Function at 0x490e30
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x515b98
mov eax, dword fs:[0]
push eax
sub esp, 0x478
mov eax, dword [0x570be0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x428], edx
mov edi, ecx
mov dword [ebp - 0x424], edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x42c], eax
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x464], eax
push edi
lea ecx, [ebp - 0x418]
mov dword [ebp - 4], 0
call fcn.004204a0
push str.archivePath
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 1
call fcn.004204a0
mov byte [ebp - 4], 2
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x44c], esi
lea eax, [ebp - 0x438]
push eax
lea edx, [ebp - 0x44c]
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 3
call fcn.004215a0
lea ecx, [ebp - 0x418]
push ecx
mov edx, eax
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 4
call fcn.004215a0
add esp, 8
push eax
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 5
call fcn.00421fc0
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x440]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x490f39
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x430]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490f5c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490f79
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490f9c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x490fbf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.doRsaDecode
lea ecx, [ebp - 0x418]
call fcn.004204a0
push str.doRsaDecode
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 6
call fcn.004204a0
push 0
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x438]
push eax
mov byte [ebp - 4], 7
call fcn.004216b0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491026
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491049
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x438], 0
call fcn.00496920
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x460], eax
mov byte [ebp - 4], 8
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x434], esi
mov byte [ebp - 4], 9
test edi, edi
jne 0x4910b2
xor ecx, ecx
jmp 0x4910c6
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4910b7
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x460]
call fcn.00420c80
mov edi, dword [ebp - 0x460]
push 0x5c
mov eax, dword [edi - 0xc]
push edi
mov dword [ebp - 0x430], eax
call fcn.004eb420
add esp, 8
test eax, eax
jne 0x4910f6
or eax, 0xffffffff
jmp 0x4910fa
sub eax, edi
sar eax, 1
mov ecx, dword [ebp - 0x430]
sub ecx, eax
dec ecx
push ecx
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x460]
call fcn.0042c3e0
mov byte [ebp - 4], 0xa
mov edx, dword [eax]
lea ecx, [esi - 0x10]
lea eax, [edx - 0x10]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x43c], ecx
cmp eax, ecx
je 0x491191
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x49117c
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x49117c
mov ecx, dword [ebp - 0x430]
call fcn.00420750
mov dword [ebp - 0x430], eax
mov ecx, ebx
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x491171
mov esi, dword [ebp - 0x43c]
push esi
mov ecx, dword [esi]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x430]
lea esi, [eax + 0x10]
mov dword [ebp - 0x434], esi
jmp 0x491191
push dword [edx - 0xc]
lea ecx, [ebp - 0x434]
push edx
call fcn.00420c80
mov esi, dword [ebp - 0x434]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4911b4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi - 0xc]
push 0x2e
push esi
mov dword [ebp - 0x430], eax
call fcn.004eb420
add esp, 8
test eax, eax
jne 0x4911d1
or eax, 0xffffffff
jmp 0x4911d5
sub eax, esi
sar eax, 1
mov ecx, dword [ebp - 0x430]
sub ecx, eax
push ecx
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x434]
call fcn.0042c3e0
push 0x2e
push esi
mov byte [ebp - 4], 0xb
call fcn.004eb420
add esp, 8
test eax, eax
jne 0x491208
or eax, 0xffffffff
jmp 0x49120c
sub eax, esi
sar eax, 1
push eax
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x434]
call fcn.0042d4e0
mov byte [ebp - 4], 0xc
mov edx, dword [eax]
add esi, 0xfffffff0
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x49127c
cmp dword [esi + 0xc], 0
jl 0x49126d
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x49126d
call fcn.00420750
mov dword [ebp - 0x430], eax
mov ecx, ebx
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x491262
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x430]
add eax, 0x10
mov dword [ebp - 0x434], eax
jmp 0x49127c
push dword [edx - 0xc]
lea ecx, [ebp - 0x434]
push edx
call fcn.00420c80
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49129f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
call fcn.004e9080
push eax
mov dword [ebp - 0x458], edx
call fcn.004eb410
mov eax, dword [0x571ba4]
add esp, 8
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x430], esi
mov byte [ebp - 4], 0xd
call fcn.004eb3ed
push eax
lea edx, [ebp - 0x430]
lea ecx, [ebp - 0x41c]
call fcn.00421510
lea ecx, [ebp - 0x444]
push ecx
mov edx, eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xe
call fcn.004215a0
add esp, 8
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
lea ecx, [ebp - 0x434]
push dword [eax - 0xc]
push eax
call fcn.00428650
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491339
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49135c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0xb
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491379
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x434]
push eax
mov edx, 0x578228
lea ecx, [ebp - 0x43c]
call fcn.00421e40
add esp, 4
mov byte [ebp - 4], 0x10
mov edx, dword [eax]
mov eax, dword [ebp - 0x428]
