Function at 0x48e79e
Capabilities:
Contain obfuscated stackstrings
Hide graphical window

Disassembly:
push 0x2f4
mov eax, 0x617b57
call fcn.00524043
push 5
push 0x66
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x2c0], eax
mov edi, dword [0x6b5c0c]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x8d2
push dword [0x6b5bdc]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2bc], edi
call esi
lea ecx, [ebp - 0x278]
call fcn.0044ba69
cmp dword [ebp - 0x278], 5
lea ecx, [ebp - 0x260]
je 0x48fecf
call fcn.00462a54
lea ecx, [ebp - 0x2b4]
call fcn.0044ba69
cmp dword [ebp - 0x2a8], 5
lea ecx, [ebp - 0x29c]
jl 0x48fecf
call fcn.00462a54
lea ecx, [ebp - 0x144]
call fcn.0044bb01
push str.UniAccessAgent_Net_Installer
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], 4
call fcn.004625ae
mov byte [ebp - 4], 5
lea edx, [ebp - 0x124]
cmp dword [ebp - 0x110], 8
lea ecx, [ebp - 0x140]
cmovae edx, dword [ebp - 0x124]
cmp dword [ebp - 0x12c], 8
cmovae ecx, dword [ebp - 0x140]
call fcn.00488452
mov ebx, 0x6b5ca8
test eax, eax
je 0x48e8f0
push 0xa
push eax
lea ecx, [ebp - 0x64]
call fcn.004621d5
push str.FirewallOpen_res
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 6
call fcn.004625ae
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xd4]
mov ecx, ebx
push eax
push 0x321
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0xd4]
call fcn.00462a54
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 5
call fcn.00462a54
lea edx, [edi + 0x224]
lea ecx, [edi + 0x208]
call fcn.00458a7d
lea ecx, [ebp - 0x2c]
call fcn.0044b93f
push eax
lea ecx, [edi + 0x240]
mov byte [ebp - 4], 8
call fcn.00462754
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00462a54
lea ecx, [edi + 0x25c]
mov byte [ebp - 0x2b5], 0
lea edx, [ebp - 0x2b5]
call fcn.0048e3a0
cmp byte [ebp - 0x2b5], 0
jne 0x48e951
lea ecx, [edi + 0x25c]
call fcn.00464459
lea ecx, [ebp - 0x2c]
call fcn.0044bb01
push eax
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 9
call fcn.00462754
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00462a54
lea ecx, [ebp - 0x2c]
call fcn.0044c052
push eax
lea ecx, [edi + 0x28]
mov byte [ebp - 4], 0xa
call fcn.00462754
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00462a54
push str.08A6D228_353A_4AB0_B89F_0B1C04351B6E_VIP
lea ecx, [ebp - 0xd4]
call fcn.004625ae
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [edi + 0x128]
call fcn.00465045
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 5
call fcn.00462a54
lea ecx, [ebp - 0x2c]
call fcn.00464b4f
push eax
lea ecx, [edi + 0x1ec]
mov byte [ebp - 4], 0xc
call fcn.00462754
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 5
call fcn.00462a54
push 0xf
push 0x66
push 0x8d2
push dword [0x6b5bdc]
call esi
mov ecx, edi
mov byte [ebp - 0x2b5], 0
call fcn.0048cc5c
test eax, eax
je 0x48ea83
push 0xa
push eax
lea ecx, [ebp - 0x64]
call fcn.004621d5
push str.prepare_cust_ini_from_section_failed_iRet
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0xd
call fcn.004625ae
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xd4]
mov ecx, ebx
push eax
push 0x33f
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0xd4]
call fcn.00462a54
lea ecx, [ebp - 0x64]
call fcn.00462a54
call fcn.0048dec8
jmp 0x48feb9
push 0x14
push 0x66
push 0x8d2
push dword [0x6b5bdc]
call esi
mov ecx, edi
call fcn.0048defd
xor ebx, ebx
mov dword [ebp - 0x2e8], ebx
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x2e0], ebx
mov dword [ebp - 0x2d0], ebx
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2d8], ebx
mov dword [ebp - 0x2d4], ebx
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x2fc], 0x1c
cmp dword [edi + 0xe4], ebx
je 0x48eb5f
push 0x699604
lea ecx, [ebp - 0xd4]
call fcn.004625ae
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [edi + 0xd0]
call fcn.0046476b
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x11
call fcn.00462a54
mov esi, dword [ebp - 0x2dc]
cmp esi, dword [ebp - 0x2d8]
je 0x48eb5f
push 0x1c
pop edi
push esi
push dword [ebp - 0x2cc]
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.00490168
add esi, edi
cmp esi, dword [ebp - 0x2d8]
jne 0x48eb36
mov edi, dword [ebp - 0x2bc]
push 0x699604
