn.0046edd5
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x1b8]
call fcn.0046edd5
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x1b4]
call fcn.0046edd5
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x170]
call fcn.0046edd5
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x190]
call fcn.0044a1e9
jmp 0x4319c6
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x168]
call fcn.00449f42
mov al, byte [ebp - 0x1d]
mov byte [ebp - 0x8f1], al
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x24]
call fcn.0046edd5
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x30]
call fcn.0046edd5
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x34]
call fcn.0046edd5
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x38]
call fcn.0046edd5
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x28]
call fcn.0046edd5
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x14]
call fcn.0046edd5
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.0046edd5
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x44]
call fcn.0046edd5
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.0046edd5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0044a1e9
mov al, byte [ebp - 0x8f1]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 0x24