lea ecx, [edx - 0x10]
mov esi, dword [eax]
sub esi, 0x10
cmp ecx, esi
je 0x4913fa
cmp dword [esi + 0xc], 0
jl 0x4913eb
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x4913eb
call fcn.00420750
mov dword [ebp - 0x430], eax
mov ecx, ebx
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4913de
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x428]
add eax, 0x10
mov dword [ecx], eax
jmp 0x4913fa
push dword [edx - 0xc]
mov ecx, dword [ebp - 0x428]
push edx
call fcn.00420c80
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49141d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 3
push 0
push 1
push 1
push dword [ebp - 0x424]
call esi
mov dword [ebp - 0x430], eax
cmp eax, 0xffffffff
jne 0x49163d
push str.doRsaDecode_CreateFile_source_
lea ecx, [ebp - 0x438]
call fcn.004204a0
mov byte [ebp - 4], 0x11
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x440], esi
lea eax, [ebp - 0x438]
push eax
lea edx, [ebp - 0x440]
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x12
call fcn.004215a0
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x13
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x430]
call fcn.00421510
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x14
call fcn.00421fc0
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x430]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4914e5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x43c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491508
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x11
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491525
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491548
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x15
call fcn.004204a0
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x438]
push eax
mov byte [ebp - 4], 0x16
call fcn.004216b0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x438]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4915ae
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4915d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4915f4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491617
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491884
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x491884
mov eax, dword [ebp - 0x428]
push 0
push 0x80
push 4
push 0
push 1
push 2
push dword [eax]
call esi
mov dword [ebp - 0x43c], eax
cmp eax, 0xffffffff
jne 0x491a47
push str.doRsaDecode_CreateFile_destination_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x17
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x43c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x43c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x18
call fcn.004215a0
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x19
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x41c]
call fcn.00421510
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00421fc0
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491701
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491724
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x17
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491741
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491764
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x1b
call fcn.004204a0
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x1c
call fcn.004216b0
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4917ca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4917ed
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491810
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491833
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491850
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x430]
call esi
mov eax, dword [ebp - 0x438]
test eax, eax
je 0x491871
push eax
call fcn.00495e10
add esp, 4
mov eax, dword [ebp - 0x440]
test eax, eax
je 0x491884
push eax
call fcn.00496840
add esp, 4
push str.iRetVal
lea ecx, [ebp - 0x440]
call fcn.004204a0
mov byte [ebp - 4], 0x52
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x440]
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x53
call fcn.004215a0
mov byte [ebp - 4], 0x54
mov edi, dword [ebp - 0x44c]
push edi
mov edx, eax
lea ecx, [ebp - 0x448]
call fcn.00421510
add esp, 8
push eax
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 0x55
call fcn.00421fc0
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491918
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0x450]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49193b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x52
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491958
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x440]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49197b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.doRsaDecode
lea ecx, [ebp - 0x440]
call fcn.004204a0
push str.doRsaDecode
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x56
call fcn.004204a0
push 0
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x44c]
push eax
mov byte [ebp - 4], 0x57
call fcn.004216b0
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x44c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4919e2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x440]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491a05
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0x464]
add esi, 0xfffffff0
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x491a29
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004e6e0a
mov esp, ebp
pop ebp
ret
push 0xf7