lea ecx, [ebp - 0xd4]
call fcn.004625ae
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [edi + 0xb4]
call fcn.0046476b
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x11
call fcn.00462a54
mov esi, dword [ebp - 0x2dc]
cmp esi, dword [ebp - 0x2d8]
je 0x48ebd5
push 0x1c
pop edi
push esi
push dword [ebp - 0x2cc]
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x2d0]
call fcn.00490168
add esi, edi
cmp esi, dword [ebp - 0x2d8]
jne 0x48ebac
mov edi, dword [ebp - 0x2bc]
lea ecx, [ebp - 0x10c]
call fcn.00461f9f
mov byte [ebp - 4], 0x14
cmp dword [edi + 0x170], ebx
je 0x48ec77
lea esi, [edi + 0x17c]
cmp dword [esi + 0x10], ebx
je 0x48ec77
lea eax, [edi + 0x15c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0046260b
mov byte [ebp - 4], 0x22
call fcn.0044bfa2
test al, al
je 0x48ec20
push esi
lea ecx, [ebp - 0x60]
call fcn.00465045
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.0044aff3
cmp dword [ebp - 0xf8], 0
jne 0x48ec5f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.00463127
add eax, 4
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x108]
call fcn.00465045
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x2b5], 1
mov byte [ebp - 4], 0x14
call fcn.00462a54
jmp 0x48ef94
push str.lva_setup_
lea ecx, [ebp - 0xd4]
call fcn.004625ae
mov byte [ebp - 4], 0x15
call fcn.0044bfa2
test al, al
je 0x48ecbc
push str.lva_setup64_
lea ecx, [ebp - 0x64]
call fcn.004625ae
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0xd0]
call fcn.00465045
lea ecx, [ebp - 0x64]
call fcn.00462a54
mov eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0x2d0]
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x48ef83
lea eax, [edi + 0x10c]
mov dword [ebp - 0x2c4], eax
lea eax, [edi + 0x80]
mov dword [ebp - 0x2c0], eax
xor edi, edi
lea ecx, [ebp - 0x64]
call fcn.00461f9f
push str..exe
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.004625ae
push str._uai_download_downloadAgent.htm_filedownload_uai_
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x18
call fcn.004625ae
push 0x694818
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x19
call fcn.004625ae
push 0x697760
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x1a
call fcn.004625ae
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x1b
mov esi, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x60]
push eax
call fcn.0044f15c
lea eax, [esi + 4]
add eax, edi
lea ecx, [ebp - 0x60]
push eax
call fcn.0044f15c
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea ecx, [ebp - 0xf0]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
call fcn.00462a54
lea ecx, [ebp - 0x48]
call fcn.00462a54
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.00462a54
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.0044aff3
lea ecx, [ebp - 0x9c]
call fcn.00461f9f
push 0x1c
pop eax
push str..exe
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], al
call fcn.004625ae
mov byte [ebp - 4], 0x1d
push str._uai_download_downloadAgent.htm_filedownload_uai_
lea ecx, [ebp - 0xb8]
call fcn.004625ae
push 0x694818
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x1e
call fcn.004625ae
push str.https:__
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.004625ae
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x20
mov esi, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x98]
push eax
call fcn.0044f15c
lea eax, [esi + 4]
add eax, edi
lea ecx, [ebp - 0x98]
push eax
call fcn.0044f15c
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044f15c
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0x98]
call fcn.0044f15c
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044f15c
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044f15c
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x98]
call fcn.0044f15c
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x98]
call fcn.0044f15c
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
call fcn.00462a54
push 0x1c
pop eax
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], al
call fcn.00462a54
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.0044aff3
cmp dword [ebp - 0xf8], 0
jne 0x48ef4d
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x9c]
call fcn.00463127