push str._____BEGIN_RSA_PUBLIC_KEY______nMIGHAoGBANyWsWNMh4EW0i9RQRnLC8CG8zVhDlnrl644H9FhpCrIrHO1AosuzR3_nyvrDyKIy4rM18gih9myLXiOq2uGtXxSzkpJB1iaL6E5AwMMmXeVU5m_n6Sftz_nyiGzLqpgWFFi_YThn2LSQUDr6RFlQgnAgI3IhHXLWlioPzLJFWJAgED_n_____END_RSA_PUBLIC_KEY______n
call fcn.004969c0
add esp, 8
mov dword [ebp - 0x440], eax
test eax, eax
jne 0x491c2e
push str.doRsaDecode_BIO_new_mem_buf_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x1d
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x1e
call fcn.004215a0
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00421fc0
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491ae3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x1d
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491b00
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491b23
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x42c]
mov ecx, esi
call fcn.00492c50
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x20
call fcn.004204a0
push 2
push esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x21
call fcn.004216b0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491b91
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491bb4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491bd7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491bfa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492c39
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x491856
push 0
push 0
push 0
push eax
call fcn.00496e30
add esp, 0x10
mov dword [ebp - 0x438], eax
test eax, eax
jne 0x491e12
push str.doRsaDecode_PEM_read_bio_RSAPublicKey_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x22
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x23
call fcn.004215a0
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x24
call fcn.00421fc0
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491cc7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x22
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491ce4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491d07
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x42c]
mov ecx, esi
call fcn.00492c50
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x25
call fcn.004204a0
push 2
push esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x26
call fcn.004216b0
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491d75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491d98
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491dbb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491dde
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492c39
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x491856
push eax
call fcn.00495f30
add esp, 4
mov dword [ebp - 0x420], eax
test eax, eax
jne 0x491ff0
push str.doRsaDecode_RSA_size_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x27
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x28
call fcn.004215a0
add esp, 4
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x29
call fcn.00421fc0
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491ea5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x27
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491ec2
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491ee5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x42c]
mov ecx, esi
call fcn.00492c50
push str._tWinMain
lea ecx, [ebp - 0x424]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x2a
call fcn.004204a0
push 2
push esi
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x418]
push eax
mov byte [ebp - 4], 0x2b
call fcn.004216b0
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491f53
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x424]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491f76
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491f99
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x491fbc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492c39
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x491856
push eax
call fcn.004e7a06
xor cl, cl
xor esi, esi
mov edx, eax
add esp, 4
mov dword [ebp - 0x424], edx
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x428], esi
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x46c], esi
mov dword [ebp - 0x468], esi
mov byte [ebp - 4], 0x2c
xor eax, eax
lea ecx, [ecx]
push dword [ebp - 0x420]
inc eax
push 0
push edx
mov dword [ebp - 0x41c], eax
call fcn.004ecdb0
add esp, 0xc
lea eax, [ebp - 0x474]
push 0
push eax
push dword [ebp - 0x420]
push dword [ebp - 0x424]
push dword [ebp - 0x430]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4928e0
mov edx, dword [ebp - 0x474]
test edx, edx
je 0x492494
mov ecx, dword [ebp - 0x418]
mov eax, dword [ebp - 0x420]
movzx ecx, cl
cmp edx, eax
mov edx, 1
cmovb ecx, edx
sub esi, dword [ebp - 0x470]
mov dword [ebp - 0x418], ecx
lea ecx, [eax - 0xb]
mov eax, dword [ebp - 0x41c]
imul eax, ecx
mov dword [ebp - 0x428], ecx
push eax
lea ecx, [ebp - 0x470]
call fcn.0042c4e0
mov eax, dword [ebp - 0x470]
push 1
push dword [ebp - 0x438]
add eax, esi
push eax
push dword [ebp - 0x424]
push dword [ebp - 0x420]
call fcn.00495f80
add esp, 0x14
cmp eax, 0xffffffff
je 0x492134
cmp eax, dword [ebp - 0x428]
jae 0x492102
add eax, esi
push eax
lea ecx, [ebp - 0x470]
call fcn.0042c4e0
mov ecx, dword [ebp - 0x418]
test cl, cl
jne 0x492129
mov esi, dword [ebp - 0x46c]
mov eax, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x428], esi
jmp 0x492030
mov ecx, dword [ebp - 0x46c]
jmp 0x49249a
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.doRsaDecode_RSA_public_decrypt_
mov byte [ebp - 4], 0x36
test eax, 0xffff0000
jne 0x492177
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x492189
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x492189
push 0x1f
push str.doRsaDecode_RSA_public_decrypt_
lea ecx, [ebp - 0x420]
call fcn.00420c80
mov byte [ebp - 4], 0x37
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x41c], esi
lea eax, [ebp - 0x420]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x38
call fcn.004215a0
add esp, 4
mov byte [ebp - 4], 0x39
mov eax, dword [eax]
mov dword [ebp - 0x448], eax
lea ecx, [eax - 0x10]
mov dword [ebp - 0x418], ecx
mov ecx, dword [ebp - 0x42c]
mov edx, dword [ecx]
sub edx, 0x10
mov dword [ebp - 0x450], edx
cmp dword [ebp - 0x418], edx
je 0x492263
cmp dword [edx + 0xc], 0
lea edi, [edx + 0xc]
mov dword [ebp - 0x428], edi
mov edi, dword [ebp - 0x460]
jl 0x49225a
mov eax, dword [ebp - 0x418]
mov eax, dword [eax]
cmp eax, dword [edx]
jne 0x492254
mov ecx, dword [ebp - 0x418]
call fcn.00420750
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x428]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492241
mov eax, dword [ebp - 0x450]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x42c]
add eax, 0x10
mov dword [ecx], eax
jmp 0x492263
mov eax, dword [ebp - 0x448]
push dword [eax - 0xc]
push eax
call fcn.00420c80
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x458]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492286
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x37
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4922a3
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4922c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
push 0x3fe
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.004ecdb0
add esp, 0xc
lea eax, [ebp - 0x414]
push eax
call fcn.00498030
push eax
call fcn.00498000
mov eax, dword [ebp - 0x42c]
add esp, 8
mov eax, dword [eax]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x492313
mov eax, dword [ecx]
call dword [eax + 0x10]
mov edx, eax
test edx, edx
jne 0x492322
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0x10]
mov edx, eax
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
jne 0x492337
push 0x80004005
call fcn.0041fba0
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x420], esi
lea eax, [ebp - 0x414]
mov byte [ebp - 4], 0x3a
test eax, 0xffff0000
jne 0x49237c
movzx ecx, ax
call fcn.0041fcd0
test eax, eax
je 0x49238e
lea edx, [ebp - 0x414]
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x492388
push eax
lea ecx, [ebp - 0x420]
call fcn.00420650
mov esi, dword [ebp - 0x420]
mov ecx, dword [ebp - 0x42c]
mov byte [ebp - 4], 0x3b
push dword [esi - 0xc]
push esi
call fcn.00428650
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2c
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4923be
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x428], eax
mov eax, str._tWinMain
mov byte [ebp - 4], 0x3c
test eax, 0xffff0000
jne 0x492401
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x492413
push esi
push eax
lea ecx, [ebp - 0x428]
call fcn.00420bb0
jmp 0x492413
push 9
push str._tWinMain
lea ecx, [ebp - 0x428]
call fcn.00420c80
mov byte [ebp - 4], 0x3d
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.WebInstallerMain
mov byte [ebp - 4], 0x3e
test eax, 0xffff0000
jne 0x49245a
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x49246c
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x49246c
push 0x10
push str.WebInstallerMain
lea ecx, [ebp - 0x420]
call fcn.00420c80
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x420]
push eax
mov byte [ebp - 4], 0x3f
call fcn.004216b0
mov byte [ebp - 4], 0x3d
jmp 0x492b6e
mov ecx, dword [ebp - 0x428]
mov esi, dword [ebp - 0x470]
sub ecx, esi
mov dword [ebp - 0x428], ecx
test cl, 3
jne 0x492775
mov eax, ecx
shr eax, 2
cmp byte [ecx + esi - 1], 0x3d
lea eax, [eax + eax*2]
mov dword [ebp - 0x418], eax
jne 0x4924cd
dec eax
mov dword [ebp - 0x418], eax
cmp byte [ecx + esi - 2], 0x3d
jne 0x4924db
dec eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
push eax
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x46
call fcn.0042c4e0
mov edx, dword [ebp - 0x428]
lea eax, [ebp - 0x458]
push eax
push dword [ebp - 0x418]
mov ecx, esi
push dword [ebp - 0x480]
call fcn.00420130
add esp, 0xc
test al, al
jne 0x492648
push str.doRsaDecode_Decode
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x47
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x48
call fcn.004215a0
add esp, 4
mov esi, dword [ebp - 0x42c]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x49
call fcn.00421fc0
lea ecx, [ebp - 0x458]
call fcn.004205e0
lea ecx, [ebp - 0x41c]
call fcn.004205e0
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x46
call fcn.004205e0
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x4a
call fcn.004204a0
mov byte [ebp - 4], 0x4b
push 2
push esi
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.004216b0
lea ecx, [ebp - 0x41c]
call fcn.004205e0
lea ecx, [ebp - 0x420]
call fcn.004205e0
lea ecx, [ebp - 0x480]
call fcn.0042c4b0
lea ecx, [ebp - 0x470]
call fcn.0042c4b0
lea ecx, [ebp - 0x444]
call fcn.004205e0
lea ecx, [ebp - 0x434]
call fcn.004205e0
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 0
call fcn.004205e0
jmp 0x492c26
mov ecx, dword [ebp - 0x480]
mov eax, dword [ebp - 0x47c]
push 0
lea edx, [ebp - 0x474]
push edx
sub eax, ecx
push eax
push ecx
push dword [ebp - 0x43c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x49274a
push str.doRsaDecode_WriteFile_destination_
lea ecx, [ebp - 0x418]
call fcn.004204a0
mov byte [ebp - 4], 0x4c
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x41c], eax
lea eax, [ebp - 0x418]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x4d
call fcn.004215a0
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x4e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, esi
lea ecx, [ebp - 0x458]