add eax, 4
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x108]
call fcn.00465045
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x9c]
call fcn.00462a54
lea ecx, [ebp - 0x64]
call fcn.00462a54
mov eax, dword [ebp - 0x2cc]
inc ebx
sub eax, dword [ebp - 0x2d0]
push 0x1c
pop ecx
cdq
add edi, ecx
idiv ecx
cmp ebx, eax
jb 0x48ecf0
mov edi, dword [ebp - 0x2bc]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x14
call fcn.00462a54
xor ebx, ebx
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.004625ae
push ebx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x10c]
call fcn.00463cc9
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.00462a54
push 0x50
pop ecx
push 0x62
pop eax
test bl, bl
cmove ecx, eax
push ecx
push 0x66
push 0x8d2
push dword [0x6b5bdc]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x48]
call fcn.0044c052
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x24
push ecx
mov edx, eax
lea ecx, [ebp - 0x80]
call fcn.00464d31
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x26
call fcn.00462a54
xor ebx, ebx
cmp dword [edi + 0x1a8], ebx
je 0x48f0d5
cmp dword [edi + 0x1c4], ebx
je 0x48f0d5
push str.LVASetupTmp_
lea ecx, [ebp - 0x2c]
call fcn.004625ae
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x27
call fcn.0044bf20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x28
push ecx
mov edx, eax
lea ecx, [ebp - 0x64]
call fcn.00464d31
pop ecx
lea ecx, [ebp - 0xb8]
call fcn.00462a54
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2b
call fcn.00462a54
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x80]
call fcn.00463127
add eax, 4
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2b
call fcn.00462a54
push ebx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x64]
call fcn.00464321
test eax, eax
je 0x48f0cd
push ebx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x64]
call fcn.004631dc
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.0044c94d
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2b
call fcn.00462a54
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00465045
lea ecx, [ebp - 0x64]
call fcn.00462a54
mov dword [ebp - 0x2f4], ebx
mov dword [ebp - 0x2f0], ebx
mov word [ebp - 0x2ec], 1
mov dword [ebp - 0x2f8], 0x699b68
push 1
mov ecx, edi
mov byte [ebp - 4], 0x2e
call fcn.0048e19b
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x2e8]
sub eax, ecx
push 0xffffffffffffff9c
pop ebx
push 0x1c
cdq
pop esi
idiv esi
and dword [ebp - 0x2c0], 0
test eax, eax
je 0x48fd9f
xor eax, eax
mov dword [ebp - 0x2c4], eax
add eax, ecx
lea ecx, [ebp - 0x9c]
push eax
call fcn.0046260b
push str._to
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.004625ae
push str.try_to_download
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x30
call fcn.004625ae
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x48]
mov esi, 0x6b5ca8
push eax
lea eax, [ebp - 0x9c]
mov ecx, esi
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3a7
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, esi
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.00462a54
xor esi, esi
cmp dword [ebp - 0x84], 8
lea eax, [ebp - 0x98]
cmovae eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
lea ecx, [ebp - 0x80]
call fcn.0044d2f7
mov eax, dword [edi + 0x278]
cmp eax, 1
je 0x48f1fb
cmp eax, 3
jne 0x48f273
push dword [edi + 0x27c]
lea eax, [ebp - 0x2f8]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x9c]
call fcn.004843cd
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
pop ecx
test ebx, ebx
jne 0x48f251
cmp byte [ebp - 0x2b5], al
jne 0x48f6fa
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0048e533
mov ebx, eax
test ebx, ebx
je 0x48f750
mov esi, dword [ebp - 0x2bc]
cmp esi, 6
jg 0x48f6fa
cmp ebx, 0xfffffc15
je 0x48f1c8
cmp dword [edi + 0x278], 3
je 0x48f1c8
push 0xa
push ebx
lea ecx, [ebp - 0xf0]
call fcn.004621d5
push str._ret
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x32
call fcn.004625ae
push str._to
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x33
call fcn.004625ae
push str.BeeDownload_Failed_Try_ZDownloadWithIE_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x34
call fcn.004625ae