call fcn.00421510
add esp, 4
mov esi, dword [ebp - 0x42c]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x4f
call fcn.00421fc0
lea ecx, [ebp - 0x458]
call fcn.004205e0
lea ecx, [ebp - 0x448]
call fcn.004205e0
lea ecx, [ebp - 0x41c]
call fcn.004205e0
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x46
call fcn.004205e0
push str._tWinMain
lea ecx, [ebp - 0x420]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x50
call fcn.004204a0
mov byte [ebp - 4], 0x51
jmp 0x4925dc
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x44c], 0
test eax, eax
je 0x492767
push eax
call fcn.004e71fd
add esp, 4
test esi, esi
je 0x492bc3
push esi
jmp 0x492bbb
push str.doRsaDecode_GetDecodeSize_
lea ecx, [ebp - 0x41c]
call fcn.004204a0
mov byte [ebp - 4], 0x40
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x41c]
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x41
call fcn.004215a0
mov byte [ebp - 4], 0x42
push dword [ebp - 0x428]
mov edx, eax
lea ecx, [ebp - 0x448]
call fcn.00421510
add esp, 8
mov ecx, dword [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0x43
call fcn.00421fc0
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0x448]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492808
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x450]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49282b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x40
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492848
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x49286b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str._tWinMain
lea ecx, [ebp - 0x418]
call fcn.004204a0
push str.WebInstallerMain
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0x44
call fcn.004204a0
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x41c]
push eax
mov byte [ebp - 4], 0x45
call fcn.004216b0
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x41c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4928d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x418]
jmp 0x492b97
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.doRsaDecode_ReadFile_source_
mov byte [ebp - 4], 0x2d
test eax, 0xffff0000
jne 0x492923
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x492935
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x492935
push 0x1c
push str.doRsaDecode_ReadFile_source_
lea ecx, [ebp - 0x420]
call fcn.00420c80
mov byte [ebp - 4], 0x2e
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x458], esi
lea eax, [ebp - 0x420]
push eax
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0x2f
call fcn.004215a0
add esp, 4
mov ebx, eax
mov byte [ebp - 4], 0x30
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
lea ecx, [ebp - 0x418]
call fcn.00421510
add esp, 4
mov ecx, dword [ebp - 0x42c]
mov byte [ebp - 4], 0x31
mov ebx, dword [eax]
mov edx, dword [ecx]
lea eax, [ebx - 0x10]
sub edx, 0x10
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x41c], edx
cmp eax, edx
je 0x492a14
cmp dword [edx + 0xc], 0
lea eax, [edx + 0xc]
mov dword [ebp - 0x450], eax
jl 0x492a0b
mov eax, dword [ebx - 0x10]
cmp eax, dword [edx]
jne 0x492a0b
mov ecx, dword [ebp - 0x448]
call fcn.00420750
mov edx, dword [ebp - 0x450]
or ebx, 0xffffffff
mov dword [ebp - 0x448], eax
mov ecx, ebx
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4929fe
mov eax, dword [ebp - 0x41c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x42c]
add eax, 0x10
mov dword [ecx], eax
jmp 0x492a17
push dword [ebx - 0xc]
push ebx
call fcn.00420c80
or ebx, 0xffffffff
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x418]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492a3a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0x428]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492a5d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0x2e
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492a7a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492a9d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x428], eax
mov eax, str._tWinMain
mov byte [ebp - 4], 0x32
test eax, 0xffff0000
jne 0x492ae0
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x492af2
push esi
push eax
lea ecx, [ebp - 0x428]
call fcn.00420bb0
jmp 0x492af2
push 9
push str._tWinMain
lea ecx, [ebp - 0x428]
call fcn.00420c80
mov byte [ebp - 4], 0x33
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x420], eax
mov eax, str.WebInstallerMain
mov byte [ebp - 4], 0x34
test eax, 0xffff0000
jne 0x492b39
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x492b4b
push esi
push eax
lea ecx, [ebp - 0x420]
call fcn.00420bb0
jmp 0x492b4b
push 0x10
push str.WebInstallerMain
lea ecx, [ebp - 0x420]
call fcn.00420c80
push 2
push dword [ebp - 0x42c]
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x420]
push eax
mov byte [ebp - 4], 0x35
call fcn.004216b0
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x420]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492b8d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x428]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492bb0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x470]
test eax, eax
je 0x492bc3
push eax
call fcn.004e71fd
add esp, 4
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x444]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492be6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x434]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492c09
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x492c26
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x424]
test eax, eax
je 0x492c39
push eax
call fcn.004e7a01
add esp, 4
push dword [ebp - 0x43c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x491856