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x35
push eax
lea eax, [ebp - 0xb8]
mov ebx, 0x6b5ca8
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3ce
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
call fcn.00462a54
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x2f
call fcn.00462a54
lea eax, [ebp - 0x2f8]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x9c]
call fcn.0045f464
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
test ebx, ebx
jne 0x48f39f
cmp byte [ebp - 0x2b5], al
jne 0x48f6fa
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0048e533
mov ebx, eax
test ebx, ebx
je 0x48f750
mov esi, dword [ebp - 0x2bc]
cmp esi, 6
jg 0x48f6fa
push str._to
lea ecx, [ebp - 0x48]
call fcn.004625ae
push str.ZDownloadWithIE_Failed_Try_WinHttp_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x36
call fcn.004625ae
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x48]
mov ebx, 0x6b5ca8
push eax
lea eax, [ebp - 0x9c]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3db
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.00462a54
lea ecx, [ebp - 0x80]
call fcn.0044d2f7
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x9c]
push eax
push ecx
call fcn.0048e437
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
test ebx, ebx
jne 0x48f47f
cmp byte [ebp - 0x2b5], al
jne 0x48f6fa
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0048e533
mov ebx, eax
test ebx, ebx
je 0x48f750
mov esi, dword [ebp - 0x2bc]
cmp esi, 6
jg 0x48f6fa
push str._to
lea ecx, [ebp - 0x48]
call fcn.004625ae
push str.WinHttp_Failed_Try_WinINet_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x38
call fcn.004625ae
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x48]
mov ebx, 0x6b5ca8
push eax
lea eax, [ebp - 0x9c]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x3e9
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x2f
call fcn.00462a54
lea ecx, [ebp - 0x80]
call fcn.0044d2f7
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x9c]
push eax
push ecx
call fcn.0048e437
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
test ebx, ebx
jne 0x48f55f
cmp byte [ebp - 0x2b5], al
jne 0x48f6fa
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0048e533
mov ebx, eax
test ebx, ebx
je 0x48f750
mov esi, dword [ebp - 0x2bc]
cmp esi, 6
jg 0x48f6fa
cmp dword [edi + 0x278], 2
jne 0x48f6b0
lea eax, [ebp - 0x2f8]
push 0x9914
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x9c]
call fcn.004843cd
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
pop ecx
pop ecx
test ebx, ebx
jne 0x48f5ca
cmp byte [ebp - 0x2b5], al
jne 0x48f6fa
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0048e533
mov ebx, eax
test ebx, ebx
je 0x48f750
mov esi, dword [ebp - 0x2bc]
cmp esi, 6
jg 0x48f6fa
push 0xa
push ebx
lea ecx, [ebp - 0xf0]
call fcn.004621d5
push str._ret
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x3a
call fcn.004625ae
push str._to
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.004625ae
push str.BeeDownload_Failed_Try_ZDownloadWithIE_
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3c
call fcn.004625ae
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0xb8]
mov ebx, 0x6b5ca8
push eax
lea eax, [ebp - 0x80]
mov ecx, ebx
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x405
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
call fcn.00462a54
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x2f
call fcn.00462a54
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.0049000e
mov ebx, eax
inc esi
mov dword [ebp - 0x2bc], esi
test ebx, ebx
jne 0x48f6f1
cmp byte [ebp - 0x2b5], al
jne 0x48f6fa
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.0048e533
mov ebx, eax
test ebx, ebx
je 0x48f750
mov esi, dword [ebp - 0x2bc]
cmp esi, 6
jle 0x48f1c8
test ebx, ebx
je 0x48f750
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x2e
call fcn.00462a54
mov ecx, dword [ebp - 0x2e8]
push 0x1c
pop eax
add dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2e4]
sub eax, ecx
mov esi, dword [ebp - 0x2c0]
cdq
inc esi
idiv dword [ebp - 0x2fc]
mov dword [ebp - 0x2c0], esi
cmp esi, eax
mov eax, dword [ebp - 0x2c4]
jb 0x48f12f
mov esi, 0x6b5ca8
jmp 0x48f80d
push str._OK.
lea ecx, [ebp - 0xb8]
call fcn.004625ae
push str._to
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3e
call fcn.004625ae
push str.download
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3f
call fcn.004625ae
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x80]
mov esi, 0x6b5ca8
push eax
lea eax, [ebp - 0x48]
mov ecx, esi
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x418
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, esi
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
call fcn.00462a54
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x2e
call fcn.00462a54
test ebx, ebx
jne 0x48fd9f
push 2
mov ecx, edi
call fcn.0048e19b
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.004625ae
push ebx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x80]
call fcn.00463cc9
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.00462a54
test bl, bl
je 0x48f996
lea ecx, [ebp - 0x23c]
call fcn.0045e59f
push str.MsiExec.exe__qn__i
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.004625ae
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0x80]
call fcn.00462b12
push eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x48]
call fcn.00464d31
pop ecx
add eax, 4
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0x238]
call fcn.00465045
lea ecx, [ebp - 0x48]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
call fcn.00462a54
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.00462a54
lea ecx, [ebp - 0xf0]
call fcn.0044be2a
add eax, 4
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x214]
call fcn.00465045
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x48
call fcn.00462a54
or dword [ebp - 0x21c], 0xffffffff
lea eax, [edi + 0x198]
push eax
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x220], 5
call fcn.00465045
lea eax, [edi + 0x1b4]
push eax
lea ecx, [ebp - 0x190]
call fcn.00465045
lea eax, [edi + 0x1d0]
push eax
lea ecx, [ebp - 0x174]
call fcn.00465045
lea ecx, [ebp - 0x23c]
call fcn.0045ee4b
mov ebx, eax
lea eax, [ebp - 0xd4]
push ecx
push eax
lea ecx, [ebp - 0x23c]
call fcn.0045e605
push eax
push 0x43a
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, esi
mov byte [ebp - 4], 0x50
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, esi
call fcn.0044edf8
lea ecx, [ebp - 0xd4]
call fcn.00462a54
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x2e
call fcn.004597bf
jmp 0x48fbe1
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x80]
call fcn.00462b12
push 0x694bd8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x51
call fcn.004625ae
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea eax, [edi + 0x48]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x51
call fcn.00462a54
push str._NoQueryBox
lea ecx, [ebp - 0x48]
call fcn.004625ae
xor ebx, ebx
mov byte [ebp - 4], 0x53
push ebx
lea eax, [ebp - 0x48]
push eax
lea ecx, [edi + 0x44]
call fcn.004642b3
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x51
mov esi, eax
call fcn.00462a54
cmp esi, 0xffffffff
jne 0x48fa65
push str._NoQueryBox
lea ecx, [ebp - 0xb8]
call fcn.004625ae
push 0x694bd8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x54
call fcn.004625ae
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x51
call fcn.00462a54
cmp dword [0x6b5c08], 0
je 0x48faa0
push str.__q__s
lea ecx, [ebp - 0xf0]
call fcn.004625ae
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x60]
call fcn.0044f15c
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x51
call fcn.00462a54
push ebx
push dword [0x6b5bdc]
call dword [sym.imp.USER32.dll_ShowWindow]
push 2
push 0x64
push 0x8d2
push dword [0x6b5bdc]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x23c]
call fcn.0045e59f
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [ebp - 0x238]
call fcn.00465045
push ebx
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x80]
call fcn.004631dc
add eax, 4
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x214]
call fcn.00465045
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x57
call fcn.00462a54
lea eax, [edi + 0x198]
mov dword [ebp - 0x220], 5
push eax
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x21c], ebx
call fcn.00465045
lea eax, [edi + 0x1b4]
push eax
lea ecx, [ebp - 0x190]
call fcn.00465045
lea eax, [edi + 0x1d0]
push eax
lea ecx, [ebp - 0x174]
call fcn.00465045
lea ecx, [ebp - 0x23c]
call fcn.0045ee4b
mov ebx, eax
lea eax, [ebp - 0x9c]
push ecx
push eax
lea ecx, [ebp - 0x23c]
call fcn.0045e605
push eax
push 0x454
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov esi, 0x6b5ca8
mov byte [ebp - 4], 0x59
push 3
mov ecx, esi
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, esi
call fcn.0044edf8
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x57
call fcn.00462a54
cmp dword [ebp - 0x15c], 0
jne 0x48fbc7
push 4
mov ecx, edi
call fcn.0048e19b
jmp 0x48fbca
or ebx, 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.004597bf
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x2e
call fcn.00462a54
test ebx, ebx
je 0x48fc38
push 5
mov ecx, edi
call fcn.0048e19b
push str.insatll_failed
lea ecx, [ebp - 0x2c]
call fcn.004625ae
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
push 0x463
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, esi
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
jmp 0x48fe65
push str..msi
lea ecx, [ebp - 0x2c]
call fcn.004625ae
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x80]
call fcn.00463cc9
lea ecx, [ebp - 0x2c]
mov bl, al
call fcn.00462a54
test bl, bl
je 0x48fd49
push 0x5f
push 0x66
push 0x8d2
push dword [0x6b5bdc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [ebp - 0x300]
push str.UaaClient.exe
lea ecx, [ebp - 0xb8]
call fcn.004625ae
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0xb8]
or ebx, 1
mov dword [ebp - 0x2c0], ebx
call fcn.0048e0dd
test eax, eax
jne 0x48fcdc
push 0x695418
lea ecx, [ebp - 0x48]
call fcn.004625ae
mov dword [ebp - 4], 0x5f
lea ecx, [ebp - 0x48]
or ebx, 2
mov dword [ebp - 0x2c0], ebx
call fcn.0048e0dd
mov byte [ebp - 0x2b5], 0
test eax, eax
je 0x48fce3
mov byte [ebp - 0x2b5], 1
test bl, 2
je 0x48fcf3
lea ecx, [ebp - 0x48]
and ebx, 0xfffffffd
call fcn.00462a54
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0x2e
and ebx, 0xfffffffe
call fcn.00462a54
cmp byte [ebp - 0x2b5], 0
jne 0x48fd21
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x48fc80
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x80]
call fcn.0044cedf
test al, al
je 0x48fd40
lea ecx, [ebp - 0x80]
call fcn.0044d2f7
push 4
mov ecx, edi
call fcn.0048e19b
push 0
push 0
push 0x10
push dword [0x6b5bdc]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.insalled_end
lea ecx, [ebp - 0x48]
call fcn.004625ae
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x60
push eax
push 0x487
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
mov ecx, esi
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, esi
call fcn.0044edf8
lea ecx, [ebp - 0x48]
call fcn.00462a54
jmp 0x48fe6f
push 3
mov ecx, edi
call fcn.0048e19b
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0xf0]
call fcn.004620ca
push str._vt_all_url_to_down
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x41
call fcn.004625ae
push 0xa
push ebx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x42
call fcn.004621d5
push str.get_down_url_failed
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x43
call fcn.004625ae
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0xb8]
mov ebx, 0x6b5ca8
push eax
lea eax, [ebp - 0x48]
mov ecx, ebx
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x423
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
push 3
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
lea ecx, [ebp - 0x48]
call fcn.00462a54
lea ecx, [ebp - 0xb8]
call fcn.00462a54
lea ecx, [ebp - 0xf0]
call fcn.00462a54
call fcn.0048dec8
lea ecx, [ebp - 0x80]
mov dword [ebp - method.std::_Facet_base.virtual_4], vtable.HProcess::HFileDownloadCallBack.0
call fcn.00462a54
lea ecx, [ebp - 0x10c]
call fcn.00462a54
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x61
call fcn.0044b075
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x62
call fcn.0044b075
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x63
call fcn.0044b075
lea ecx, [ebp - 0x128]
call fcn.00462a54
lea ecx, [ebp - 0x144]
jmp 0x48ffcd
call fcn.00462a54
cmp dword [0x6b5c08], ebx
jne 0x48ff81
push 0x6988e0
lea ecx, [ebp - 0xb8]
call fcn.004625ae
push str.MSG_MUST_OS_NOT_SUPPORT
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], ebx
call fcn.004625ae
lea edx, [ebp - 0xb8]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd4]
call fcn.0048bc1b
mov esi, eax
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf0]
call fcn.0048bc1b
add esi, 4
cmp dword [esi + 0x14], 8
jb 0x48ff34
mov esi, dword [esi]
add eax, 4
cmp dword [eax + 0x14], 8
jb 0x48ff3f
mov eax, dword [eax]
push ebx
push esi
push eax
push dword [0x6b5bdc]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0xf0]
call fcn.00462a54
lea ecx, [ebp - 0xd4]
call fcn.00462a54
lea ecx, [ebp - 0x2c]
call fcn.00462a54
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.00462a54
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x10
push dword [0x6b5bdc]
call esi
push str.os_not_support
lea ecx, [ebp - 0x2c]
call fcn.004625ae
push 3
pop eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], eax
push ecx
push 0x317
push str.e:works10780uniaccess3_1_srcuniaccessagentprometheus2lva_setup_net_thread_install.cpp
mov ebx, 0x6b5ca8
push eax
mov ecx, ebx
call fcn.0044eee9
mov ecx, eax
call fcn.0044deee
push eax
mov ecx, ebx
call fcn.0044edf8
lea ecx, [ebp - 0x2c]
call fcn.00462a54
call fcn.00523fed
ret